last executing test programs:

1.660062361s ago: executing program 1 (id=3720):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x3)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f00000005c0)=@abs={0x1}, 0x6e)
pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0x500)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140101000007", @ANYRES16=r5, @ANYBLOB="200027bd7000fbdbdf2545000000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x2000c8c4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="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", @ANYBLOB="a665915b255e1de330aa35a5edb4571b559bd76f64715bd7bf6dbca2f3f519f5cdeffa76b9ae0f788c51d0fc127121fb3884b6623e1ae0e3dfd05d6ddffb5bb3716242a818119e7f3f7ea92e"], 0xfc, 0x2b5, &(0x7f00000001c0)="$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")
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000c000000000000000000000008000100"], 0x20}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r8 = getpid()
syz_pidfd_open(r8, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
r9 = epoll_create1(0x0)
r10 = dup(r9)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)={0xa0000001})

1.348007847s ago: executing program 1 (id=3726):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x0, 0x0, 0x8000}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x0, 0x0, 0x8000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000002c0)="c7376cbe14973cd60b930088e95da0cbaab0ff7026182af35cbe9847ac741e51fe9b978972fc22ec11aa95abaca3070082040ddd13bf606ec0b18bb201a6798ae5d9c883a43b95efe539a149021e4c6e7c131ff360bcbe59d26e7199a9dd1712e902b273e0e9b31f917b5976d02c0c569dbc6e85f2fec5e891dae509dcddfbb407b5e1e49b", &(0x7f0000001200)=""/4096}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x20, r2, 0x325, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x117}}}}, 0x20}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)=@deltaction={0x8c, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x8c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)=@deltaction={0x8c, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x8c}}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01)
r4 = fcntl$dupfd(r3, 0x0, r3)
poll(&(0x7f0000000080)=[{r4, 0x462}], 0x1, 0x40000) (async)
poll(&(0x7f0000000080)=[{r4, 0x462}], 0x1, 0x40000)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100))
write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x0, 0x0, 0x41, 0x23, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x40, 0x0, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa060202"], 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000))
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x400448e6, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}}, 0x24048000) (async)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}}, 0x24048000)

1.287082422s ago: executing program 1 (id=3734):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102395, &(0x7f0000000100)=0x18ffb)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @local}})

1.231600597s ago: executing program 1 (id=3736):
ioperm(0x0, 0x3, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5c6d730a632ea, 0x0, 0x0, 0x0, 0x0, 0x1c0000}, 0x50)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff)
set_mempolicy(0x8000, &(0x7f0000000300)=0x7fffffff, 0x7)

1.230741857s ago: executing program 1 (id=3739):
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000140)={[{@shortname_win95}, {@shortname_mixed}, {@fat=@uid}, {@fat=@check_strict}, {@shortname_mixed}, {@numtail}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x217, &(0x7f0000000480)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") (async)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x0) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000200)={0x0, 0x7fffffffffffffff, [0x0, 0x8, 0x2, 0x2, 0x1, 0x10001]}) (async)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32)
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2090, &(0x7f00000000c0)={[{@data_journal}, {@dax}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@delalloc}, {@data_err_ignore}, {@grpjquota}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x1, 0x458, &(0x7f0000000980)="$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") (rerun: 32)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r7, @ANYBLOB="04000006000000001c0016801800018014000300"], 0x3c}}, 0x0) (async)
r8 = socket(0x1, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x31, &(0x7f0000000000), 0x20000000)

1.219318238s ago: executing program 0 (id=3742):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
close(r3)

1.146992574s ago: executing program 0 (id=3746):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200800, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@data_err_abort}]}, 0x5, 0x5b5, &(0x7f0000000ec0)="$eJzs3V1rFFcfAPD/bDYaX57HCCKPz8WD4MVjsW5M0voChdrL0kqF9t4uyRokG1eyGzGpUL2oN70pUiilQukH6H0vpV+gn0JoBSkSWooUUmYzm9fdvLlxN+7vB5OcMzM755w5c2bPmZllAuhZJ9M/uYgTEfFVEnFkxbJ8ZAtPLq43//zuWDolsbDw8e9JJNm8xvpJ9v9QFvlPRPz8RcSZ3OL8/hXbrs7OTRbL5dJ0Fh+qTd0aqs7Onb0xVZwoTZRujoyOXnx7YOTShfNtK+sbV//89qPH7w98eWr+mx+fHn2YxOU4nC1bWY6XcG9l5GTx7yzUH5fXrDjchsS6SdLpDLAjfVk7T9vmiTgSfVmrB15/n0fEAtCjEu0felSjH9AY27dpHLxnPHtvcQC0vvz5xWsjMVAfGx2cT1aNjNLx7mAb0k/T+Om3Rw/TKTa+DnFgkzjAtty7HxHn8vn1578kO//t3Ln6xeONrU2j175/oJMep/2fN5v1f3JL/Z9o0v851KTt7sTm7T/3dFW0zTca0v7fO037v0unrsG+LPavep+vP7l+o1w6FxH/jojT0b8/jW90P+fi/JOFVstW9v/SKU2/0RfM8vE0v79+mX7JeLFWfLlSL3t2P+K/Tfu/yVL9J03qP90fVzfc8nJFHS89+l+rtTYv/+5a+CHi/03rfzn/Scv7k6Mjly6cH6ofD0ONo2K9Px4c/6VV+p0uf1r/Bzcu/2Cy8n5tdftpfD/wotRq2RaP/1XS439f8kk9vC+bd6dYq00PR+xLPlw/f2T5s414Y/20/KdPbXz+a3b8p4OvT7dY/gfHHrRctRvqf3xb9b/9wJMPPvuuVfpbq/+36qHT2Zw1578Xay5l1G01g23ajQAAAAAAANAVchFxOJJcYSmcyxUKi893HIuDuXKlWjtzvTJzczzqv5UdjP5c4073kfot2MXnIYaz52Ebz0eMrImPRsTRiPi670A9XhirlMc7XXgAAAAAAAAAAAAAAAAAAADoEoda/P4/9Wtfp3MH7Lr6iw32dzoXQCds+sr/drzpCehKm7Z/4LWl/UPv0v6hd2n/0LvyEUmb36sO7BE7/P5f99JtYO9p3v49/QO9wPgfAAAAAAAAAAAAAAAAAAAAAAAAAAAA2urqlSvptDD//O5YGh+/PTszWbl9drxUnSxMzYwVxirTtwoTlcpEuVQYq0xttr1ypXJreCRm7gzVStXaUHV27tpUZeZm7dqNqeJE6Vqp/5WUCgAAAAAAAAAAAAAAAAAAAPaW6uzcZLFcLk2/4kA+Vs050KFsbCnwbuzo441d3CWl2LCAi3b08fz6RX9FxPa2k0RSz0E37I3NAv3dkY3dDrQ8ZeR2/6wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKv9EwAA//86ejjs")
chdir(&(0x7f0000000380)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe", @ANYRES8], 0xfdef)

1.048330232s ago: executing program 3 (id=3748):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

1.046293812s ago: executing program 1 (id=3749):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0)
pwrite64(r2, &(0x7f0000000000)="021198591a43e5d7950091a9ba3ad5b1b43c8b95819c6bca3a6d4ae279c87e22756f6557d958fb357bac12e0ebcac418e5e1208cbabe4fc7511e5bfec87b", 0x3e, 0x5)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108)

1.040507993s ago: executing program 3 (id=3751):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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")
open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe16}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000880), 0x12)
write$cgroup_int(r1, &(0x7f0000000040), 0x1)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r3, 0x2007ffb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x79}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @address_request={0x11, 0x0, 0x0, 0x9}}}}}, 0x0)
r5 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r9 = semget(0x2, 0x1, 0x340)
clock_gettime(0x0, &(0x7f0000000180)={<r10=>0x0, <r11=>0x0})
semtimedop(r9, &(0x7f0000000100)=[{0x0, 0x8000, 0x1000}, {0x4, 0x4, 0x1800}, {0x2, 0x79e2, 0x2000}], 0x3, &(0x7f0000000200)={r10, r11+10000000})
write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
write$P9_RLCREATE(r8, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x10, 0x2, 0x8}, 0x5211}}, 0x18)
io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.039656803s ago: executing program 0 (id=3752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r1], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c000c"], 0x24}}, 0x0)

774.197825ms ago: executing program 0 (id=3753):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0xfc}, 0x0)

774.034865ms ago: executing program 0 (id=3754):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4b1, &(0x7f0000000580)="$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")

773.588225ms ago: executing program 0 (id=3755):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
syz_usb_connect(0x0, 0x3e, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)={[{@dioread_nolock}]}, 0xfe, 0x25b, &(0x7f0000000840)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000000)={0xf1504}, &(0x7f0000000280)={0x0, 0x0, 0x7})
socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000700)=@req={0x0, 0x40003, 0x5, 0x200}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b4eb5ef4ae02522c052507e80800080079104c00000000006300400000000000950000a731e931a2a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x1fffffffffffff74, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
socket(0x10, 0x3, 0x40000000)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r6)
mount(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='efivarfs\x00', 0x84000c, 0x0)
r7 = inotify_init1(0x0)
fcntl$setown(r7, 0x8, 0xffffffffffffffff)
fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000480)='net\x00')

694.975542ms ago: executing program 2 (id=3759):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x1a}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "0d56cc733473449e39ac61422ee8f8bcc2480d87e99402975db0f8767903faab64a949d745259f55130279b528e45e006e652bcb613251766d6cc514ea83bfa320002c73a67ebea0992a2cfd5f0f5265f223df18e1338376b44bd98ce4cba640cbd52d8a9100a82fc568a559e3ad90ade074c3d2da82855df290cc1f74bc17ada52e240ea9d6fa0992329836ae37dff884976e7ffcfe0861316cb9cf24bc13f5380d06e2e9b9ad6eddd616f422eb3307ea527f6406ef68d5c7cadf05e98843d7d2ac717dd5679dfd4541145dd7336f335ba80526e5a56eacc2ec05c3c84a3c53f071a5f981ef14"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0x6952f0fb02b2ffc6, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xce, 0x6, "9e053efd984a14c4cdb40464688be00892fa94c8e2b531f5a0f5b11b1e8092eb0d6583ad265d1541824d8e7ae74ca1d3af8314af98fb243ad8d5108cfe12e424613a25805a0bd76efad2479881be3709d93ff4bba3cc60e95439cb99cfbd748b72ff274d14a33798a6c837d6d747d76f878298a9b97bcc075a952796a916bbbbc134690caf55dd3eed92ac3c2e6e643ab2e5f24fd52372d6c64dd1544e57683956ce21455b2cfeedcdaaf1a7d56d0ca7bca1a3a7ceff84ee0f573a3ab704d02427875c0fea32b7189e97"}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MAX={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x687, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "d79d29a2573ed6fc65d0524a8a20acd6d4b45ac923ee950173d9a41cf2b99a7ed0769ed954d851deadf809867dd63638c0650191e05781ccfd28f026a47a3f602b9b499e9da3a2019504aa5f179f6816b36a49552a87930ad4a24fcbdd1943cc5e97403d0915bc5cef9207da02329853d6b0a63fb649b3e73f2613a71f39e3f8f67723c92daa0f7c22c703ea70c70b76eae688f0c685252586eaccef639961a005c24104d6aafb645e021e6f4c5f2467772909b31ba6e8"}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x478}, 0x1, 0x0, 0x0, 0x880}, 0x0)

648.316756ms ago: executing program 3 (id=3760):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = io_uring_setup(0x4822, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a3100000000d7fd0208000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a276a0d025bd5860359176b6b022eec3a13c05129d8097191bf11f665"], 0x64}}, 0x0)
r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x80)

642.027366ms ago: executing program 2 (id=3762):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200800, &(0x7f0000000680)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@data_err_abort}]}, 0x5, 0x5b5, &(0x7f0000000ec0)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe", @ANYRES8], 0xfdef)

606.220649ms ago: executing program 3 (id=3764):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x1, 0x9, 0x1, 0x9}, 0x6)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc)
r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00')
preadv(r4, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x10, 0x6)

507.972047ms ago: executing program 4 (id=3765):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

507.216488ms ago: executing program 3 (id=3766):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500}, 0x48)

506.800898ms ago: executing program 4 (id=3767):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4)
r2 = epoll_create1(0x0)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0xc017be1b})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x1, r6}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r7, &(0x7f0000000300), 0x20000000}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r7, &(0x7f0000000240), 0x0}, 0x20)
close(0x3)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0xc2a10a980d0dcec8})
sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000006a0004002dbd7000fddbdf250a0000000000000004000900080081000100000004000b0008000a000100000004000b00080001000000000004000b0008000500", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0xbfcd14bf79edcc8d)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xc017be1b})
bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0xc2a10a980d0dcec8})
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
dup2(r0, r0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)

498.831329ms ago: executing program 2 (id=3768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e"], 0x6c}, 0x1, 0x300000000000000}, 0x0)

464.973501ms ago: executing program 4 (id=3769):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271a, &(0x7f0000019580)=""/102395, &(0x7f0000000100)=0x18ffb)

415.806635ms ago: executing program 4 (id=3770):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03"], 0x0, 0x52}, 0x20)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x0)

393.610757ms ago: executing program 3 (id=3771):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = socket(0x1000000010, 0x80002, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000000)={0x8, 'veth1_to_bond\x00', {'wlan0\x00'}, 0x1a})
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup3(r5, r4, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
io_uring_enter(r4, 0x1db6, 0xb0df, 0x8, &(0x7f0000000080)={[0x1c]}, 0x8)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000006060108000000000000000003000002050001000700000005c5b5fe45c89167be4a08824d00010007000000050001000700000005000100070000000900020073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r7, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13)
write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xfffffecc)
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4}, 0xc)
socket$inet6(0xa, 0x2, 0x0)

393.395927ms ago: executing program 2 (id=3772):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 16)

390.249038ms ago: executing program 4 (id=3773):
socket$nl_route(0x10, 0x3, 0x0)
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x14120, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x83, 0x3)

71.900354ms ago: executing program 2 (id=3774):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0})
write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2)
readv(r7, &(0x7f0000000300)=[{&(0x7f0000000480)=""/174, 0x23}], 0x1)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01f600000000000000001400000008001d00", @ANYRES32=r9, @ANYBLOB="0800010000000000"], 0x24}}, 0x0)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

60.889945ms ago: executing program 4 (id=3775):
r0 = socket$inet6(0xa, 0x800, 0x7)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x4000010, r0, 0xbd279000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50243}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048001}, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)="86db00075cc3fd3ef8e718940149fec30a7a3714f4fd8e471268d6b0376e35b2ac6db36b84566479c151010363d256630057158bc5a94c0c9424ad98d56f", 0x3e, 0x20004004, &(0x7f0000000300)={0xa, 0x4e24, 0x8, @private2, 0x9}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000deffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0xf8d}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

0s ago: executing program 2 (id=3776):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x60302, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r6 = dup(r5)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x0)
sendfile(r6, r7, 0x0, 0x8000fffffffe)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)="3726f4611853f477ad2fe6601fa231f4943c7fdf30f6f335cbe1ecad0fb4012879924937fc67a403241c00ff780d72183302284727e02535affc63c0999a1519ff52038311b411c406b5f4f3964da85a7c292b5d7c8d88f4d613b021cf4b730e5b8c7088205eb9d5fdddb073d30fce124383755b624f232737e5dac6b2b4a1d2c248f04b1e75e37fba", 0x89}], 0x1, 0x2)
ftruncate(r3, 0x2007ffd)
r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, r3, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_delete(0x0)
write$evdev(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x1000000201005)
sendfile(r1, r2, 0x0, 0x47a752ba)
bpf$PROG_LOAD_XDP(0x64, 0x0, 0x0)
r12 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_load(r12, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf908"], 0x8)

kernel console output (not intermixed with test programs):

. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  196.831814][T14222] team0: Port device team_slave_0 added
[  196.845193][T14222] team0: Port device team_slave_1 added
[  196.863278][T14332] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  196.868634][T14333] loop4: detected capacity change from 0 to 1024
[  196.881242][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.888204][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.914141][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.924787][   T29] audit: type=1326 audit(1724311037.540:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14336 comm="syz.1.3388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb151b9e79 code=0x0
[  196.925111][T14333] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.948829][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.961393][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.967575][T14333] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.987393][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.034983][T14222] hsr_slave_0: entered promiscuous mode
[  197.041252][T14222] hsr_slave_1: entered promiscuous mode
[  197.047480][T14222] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.055066][T14222] Cannot create hsr debugfs directory
[  197.214654][ T8816] IPVS: stop unused estimator thread 0...
[  197.237439][T14349] loop0: detected capacity change from 0 to 512
[  197.244277][T14349] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  197.253495][T14349] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  197.262372][T14349] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  197.271754][T14349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  197.279839][T14349] System zones: 0-2, 18-18, 34-34
[  197.285356][T14349] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  197.300990][T14349] EXT4-fs (loop0): 1 truncate cleaned up
[  197.307068][T14349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.320409][T14349] EXT4-fs warning (device loop0): ext4_group_extend:1890: can't read last block, resize aborted
[  197.331880][T14349] No such timeout policy "syz0"
[  197.348350][T13430] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.364724][T14357] loop0: detected capacity change from 0 to 512
[  197.372180][T14357] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3393: casefold flag without casefold feature
[  197.385505][T14357] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3393: couldn't read orphan inode 15 (err -117)
[  197.399161][T14357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.430333][T14222] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  197.439840][T14222] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  197.466866][T14222] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  197.477149][T14222] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  197.486192][T14364] syzkaller0: entered promiscuous mode
[  197.491753][T14364] syzkaller0: entered allmulticast mode
[  197.531892][T14222] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.546223][T14222] 8021q: adding VLAN 0 to HW filter on device team0
[  197.556155][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.563264][ T8813] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.574021][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.581083][ T8813] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.603839][T14366] SET target dimension over the limit!
[  197.606635][T14222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.642682][T14372] loop3: detected capacity change from 0 to 128
[  197.651489][T14372] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.666240][T14372] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  197.667604][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.707030][T13430] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.720866][ T8812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.741705][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3400'.
[  197.750751][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.758267][T14372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.767688][T14372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.775159][T14372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.810095][ T8812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.864010][T14222] veth0_vlan: entered promiscuous mode
[  197.872729][T14222] veth1_vlan: entered promiscuous mode
[  197.888814][ T8812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.888805][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  197.918368][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3403'.
[  197.930236][T12949] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.944167][T14222] veth0_macvtap: entered promiscuous mode
[  197.958610][ T8812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.963467][T14396] loop4: detected capacity change from 0 to 512
[  197.982965][T14396] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.3405: iget: bad i_size value: -2594073385365405596
[  198.001354][T14396] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3405: couldn't read orphan inode 17 (err -117)
[  198.002774][T14222] veth1_macvtap: entered promiscuous mode
[  198.020940][T14396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.039681][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.050262][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.050275][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.050288][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.050300][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.091539][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.101385][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.111819][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.121625][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.132026][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.141864][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.152295][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.163541][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.175909][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.186391][T14396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=14396 comm=syz.4.3405
[  198.199042][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.208867][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.219281][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.229086][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.239499][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.249303][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.259756][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.269571][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.279984][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.289798][T14222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.300267][T14222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.311215][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.321856][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.337355][T14378] chnl_net:caif_netlink_parms(): no params data found
[  198.349874][T14407] syzkaller0: entered promiscuous mode
[  198.355363][T14407] syzkaller0: entered allmulticast mode
[  198.363569][T14222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.372366][T14222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.381169][T14222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.389860][T14222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.400236][ T8812] bridge_slave_1: left allmulticast mode
[  198.406054][ T8812] bridge_slave_1: left promiscuous mode
[  198.411754][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.420555][ T8812] bridge_slave_0: left allmulticast mode
[  198.426207][ T8812] bridge_slave_0: left promiscuous mode
[  198.431937][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.547641][ T8812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.558256][ T8812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.568275][ T8812] bond0 (unregistering): Released all slaves
[  198.626551][T14378] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.633629][T14378] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.641378][T14378] bridge_slave_0: entered allmulticast mode
[  198.647953][T14378] bridge_slave_0: entered promiscuous mode
[  198.654832][T14378] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.662008][T14378] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.669234][T14378] bridge_slave_1: entered allmulticast mode
[  198.675819][T14378] bridge_slave_1: entered promiscuous mode
[  198.691106][ T8812] hsr_slave_0: left promiscuous mode
[  198.702362][ T8812] hsr_slave_1: left promiscuous mode
[  198.713932][T14427] loop4: detected capacity change from 0 to 256
[  198.721003][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.728420][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.740261][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  198.747696][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  198.757387][ T8812] veth1_macvtap: left promiscuous mode
[  198.762921][ T8812] veth0_macvtap: left promiscuous mode
[  198.768671][ T8812] veth1_vlan: left promiscuous mode
[  198.774020][ T8812] veth0_vlan: left promiscuous mode
[  198.815746][T14433] FAULT_INJECTION: forcing a failure.
[  198.815746][T14433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.828838][T14433] CPU: 1 UID: 0 PID: 14433 Comm: syz.2.3414 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  198.839677][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  198.849732][T14433] Call Trace:
[  198.853004][T14433]  <TASK>
[  198.855926][T14433]  dump_stack_lvl+0xf2/0x150
[  198.860521][T14433]  dump_stack+0x15/0x20
[  198.864724][T14433]  should_fail_ex+0x229/0x230
[  198.869423][T14433]  should_fail+0xb/0x10
[  198.873583][T14433]  should_fail_usercopy+0x1a/0x20
[  198.878687][T14433]  copy_fpstate_to_sigframe+0x575/0x720
[  198.884317][T14433]  ? copy_fpstate_to_sigframe+0xde/0x720
[  198.889969][T14433]  ? _raw_spin_unlock_irq+0x14/0x50
[  198.895157][T14433]  ? fpu__alloc_mathframe+0x95/0xd0
[  198.900383][T14433]  get_sigframe+0x295/0x350
[  198.904904][T14433]  x64_setup_rt_frame+0xa7/0x570
[  198.909889][T14433]  arch_do_signal_or_restart+0x287/0x4b0
[  198.915581][T14433]  syscall_exit_to_user_mode+0x59/0x130
[  198.921175][T14433]  do_syscall_64+0xd6/0x1c0
[  198.925825][T14433]  ? clear_bhb_loop+0x55/0xb0
[  198.930503][T14433]  ? clear_bhb_loop+0x55/0xb0
[  198.935199][T14433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.941151][T14433] RIP: 0033:0x7f2fa2769e79
[  198.945605][T14433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.965262][T14433] RSP: 002b:00007f2fa13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[  198.973737][T14433] RAX: fffffffffffffff2 RBX: 00007f2fa2905f80 RCX: 00007f2fa2769e79
[  198.981714][T14433] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[  198.989758][T14433] RBP: 00007f2fa13e7090 R08: 0000000000000000 R09: 0000000000000000
[  198.997751][T14433] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  199.005722][T14433] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  199.013786][T14433]  </TASK>
[  199.155826][ T8812] team0 (unregistering): Port device team_slave_1 removed
[  199.215899][ T8812] team0 (unregistering): Port device team_slave_0 removed
[  199.760926][T14378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.772947][T14378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.792511][T14378] team0: Port device team_slave_0 added
[  199.799400][T14378] team0: Port device team_slave_1 added
[  200.329192][T14378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.336269][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.362214][T14378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.379534][T14378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.386521][T14378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.412425][T14378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.454511][T14378] hsr_slave_0: entered promiscuous mode
[  200.463286][T14378] hsr_slave_1: entered promiscuous mode
[  200.469914][T14457] loop2: detected capacity change from 0 to 128
[  200.481187][T14378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.495670][T14378] Cannot create hsr debugfs directory
[  200.547990][T14462] vlan3: entered promiscuous mode
[  200.553030][T14462] bond0: entered promiscuous mode
[  200.558087][T14462] bond_slave_0: entered promiscuous mode
[  200.563936][T14462] bond_slave_1: entered promiscuous mode
[  200.569968][T14462] vlan3: entered allmulticast mode
[  200.575076][T14462] bond0: entered allmulticast mode
[  200.580217][T14462] bond_slave_0: entered allmulticast mode
[  200.585985][T14462] bond_slave_1: entered allmulticast mode
[  200.594730][T14462] bond0: left allmulticast mode
[  200.599807][T14462] bond_slave_0: left allmulticast mode
[  200.605263][T14462] bond_slave_1: left allmulticast mode
[  200.610816][T14462] bond0: left promiscuous mode
[  200.615600][T14462] bond_slave_0: left promiscuous mode
[  200.621227][T14462] bond_slave_1: left promiscuous mode
[  200.670018][T14473] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  200.733068][T14481] loop3: detected capacity change from 0 to 512
[  200.742074][T14481] FAT-fs (loop3): bogus number of FAT sectors
[  200.748252][T14481] FAT-fs (loop3): Can't find a valid FAT filesystem
[  200.779445][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'.
[  200.788515][T14487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3432'.
[  200.792074][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.801968][T14491] loop2: detected capacity change from 0 to 512
[  200.815332][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.831612][T14491] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 0)!
[  200.841738][T14491] EXT4-fs (loop2): group descriptors corrupted!
[  200.848373][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3434'.
[  200.857320][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3434'.
[  200.888144][   T35] IPVS: starting estimator thread 0...
[  200.958565][T14508] loop2: detected capacity change from 0 to 512
[  200.988966][T14508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.001592][T14498] IPVS: using max 2784 ests per chain, 139200 per kthread
[  201.005547][T14508] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.044315][T14378] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  201.062474][T14378] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  201.071426][T14378] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  201.086068][T14378] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  201.098248][T14222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.214892][T14378] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.271808][T14378] 8021q: adding VLAN 0 to HW filter on device team0
[  201.281534][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.288679][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.296985][T14520] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[  201.309750][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.316958][ T8809] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.391412][T14378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.419167][T14532] vlan3: entered promiscuous mode
[  201.424232][T14532] bond0: entered promiscuous mode
[  201.429643][T14532] bond_slave_0: entered promiscuous mode
[  201.435358][T14532] bond_slave_1: entered promiscuous mode
[  201.441250][T14532] vlan3: entered allmulticast mode
[  201.446361][T14532] bond0: entered allmulticast mode
[  201.451470][T14532] bond_slave_0: entered allmulticast mode
[  201.457266][T14532] bond_slave_1: entered allmulticast mode
[  201.465953][T14532] bond0: left allmulticast mode
[  201.470885][T14532] bond_slave_0: left allmulticast mode
[  201.476450][T14532] bond_slave_1: left allmulticast mode
[  201.481958][T14532] bond0: left promiscuous mode
[  201.486749][T14532] bond_slave_0: left promiscuous mode
[  201.492241][T14532] bond_slave_1: left promiscuous mode
[  201.505773][T14535] netlink: 'syz.1.3445': attribute type 1 has an invalid length.
[  201.538119][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  201.538202][   T29] audit: type=1400 audit(1724311042.170:4770): avc:  denied  { connect } for  pid=14538 comm="syz.1.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  201.565140][T14539] /dev/sg0: Can't lookup blockdev
[  201.569015][T14378] veth0_vlan: entered promiscuous mode
[  201.580902][T14378] veth1_vlan: entered promiscuous mode
[  201.602982][T14378] veth0_macvtap: entered promiscuous mode
[  201.604036][T14546] program syz.1.3448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.615165][T14378] veth1_macvtap: entered promiscuous mode
[  201.628462][T14544] loop3: detected capacity change from 0 to 2048
[  201.641335][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.651998][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.662002][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.668062][T14544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.672414][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.672433][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.672462][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.672475][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.725056][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.734948][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.745618][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.752033][   T29] audit: type=1400 audit(1724311042.380:4771): avc:  denied  { ioctl } for  pid=14543 comm="syz.3.3447" path="socket:[55304]" dev="sockfs" ino=55304 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  201.755422][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.790685][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.801913][T14378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.814344][T14550] macvlan3: entered allmulticast mode
[  201.819893][T14550] hsr0: entered allmulticast mode
[  201.824997][T14550] hsr_slave_0: entered allmulticast mode
[  201.830624][T14550] hsr_slave_1: entered allmulticast mode
[  201.838002][T14550] hsr0: left allmulticast mode
[  201.842753][T14550] hsr_slave_0: left allmulticast mode
[  201.848207][T14550] hsr_slave_1: left allmulticast mode
[  201.866326][T14556] macvlan2: entered allmulticast mode
[  201.871721][T14556] hsr0: entered allmulticast mode
[  201.876830][T14556] hsr_slave_0: entered allmulticast mode
[  201.882692][T14556] hsr_slave_1: entered allmulticast mode
[  201.889906][T14556] hsr0: left allmulticast mode
[  201.894665][T14556] hsr_slave_0: left allmulticast mode
[  201.900060][T14556] hsr_slave_1: left allmulticast mode
[  201.917955][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.928417][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.938242][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.948669][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.958483][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.968903][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.978832][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  201.989321][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.999217][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.009622][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.019436][T14378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.029847][T14378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.040662][T14378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.053613][T14378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.062647][T14378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.071463][T14378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.080166][T14378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.121611][   T29] audit: type=1400 audit(1724311042.750:4772): avc:  denied  { getopt } for  pid=14572 comm="syz.0.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.153190][ T8816] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  202.162244][T14575] FAULT_INJECTION: forcing a failure.
[  202.162244][T14575] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.179420][ T8816] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  202.181055][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.0.3453 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  202.193111][ T8816] EXT4-fs (loop3): This should not happen!! Data will be lost
[  202.193111][ T8816] 
[  202.203802][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  202.203814][T14575] Call Trace:
[  202.203821][T14575]  <TASK>
[  202.203829][T14575]  dump_stack_lvl+0xf2/0x150
[  202.213491][ T8816] EXT4-fs (loop3): Total free blocks count 0
[  202.223486][T14575]  dump_stack+0x15/0x20
[  202.223514][T14575]  should_fail_ex+0x229/0x230
[  202.223543][T14575]  should_fail+0xb/0x10
[  202.223569][T14575]  should_fail_usercopy+0x1a/0x20
[  202.223605][T14575]  _copy_from_user+0x1e/0xd0
[  202.223632][T14575]  move_addr_to_kernel+0x82/0x120
[  202.226947][ T8816] EXT4-fs (loop3): Free/Dirty block details
[  202.229819][T14575]  __sys_sendto+0x16b/0x260
[  202.234374][ T8816] EXT4-fs (loop3): free_blocks=2415919104
[  202.240322][T14575]  __x64_sys_sendto+0x78/0x90
[  202.244455][ T8816] EXT4-fs (loop3): dirty_blocks=16
[  202.249097][T14575]  x64_sys_call+0x2959/0x2d60
[  202.253236][ T8816] EXT4-fs (loop3): Block reservation details
[  202.258256][T14575]  do_syscall_64+0xc9/0x1c0
[  202.262830][ T8816] EXT4-fs (loop3): i_reserved_data_blocks=1
[  202.267818][T14575]  ? clear_bhb_loop+0x55/0xb0
[  202.319632][T14575]  ? clear_bhb_loop+0x55/0xb0
[  202.324310][T14575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.330275][T14575] RIP: 0033:0x7fbfceb89e79
[  202.334672][T14575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.354332][T14575] RSP: 002b:00007fbfcd807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  202.362730][T14575] RAX: ffffffffffffffda RBX: 00007fbfced25f80 RCX: 00007fbfceb89e79
[  202.370715][T14575] RDX: 00000000000005c4 RSI: 0000000000000000 RDI: 0000000000000003
[  202.378670][T14575] RBP: 00007fbfcd807090 R08: 0000000020000540 R09: 000000000000001c
[  202.386625][T14575] R10: 000000000404c844 R11: 0000000000000246 R12: 0000000000000001
[  202.394589][T14575] R13: 0000000000000000 R14: 00007fbfced25f80 R15: 00007fff21f01418
[  202.402548][T14575]  </TASK>
[  202.412165][T12949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.427788][   T29] audit: type=1400 audit(1724311043.060:4773): avc:  denied  { write } for  pid=14576 comm="syz.0.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.462626][T14581] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3455'.
[  202.476214][T14584] vlan3: entered promiscuous mode
[  202.481245][T14584] bond0: entered promiscuous mode
[  202.486394][T14584] bond_slave_0: entered promiscuous mode
[  202.492217][T14584] bond_slave_1: entered promiscuous mode
[  202.498175][T14584] vlan3: entered allmulticast mode
[  202.503472][T14584] bond0: entered allmulticast mode
[  202.508639][T14584] bond_slave_0: entered allmulticast mode
[  202.514589][T14584] bond_slave_1: entered allmulticast mode
[  202.524747][T14584] bond0: left allmulticast mode
[  202.529656][T14584] bond_slave_0: left allmulticast mode
[  202.535115][T14584] bond_slave_1: left allmulticast mode
[  202.540732][T14584] bond0: left promiscuous mode
[  202.545518][T14584] bond_slave_0: left promiscuous mode
[  202.550972][T14584] bond_slave_1: left promiscuous mode
[  202.630241][   T29] audit: type=1400 audit(1724311043.250:4774): avc:  denied  { create } for  pid=14588 comm="syz.1.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  202.646213][T14606] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3461'.
[  202.671473][T14606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3461'.
[  202.731752][T14623] loop4: detected capacity change from 0 to 512
[  202.738630][T14623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  202.750144][T14623] EXT4-fs (loop4): 1 truncate cleaned up
[  202.751408][T14622] macvlan3: entered allmulticast mode
[  202.756253][T14623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.761169][T14622] hsr0: entered allmulticast mode
[  202.761184][T14622] hsr_slave_0: entered allmulticast mode
[  202.761197][T14622] hsr_slave_1: entered allmulticast mode
[  202.790213][T14622] hsr0: left allmulticast mode
[  202.795055][T14622] hsr_slave_0: left allmulticast mode
[  202.800531][T14622] hsr_slave_1: left allmulticast mode
[  202.826474][T12332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.828151][T14631] loop0: detected capacity change from 0 to 512
[  202.842226][T14631] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  202.854660][T14631] EXT4-fs (loop0): 1 truncate cleaned up
[  202.862110][T14631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.885321][T14378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.921024][   T29] audit: type=1400 audit(1724311043.550:4775): avc:  denied  { ioctl } for  pid=14641 comm="syz.4.3473" path="/dev/usbmon0" dev="devtmpfs" ino=117 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  202.946473][   T29] audit: type=1400 audit(1724311043.550:4776): avc:  denied  { write } for  pid=14641 comm="syz.4.3473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  202.970854][   T29] audit: type=1400 audit(1724311043.550:4777): avc:  denied  { open } for  pid=14641 comm="syz.4.3473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  202.995478][   T29] audit: type=1400 audit(1724311043.550:4778): avc:  denied  { getattr } for  pid=14641 comm="syz.4.3473" name="KEY" dev="sockfs" ino=55288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  203.034236][T14648] loop0: detected capacity change from 0 to 4096
[  203.042987][T14648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.060781][   T29] audit: type=1326 audit(1724311043.690:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14647 comm="syz.0.3475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfceb89e79 code=0x0
[  203.090359][T14651] loop4: detected capacity change from 0 to 2048
[  203.136074][T14651]  loop4: p2 < >
[  203.162474][T14652] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.192245][T14655] FAULT_INJECTION: forcing a failure.
[  203.192245][T14655] name failslab, interval 1, probability 0, space 0, times 0
[  203.204903][T14655] CPU: 0 UID: 0 PID: 14655 Comm: syz.4.3477 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  203.215708][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  203.225809][T14655] Call Trace:
[  203.229144][T14655]  <TASK>
[  203.232056][T14655]  dump_stack_lvl+0xf2/0x150
[  203.236644][T14655]  dump_stack+0x15/0x20
[  203.240861][T14655]  should_fail_ex+0x229/0x230
[  203.245551][T14655]  ? offload_action_alloc+0x2b/0x190
[  203.250923][T14655]  should_failslab+0x8f/0xb0
[  203.255505][T14655]  __kmalloc_noprof+0xa5/0x370
[  203.260295][T14655]  offload_action_alloc+0x2b/0x190
[  203.265421][T14655]  tcf_action_offload_add_ex+0x11d/0x3c0
[  203.271101][T14655]  tcf_action_init+0x262/0x530
[  203.275858][T14655]  tc_ctl_action+0x292/0x840
[  203.280556][T14655]  ? __pfx_tc_ctl_action+0x10/0x10
[  203.285727][T14655]  rtnetlink_rcv_msg+0x6aa/0x710
[  203.290648][T14655]  ? ref_tracker_free+0x3a5/0x410
[  203.295654][T14655]  ? __dev_queue_xmit+0x161/0x1fe0
[  203.300778][T14655]  netlink_rcv_skb+0x12c/0x230
[  203.305566][T14655]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  203.311008][T14655]  rtnetlink_rcv+0x1c/0x30
[  203.315496][T14655]  netlink_unicast+0x599/0x670
[  203.320251][T14655]  netlink_sendmsg+0x5cc/0x6e0
[  203.325024][T14655]  ? __pfx_netlink_sendmsg+0x10/0x10
[  203.330314][T14655]  __sock_sendmsg+0x140/0x180
[  203.334975][T14655]  ____sys_sendmsg+0x312/0x410
[  203.339807][T14655]  __sys_sendmsg+0x1e9/0x280
[  203.344386][T14655]  __x64_sys_sendmsg+0x46/0x50
[  203.349187][T14655]  x64_sys_call+0x2689/0x2d60
[  203.353886][T14655]  do_syscall_64+0xc9/0x1c0
[  203.358418][T14655]  ? clear_bhb_loop+0x55/0xb0
[  203.363084][T14655]  ? clear_bhb_loop+0x55/0xb0
[  203.367813][T14655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.373741][T14655] RIP: 0033:0x7f086c1b9e79
[  203.378189][T14655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.397780][T14655] RSP: 002b:00007f086ae31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.406186][T14655] RAX: ffffffffffffffda RBX: 00007f086c355f80 RCX: 00007f086c1b9e79
[  203.414143][T14655] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004
[  203.422099][T14655] RBP: 00007f086ae31090 R08: 0000000000000000 R09: 0000000000000000
[  203.430065][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  203.438111][T14655] R13: 0000000000000000 R14: 00007f086c355f80 R15: 00007ffda7b6fdb8
[  203.446129][T14655]  </TASK>
[  203.488056][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'.
[  203.499173][T14663] ip6gretap1: entered allmulticast mode
[  203.561496][T14673] FAULT_INJECTION: forcing a failure.
[  203.561496][T14673] name failslab, interval 1, probability 0, space 0, times 0
[  203.574337][T14673] CPU: 0 UID: 0 PID: 14673 Comm: syz.4.3483 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  203.585097][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  203.595137][T14673] Call Trace:
[  203.598402][T14673]  <TASK>
[  203.601319][T14673]  dump_stack_lvl+0xf2/0x150
[  203.605911][T14673]  dump_stack+0x15/0x20
[  203.610169][T14673]  should_fail_ex+0x229/0x230
[  203.614844][T14673]  ? bm_init+0x49/0x6d0
[  203.618991][T14673]  should_failslab+0x8f/0xb0
[  203.623580][T14673]  __kmalloc_noprof+0xa5/0x370
[  203.628416][T14673]  bm_init+0x49/0x6d0
[  203.632391][T14673]  ? pcpu_chunk_relocate+0x183/0x280
[  203.637671][T14673]  ? pcpu_alloc_area+0x494/0x4b0
[  203.642635][T14673]  textsearch_prepare+0x196/0x200
[  203.647664][T14673]  string_mt_check+0x111/0x160
[  203.652456][T14673]  xt_check_match+0x259/0x4b0
[  203.657129][T14673]  ? xt_find_match+0x1c1/0x1e0
[  203.661886][T14673]  ? xt_find_match+0x1a2/0x1e0
[  203.666648][T14673]  translate_table+0xa99/0xf70
[  203.671406][T14673]  ? _copy_from_user+0x9a/0xd0
[  203.676176][T14673]  do_ipt_set_ctl+0x7bd/0x8b0
[  203.680847][T14673]  ? _raw_spin_unlock_bh+0x36/0x40
[  203.686000][T14673]  ? lock_sock_nested+0x10f/0x140
[  203.691036][T14673]  nf_setsockopt+0x195/0x1b0
[  203.695625][T14673]  ip_setsockopt+0xea/0x100
[  203.700188][T14673]  udp_setsockopt+0x95/0xb0
[  203.704713][T14673]  sock_common_setsockopt+0x64/0x80
[  203.709982][T14673]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  203.715878][T14673]  __sys_setsockopt+0x1d8/0x250
[  203.720725][T14673]  __x64_sys_setsockopt+0x66/0x80
[  203.725829][T14673]  x64_sys_call+0x278d/0x2d60
[  203.730590][T14673]  do_syscall_64+0xc9/0x1c0
[  203.735100][T14673]  ? clear_bhb_loop+0x55/0xb0
[  203.739816][T14673]  ? clear_bhb_loop+0x55/0xb0
[  203.744519][T14673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.750411][T14673] RIP: 0033:0x7f086c1b9e79
[  203.754811][T14673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.774450][T14673] RSP: 002b:00007f086ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  203.782855][T14673] RAX: ffffffffffffffda RBX: 00007f086c355f80 RCX: 00007f086c1b9e79
[  203.790814][T14673] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  203.798771][T14673] RBP: 00007f086ae31090 R08: 0000000000000360 R09: 0000000000000000
[  203.806734][T14673] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  203.814693][T14673] R13: 0000000000000000 R14: 00007f086c355f80 R15: 00007ffda7b6fdb8
[  203.822663][T14673]  </TASK>
[  203.840470][T14675] loop4: detected capacity change from 0 to 512
[  203.847327][T14675] EXT4-fs: Ignoring removed i_version option
[  203.854330][T14675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  203.863056][T14675] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1808: comm syz.4.3484: invalid block
[  203.875419][T14675] EXT4-fs (loop4): Remounting filesystem read-only
[  203.882582][T14675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.895004][T14675] SELinux: (dev loop4, type ext4) getxattr errno 5
[  203.911319][T14675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.942751][T14686] loop4: detected capacity change from 0 to 1024
[  203.951469][T14689] loop0: detected capacity change from 0 to 2048
[  203.958712][T14689] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  203.978737][T14688] loop0: detected capacity change from 0 to 512
[  203.985933][T14694] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  204.005576][T14686] loop4: detected capacity change from 1024 to 64
[  204.020123][T14703] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  204.055271][ T7012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.084469][T14708] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 47959 - 0
[  204.093327][T14708] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 47959 - 0
[  204.102200][T14708] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 47959 - 0
[  204.111150][T14708] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 47959 - 0
[  204.120150][T14708] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 39499 - 0
[  204.128997][T14708] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 39499 - 0
[  204.137999][T14708] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 39499 - 0
[  204.146787][T14708] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 39499 - 0
[  204.168800][ T7012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.243869][ T7012] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode
[  204.252362][ T7012] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[  204.270986][ T7012] team0: Port device netdevsim1 removed
[  204.280018][ T7012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.324352][ T7012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.364750][T14745] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[  204.378955][T14750] loop0: detected capacity change from 0 to 512
[  204.405031][T14750] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.420119][T14711] chnl_net:caif_netlink_parms(): no params data found
[  204.431847][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'.
[  204.446138][ T7012] bridge_slave_1: left allmulticast mode
[  204.451943][ T7012] bridge_slave_1: left promiscuous mode
[  204.457628][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.470404][ T7012] bridge_slave_0: left allmulticast mode
[  204.476119][ T7012] bridge_slave_0: left promiscuous mode
[  204.481861][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.527280][ T7012] ip6gretap0 (unregistering): left promiscuous mode
[  204.594771][ T7012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.605543][ T7012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.615226][ T7012] bond0 (unregistering): Released all slaves
[  204.623948][ T7012] bond1 (unregistering): Released all slaves
[  204.659505][T14711] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.666589][T14711] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.675933][T14711] bridge_slave_0: entered allmulticast mode
[  204.683813][T14779] FAULT_INJECTION: forcing a failure.
[  204.683813][T14779] name failslab, interval 1, probability 0, space 0, times 0
[  204.684098][T14711] bridge_slave_0: entered promiscuous mode
[  204.696461][T14779] CPU: 1 UID: 0 PID: 14779 Comm: syz.0.3517 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  204.704386][T14711] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.712907][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  204.712920][T14779] Call Trace:
[  204.712926][T14779]  <TASK>
[  204.712932][T14779]  dump_stack_lvl+0xf2/0x150
[  204.719967][T14711] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.729948][T14779]  dump_stack+0x15/0x20
[  204.733321][T14711] bridge_slave_1: entered allmulticast mode
[  204.736119][T14779]  should_fail_ex+0x229/0x230
[  204.741120][T14711] bridge_slave_1: entered promiscuous mode
[  204.747674][T14779]  ? skb_clone+0x154/0x1f0
[  204.747701][T14779]  should_failslab+0x8f/0xb0
[  204.747730][T14779]  kmem_cache_alloc_noprof+0x4c/0x290
[  204.782827][T14779]  skb_clone+0x154/0x1f0
[  204.787073][T14779]  __netlink_deliver_tap+0x2bd/0x4c0
[  204.792394][T14779]  netlink_unicast+0x64a/0x670
[  204.797231][T14779]  netlink_sendmsg+0x5cc/0x6e0
[  204.801997][T14779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.807274][T14779]  __sock_sendmsg+0x140/0x180
[  204.812035][T14779]  ____sys_sendmsg+0x312/0x410
[  204.816796][T14779]  __sys_sendmsg+0x1e9/0x280
[  204.821388][T14779]  __x64_sys_sendmsg+0x46/0x50
[  204.826178][T14779]  x64_sys_call+0x2689/0x2d60
[  204.830864][T14779]  do_syscall_64+0xc9/0x1c0
[  204.835366][T14779]  ? clear_bhb_loop+0x55/0xb0
[  204.840110][T14779]  ? clear_bhb_loop+0x55/0xb0
[  204.844959][T14779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.850845][T14779] RIP: 0033:0x7fbfceb89e79
[  204.855247][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.874885][T14779] RSP: 002b:00007fbfcd807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.883282][T14779] RAX: ffffffffffffffda RBX: 00007fbfced25f80 RCX: 00007fbfceb89e79
[  204.891308][T14779] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[  204.899264][T14779] RBP: 00007fbfcd807090 R08: 0000000000000000 R09: 0000000000000000
[  204.907220][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.915177][T14779] R13: 0000000000000000 R14: 00007fbfced25f80 R15: 00007fff21f01418
[  204.923178][T14779]  </TASK>
[  204.943601][T14781] FAULT_INJECTION: forcing a failure.
[  204.943601][T14781] name failslab, interval 1, probability 0, space 0, times 0
[  204.956288][T14781] CPU: 1 UID: 0 PID: 14781 Comm: syz.2.3518 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  204.967065][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  204.977339][T14781] Call Trace:
[  204.980602][T14781]  <TASK>
[  204.983552][T14781]  dump_stack_lvl+0xf2/0x150
[  204.988191][T14781]  dump_stack+0x15/0x20
[  204.992385][T14781]  should_fail_ex+0x229/0x230
[  204.997130][T14781]  ? __alloc_skb+0x10b/0x310
[  205.001769][T14781]  should_failslab+0x8f/0xb0
[  205.006423][T14781]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  205.012222][T14781]  __alloc_skb+0x10b/0x310
[  205.016634][T14781]  sock_omalloc+0x7e/0xe0
[  205.020974][T14781]  msg_zerocopy_realloc+0x83/0x3c0
[  205.026074][T14781]  ? __pfx_tcp_sendmsg+0x10/0x10
[  205.030992][T14781]  tcp_sendmsg_locked+0x2254/0x2640
[  205.036240][T14781]  ? mod_objcg_state+0x2ea/0x4f0
[  205.041184][T14781]  ? __rcu_read_unlock+0x4e/0x70
[  205.046200][T14781]  ? __rcu_read_unlock+0x4e/0x70
[  205.051115][T14781]  ? avc_has_perm_noaudit+0x1cc/0x210
[  205.056462][T14781]  ? avc_has_perm+0xd4/0x160
[  205.061042][T14781]  ? _raw_spin_unlock_bh+0x36/0x40
[  205.066145][T14781]  ? __pfx_tcp_sendmsg+0x10/0x10
[  205.071107][T14781]  tcp_sendmsg+0x30/0x50
[  205.075326][T14781]  inet_sendmsg+0x77/0xd0
[  205.079700][T14781]  __sock_sendmsg+0x102/0x180
[  205.084401][T14781]  ____sys_sendmsg+0x312/0x410
[  205.089148][T14781]  __sys_sendmmsg+0x269/0x500
[  205.093813][T14781]  __x64_sys_sendmmsg+0x57/0x70
[  205.098648][T14781]  x64_sys_call+0xa49/0x2d60
[  205.103277][T14781]  do_syscall_64+0xc9/0x1c0
[  205.107912][T14781]  ? clear_bhb_loop+0x55/0xb0
[  205.112620][T14781]  ? clear_bhb_loop+0x55/0xb0
[  205.117298][T14781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.123286][T14781] RIP: 0033:0x7f2fa2769e79
[  205.127939][T14781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.147525][T14781] RSP: 002b:00007f2fa13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  205.155918][T14781] RAX: ffffffffffffffda RBX: 00007f2fa2905f80 RCX: 00007f2fa2769e79
[  205.163884][T14781] RDX: 0000000000000002 RSI: 0000000020000500 RDI: 0000000000000003
[  205.171831][T14781] RBP: 00007f2fa13e7090 R08: 0000000000000000 R09: 0000000000000000
[  205.179788][T14781] R10: 0000000004004441 R11: 0000000000000246 R12: 0000000000000001
[  205.187739][T14781] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  205.195690][T14781]  </TASK>
[  205.201804][ T7012] hsr_slave_0: left promiscuous mode
[  205.211110][ T7012] hsr_slave_1: left promiscuous mode
[  205.217043][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.224508][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.232408][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.239885][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.248677][ T7012] team0: left allmulticast mode
[  205.253617][ T7012] team_slave_0: left allmulticast mode
[  205.259078][ T7012] team_slave_1: left allmulticast mode
[  205.264621][ T7012] team0: left promiscuous mode
[  205.269437][ T7012] team_slave_0: left promiscuous mode
[  205.274874][ T7012] team_slave_1: left promiscuous mode
[  205.280440][ T7012] veth1_macvtap: left promiscuous mode
[  205.285909][ T7012] veth0_macvtap: left promiscuous mode
[  205.291699][ T7012] veth1_vlan: left promiscuous mode
[  205.296919][ T7012] veth0_vlan: left promiscuous mode
[  205.471250][T14788] No such timeout policy "syz1"
[  205.486450][T14791] FAULT_INJECTION: forcing a failure.
[  205.486450][T14791] name failslab, interval 1, probability 0, space 0, times 0
[  205.499156][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.1.3522 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  205.509917][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  205.519967][T14791] Call Trace:
[  205.523239][T14791]  <TASK>
[  205.526620][T14791]  dump_stack_lvl+0xf2/0x150
[  205.531226][T14791]  dump_stack+0x15/0x20
[  205.535417][T14791]  should_fail_ex+0x229/0x230
[  205.540216][T14791]  ? __anon_vma_prepare+0x73/0x310
[  205.545454][T14791]  should_failslab+0x8f/0xb0
[  205.550051][T14791]  kmem_cache_alloc_noprof+0x4c/0x290
[  205.555412][T14791]  __anon_vma_prepare+0x73/0x310
[  205.560351][T14791]  ? do_wp_page+0xf7d/0x22c0
[  205.564985][T14791]  do_wp_page+0xfc0/0x22c0
[  205.569412][T14791]  ? __rcu_read_lock+0x36/0x50
[  205.574152][T14791]  ? __rcu_read_lock+0x36/0x50
[  205.578894][T14791]  handle_mm_fault+0xbf0/0x2940
[  205.583737][T14791]  exc_page_fault+0x296/0x650
[  205.588415][T14791]  asm_exc_page_fault+0x26/0x30
[  205.593248][T14791] RIP: 0010:__put_user_4+0x11/0x20
[  205.598461][T14791] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[  205.618085][T14791] RSP: 0018:ffffc90001327db8 EFLAGS: 00050206
[  205.624572][T14791] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020600000
[  205.632777][T14791] RDX: 00000000000001ca RSI: 0000000000000000 RDI: ffffc90001327df4
[  205.640735][T14791] RBP: 0000000000000000 R08: 0001c90001327df7 R09: 0000000000000000
[  205.648720][T14791] R10: 0001ffffffffffff R11: 0001c90001327df4 R12: 0000000020600000
[  205.656706][T14791] R13: 0000000000000000 R14: ffff8881082c4000 R15: ffffc90001327df4
[  205.664686][T14791]  packet_getsockopt+0x5e8/0x6f0
[  205.669614][T14791]  do_sock_getsockopt+0x121/0x1a0
[  205.674637][T14791]  ? __pfx_packet_getsockopt+0x10/0x10
[  205.680081][T14791]  __sys_getsockopt+0x19a/0x210
[  205.684934][T14791]  __x64_sys_getsockopt+0x66/0x80
[  205.689939][T14791]  x64_sys_call+0x11cd/0x2d60
[  205.694618][T14791]  do_syscall_64+0xc9/0x1c0
[  205.699112][T14791]  ? clear_bhb_loop+0x55/0xb0
[  205.703825][T14791]  ? clear_bhb_loop+0x55/0xb0
[  205.708484][T14791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.714487][T14791] RIP: 0033:0x7fdb151b9e79
[  205.718878][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.738467][T14791] RSP: 002b:00007fdb13e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  205.746904][T14791] RAX: ffffffffffffffda RBX: 00007fdb15355f80 RCX: 00007fdb151b9e79
[  205.754958][T14791] RDX: 0000000000000017 RSI: 0000000000000107 RDI: 0000000000000003
[  205.762918][T14791] RBP: 00007fdb13e31090 R08: 0000000020600000 R09: 0000000000000000
[  205.770958][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.778915][T14791] R13: 0000000000000000 R14: 00007fdb15355f80 R15: 00007ffe73a1a108
[  205.786933][T14791]  </TASK>
[  205.791809][ T7012] team0 (unregistering): Port device team_slave_1 removed
[  205.802410][ T7012] team0 (unregistering): Port device team_slave_0 removed
[  205.849899][T14711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.862295][T14711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.875103][T14783] vlan2: entered promiscuous mode
[  205.880295][T14783] bond0: entered promiscuous mode
[  205.885360][T14783] bond_slave_0: entered promiscuous mode
[  205.891196][T14783] bond_slave_1: entered promiscuous mode
[  205.897123][T14783] vlan2: entered allmulticast mode
[  205.902397][T14783] bond0: entered allmulticast mode
[  205.907560][T14783] bond_slave_0: entered allmulticast mode
[  205.913322][T14783] bond_slave_1: entered allmulticast mode
[  205.920907][T14783] bond0: left allmulticast mode
[  205.925823][T14783] bond_slave_0: left allmulticast mode
[  205.931350][T14783] bond_slave_1: left allmulticast mode
[  205.936993][T14783] bond0: left promiscuous mode
[  205.941747][T14783] bond_slave_0: left promiscuous mode
[  205.947221][T14783] bond_slave_1: left promiscuous mode
[  205.972747][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'.
[  206.049553][T14711] team0: Port device team_slave_0 added
[  206.074364][T14711] team0: Port device team_slave_1 added
[  206.100768][T14808] bond2: entered promiscuous mode
[  206.105828][T14808] bond2: entered allmulticast mode
[  206.112313][T14808] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.131843][T14711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.139041][T14711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.164996][T14711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.178526][T14711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.185514][T14711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.211497][T14711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.578513][T14815] netlink: 'syz.3.3529': attribute type 21 has an invalid length.
[  208.588248][T14711] hsr_slave_0: entered promiscuous mode
[  208.596110][T14711] hsr_slave_1: entered promiscuous mode
[  208.602119][T14711] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.609798][T14711] Cannot create hsr debugfs directory
[  208.806374][T14711] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  208.814882][T14711] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  208.823723][T14711] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  208.831970][T14711] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  208.865052][T14711] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.877117][T14711] 8021q: adding VLAN 0 to HW filter on device team0
[  208.886331][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.893397][ T8815] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.904689][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.911750][ T7012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.970996][T14711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.065793][T14711] veth0_vlan: entered promiscuous mode
[  209.074150][T14711] veth1_vlan: entered promiscuous mode
[  209.089135][T14711] veth0_macvtap: entered promiscuous mode
[  209.096283][T14711] veth1_macvtap: entered promiscuous mode
[  209.106983][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.117447][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.128076][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.138517][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.148327][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.158760][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.168598][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.179070][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.188962][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.199377][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.209188][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.219596][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.230716][T14711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.241087][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.251590][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.261513][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.271986][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.281789][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.292204][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.302067][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.312508][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.322301][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.333041][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.342860][T14711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.353267][T14711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.364119][T14711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.373820][T14711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.382562][T14711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.391235][T14711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.399909][T14711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.366392][T14846] loop3: detected capacity change from 0 to 1024
[  210.375406][T14846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  210.465394][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  210.465451][   T29] audit: type=1400 audit(1724311819.401:4852): avc:  denied  { write } for  pid=14861 comm="syz.0.3539" name="ip6_flowlabel" dev="proc" ino=4026533647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  210.477443][T14869] 9pnet_fd: Insufficient options for proto=fd
[  210.496830][   T29] audit: type=1400 audit(1724311819.411:4853): avc:  denied  { mounton } for  pid=14868 comm="syz.2.3540" path="/23/file0" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  210.539625][T14869] bond_slave_0: entered promiscuous mode
[  210.545358][T14869] bond_slave_1: entered promiscuous mode
[  210.555584][T14869] bond_slave_0: left promiscuous mode
[  210.561014][T14869] bond_slave_1: left promiscuous mode
[  210.572511][T14869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.583250][T14869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.594746][T14869] bond0 (unregistering): Released all slaves
[  210.617728][T14876] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[  210.689154][T14881] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3544'.
[  210.700986][T14881] loop3: detected capacity change from 0 to 512
[  210.707485][T14881] EXT4-fs: Ignoring removed mblk_io_submit option
[  210.713970][T14881] EXT4-fs: Ignoring removed oldalloc option
[  210.734293][T14881] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.3544: corrupted xattr block 255: invalid header
[  210.760291][T14881] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  210.770366][T14881] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #2: comm syz.3.3544: corrupted xattr block 255: invalid header
[  210.784143][T14881] SELinux: (dev loop3, type ext4) getxattr errno 117
[  210.802760][   T29] audit: type=1400 audit(1724311819.747:4854): avc:  denied  { bind } for  pid=14898 comm="syz.2.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  210.834106][   T29] audit: type=1400 audit(1724311819.768:4855): avc:  denied  { setopt } for  pid=14898 comm="syz.2.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  210.835588][T14905] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3553'.
[  210.865676][T14905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3553'.
[  210.882047][T14903] loop3: detected capacity change from 0 to 512
[  210.888708][T14903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.900994][T14903] EXT4-fs (loop3): 1 truncate cleaned up
[  210.930796][   T29] audit: type=1400 audit(1724311819.894:4856): avc:  denied  { mount } for  pid=14912 comm="syz.3.3556" name="/" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  210.954942][   T29] audit: type=1400 audit(1724311819.894:4857): avc:  denied  { search } for  pid=14912 comm="syz.3.3556" name="/" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  210.977263][   T29] audit: type=1400 audit(1724311819.894:4858): avc:  denied  { read } for  pid=14912 comm="syz.3.3556" name="/" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  210.999349][   T29] audit: type=1400 audit(1724311819.894:4859): avc:  denied  { open } for  pid=14912 comm="syz.3.3556" path="/174/file0" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  211.022151][   T29] audit: type=1400 audit(1724311819.894:4860): avc:  denied  { write } for  pid=14912 comm="syz.3.3556" name="/" dev="configfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  211.044877][   T29] audit: type=1400 audit(1724311819.936:4861): avc:  denied  { unmount } for  pid=12949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  211.084839][T14918] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256
[  211.122334][T14924] loop2: detected capacity change from 0 to 512
[  211.129420][T14924] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  211.136645][T14926] vlan2: entered promiscuous mode
[  211.141682][T14924] EXT4-fs (loop2): 1 truncate cleaned up
[  211.144320][T14926] bond0: entered promiscuous mode
[  211.144335][T14926] bond_slave_0: entered promiscuous mode
[  211.144443][T14926] bond_slave_1: entered promiscuous mode
[  211.166842][T14926] vlan2: entered allmulticast mode
[  211.172047][T14926] bond0: entered allmulticast mode
[  211.177200][T14926] bond_slave_0: entered allmulticast mode
[  211.182928][T14926] bond_slave_1: entered allmulticast mode
[  211.209917][T14926] bond0: left allmulticast mode
[  211.214877][T14926] bond_slave_0: left allmulticast mode
[  211.220455][T14926] bond_slave_1: left allmulticast mode
[  211.226212][T14926] bond0: left promiscuous mode
[  211.230984][T14926] bond_slave_0: left promiscuous mode
[  211.236550][T14926] bond_slave_1: left promiscuous mode
[  211.256887][T14935] FAULT_INJECTION: forcing a failure.
[  211.256887][T14935] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  211.270157][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.3.3566 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  211.281013][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  211.291156][T14935] Call Trace:
[  211.294423][T14935]  <TASK>
[  211.297350][T14935]  dump_stack_lvl+0xf2/0x150
[  211.301927][T14935]  dump_stack+0x15/0x20
[  211.306141][T14935]  should_fail_ex+0x229/0x230
[  211.310803][T14935]  should_fail_alloc_page+0xfd/0x110
[  211.316083][T14935]  __alloc_pages_noprof+0x109/0x360
[  211.321337][T14935]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  211.326766][T14935]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  211.332183][T14935]  handle_mm_fault+0xd6d/0x2940
[  211.337018][T14935]  ? follow_page_pte+0x35f/0xc40
[  211.342021][T14935]  __get_user_pages+0x499/0x10d0
[  211.346950][T14935]  __gup_longterm_locked+0xa7b/0x10b0
[  211.352380][T14935]  ? __rcu_read_unlock+0x4e/0x70
[  211.357294][T14935]  ? __rcu_read_lock+0x36/0x50
[  211.362036][T14935]  gup_fast_fallback+0x1cbc/0x2480
[  211.367175][T14935]  pin_user_pages_fast+0x5f/0x90
[  211.372103][T14935]  rds_info_getsockopt+0x162/0x370
[  211.377211][T14935]  ? selinux_socket_getsockopt+0x182/0x1b0
[  211.382999][T14935]  rds_getsockopt+0x303/0x430
[  211.387665][T14935]  do_sock_getsockopt+0x121/0x1a0
[  211.392800][T14935]  ? __pfx_rds_getsockopt+0x10/0x10
[  211.397999][T14935]  __sys_getsockopt+0x19a/0x210
[  211.402863][T14935]  __x64_sys_getsockopt+0x66/0x80
[  211.407952][T14935]  x64_sys_call+0x11cd/0x2d60
[  211.412763][T14935]  do_syscall_64+0xc9/0x1c0
[  211.417262][T14935]  ? clear_bhb_loop+0x55/0xb0
[  211.421962][T14935]  ? clear_bhb_loop+0x55/0xb0
[  211.426709][T14935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.432645][T14935] RIP: 0033:0x7f163fad9e79
[  211.437035][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.456684][T14935] RSP: 002b:00007f163e757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  211.465219][T14935] RAX: ffffffffffffffda RBX: 00007f163fc75f80 RCX: 00007f163fad9e79
[  211.473222][T14935] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003
[  211.481191][T14935] RBP: 00007f163e757090 R08: 0000000020000100 R09: 0000000000000000
[  211.489138][T14935] R10: 0000000020019580 R11: 0000000000000246 R12: 0000000000000001
[  211.497085][T14935] R13: 0000000000000000 R14: 00007f163fc75f80 R15: 00007ffe59f982b8
[  211.505066][T14935]  </TASK>
[  211.549433][  T982] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7
[  211.556943][  T982] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max
[  211.568223][  T982] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  211.586924][  T982] hid-generic 0000:0000:0000.0005: unknown main item tag 0x6
[  211.594396][  T982] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd
[  211.603008][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.613441][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.624004][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47959 - 0
[  211.634593][ T7012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 39499 - 0
[  211.647886][  T982] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  211.684157][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.694456][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.704723][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47959 - 0
[  211.715086][ T7012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 39499 - 0
[  211.761475][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'.
[  211.776063][T14966] ip6gretap1: entered allmulticast mode
[  211.802656][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode
[  211.818844][ T7012] team0: Port device netdevsim1 removed
[  211.834446][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.844831][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.855169][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47959 - 0
[  211.865530][ T7012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 39499 - 0
[  211.915677][T14936] chnl_net:caif_netlink_parms(): no params data found
[  211.929835][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  211.940274][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.950552][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47959 - 0
[  211.961080][ T7012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 39499 - 0
[  212.002143][T14973] netlink: 'syz.4.3579': attribute type 10 has an invalid length.
[  212.059815][T14973] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  212.071937][T14973] team0: Failed to send options change via netlink (err -105)
[  212.073700][T14999] loop2: detected capacity change from 0 to 512
[  212.079497][T14973] team0: Port device netdevsim1 added
[  212.093432][T14999] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  212.111010][T14976] netlink: 'syz.4.3579': attribute type 10 has an invalid length.
[  212.130099][T14999] EXT4-fs (loop2): 1 truncate cleaned up
[  212.157742][T14976] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  212.178970][T14976] team0: Failed to send options change via netlink (err -105)
[  212.192343][T14976] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  212.206168][T14976] team0: Port device netdevsim1 removed
[  212.215816][T14976] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  212.225600][T14936] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.232958][T14936] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.248456][T15006] loop2: detected capacity change from 0 to 512
[  212.255922][T14936] bridge_slave_0: entered allmulticast mode
[  212.262502][T14936] bridge_slave_0: entered promiscuous mode
[  212.264340][T15006] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  212.278107][T14936] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.285250][T14936] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.306054][T14936] bridge_slave_1: entered allmulticast mode
[  212.318329][T15006] EXT4-fs (loop2): failed to open journal device unknown-block(2940,205839) -6
[  212.323875][T14936] bridge_slave_1: entered promiscuous mode
[  212.360765][T15006] loop2: detected capacity change from 0 to 512
[  212.379320][T15006] EXT4-fs (loop2): unable to read superblock
[  212.396950][T15010] syzkaller0: entered promiscuous mode
[  212.402433][T15010] syzkaller0: entered allmulticast mode
[  212.426830][T15006] lo: entered promiscuous mode
[  212.435316][ T7012] bridge_slave_1: left allmulticast mode
[  212.441060][ T7012] bridge_slave_1: left promiscuous mode
[  212.446747][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.475629][ T7012] bridge_slave_0: left allmulticast mode
[  212.481323][ T7012] bridge_slave_0: left promiscuous mode
[  212.486986][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.541801][ T7012] ip6gretap0 (unregistering): left promiscuous mode
[  212.600837][ T7012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.611085][ T7012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.621812][ T7012] bond0 (unregistering): Released all slaves
[  212.630141][ T7012] bond1 (unregistering): Released all slaves
[  212.638918][ T7012] bond2 (unregistering): Released all slaves
[  212.650750][T15005] lo: left promiscuous mode
[  212.717755][T14936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.729220][T14936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.758960][T15023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  212.778621][ T7012] team0: left promiscuous mode
[  212.783446][ T7012] team_slave_0: left promiscuous mode
[  212.789156][ T7012] team_slave_1: left promiscuous mode
[  212.806217][ T7012] hsr_slave_0: left promiscuous mode
[  212.811965][ T7012] hsr_slave_1: left promiscuous mode
[  212.817595][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.825082][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.835122][ T7012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.842550][ T7012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.853058][ T7012] veth1_macvtap: left promiscuous mode
[  212.858545][ T7012] veth0_macvtap: left promiscuous mode
[  212.864110][ T7012] veth1_vlan: left promiscuous mode
[  212.899868][T15036] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  212.989292][ T7012] team0 (unregistering): Port device team_slave_1 removed
[  213.000765][ T7012] team0 (unregistering): Port device team_slave_0 removed
[  213.034059][T14936] team0: Port device team_slave_0 added
[  213.040408][T15028] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  213.061557][T15030] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 44306 - 0
[  213.070379][T15030] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 44306 - 0
[  213.079189][T15030] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 44306 - 0
[  213.088003][T15030] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 44306 - 0
[  213.097088][T15030] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 59887 - 0
[  213.105907][T15030] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 59887 - 0
[  213.114705][T15030] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 59887 - 0
[  213.123567][T15030] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 59887 - 0
[  213.136910][T15040] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3596'.
[  213.147001][T14936] team0: Port device team_slave_1 added
[  213.165535][T14936] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.172500][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.198456][T14936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.209077][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'.
[  213.218712][T14936] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.225769][T14936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.251681][T14936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.278107][T15054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  213.280062][T15057] loop3: detected capacity change from 0 to 512
[  213.300029][T14936] hsr_slave_0: entered promiscuous mode
[  213.315145][T14936] hsr_slave_1: entered promiscuous mode
[  213.315308][T15057] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.332705][T14936] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.340672][T14936] Cannot create hsr debugfs directory
[  213.351696][T15057] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0
[  213.362078][T15064] hsr0: entered promiscuous mode
[  213.368084][T15064] macvlan2: entered allmulticast mode
[  213.373471][T15064] hsr0: entered allmulticast mode
[  213.378602][T15064] hsr_slave_0: entered allmulticast mode
[  213.384229][T15064] hsr_slave_1: entered allmulticast mode
[  213.395019][T15064] hsr0: left allmulticast mode
[  213.399861][T15064] hsr_slave_0: left allmulticast mode
[  213.400476][T15062] FAULT_INJECTION: forcing a failure.
[  213.400476][T15062] name failslab, interval 1, probability 0, space 0, times 0
[  213.405282][T15064] hsr_slave_1: left allmulticast mode
[  213.417810][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.0.3604 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  213.434019][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  213.444067][T15062] Call Trace:
[  213.447323][T15062]  <TASK>
[  213.450282][T15062]  dump_stack_lvl+0xf2/0x150
[  213.454858][T15062]  dump_stack+0x15/0x20
[  213.459028][T15062]  should_fail_ex+0x229/0x230
[  213.463695][T15062]  ? __alloc_skb+0x10b/0x310
[  213.468294][T15062]  should_failslab+0x8f/0xb0
[  213.472965][T15062]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  213.478765][T15062]  __alloc_skb+0x10b/0x310
[  213.483162][T15062]  audit_log_start+0x368/0x6b0
[  213.487948][T15062]  ? __bpf_prog_run32+0x74/0xa0
[  213.492855][T15062]  audit_seccomp+0x4b/0x130
[  213.497364][T15062]  __seccomp_filter+0x6fa/0x1180
[  213.502333][T15062]  ? proc_fail_nth_write+0x130/0x160
[  213.507674][T15062]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  213.513368][T15062]  ? vfs_write+0x5a5/0x900
[  213.517932][T15062]  ? __fget_files+0x1da/0x210
[  213.522676][T15062]  __secure_computing+0x9f/0x1c0
[  213.527717][T15062]  syscall_trace_enter+0xd1/0x1f0
[  213.532727][T15062]  ? fpregs_assert_state_consistent+0x83/0xa0
[  213.538794][T15062]  do_syscall_64+0xaa/0x1c0
[  213.543348][T15062]  ? clear_bhb_loop+0x55/0xb0
[  213.548008][T15062]  ? clear_bhb_loop+0x55/0xb0
[  213.552716][T15062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.558726][T15062] RIP: 0033:0x7fbfceb89e79
[  213.563165][T15062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.582807][T15062] RSP: 002b:00007fbfcd807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  213.591208][T15062] RAX: ffffffffffffffda RBX: 00007fbfced25f80 RCX: 00007fbfceb89e79
[  213.599165][T15062] RDX: 0000000020000000 RSI: ffffffffffffffff RDI: ffffffffffffffff
[  213.607157][T15062] RBP: 00007fbfcd807090 R08: 0000000000000000 R09: 0000000000000000
[  213.615112][T15062] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  213.623069][T15062] R13: 0000000000000000 R14: 00007fbfced25f80 R15: 00007fff21f01418
[  213.631031][T15062]  </TASK>
[  213.667789][T15074] No such timeout policy "syz0"
[  213.726417][T15084] netlink: 'syz.4.3610': attribute type 21 has an invalid length.
[  213.734398][T15084] FAULT_INJECTION: forcing a failure.
[  213.734398][T15084] name failslab, interval 1, probability 0, space 0, times 0
[  213.747071][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.4.3610 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  213.757827][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  213.767873][T15084] Call Trace:
[  213.771140][T15084]  <TASK>
[  213.774057][T15084]  dump_stack_lvl+0xf2/0x150
[  213.778647][T15084]  dump_stack+0x15/0x20
[  213.782799][T15084]  should_fail_ex+0x229/0x230
[  213.787556][T15084]  ? fib_trie_table+0x2f/0xf0
[  213.792230][T15084]  should_failslab+0x8f/0xb0
[  213.796826][T15084]  __kmalloc_noprof+0xa5/0x370
[  213.801610][T15084]  fib_trie_table+0x2f/0xf0
[  213.806152][T15084]  fib_new_table+0xdd/0x1c0
[  213.810704][T15084]  inet_rtm_newroute+0x8d/0x140
[  213.815550][T15084]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  213.821052][T15084]  rtnetlink_rcv_msg+0x6aa/0x710
[  213.825985][T15084]  ? ref_tracker_free+0x3a5/0x410
[  213.831005][T15084]  ? __dev_queue_xmit+0x161/0x1fe0
[  213.836257][T15084]  netlink_rcv_skb+0x12c/0x230
[  213.841077][T15084]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  213.846613][T15084]  rtnetlink_rcv+0x1c/0x30
[  213.851091][T15084]  netlink_unicast+0x599/0x670
[  213.855911][T15084]  netlink_sendmsg+0x5cc/0x6e0
[  213.860668][T15084]  ? __pfx_netlink_sendmsg+0x10/0x10
[  213.865969][T15084]  __sock_sendmsg+0x140/0x180
[  213.870710][T15084]  ____sys_sendmsg+0x312/0x410
[  213.875470][T15084]  __sys_sendmsg+0x1e9/0x280
[  213.880057][T15084]  __x64_sys_sendmsg+0x46/0x50
[  213.884910][T15084]  x64_sys_call+0x2689/0x2d60
[  213.889612][T15084]  do_syscall_64+0xc9/0x1c0
[  213.894113][T15084]  ? clear_bhb_loop+0x55/0xb0
[  213.898820][T15084]  ? clear_bhb_loop+0x55/0xb0
[  213.903511][T15084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.909423][T15084] RIP: 0033:0x7f25d5539e79
[  213.913885][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.933486][T15084] RSP: 002b:00007f25d41b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  213.941951][T15084] RAX: ffffffffffffffda RBX: 00007f25d56d5f80 RCX: 00007f25d5539e79
[  213.949909][T15084] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003
[  213.957909][T15084] RBP: 00007f25d41b1090 R08: 0000000000000000 R09: 0000000000000000
[  213.965864][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  213.973821][T15084] R13: 0000000000000000 R14: 00007f25d56d5f80 R15: 00007ffcc7a734f8
[  213.981782][T15084]  </TASK>
[  214.017537][ T7012] IPVS: stop unused estimator thread 0...
[  214.038083][T15094] loop4: detected capacity change from 0 to 1024
[  214.046376][T15094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.142996][T15099] program syz.4.3616 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.191105][T15103] loop4: detected capacity change from 0 to 1024
[  214.211504][T15103] EXT4-fs: Ignoring removed orlov option
[  214.217236][T15103] EXT4-fs: Ignoring removed oldalloc option
[  214.224897][T15103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  214.233407][T15103] EXT4-fs (loop4): inodes count not valid: 1 vs 32
[  214.238256][T14936] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  214.251480][T14936] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  214.258663][T15103] tmpfs: Bad value for 'nr_inodes'
[  214.267387][T14936] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  214.283649][T15103] loop4: detected capacity change from 0 to 2048
[  214.290641][T14936] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  214.311958][T15109] loop2: detected capacity change from 0 to 512
[  214.328916][T15103]  loop4: p3 < > p4 < >
[  214.333117][T15103] loop4: partition table partially beyond EOD, truncated
[  214.345684][T14936] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.347359][T15103] loop4: p3 start 4284289 is beyond EOD, truncated
[  214.361269][T14936] 8021q: adding VLAN 0 to HW filter on device team0
[  214.369588][T15109] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.383074][T15109] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3621: corrupted inode contents
[  214.411569][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.418730][ T8809] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.428857][T15109] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.3621: mark_inode_dirty error
[  214.458981][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.466073][ T8809] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.479197][T15109] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3621: corrupted inode contents
[  214.528917][T15125] loop4: detected capacity change from 0 to 512
[  214.538232][T15125] EXT4-fs (loop4): 1 truncate cleaned up
[  214.545533][T15125] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  214.584529][T14936] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.612421][T15133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15133 comm=syz.2.3627
[  214.634236][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3627'.
[  214.674363][T15141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3625'.
[  214.699426][T15141] bridge0: port 3(batadv0) entered blocking state
[  214.705946][T15141] bridge0: port 3(batadv0) entered disabled state
[  214.712631][T15141] batadv0: entered allmulticast mode
[  214.718424][T15141] batadv0: entered promiscuous mode
[  214.723891][T15141] bridge0: port 3(batadv0) entered blocking state
[  214.730427][T15141] bridge0: port 3(batadv0) entered forwarding state
[  214.760917][T14936] veth0_vlan: entered promiscuous mode
[  214.767106][T15157] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  214.775597][T14936] veth1_vlan: entered promiscuous mode
[  214.807154][T14936] veth0_macvtap: entered promiscuous mode
[  214.815894][T14936] veth1_macvtap: entered promiscuous mode
[  214.826233][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.836700][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.846539][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.857008][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.866914][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.877362][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.887236][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.897646][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.907438][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.917865][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.927708][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.938174][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.956002][T14936] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.964168][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.974778][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.984695][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.995151][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.004966][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.015393][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.025230][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.035721][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.043555][T15176] loop4: detected capacity change from 0 to 512
[  215.045561][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.062128][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.071973][T14936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.082422][T14936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.092283][ T7012] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  215.094055][T14936] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.101495][ T7012] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  215.148511][T14936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.157307][T14936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.165999][T14936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.174750][T14936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.197954][T15176] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.229693][T15191] SELinux:  Context A)*û): is not valid (left unmapped).
[  215.252769][T15189] bond0: entered promiscuous mode
[  215.257844][T15189] bond0: entered allmulticast mode
[  215.263056][T15189] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.268496][   T29] kauditd_printk_skb: 33 callbacks suppressed
[  215.268507][   T29] audit: type=1400 audit(1724311824.440:4893): avc:  denied  { bind } for  pid=15193 comm="syz.3.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  215.303043][   T29] audit: type=1400 audit(1724311824.471:4894): avc:  denied  { write } for  pid=15193 comm="syz.3.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  215.303252][T15189] bond0 (unregistering): Released all slaves
[  215.322551][   T29] audit: type=1400 audit(1724311824.471:4895): avc:  denied  { name_bind } for  pid=15193 comm="syz.3.3650" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  215.352601][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'.
[  215.369372][T15191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=15191 comm=syz.0.3648
[  215.389704][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'.
[  215.418144][   T29] audit: type=1400 audit(1724311824.597:4896): avc:  denied  { bind } for  pid=15207 comm="syz.1.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.493393][   T29] audit: type=1400 audit(1724311824.681:4897): avc:  denied  { connect } for  pid=15212 comm="syz.2.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  215.514872][T15209] dccp_invalid_packet: P.Data Offset(100) too large
[  216.520324][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3665'.
[  216.521229][T15238] FAULT_INJECTION: forcing a failure.
[  216.521229][T15238] name failslab, interval 1, probability 0, space 0, times 0
[  216.529322][T15240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3665'.
[  216.541890][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.0.3663 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  216.561541][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  216.571627][T15238] Call Trace:
[  216.574895][T15238]  <TASK>
[  216.577819][T15238]  dump_stack_lvl+0xf2/0x150
[  216.582425][T15238]  dump_stack+0x15/0x20
[  216.586580][T15238]  should_fail_ex+0x229/0x230
[  216.591267][T15238]  should_failslab+0x8f/0xb0
[  216.595852][T15238]  kmem_cache_alloc_bulk_noprof+0x58/0x440
[  216.601760][T15238]  bpf_test_run_xdp_live+0xcaf/0x1000
[  216.607148][T15238]  ? avc_has_perm+0xd4/0x160
[  216.611730][T15238]  ? bpf_test_run_xdp_live+0x29d/0x1000
[  216.617362][T15238]  ? path_openat+0x19bc/0x1f10
[  216.622121][T15238]  ? bpf_test_init+0x140/0x170
[  216.626920][T15238]  bpf_prog_test_run_xdp+0x51d/0x890
[  216.632273][T15238]  ? __fget_files+0x1da/0x210
[  216.636937][T15238]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  216.642735][T15238]  bpf_prog_test_run+0x26d/0x3e0
[  216.647675][T15238]  __sys_bpf+0x400/0x7a0
[  216.651913][T15238]  __x64_sys_bpf+0x43/0x50
[  216.656322][T15238]  x64_sys_call+0x2625/0x2d60
[  216.660993][T15238]  do_syscall_64+0xc9/0x1c0
[  216.665505][T15238]  ? clear_bhb_loop+0x55/0xb0
[  216.670239][T15238]  ? clear_bhb_loop+0x55/0xb0
[  216.674915][T15238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.680804][T15238] RIP: 0033:0x7fbfceb89e79
[  216.685265][T15238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.704865][T15238] RSP: 002b:00007fbfcd807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.713330][T15238] RAX: ffffffffffffffda RBX: 00007fbfced25f80 RCX: 00007fbfceb89e79
[  216.721387][T15238] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  216.729417][T15238] RBP: 00007fbfcd807090 R08: 0000000000000000 R09: 0000000000000000
[  216.737372][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  216.745329][T15238] R13: 0000000000000000 R14: 00007fbfced25f80 R15: 00007fff21f01418
[  216.753292][T15238]  </TASK>
[  216.767917][T15248] program syz.2.3668 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  216.768992][T15245] lo: entered allmulticast mode
[  216.785460][   T29] audit: type=1400 audit(1724311826.015:4898): avc:  denied  { ioctl } for  pid=15239 comm="syz.1.3664" path="pid:[4026532716]" dev="nsfs" ino=4026532716 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  216.837081][T15253] can0: slcan on ttyS3.
[  216.855111][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'.
[  216.866553][   T29] audit: type=1400 audit(1724311826.119:4899): avc:  denied  { ioctl } for  pid=15260 comm="syz.4.3673" path="socket:[58179]" dev="sockfs" ino=58179 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  216.891642][T15245] can0 (unregistered): slcan off ttyS3.
[  216.900469][T15245] Falling back ldisc for ttyS3.
[  216.948429][T15275] syzkaller0: entered promiscuous mode
[  216.953945][T15275] syzkaller0: entered allmulticast mode
[  216.956932][T15277] FAULT_INJECTION: forcing a failure.
[  216.956932][T15277] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  216.972757][T15277] CPU: 0 UID: 0 PID: 15277 Comm: syz.1.3679 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  216.983510][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  216.993564][T15277] Call Trace:
[  216.996832][T15277]  <TASK>
[  216.999750][T15277]  dump_stack_lvl+0xf2/0x150
[  217.004380][T15277]  dump_stack+0x15/0x20
[  217.008530][T15277]  should_fail_ex+0x229/0x230
[  217.013210][T15277]  should_fail_alloc_page+0xfd/0x110
[  217.018538][T15277]  __alloc_pages_noprof+0x109/0x360
[  217.023836][T15277]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  217.029210][T15277]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  217.034573][T15277]  handle_mm_fault+0xd6d/0x2940
[  217.039456][T15277]  ? follow_page_pte+0x35f/0xc40
[  217.044395][T15277]  __get_user_pages+0x499/0x10d0
[  217.049327][T15277]  __gup_longterm_locked+0xa7b/0x10b0
[  217.054752][T15277]  ? __rcu_read_unlock+0x4e/0x70
[  217.059681][T15277]  ? __rcu_read_lock+0x36/0x50
[  217.064491][T15277]  gup_fast_fallback+0x1cbc/0x2480
[  217.069661][T15277]  pin_user_pages_fast+0x5f/0x90
[  217.074632][T15277]  rds_info_getsockopt+0x162/0x370
[  217.079734][T15277]  ? selinux_socket_getsockopt+0x182/0x1b0
[  217.085555][T15277]  rds_getsockopt+0x303/0x430
[  217.090230][T15277]  do_sock_getsockopt+0x121/0x1a0
[  217.095244][T15277]  ? __pfx_rds_getsockopt+0x10/0x10
[  217.100489][T15277]  __sys_getsockopt+0x19a/0x210
[  217.105333][T15277]  __x64_sys_getsockopt+0x66/0x80
[  217.110348][T15277]  x64_sys_call+0x11cd/0x2d60
[  217.115047][T15277]  do_syscall_64+0xc9/0x1c0
[  217.119553][T15277]  ? clear_bhb_loop+0x55/0xb0
[  217.124251][T15277]  ? clear_bhb_loop+0x55/0xb0
[  217.128956][T15277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.134844][T15277] RIP: 0033:0x7f5778e49e79
[  217.139244][T15277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.158887][T15277] RSP: 002b:00007f5777ac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  217.167329][T15277] RAX: ffffffffffffffda RBX: 00007f5778fe5f80 RCX: 00007f5778e49e79
[  217.175287][T15277] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003
[  217.183243][T15277] RBP: 00007f5777ac1090 R08: 0000000020000100 R09: 0000000000000000
[  217.191214][T15277] R10: 0000000020019580 R11: 0000000000000246 R12: 0000000000000002
[  217.199168][T15277] R13: 0000000000000000 R14: 00007f5778fe5f80 R15: 00007ffc06214b48
[  217.207160][T15277]  </TASK>
[  217.232282][   T29] audit: type=1326 audit(1724311826.497:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15284 comm="syz.3.3683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f163fad9e79 code=0x0
[  217.236537][T15283] loop4: detected capacity change from 0 to 2048
[  217.266483][   T29] audit: type=1400 audit(1724311826.539:4901): avc:  denied  { read } for  pid=15279 comm="syz.0.3681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  217.291964][   T29] audit: type=1400 audit(1724311826.539:4902): avc:  denied  { mount } for  pid=15279 comm="syz.0.3681" name="/" dev="ramfs" ino=58928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  217.385277][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'.
[  217.394387][T15303] netlink: 'syz.3.3683': attribute type 18 has an invalid length.
[  217.417719][T15303] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.426489][T15303] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.427382][T15306] loop2: detected capacity change from 0 to 1024
[  217.435285][T15303] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.450289][T15303] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.459618][T15303] vxlan0: entered promiscuous mode
[  217.466714][T15306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.476864][T15306] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  217.490540][T15306] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  217.500035][T15306] EXT4-fs (loop2): orphan cleanup on readonly fs
[  217.503749][T15313] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  217.509210][T15306] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.3691: Freeing blocks not in datazone - block = 0, count = 4096
[  217.520807][T15315] loop4: detected capacity change from 0 to 512
[  217.531551][T15306] EXT4-fs (loop2): Remounting filesystem read-only
[  217.542296][T15315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  217.542926][T15306] EXT4-fs (loop2): 1 orphan inode deleted
[  217.560118][T15306] SELinux: (dev loop2, type ext4) getxattr errno 5
[  217.569793][T15315] EXT4-fs (loop4): 1 truncate cleaned up
[  217.579563][T15315] FAULT_INJECTION: forcing a failure.
[  217.579563][T15315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.586876][T15322] xt_CT: You must specify a L4 protocol and not use inversions on it
[  217.592623][T15315] CPU: 1 UID: 0 PID: 15315 Comm: syz.4.3694 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  217.600907][T15322] FAULT_INJECTION: forcing a failure.
[  217.600907][T15322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.611389][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  217.611407][T15315] Call Trace:
[  217.611415][T15315]  <TASK>
[  217.640619][T15315]  dump_stack_lvl+0xf2/0x150
[  217.645289][T15315]  dump_stack+0x15/0x20
[  217.649466][T15315]  should_fail_ex+0x229/0x230
[  217.654230][T15315]  should_fail+0xb/0x10
[  217.658510][T15315]  should_fail_usercopy+0x1a/0x20
[  217.663589][T15315]  _copy_to_user+0x1e/0xa0
[  217.668032][T15315]  simple_read_from_buffer+0xa0/0x110
[  217.673415][T15315]  proc_fail_nth_read+0xff/0x140
[  217.678350][T15315]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  217.683888][T15315]  vfs_read+0x1a2/0x6e0
[  217.688037][T15315]  ? __rcu_read_unlock+0x4e/0x70
[  217.692978][T15315]  ? __fget_files+0x1da/0x210
[  217.697724][T15315]  ksys_read+0xeb/0x1b0
[  217.701900][T15315]  __x64_sys_read+0x42/0x50
[  217.706397][T15315]  x64_sys_call+0x27d3/0x2d60
[  217.711070][T15315]  do_syscall_64+0xc9/0x1c0
[  217.715569][T15315]  ? clear_bhb_loop+0x55/0xb0
[  217.720296][T15315]  ? clear_bhb_loop+0x55/0xb0
[  217.725042][T15315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.730955][T15315] RIP: 0033:0x7f25d55388bc
[  217.735353][T15315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  217.755003][T15315] RSP: 002b:00007f25d41b1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.763433][T15315] RAX: ffffffffffffffda RBX: 00007f25d56d5f80 RCX: 00007f25d55388bc
[  217.771390][T15315] RDX: 000000000000000f RSI: 00007f25d41b10a0 RDI: 0000000000000005
[  217.779343][T15315] RBP: 00007f25d41b1090 R08: 0000000000000000 R09: 0000000000000000
[  217.787301][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.795259][T15315] R13: 0000000000000000 R14: 00007f25d56d5f80 R15: 00007ffcc7a734f8
[  217.803221][T15315]  </TASK>
[  217.806228][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.2.3696 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  217.816992][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  217.827174][T15322] Call Trace:
[  217.830448][T15322]  <TASK>
[  217.833376][T15322]  dump_stack_lvl+0xf2/0x150
[  217.838012][T15322]  dump_stack+0x15/0x20
[  217.842191][T15322]  should_fail_ex+0x229/0x230
[  217.846942][T15322]  should_fail+0xb/0x10
[  217.851082][T15322]  should_fail_usercopy+0x1a/0x20
[  217.856111][T15322]  _copy_to_user+0x1e/0xa0
[  217.860598][T15322]  simple_read_from_buffer+0xa0/0x110
[  217.865964][T15322]  proc_fail_nth_read+0xff/0x140
[  217.870962][T15322]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  217.876572][T15322]  vfs_read+0x1a2/0x6e0
[  217.880762][T15322]  ? __rcu_read_unlock+0x4e/0x70
[  217.885743][T15322]  ? __fget_files+0x1da/0x210
[  217.890401][T15322]  ksys_read+0xeb/0x1b0
[  217.894546][T15322]  __x64_sys_read+0x42/0x50
[  217.899033][T15322]  x64_sys_call+0x27d3/0x2d60
[  217.903711][T15322]  do_syscall_64+0xc9/0x1c0
[  217.908262][T15322]  ? clear_bhb_loop+0x55/0xb0
[  217.912983][T15322]  ? clear_bhb_loop+0x55/0xb0
[  217.917641][T15322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.923540][T15322] RIP: 0033:0x7f2fa27688bc
[  217.927945][T15322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  217.947536][T15322] RSP: 002b:00007f2fa13e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  217.955992][T15322] RAX: ffffffffffffffda RBX: 00007f2fa2905f80 RCX: 00007f2fa27688bc
[  217.963957][T15322] RDX: 000000000000000f RSI: 00007f2fa13e70a0 RDI: 0000000000000004
[  217.971918][T15322] RBP: 00007f2fa13e7090 R08: 0000000000000000 R09: 0000000000000000
[  217.979871][T15322] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  217.987841][T15322] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  217.995797][T15322]  </TASK>
[  218.013896][T15325] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  218.109406][T15342] loop4: detected capacity change from 0 to 256
[  218.182307][T15346] xt_time: unknown flags 0x4
[  218.345835][T15349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15349 comm=syz.1.3706
[  218.393813][T15356] loop2: detected capacity change from 0 to 512
[  218.406311][T15356] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  218.415388][T15356] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  218.425748][T15356] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  218.435570][T15356] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  218.444652][T15356] System zones: 0-2, 18-18, 34-34
[  218.450192][T15356] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  218.466283][T15356] EXT4-fs (loop2): 1 truncate cleaned up
[  218.512590][T15356] EXT4-fs warning (device loop2): ext4_group_extend:1890: can't read last block, resize aborted
[  218.524066][T15356] No such timeout policy "syz0"
[  218.608236][T15367] FAULT_INJECTION: forcing a failure.
[  218.608236][T15367] name failslab, interval 1, probability 0, space 0, times 0
[  218.620913][T15367] CPU: 1 UID: 0 PID: 15367 Comm: syz.2.3711 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  218.631685][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  218.641737][T15367] Call Trace:
[  218.645015][T15367]  <TASK>
[  218.647959][T15367]  dump_stack_lvl+0xf2/0x150
[  218.652571][T15367]  dump_stack+0x15/0x20
[  218.656739][T15367]  should_fail_ex+0x229/0x230
[  218.661494][T15367]  ? __alloc_skb+0x10b/0x310
[  218.666146][T15367]  should_failslab+0x8f/0xb0
[  218.670811][T15367]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  218.676703][T15367]  __alloc_skb+0x10b/0x310
[  218.681185][T15367]  alloc_skb_with_frags+0x7f/0x400
[  218.686400][T15367]  ? mm_account_pinned_pages+0xab/0x240
[  218.691994][T15367]  tcp_send_rcvq+0xec/0x2c0
[  218.696618][T15367]  ? __pfx_tcp_sendmsg+0x10/0x10
[  218.701572][T15367]  tcp_sendmsg_locked+0x2564/0x2640
[  218.706774][T15367]  ? mod_objcg_state+0x2ea/0x4f0
[  218.711719][T15367]  ? tcp_sendmsg_locked+0x22a1/0x2640
[  218.717097][T15367]  ? __rcu_read_unlock+0x4e/0x70
[  218.722034][T15367]  ? avc_has_perm_noaudit+0x1cc/0x210
[  218.727461][T15367]  ? avc_has_perm+0xd4/0x160
[  218.732101][T15367]  ? _raw_spin_unlock_bh+0x36/0x40
[  218.737261][T15367]  ? __pfx_tcp_sendmsg+0x10/0x10
[  218.742203][T15367]  tcp_sendmsg+0x30/0x50
[  218.746448][T15367]  inet_sendmsg+0x77/0xd0
[  218.750790][T15367]  __sock_sendmsg+0x102/0x180
[  218.755543][T15367]  ____sys_sendmsg+0x312/0x410
[  218.760328][T15367]  __sys_sendmmsg+0x269/0x500
[  218.765069][T15367]  __x64_sys_sendmmsg+0x57/0x70
[  218.769919][T15367]  x64_sys_call+0xa49/0x2d60
[  218.774501][T15367]  do_syscall_64+0xc9/0x1c0
[  218.779051][T15367]  ? clear_bhb_loop+0x55/0xb0
[  218.783797][T15367]  ? clear_bhb_loop+0x55/0xb0
[  218.788553][T15367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.794439][T15367] RIP: 0033:0x7f2fa2769e79
[  218.798882][T15367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.818543][T15367] RSP: 002b:00007f2fa13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  218.826940][T15367] RAX: ffffffffffffffda RBX: 00007f2fa2905f80 RCX: 00007f2fa2769e79
[  218.834897][T15367] RDX: 0000000000000002 RSI: 0000000020000500 RDI: 0000000000000003
[  218.842937][T15367] RBP: 00007f2fa13e7090 R08: 0000000000000000 R09: 0000000000000000
[  218.850964][T15367] R10: 0000000004004441 R11: 0000000000000246 R12: 0000000000000001
[  218.858921][T15367] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  218.866887][T15367]  </TASK>
[  218.930142][T15377] FAULT_INJECTION: forcing a failure.
[  218.930142][T15377] name failslab, interval 1, probability 0, space 0, times 0
[  218.942791][T15377] CPU: 1 UID: 0 PID: 15377 Comm: syz.3.3714 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  218.953548][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  218.963589][T15377] Call Trace:
[  218.966920][T15377]  <TASK>
[  218.969837][T15377]  dump_stack_lvl+0xf2/0x150
[  218.974435][T15377]  dump_stack+0x15/0x20
[  218.978645][T15377]  should_fail_ex+0x229/0x230
[  218.983325][T15377]  ? nfnetlink_rcv+0x9ae/0x15e0
[  218.988244][T15377]  should_failslab+0x8f/0xb0
[  218.992828][T15377]  __kmalloc_cache_noprof+0x4b/0x2a0
[  218.998105][T15377]  nfnetlink_rcv+0x9ae/0x15e0
[  219.002824][T15377]  netlink_unicast+0x599/0x670
[  219.007575][T15377]  netlink_sendmsg+0x5cc/0x6e0
[  219.012347][T15377]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.017621][T15377]  __sock_sendmsg+0x140/0x180
[  219.022298][T15377]  ____sys_sendmsg+0x312/0x410
[  219.027126][T15377]  __sys_sendmsg+0x1e9/0x280
[  219.031713][T15377]  __x64_sys_sendmsg+0x46/0x50
[  219.036476][T15377]  x64_sys_call+0x2689/0x2d60
[  219.041144][T15377]  do_syscall_64+0xc9/0x1c0
[  219.045758][T15377]  ? clear_bhb_loop+0x55/0xb0
[  219.050430][T15377]  ? clear_bhb_loop+0x55/0xb0
[  219.055146][T15377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.061099][T15377] RIP: 0033:0x7f163fad9e79
[  219.065497][T15377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.085129][T15377] RSP: 002b:00007f163e757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.093530][T15377] RAX: ffffffffffffffda RBX: 00007f163fc75f80 RCX: 00007f163fad9e79
[  219.101592][T15377] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004
[  219.109548][T15377] RBP: 00007f163e757090 R08: 0000000000000000 R09: 0000000000000000
[  219.117549][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.125562][T15377] R13: 0000000000000000 R14: 00007f163fc75f80 R15: 00007ffe59f982b8
[  219.133554][T15377]  </TASK>
[  219.188008][T15390] netlink: 'syz.1.3720': attribute type 3 has an invalid length.
[  219.210917][T15394] netlink: 'syz.4.3718': attribute type 21 has an invalid length.
[  219.218894][T15394] FAULT_INJECTION: forcing a failure.
[  219.218894][T15394] name failslab, interval 1, probability 0, space 0, times 0
[  219.232121][T15394] CPU: 1 UID: 0 PID: 15394 Comm: syz.4.3718 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  219.242953][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  219.252997][T15394] Call Trace:
[  219.256277][T15394]  <TASK>
[  219.259217][T15394]  dump_stack_lvl+0xf2/0x150
[  219.263804][T15394]  dump_stack+0x15/0x20
[  219.268040][T15394]  should_fail_ex+0x229/0x230
[  219.272773][T15394]  ? fib_create_info+0x6db/0x14f0
[  219.277820][T15394]  should_failslab+0x8f/0xb0
[  219.282437][T15394]  __kmalloc_noprof+0xa5/0x370
[  219.287195][T15394]  fib_create_info+0x6db/0x14f0
[  219.292038][T15394]  fib_table_insert+0x101/0xfa0
[  219.296949][T15394]  ? fib_trie_table+0xce/0xf0
[  219.301620][T15394]  inet_rtm_newroute+0xa3/0x140
[  219.306524][T15394]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  219.312028][T15394]  rtnetlink_rcv_msg+0x6aa/0x710
[  219.316959][T15394]  ? ref_tracker_free+0x3a5/0x410
[  219.322015][T15394]  ? __dev_queue_xmit+0x161/0x1fe0
[  219.327123][T15394]  netlink_rcv_skb+0x12c/0x230
[  219.331888][T15394]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  219.337341][T15394]  rtnetlink_rcv+0x1c/0x30
[  219.341785][T15394]  netlink_unicast+0x599/0x670
[  219.346553][T15394]  netlink_sendmsg+0x5cc/0x6e0
[  219.351547][T15394]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.356935][T15394]  __sock_sendmsg+0x140/0x180
[  219.361682][T15394]  ____sys_sendmsg+0x312/0x410
[  219.366523][T15394]  __sys_sendmsg+0x1e9/0x280
[  219.371156][T15394]  __x64_sys_sendmsg+0x46/0x50
[  219.375912][T15394]  x64_sys_call+0x2689/0x2d60
[  219.380581][T15394]  do_syscall_64+0xc9/0x1c0
[  219.385116][T15394]  ? clear_bhb_loop+0x55/0xb0
[  219.389788][T15394]  ? clear_bhb_loop+0x55/0xb0
[  219.394511][T15394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.400396][T15394] RIP: 0033:0x7f25d5539e79
[  219.404814][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.424625][T15394] RSP: 002b:00007f25d4190038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.433072][T15394] RAX: ffffffffffffffda RBX: 00007f25d56d6058 RCX: 00007f25d5539e79
[  219.441094][T15394] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000003
[  219.449127][T15394] RBP: 00007f25d4190090 R08: 0000000000000000 R09: 0000000000000000
[  219.457083][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.465131][T15394] R13: 0000000000000001 R14: 00007f25d56d6058 R15: 00007ffcc7a734f8
[  219.473092][T15394]  </TASK>
[  219.497992][T15403] bond0: entered promiscuous mode
[  219.503087][T15403] bond0: entered allmulticast mode
[  219.508938][T15403] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.532111][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3727'.
[  219.611041][T15428] loop3: detected capacity change from 0 to 2048
[  219.635151][T15428] EXT4-fs mount: 32 callbacks suppressed
[  219.635166][T15428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.683882][T15451] loop2: detected capacity change from 0 to 1024
[  219.694397][T12949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.705090][T15451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.707334][T15454] loop4: detected capacity change from 0 to 512
[  219.758365][T15454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.771303][T15454] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.815580][T14222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.850002][T15471] FAULT_INJECTION: forcing a failure.
[  219.850002][T15471] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  219.852302][T15474] loop3: detected capacity change from 0 to 128
[  219.863267][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz.2.3750 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  219.875116][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3752'.
[  219.880360][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  219.880375][T15471] Call Trace:
[  219.880382][T15471]  <TASK>
[  219.905465][T15471]  dump_stack_lvl+0xf2/0x150
[  219.910114][T15471]  dump_stack+0x15/0x20
[  219.914347][T15471]  should_fail_ex+0x229/0x230
[  219.919078][T15471]  should_fail_alloc_page+0xfd/0x110
[  219.924512][T15471]  __alloc_pages_noprof+0x109/0x360
[  219.929789][T15471]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  219.935243][T15471]  vma_alloc_folio_noprof+0x1a0/0x2f0
[  219.940689][T15471]  handle_mm_fault+0xd6d/0x2940
[  219.945588][T15471]  ? follow_page_pte+0x35f/0xc40
[  219.950598][T15471]  __get_user_pages+0x499/0x10d0
[  219.955531][T15471]  __gup_longterm_locked+0xa7b/0x10b0
[  219.960924][T15471]  ? __rcu_read_unlock+0x4e/0x70
[  219.965942][T15471]  ? __rcu_read_lock+0x36/0x50
[  219.970751][T15471]  gup_fast_fallback+0x1cbc/0x2480
[  219.975862][T15471]  pin_user_pages_fast+0x5f/0x90
[  219.980797][T15471]  rds_info_getsockopt+0x162/0x370
[  219.985976][T15471]  ? selinux_socket_getsockopt+0x182/0x1b0
[  219.991806][T15471]  rds_getsockopt+0x303/0x430
[  219.996537][T15471]  do_sock_getsockopt+0x121/0x1a0
[  220.001553][T15471]  ? __pfx_rds_getsockopt+0x10/0x10
[  220.006750][T15471]  __sys_getsockopt+0x19a/0x210
[  220.011648][T15471]  __x64_sys_getsockopt+0x66/0x80
[  220.016664][T15471]  x64_sys_call+0x11cd/0x2d60
[  220.021398][T15471]  do_syscall_64+0xc9/0x1c0
[  220.025984][T15471]  ? clear_bhb_loop+0x55/0xb0
[  220.030739][T15471]  ? clear_bhb_loop+0x55/0xb0
[  220.035407][T15471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.041310][T15471] RIP: 0033:0x7f2fa2769e79
[  220.045712][T15471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.065391][T15471] RSP: 002b:00007f2fa13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  220.073806][T15471] RAX: ffffffffffffffda RBX: 00007f2fa2905f80 RCX: 00007f2fa2769e79
[  220.081762][T15471] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003
[  220.089784][T15471] RBP: 00007f2fa13e7090 R08: 0000000020000100 R09: 0000000000000000
[  220.097809][T15471] R10: 0000000020019580 R11: 0000000000000246 R12: 0000000000000001
[  220.105907][T15471] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  220.113866][T15471]  </TASK>
[  220.121654][T15474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.134154][T15474] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.135962][T14711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.196331][T12949] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.208590][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  220.208602][   T29] audit: type=1400 audit(1724311829.636:4966): avc:  denied  { lock } for  pid=15498 comm="syz.4.3761" path="socket:[59249]" dev="sockfs" ino=59249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  220.246096][T15501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3760'.
[  220.251104][T15503] loop2: detected capacity change from 0 to 1024
[  220.261740][T15503] EXT4-fs: Ignoring removed nomblk_io_submit option
[  220.285593][T15517] bridge0: entered allmulticast mode
[  220.290923][   T29] audit: type=1400 audit(1724311829.710:4967): avc:  denied  { create } for  pid=15513 comm="syz.3.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  220.310974][   T29] audit: type=1400 audit(1724311829.710:4968): avc:  denied  { bind } for  pid=15513 comm="syz.3.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  220.312033][T15517] pim6reg: entered allmulticast mode
[  220.337975][T15503] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.391176][   T29] audit: type=1400 audit(1724311829.825:4969): avc:  denied  { write } for  pid=15523 comm="syz.4.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  220.399271][T14222] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  220.432307][T15529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3768'.
[  220.441378][T15529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3768'.
[  220.470291][T15536] FAULT_INJECTION: forcing a failure.
[  220.470291][T15536] name failslab, interval 1, probability 0, space 0, times 0
[  220.482909][T15536] CPU: 1 UID: 0 PID: 15536 Comm: syz.2.3772 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  220.493663][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  220.503775][T15536] Call Trace:
[  220.507042][T15536]  <TASK>
[  220.509969][T15536]  dump_stack_lvl+0xf2/0x150
[  220.514655][T15536]  dump_stack+0x15/0x20
[  220.518884][T15536]  should_fail_ex+0x229/0x230
[  220.523566][T15536]  should_failslab+0x8f/0xb0
[  220.528151][T15536]  kmem_cache_alloc_bulk_noprof+0x58/0x440
[  220.534028][T15536]  bpf_test_run_xdp_live+0xcaf/0x1000
[  220.539416][T15536]  ? avc_has_perm+0xd4/0x160
[  220.543996][T15536]  ? bpf_test_run_xdp_live+0x29d/0x1000
[  220.549601][T15536]  ? bpf_test_init+0xc7/0x170
[  220.554264][T15536]  ? bpf_test_init+0x140/0x170
[  220.559071][T15536]  bpf_prog_test_run_xdp+0x51d/0x890
[  220.564468][T15536]  ? __fget_files+0x1da/0x210
[  220.569134][T15536]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  220.574999][T15536]  bpf_prog_test_run+0x26d/0x3e0
[  220.579935][T15536]  __sys_bpf+0x400/0x7a0
[  220.584435][T15536]  __x64_sys_bpf+0x43/0x50
[  220.588848][T15536]  x64_sys_call+0x2625/0x2d60
[  220.593580][T15536]  do_syscall_64+0xc9/0x1c0
[  220.598129][T15536]  ? clear_bhb_loop+0x55/0xb0
[  220.602813][T15536]  ? clear_bhb_loop+0x55/0xb0
[  220.607482][T15536]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.613446][T15536] RIP: 0033:0x7f2fa2769e79
[  220.617866][T15536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.637547][T15536] RSP: 002b:00007f2fa13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  220.646026][T15536] RAX: ffffffffffffffda RBX: 00007f2fa2905f80 RCX: 00007f2fa2769e79
[  220.654034][T15536] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a
[  220.662068][T15536] RBP: 00007f2fa13e7090 R08: 0000000000000000 R09: 0000000000000000
[  220.670089][T15536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  220.678104][T15536] R13: 0000000000000000 R14: 00007f2fa2905f80 R15: 00007ffdfae40de8
[  220.686066][T15536]  </TASK>
[  220.692542][   T29] audit: type=1326 audit(1724311830.140:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5539e79 code=0x7ffc0000
[  220.716141][   T29] audit: type=1326 audit(1724311830.140:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5539e79 code=0x7ffc0000
[  220.741150][   T29] audit: type=1326 audit(1724311830.140:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f25d5539e79 code=0x7ffc0000
[  220.764806][   T29] audit: type=1326 audit(1724311830.140:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5539e79 code=0x7ffc0000
[  220.788675][   T29] audit: type=1326 audit(1724311830.140:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15533 comm="syz.4.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25d5539e79 code=0x7ffc0000
[  220.844935][T15541] hsr0: entered promiscuous mode
[  220.850000][T15541] macvlan2: entered allmulticast mode
[  220.855440][T15541] hsr0: entered allmulticast mode
[  220.856905][T15545] loop2: detected capacity change from 0 to 2048
[  220.860450][T15541] hsr_slave_0: entered allmulticast mode
[  220.872447][T15541] hsr_slave_1: entered allmulticast mode
[  220.879464][T15541] hsr0: left allmulticast mode
[  220.884417][T15541] hsr_slave_0: left allmulticast mode
[  220.889988][T15541] hsr_slave_1: left allmulticast mode
[  220.892567][T15545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.964386][T15551] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  220.979269][T15551] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  220.991610][T15551] EXT4-fs (loop2): This should not happen!! Data will be lost
[  220.991610][T15551] 
[  221.001241][T15551] EXT4-fs (loop2): Total free blocks count 0
[  221.007258][T15551] EXT4-fs (loop2): Free/Dirty block details
[  221.012444][   T29] audit: type=1400 audit(1724311830.476:4975): avc:  denied  { load_policy } for  pid=15544 comm="syz.2.3776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  221.013148][T15551] EXT4-fs (loop2): free_blocks=2415919104
[  221.013162][T15551] EXT4-fs (loop2): dirty_blocks=6912
[  221.013174][T15551] EXT4-fs (loop2): Block reservation details
[  221.033659][T15552] SELinux:  truncated policydb string identifier
[  221.039201][T15551] EXT4-fs (loop2): i_reserved_data_blocks=432
[  221.040626][T15551] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  221.044525][T15552] SELinux: failed to load policy
[  221.099493][T15551] ==================================================================
[  221.107575][T15551] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range
[  221.116408][T15551] 
[  221.118710][T15551] read-write to 0xffff8881005a5088 of 8 bytes by task 15545 on cpu 1:
[  221.126839][T15551]  __filemap_add_folio+0x439/0x710
[  221.131933][T15551]  filemap_add_folio+0x9c/0x1b0
[  221.136763][T15551]  page_cache_ra_unbounded+0x148/0x2e0
[  221.142203][T15551]  page_cache_async_ra+0x40c/0x420
[  221.147301][T15551]  filemap_get_pages+0x398/0xfb0
[  221.152234][T15551]  filemap_splice_read+0x360/0x920
[  221.157341][T15551]  ext4_file_splice_read+0x95/0xc0
[  221.162432][T15551]  splice_direct_to_actor+0x26c/0x670
[  221.167787][T15551]  do_splice_direct+0xd7/0x150
[  221.172547][T15551]  do_sendfile+0x3ab/0x950
[  221.176965][T15551]  __x64_sys_sendfile64+0x110/0x150
[  221.182160][T15551]  x64_sys_call+0xed5/0x2d60
[  221.186736][T15551]  do_syscall_64+0xc9/0x1c0
[  221.191243][T15551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.197124][T15551] 
[  221.199428][T15551] read to 0xffff8881005a5088 of 8 bytes by task 15551 on cpu 0:
[  221.207041][T15551]  filemap_write_and_wait_range+0x58/0x1f0
[  221.212829][T15551]  kiocb_invalidate_pages+0x87/0x1e0
[  221.218095][T15551]  __iomap_dio_rw+0x585/0x1090
[  221.222841][T15551]  iomap_dio_rw+0x40/0x90
[  221.227150][T15551]  ext4_file_write_iter+0xaa4/0xe30
[  221.232329][T15551]  iter_file_splice_write+0x5e6/0x970
[  221.237687][T15551]  direct_splice_actor+0x16c/0x2c0
[  221.242790][T15551]  splice_direct_to_actor+0x305/0x670
[  221.248161][T15551]  do_splice_direct+0xd7/0x150
[  221.252915][T15551]  do_sendfile+0x3ab/0x950
[  221.257322][T15551]  __x64_sys_sendfile64+0x110/0x150
[  221.262508][T15551]  x64_sys_call+0xed5/0x2d60
[  221.267089][T15551]  do_syscall_64+0xc9/0x1c0
[  221.271594][T15551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.277480][T15551] 
[  221.279785][T15551] value changed: 0x0000000000001204 -> 0x000000000000120f
[  221.286875][T15551] 
[  221.289181][T15551] Reported by Kernel Concurrency Sanitizer on:
[  221.295312][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.2.3776 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0
[  221.306060][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  221.316099][T15551] ==================================================================
[  221.672976][T15551] syz.2.3776 (15551) used greatest stack depth: 9208 bytes left