last executing test programs:

2.770571683s ago: executing program 4 (id=9171):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000100))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3)
r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000000)={0x2c, 0xa7abbf744155f602, r2, 0x2a, r6}, 0x10)

2.658954063s ago: executing program 4 (id=9174):
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000001000"/28], 0x48)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x28000400)

2.626909226s ago: executing program 4 (id=9176):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
getdents(r4, &(0x7f0000000000)=""/149, 0x95)
getdents64(r4, 0x0, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='bridge0\x00')

2.614915287s ago: executing program 1 (id=9177):
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]})
eventfd2(0x400, 0x0) (fail_nth: 6)

2.419374564s ago: executing program 4 (id=9180):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x1800000000000060, 0x0, 0x2e, 0x0, 0x0, 0x400c00d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwrite64(r1, &(0x7f0000000340)="0503", 0x2, 0x7ff)

2.206803631s ago: executing program 1 (id=9181):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000001e0000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000e8aa0000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0xff)
semtimedop(0x0, &(0x7f00000003c0)=[{}, {0x0, 0xff78}, {0x3, 0x1, 0x1000}], 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
dup2(0xffffffffffffffff, r1)

1.654617438s ago: executing program 0 (id=9184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000040)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000001980)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000300)=0x2)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000004cc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x33, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r8, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r11}, 0x10)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r12 = syz_open_pts(r9, 0x0)
r13 = dup(r12)
fsetxattr$security_selinux(r13, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)

1.573351745s ago: executing program 4 (id=9185):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000001e0000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000e8aa0000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0xff)
semtimedop(0x0, &(0x7f00000003c0)=[{}, {0x0, 0xff78}, {0x3, 0x1, 0x1000}], 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
dup2(0xffffffffffffffff, r1)

1.551779418s ago: executing program 0 (id=9187):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7000}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00482f00fc000000000000000000000000000000ff02000000000000000000000000000124208100000000000000000000000800ff0086dd08"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x30b}, 0x14}, 0x1, 0x1000000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0xb7, 0x4, 0x37, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x2, @perf_config_ext={0x6, 0x4}, 0x4000, 0xe1, 0x80000000, 0x7, 0x4, 0xb96, 0x10, 0x0, 0x4, 0x0, 0x80000000}, 0xffffffffffffffff, 0x5, r4, 0x1)
write$UHID_CREATE2(r5, &(0x7f0000000100)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r6, 0x2284, &(0x7f0000000000))

1.300759579s ago: executing program 1 (id=9190):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x1000, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x1d, 0x1000, 0xffffffffffffffff, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom1\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
getdents(r4, &(0x7f0000000000)=""/149, 0x95)
getdents64(r4, 0x0, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'bridge0\x00'})
ioctl$sock_SIOCBRDELBR(r7, 0x89a1, &(0x7f0000000080)='bridge0\x00')

1.230856645s ago: executing program 2 (id=9191):
socket$packet(0x11, 0x3, 0x300)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c50000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17d4}}, 0x0)

1.16732501s ago: executing program 0 (id=9192):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000480), 0x6, 0x522, &(0x7f0000001a00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
inotify_init1(0x0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+}[@\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket(0x15, 0x5, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
recvmsg$can_raw(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)

1.155676141s ago: executing program 2 (id=9193):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000480), 0x6, 0x522, &(0x7f0000001a00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000089da9ef9da5c426ebb94db55080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
lsetxattr$security_capability(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), 0x0, 0x0, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+}[@\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket(0x15, 0x5, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4002, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001439)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40982, 0x0)
recvmsg$can_raw(r2, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2)

1.119930274s ago: executing program 3 (id=9194):
mkdir(&(0x7f0000000000)='./file0\x00', 0x13d)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f6070000007ad400008000000000000000010400", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000200)=0x8, 0x4)
bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xa, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0002000900", @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',k'])
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @mss={0x2, 0x8}, @mss={0x2, 0x4}, @timestamp], 0x4)
chdir(&(0x7f0000000200)='./file0\x00')

1.070783698s ago: executing program 1 (id=9195):
unshare(0x10040580)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfc, 0x55d, &(0x7f0000001080)="$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")
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x20040080)
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001340)=""/4070, 0xfe6}, {&(0x7f0000000040)=""/86, 0x56}], 0x2}}], 0x1, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x0, '\x00', 0x0, r1, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x3a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff}, @call={0x85, 0x0, 0x0, 0x55}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xd9, &(0x7f00000006c0)=""/217, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0xf}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000540)=[{0x3, 0x4, 0xb, 0x5}, {0x0, 0x5, 0x0, 0x1}, {0x1, 0x1, 0x5, 0xb}, {0x0, 0x2, 0x10, 0x2}, {0x5, 0x1, 0x3, 0x1}, {0x5, 0x2, 0x7, 0x3}, {0x1, 0x1, 0x6, 0x1}], 0x10, 0xfffffd0a, @void, @value}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

896.912563ms ago: executing program 1 (id=9196):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x1800000000000060, 0x0, 0x2e, 0x0, 0x0, 0x400c00d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwrite64(r2, &(0x7f0000000340)="0503", 0x2, 0x7ff)

803.390331ms ago: executing program 3 (id=9197):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000100000004000480080002"], 0x130}}, 0x0)

800.935051ms ago: executing program 3 (id=9198):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000001000"/28], 0x48)
close(0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
socketpair(0x22, 0x2, 0x26, &(0x7f0000000180))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0)
fallocate(r3, 0x0, 0x400000000000000, 0x7)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000340)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703310000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
dup(0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)
unshare(0x28000400)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

723.077928ms ago: executing program 3 (id=9199):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88)
r1 = dup2(r0, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x37)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x8, 0x1, 0x9})
ioctl$BLKTRACESETUP(r1, 0x1276, 0x0)

711.984929ms ago: executing program 4 (id=9200):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000001e0000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000e8aa0000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0xff)
semtimedop(0x0, &(0x7f00000003c0)=[{}, {0x0, 0xff78}, {0x3, 0x1, 0x1000}], 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000003c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
dup2(0xffffffffffffffff, r1)

660.358263ms ago: executing program 3 (id=9201):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x7, 0x95, 0x3, 0x0, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x4, 0x210, &(0x7f00000008c0)=ANY=[@ANYBLOB="05"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r5, &(0x7f0000000080), 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000080)=0xfffffff8, 0x4)
sendto$inet6(r6, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x30, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@hopopts={0x11, 0x1, '\x00', [@calipso={0x7, 0x8}]}, @hopopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_INO32_GEN={0x8, 0x1, {0x0, 0x5}}, &(0x7f0000000280), 0x0)

319.447302ms ago: executing program 0 (id=9202):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x2200}]}}}}}}, 0x46)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000004028890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

303.337344ms ago: executing program 2 (id=9203):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
fcntl$setsig(r0, 0xa, 0x2c) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x612, &(0x7f0000000740)="$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")

222.30213ms ago: executing program 2 (id=9204):
socket$packet(0x11, 0x3, 0x300)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c50000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17d4}}, 0x0)

221.5954ms ago: executing program 0 (id=9205):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x14b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_io_uring_setup(0x1456, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x5, 0xfffffffd}, &(0x7f0000000200), &(0x7f0000000080))
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x5d)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000403ecc9c1400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000001000000000000001000000003910c9b620a7f7587a9fb39c72792e996fe9d19632423251d9d55c43986faaa0e733b7e41b57954c5a827d736a2f663152354e3135cb51d2ccc7286346fc3a37b32af68a262a477c1e9b27369ba75f81317bdd45488595daa7e6b21bae9bbeb29201003e74c364a75dc32c3564114c9562006e0366389074dbee67602ecfc41e1e62847d1a5c5a3d98751a4f73b4299378697a641c891ec27cf72963dde61440d136f63568f8781cba0a644085a502b8e89e7c1765ecda8920bfefda2cfaa65e0bf897", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001900850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000020c05477c9a86e2400000040000000000000f78c6da1964a15b6c06feb1f3cb993901afcf083ea8619a6946a1ef24fc23519540a42267def42300d48abc5b699512d41f191b66679bd6ce77d03c49bea2d54a18a4697535d6f160dd114cff206b521ca9534a6e48a0a6ef38ef0b8392ee603ba1c59b9c8e3e08bd9c42c2e26e2e6cf8704ac69552c9409cdc84d4db255563808dafd77120da300000000000000002a73a1293fc5b78dd1aea1e7c7396ceea4cb7f45849955257416eed35389840fb8a416fff439ec9d1c25f4e904c9205e780acc2bce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18)
socketpair(0x18, 0x0, 0x2, &(0x7f0000004080))
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000540)={'filter\x00', 0x4}, 0x68)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x2}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x20)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r7)
tkill(r7, 0x12)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r9, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)

220.9058ms ago: executing program 2 (id=9206):
mlockall(0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', <r2=>0x0})
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000180), 0xb)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x230002a3)
copy_file_range(r4, &(0x7f0000000080), r3, 0x0, 0xfffffffffffffff8, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010000100000053000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00)\x00\x00\x00\x00\x00'], 0x28}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r6, 0x89e1, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRESHEX=r7, @ANYRES8=r5, @ANYRESOCT=r2, @ANYRES64=r7, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT, @ANYRES32=r7, @ANYRESOCT], 0x0, 0x4000004, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xd, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
creat(0x0, 0x0)
mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r12, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})

8.973248ms ago: executing program 0 (id=9207):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='io_uring_create\x00', r5}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000d01000010000000000000000000000000a28000000000a01010000e4ff5d1a7152dc42ffd5030000000900010073797a300000000008000240000000032c000000030a01030000e6f600000000020000000900010073797a30fffffffb", @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRES16, @ANYRESDEC=r6, @ANYRES64=0x0, @ANYRES32=r4, @ANYRESDEC, @ANYRESDEC, @ANYRES32=r5], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164102400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a321791846c5e2aff92b87496092f9f96db2a076ca9cee679b11823a3fe03bca3b4ba6670132ec3ae911f79f2d272579bf4af1e38"], 0xdc}}, 0x2404c811)

8.728169ms ago: executing program 2 (id=9208):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
sendfile(r1, r2, 0x0, 0x8000fffffffe)

384.949µs ago: executing program 3 (id=9209):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000010000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0xffffffff, @empty, 0x1}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110710000000000a6000000000000009500000000000200"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='qdisc_enqueue\x00', r1}, 0x18)
clock_nanosleep(0x7, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file0\x00', 0x20050, &(0x7f0000000940)={[{@nobh}, {@data_ordered}, {@bh}, {@auto_da_alloc}, {@mblk_io_submit}, {@nojournal_checksum}]}, 0xee, 0x469, &(0x7f00000004c0)="$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")
listen(r0, 0x400000001ffffffd)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6(0xa, 0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000001bc0))
r3 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x728, 0xffffffffff, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getdents64(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000805}, 0x4000000)

0s ago: executing program 1 (id=9210):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000100000004000480080002"], 0x130}}, 0x0)

kernel console output (not intermixed with test programs):

=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29333 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  470.291756][   T29] audit: type=1326 audit(2000000065.640:39682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29333 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  470.314889][   T29] audit: type=1326 audit(2000000065.640:39683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29333 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  470.339310][   T29] audit: type=1326 audit(2000000065.680:39684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29333 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  470.375213][   T29] audit: type=1326 audit(2000000065.710:39685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29333 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  470.504407][T29341] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  470.544336][T29342] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  470.573964][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.626132][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.698203][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.768207][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.812167][T29347] chnl_net:caif_netlink_parms(): no params data found
[  470.973307][ T3344] SELinux: failure in sel_netif_sid_slow(), invalid network interface (103)
[  470.982756][ T3344] SELinux: failure in sel_netif_sid_slow(), invalid network interface (87)
[  471.009626][   T36] team0: Port device bridge1 removed
[  471.094641][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.106761][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.117321][   T36] bond0 (unregistering): Released all slaves
[  471.132422][T29347] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.139594][T29347] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.147046][T29347] bridge_slave_0: entered allmulticast mode
[  471.155880][T29347] bridge_slave_0: entered promiscuous mode
[  471.164436][T29347] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.171604][T29347] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.179022][T29347] bridge_slave_1: entered allmulticast mode
[  471.196509][T29347] bridge_slave_1: entered promiscuous mode
[  471.206108][   T36] veth1_vlan: left promiscuous mode
[  471.211480][   T36] veth0_vlan: left promiscuous mode
[  471.272198][T29394] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  471.281423][   T36] team0 (unregistering): Port device hsr_slave_0 removed
[  471.300215][   T36] team0 (unregistering): Port device team_slave_1 removed
[  471.318313][   T36] team0 (unregistering): Port device team_slave_0 removed
[  471.386610][T29347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.411813][T29347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.445187][T29405] syz.4.8621[29405] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.445264][T29405] syz.4.8621[29405] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.458344][T29347] team0: Port device team_slave_0 added
[  471.459399][T29405] syz.4.8621[29405] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.482242][T29405] __nla_validate_parse: 4 callbacks suppressed
[  471.482260][T29405] netlink: 93 bytes leftover after parsing attributes in process `syz.4.8621'.
[  471.482799][T29347] team0: Port device team_slave_1 added
[  471.494161][T29405] netlink: 93 bytes leftover after parsing attributes in process `syz.4.8621'.
[  471.542596][T29347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.549594][T29347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.558310][T29409] netlink: 93 bytes leftover after parsing attributes in process `syz.4.8622'.
[  471.575973][T29347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.598275][T29347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.605295][T29347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.620857][T29409] netlink: 93 bytes leftover after parsing attributes in process `syz.4.8622'.
[  471.631300][T29347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.711272][T29347] hsr_slave_0: entered promiscuous mode
[  471.722317][T29347] hsr_slave_1: entered promiscuous mode
[  471.740584][T29347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.756340][T29347] Cannot create hsr debugfs directory
[  471.786821][T29413] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  471.887518][T29430] tmpfs: Bad value for 'nr_blocks'
[  471.936951][T29433] syz.2.8632[29433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.937016][T29433] syz.2.8632[29433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.948781][T29433] syz.2.8632[29433] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  471.970847][T29433] netlink: 93 bytes leftover after parsing attributes in process `syz.2.8632'.
[  471.991858][T29433] netlink: 93 bytes leftover after parsing attributes in process `syz.2.8632'.
[  472.015981][T29439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8635'.
[  472.198157][T29455] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  472.210060][T29347] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  472.219854][T29347] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  472.229436][T29347] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  472.239110][T29347] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  472.261444][T29460] tmpfs: Bad value for 'nr_blocks'
[  472.296656][T29347] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.316660][T29347] 8021q: adding VLAN 0 to HW filter on device team0
[  472.327478][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.334593][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.352283][  T309] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.359462][  T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.432420][T29470] syz.3.8647[29470] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  472.434712][T29470] netlink: 93 bytes leftover after parsing attributes in process `syz.3.8647'.
[  472.455453][T29347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.485649][T29470] netlink: 93 bytes leftover after parsing attributes in process `syz.3.8647'.
[  472.571143][T29347] veth0_vlan: entered promiscuous mode
[  472.581440][T29347] veth1_vlan: entered promiscuous mode
[  472.602607][T29347] veth0_macvtap: entered promiscuous mode
[  472.614241][T29347] veth1_macvtap: entered promiscuous mode
[  472.629391][T29347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.643866][T29347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.654884][T29347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.663711][T29347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.672461][T29347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.681169][T29347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.763128][T29487] xt_hashlimit: max too large, truncated to 1048576
[  472.787768][T29487] loop1: detected capacity change from 0 to 2048
[  472.803386][T29487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.816821][T29487] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.833226][T29487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8601: bg 0: block 288: padding at end of block bitmap is not set
[  472.890745][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.939420][T29499] loop1: detected capacity change from 0 to 128
[  472.957136][T29496] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  472.963456][T29499] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  472.967286][T29503] tmpfs: Bad value for 'nr_blocks'
[  472.992434][T29499] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  473.079720][T29499] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.087063][T29499] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.112505][T29509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8657'.
[  473.130988][T29499] bridge_slave_1: left allmulticast mode
[  473.136897][T29499] bridge_slave_1: left promiscuous mode
[  473.142695][T29499] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.169027][T29499] bridge_slave_0: left allmulticast mode
[  473.174829][T29499] bridge_slave_0: left promiscuous mode
[  473.180592][T29499] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.196385][T29515] xt_hashlimit: max too large, truncated to 1048576
[  473.270601][T29519] FAULT_INJECTION: forcing a failure.
[  473.270601][T29519] name failslab, interval 1, probability 0, space 0, times 0
[  473.283408][T29519] CPU: 1 UID: 0 PID: 29519 Comm: syz.2.8661 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  473.294260][T29519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  473.304339][T29519] Call Trace:
[  473.307637][T29519]  <TASK>
[  473.310687][T29519]  dump_stack_lvl+0xf2/0x150
[  473.315309][T29519]  dump_stack+0x15/0x20
[  473.319557][T29519]  should_fail_ex+0x223/0x230
[  473.324346][T29519]  ? sidtab_sid2str_get+0xb8/0x140
[  473.329528][T29519]  should_failslab+0x8f/0xb0
[  473.334147][T29519]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[  473.340548][T29519]  ? vsnprintf+0xdd8/0xe30
[  473.345030][T29519]  kmemdup_noprof+0x2a/0x60
[  473.349563][T29519]  sidtab_sid2str_get+0xb8/0x140
[  473.354531][T29519]  security_sid_to_context_core+0x1eb/0x2f0
[  473.360478][T29519]  security_sid_to_context+0x27/0x30
[  473.365860][T29519]  selinux_secid_to_secctx+0x22/0x30
[  473.371297][T29519]  security_secid_to_secctx+0x48/0x90
[  473.376836][T29519]  audit_log_task_context+0x8c/0x1b0
[  473.382170][T29519]  audit_log_task+0xfb/0x180
[  473.386798][T29519]  audit_seccomp+0x68/0x130
[  473.391433][T29519]  __seccomp_filter+0x6fa/0x1180
[  473.396479][T29519]  ? proc_fail_nth_write+0x12a/0x150
[  473.401809][T29519]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  473.407564][T29519]  ? vfs_write+0x580/0x910
[  473.412089][T29519]  ? __fget_files+0x1d4/0x210
[  473.416856][T29519]  __secure_computing+0x9f/0x1c0
[  473.421889][T29519]  syscall_trace_enter+0xd1/0x1f0
[  473.427031][T29519]  do_syscall_64+0xaa/0x1c0
[  473.431686][T29519]  ? clear_bhb_loop+0x55/0xb0
[  473.436533][T29519]  ? clear_bhb_loop+0x55/0xb0
[  473.441379][T29519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.447387][T29519] RIP: 0033:0x7f272432dff9
[  473.451827][T29519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  473.471465][T29519] RSP: 002b:00007f2722fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000051
[  473.480061][T29519] RAX: ffffffffffffffda RBX: 00007f27244e5f80 RCX: 00007f272432dff9
[  473.488056][T29519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  473.496056][T29519] RBP: 00007f2722fa7090 R08: 0000000000000000 R09: 0000000000000000
[  473.504186][T29519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.512190][T29519] R13: 0000000000000000 R14: 00007f27244e5f80 R15: 00007ffdfd2f3848
[  473.520194][T29519]  </TASK>
[  473.567121][T29528] xt_hashlimit: max too large, truncated to 1048576
[  473.770392][T29538] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29538 comm=syz.3.8668
[  473.846466][T29542] tmpfs: Bad value for 'nr_blocks'
[  474.372112][T29552] delete_channel: no stack
[  474.385821][T29552] delete_channel: no stack
[  474.411140][T29552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29552 comm=syz.0.8674
[  474.434563][T29554] delete_channel: no stack
[  474.447706][T29554] delete_channel: no stack
[  474.454171][T29552] 0·: renamed from hsr_slave_1 (while UP)
[  474.474414][T29552] 0·: entered allmulticast mode
[  474.479816][T29552] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  474.498286][T29554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29554 comm=syz.2.8675
[  474.518956][T29552] netlink: 'syz.0.8674': attribute type 10 has an invalid length.
[  474.538909][T29552] hsr0: entered promiscuous mode
[  474.543964][T29552] hsr0: entered allmulticast mode
[  474.549105][T29552] hsr_slave_0: entered allmulticast mode
[  474.567535][T29552] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  474.583259][T29554] 1·: renamed from 
c0· (while UP)
[  474.598818][T29554] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  474.631569][T29555] netlink: 'syz.2.8675': attribute type 10 has an invalid length.
[  474.651780][   T29] kauditd_printk_skb: 317 callbacks suppressed
[  474.651802][   T29] audit: type=1326 audit(2000000069.990:40002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.656687][T29555] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  474.658099][   T29] audit: type=1326 audit(2000000070.000:40003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.726110][   T29] audit: type=1326 audit(2000000070.000:40004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.749884][   T29] audit: type=1326 audit(2000000070.000:40005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.773464][   T29] audit: type=1326 audit(2000000070.000:40006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.797709][   T29] audit: type=1326 audit(2000000070.000:40007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f272432c990 code=0x7ffc0000
[  474.821703][   T29] audit: type=1326 audit(2000000070.000:40008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.845379][   T29] audit: type=1326 audit(2000000070.000:40009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.869347][   T29] audit: type=1326 audit(2000000070.000:40010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.893098][   T29] audit: type=1326 audit(2000000070.000:40011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29553 comm="syz.2.8675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f272432dff9 code=0x7ffc0000
[  474.919790][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  474.970956][T29566] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  475.019968][T29576] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  475.053951][T29582] loop1: detected capacity change from 0 to 1024
[  475.075070][T29582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.183703][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.249133][T29599] FAULT_INJECTION: forcing a failure.
[  475.249133][T29599] name failslab, interval 1, probability 0, space 0, times 0
[  475.261870][T29599] CPU: 0 UID: 0 PID: 29599 Comm: syz.1.8691 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  475.272682][T29599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  475.282761][T29599] Call Trace:
[  475.286138][T29599]  <TASK>
[  475.289093][T29599]  dump_stack_lvl+0xf2/0x150
[  475.293804][T29599]  dump_stack+0x15/0x20
[  475.298021][T29599]  should_fail_ex+0x223/0x230
[  475.302742][T29599]  ? asymmetric_lookup_restriction+0x7c/0x370
[  475.308849][T29599]  should_failslab+0x8f/0xb0
[  475.313499][T29599]  __kmalloc_node_track_caller_noprof+0xa6/0x380
[  475.319971][T29599]  kstrndup+0x3f/0x90
[  475.323989][T29599]  asymmetric_lookup_restriction+0x7c/0x370
[  475.329944][T29599]  ? __pfx_asymmetric_lookup_restriction+0x10/0x10
[  475.336538][T29599]  keyring_restrict+0xf7/0x280
[  475.341375][T29599]  keyctl_restrict_keyring+0x103/0x1b0
[  475.346870][T29599]  ? proc_fail_nth_write+0x12a/0x150
[  475.352201][T29599]  __se_sys_keyctl+0x20f/0xbb0
[  475.357058][T29599]  ? __fget_files+0x1d4/0x210
[  475.361852][T29599]  ? fput+0x14e/0x190
[  475.365936][T29599]  ? ksys_write+0x17a/0x1b0
[  475.370483][T29599]  __x64_sys_keyctl+0x67/0x80
[  475.375185][T29599]  x64_sys_call+0x971/0x2d60
[  475.379849][T29599]  do_syscall_64+0xc9/0x1c0
[  475.384364][T29599]  ? clear_bhb_loop+0x55/0xb0
[  475.389105][T29599]  ? clear_bhb_loop+0x55/0xb0
[  475.393930][T29599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.399935][T29599] RIP: 0033:0x7f26c53fdff9
[  475.404573][T29599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  475.424329][T29599] RSP: 002b:00007f26c4077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  475.432771][T29599] RAX: ffffffffffffffda RBX: 00007f26c55b5f80 RCX: 00007f26c53fdff9
[  475.440781][T29599] RDX: 00000000200000c0 RSI: 000000002236e97d RDI: 000000000000001d
[  475.448775][T29599] RBP: 00007f26c4077090 R08: 0000000000000000 R09: 0000000000000000
[  475.456851][T29599] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001
[  475.464887][T29599] R13: 0000000000000000 R14: 00007f26c55b5f80 R15: 00007ffce8c29da8
[  475.473414][T29599]  </TASK>
[  475.845235][  T309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.932757][  T309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.978400][T29621] tmpfs: Bad value for 'nr_blocks'
[  476.011354][T29618] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  476.028993][  T309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.107090][  T309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.114820][T29634] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  476.207115][T29608] chnl_net:caif_netlink_parms(): no params data found
[  476.544580][  T309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.559853][  T309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.574891][  T309] bond0 (unregistering): Released all slaves
[  476.635421][  T309] hsr_slave_0: left promiscuous mode
[  476.646562][  T309] 1·: left promiscuous mode
[  476.659812][  T309] veth1_vlan: left promiscuous mode
[  476.665115][  T309] veth0_vlan: left promiscuous mode
[  476.779008][  T309] team0 (unregistering): Port device team_slave_1 removed
[  476.790714][  T309] team0 (unregistering): Port device team_slave_0 removed
[  476.832816][T29608] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.839934][T29608] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.848629][T29608] bridge_slave_0: entered allmulticast mode
[  476.855469][T29608] bridge_slave_0: entered promiscuous mode
[  476.865498][T29608] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.872609][T29608] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.890566][T29608] bridge_slave_1: entered allmulticast mode
[  476.903804][T29608] bridge_slave_1: entered promiscuous mode
[  476.939163][T29608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.966445][T29608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.014583][T29608] team0: Port device team_slave_0 added
[  477.028000][T29608] team0: Port device team_slave_1 added
[  477.070229][T29608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  477.077308][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.103314][T29608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.115274][T29608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.122372][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  477.148448][T29608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  477.197221][T29668] tmpfs: Bad value for 'nr_blocks'
[  477.210005][T29608] hsr_slave_0: entered promiscuous mode
[  477.222466][T29608] hsr_slave_1: entered promiscuous mode
[  477.256216][T29670] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  477.458671][T29692] loop1: detected capacity change from 0 to 512
[  477.490083][T29692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.503593][T29608] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  477.521799][T29692] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.524343][T29608] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  477.544167][T29692] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.8721: corrupted xattr block 33: overlapping e_value 
[  477.544308][T29608] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  477.569350][T29608] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  477.576764][T29692] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  477.591801][T29692] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.8721: corrupted xattr block 33: overlapping e_value 
[  477.628667][T29692] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  477.632173][T29608] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.650775][T29692] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.8721: corrupted xattr block 33: overlapping e_value 
[  477.666136][T29692] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=15
[  477.691526][T29608] 8021q: adding VLAN 0 to HW filter on device team0
[  477.719221][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.726360][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.736089][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.743285][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.767100][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.814758][T29711] tmpfs: Bad value for 'nr_blocks'
[  477.845658][T29713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.853266][T29713] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.862069][T29713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.869501][T29713] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.934626][T29608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.024883][T29725] delete_channel: no stack
[  478.044744][T29608] veth0_vlan: entered promiscuous mode
[  478.050337][T29725] delete_channel: no stack
[  478.058608][T29608] veth1_vlan: entered promiscuous mode
[  478.091937][T29608] veth0_macvtap: entered promiscuous mode
[  478.101868][T29608] veth1_macvtap: entered promiscuous mode
[  478.126442][T29608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.146134][T29608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.157029][T29608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.165943][T29608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.174687][T29608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.183507][T29608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.233901][T29731] xt_hashlimit: max too large, truncated to 1048576
[  478.243769][T29730] delete_channel: no stack
[  478.261539][T29730] delete_channel: no stack
[  478.295597][T29730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29730 comm=syz.3.8730
[  478.348800][T29741] __nla_validate_parse: 6 callbacks suppressed
[  478.348822][T29741] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8730'.
[  478.382598][T29741] 0·: renamed from hsr_slave_1 (while UP)
[  478.392892][T29741] 0·: entered allmulticast mode
[  478.398372][T29741] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  478.439139][T29730] netlink: 'syz.3.8730': attribute type 10 has an invalid length.
[  478.447100][T29730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8730'.
[  478.490251][T29730] hsr0: entered promiscuous mode
[  478.495455][T29730] hsr0: entered allmulticast mode
[  478.500643][T29730] hsr_slave_0: entered allmulticast mode
[  478.512794][T29730] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  478.819527][T29777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8748'.
[  478.937385][T29785] delete_channel: no stack
[  478.951681][T29785] delete_channel: no stack
[  478.967471][T29785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29785 comm=syz.2.8751
[  479.001568][T29785] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8751'.
[  479.010760][T29785] 0·: renamed from hsr_slave_1 (while UP)
[  479.033449][T29785] 0·: entered allmulticast mode
[  479.049041][T29785] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  479.064657][T29786] netlink: 'syz.2.8751': attribute type 10 has an invalid length.
[  479.072566][T29786] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8751'.
[  479.095770][T29786] hsr0: entered promiscuous mode
[  479.100789][T29786] hsr0: entered allmulticast mode
[  479.105981][T29786] hsr_slave_0: entered allmulticast mode
[  479.141202][T29786] bridge0: port 3(hsr0) entered blocking state
[  479.147555][T29786] bridge0: port 3(hsr0) entered disabled state
[  479.155369][T29786] bridge0: port 3(hsr0) entered blocking state
[  479.161652][T29786] bridge0: port 3(hsr0) entered forwarding state
[  479.193996][T29790] xt_CT: You must specify a L4 protocol and not use inversions on it
[  479.401241][T29798] FAULT_INJECTION: forcing a failure.
[  479.401241][T29798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.414562][T29798] CPU: 1 UID: 0 PID: 29798 Comm: syz.2.8755 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  479.425372][T29798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  479.435491][T29798] Call Trace:
[  479.438779][T29798]  <TASK>
[  479.441736][T29798]  dump_stack_lvl+0xf2/0x150
[  479.446498][T29798]  dump_stack+0x15/0x20
[  479.450698][T29798]  should_fail_ex+0x223/0x230
[  479.455409][T29798]  should_fail+0xb/0x10
[  479.459658][T29798]  should_fail_usercopy+0x1a/0x20
[  479.464798][T29798]  _copy_to_user+0x1e/0xa0
[  479.469365][T29798]  simple_read_from_buffer+0xa0/0x110
[  479.474770][T29798]  proc_fail_nth_read+0xf9/0x140
[  479.479753][T29798]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  479.485378][T29798]  vfs_read+0x195/0x720
[  479.489689][T29798]  ? __rcu_read_unlock+0x4e/0x70
[  479.494731][T29798]  ? __fget_files+0x1d4/0x210
[  479.499507][T29798]  ksys_read+0xeb/0x1b0
[  479.503747][T29798]  __x64_sys_read+0x42/0x50
[  479.508323][T29798]  x64_sys_call+0x27d3/0x2d60
[  479.513097][T29798]  do_syscall_64+0xc9/0x1c0
[  479.517650][T29798]  ? clear_bhb_loop+0x55/0xb0
[  479.522389][T29798]  ? clear_bhb_loop+0x55/0xb0
[  479.527113][T29798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.533160][T29798] RIP: 0033:0x7fd8e9b9ca3c
[  479.537628][T29798] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  479.557338][T29798] RSP: 002b:00007fd8e87f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  479.565799][T29798] RAX: ffffffffffffffda RBX: 00007fd8e9d56058 RCX: 00007fd8e9b9ca3c
[  479.573807][T29798] RDX: 000000000000000f RSI: 00007fd8e87f00a0 RDI: 000000000000000b
[  479.581803][T29798] RBP: 00007fd8e87f0090 R08: 0000000000000000 R09: 0000000000000000
[  479.589796][T29798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.597791][T29798] R13: 0000000000000000 R14: 00007fd8e9d56058 R15: 00007ffd06b060a8
[  479.605888][T29798]  </TASK>
[  479.690328][T29804] bridge0: port 3(hsr0) entered disabled state
[  479.696797][T29804] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.704167][T29804] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.715010][T29804] bridge0: port 3(hsr0) entered disabled state
[  479.724028][T29804] bridge_slave_1: left allmulticast mode
[  479.729718][T29804] bridge_slave_1: left promiscuous mode
[  479.735534][T29804] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.743933][T29804] bridge_slave_0: left allmulticast mode
[  479.749684][T29804] bridge_slave_0: left promiscuous mode
[  479.755574][T29804] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.834834][T29811] delete_channel: no stack
[  479.851527][T29811] delete_channel: no stack
[  479.861232][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  479.861250][   T29] audit: type=1326 audit(2000000075.200:40273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  479.895613][T29811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29811 comm=syz.3.8761
[  479.929107][T29811] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8761'.
[  479.942010][   T29] audit: type=1326 audit(2000000075.240:40274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  479.957586][T29811] 1·: renamed from 
c0· (while UP)
[  479.965635][   T29] audit: type=1326 audit(2000000075.240:40275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  479.994505][   T29] audit: type=1326 audit(2000000075.240:40276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.018108][   T29] audit: type=1326 audit(2000000075.240:40277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.041710][   T29] audit: type=1326 audit(2000000075.240:40278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.065619][   T29] audit: type=1326 audit(2000000075.240:40279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  480.089501][   T29] audit: type=1326 audit(2000000075.240:40280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.113458][   T29] audit: type=1326 audit(2000000075.240:40281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.136985][   T29] audit: type=1326 audit(2000000075.240:40282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29810 comm="syz.3.8761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  480.165926][T29811] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  480.218478][T29816] loop1: detected capacity change from 0 to 1024
[  480.242060][T29816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.344989][T29825] bpf_get_probe_write_proto: 2 callbacks suppressed
[  480.345063][T29825] syz.0.8765[29825] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  480.385434][T29825] syz.0.8765[29825] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  480.425171][T29825] syz.0.8765[29825] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  480.442228][T29828] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8765'.
[  480.464274][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.511085][T29831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8767'.
[  480.529634][T29831] xt_hashlimit: max too large, truncated to 1048576
[  480.554375][T29831] loop1: detected capacity change from 0 to 2048
[  480.573023][T29831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.585860][T29831] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  480.599447][T29840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8770'.
[  480.614095][T29831] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8767: bg 0: block 288: padding at end of block bitmap is not set
[  480.639941][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.324433][T29849] tmpfs: Bad value for 'nr_blocks'
[  481.516197][T29866] FAULT_INJECTION: forcing a failure.
[  481.516197][T29866] name failslab, interval 1, probability 0, space 0, times 0
[  481.528985][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.4.8780 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  481.539777][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  481.550440][T29866] Call Trace:
[  481.553794][T29866]  <TASK>
[  481.556775][T29866]  dump_stack_lvl+0xf2/0x150
[  481.561404][T29866]  dump_stack+0x15/0x20
[  481.565622][T29866]  should_fail_ex+0x223/0x230
[  481.570404][T29866]  ? mpol_set_shared_policy+0x3b1/0x870
[  481.575997][T29866]  should_failslab+0x8f/0xb0
[  481.580656][T29866]  kmem_cache_alloc_noprof+0x4c/0x290
[  481.586113][T29866]  mpol_set_shared_policy+0x3b1/0x870
[  481.591573][T29866]  shmem_set_policy+0x43/0x50
[  481.596365][T29866]  mbind_range+0x264/0x490
[  481.600845][T29866]  __se_sys_mbind+0x915/0x1160
[  481.605741][T29866]  __x64_sys_mbind+0x78/0x90
[  481.610377][T29866]  x64_sys_call+0x2b4d/0x2d60
[  481.615140][T29866]  do_syscall_64+0xc9/0x1c0
[  481.619675][T29866]  ? clear_bhb_loop+0x55/0xb0
[  481.624413][T29866]  ? clear_bhb_loop+0x55/0xb0
[  481.629137][T29866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.635098][T29866] RIP: 0033:0x7f94ee14dff9
[  481.639675][T29866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.659313][T29866] RSP: 002b:00007f94ecdc1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  481.667755][T29866] RAX: ffffffffffffffda RBX: 00007f94ee305f80 RCX: 00007f94ee14dff9
[  481.675830][T29866] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000
[  481.683915][T29866] RBP: 00007f94ecdc1090 R08: 0000000000000000 R09: 0000000000000000
[  481.691908][T29866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.699901][T29866] R13: 0000000000000000 R14: 00007f94ee305f80 R15: 00007ffd42b897a8
[  481.707931][T29866]  </TASK>
[  481.735064][T29875] delete_channel: no stack
[  481.739628][T29875] delete_channel: no stack
[  481.746746][T29875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29875 comm=syz.2.8784
[  481.760219][T29875] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8784'.
[  481.769595][T29875] 1·: renamed from 
c0· (while UP)
[  481.786848][T29875] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  481.803667][T29875] netlink: 'syz.2.8784': attribute type 10 has an invalid length.
[  481.812262][T29875] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  481.848943][T29882] xt_hashlimit: max too large, truncated to 1048576
[  482.369148][T29896] loop1: detected capacity change from 0 to 512
[  482.378030][T29896] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.8794: iget: bogus i_mode (0)
[  482.390424][T29896] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.8794: couldn't read orphan inode 17 (err -117)
[  482.404874][T29896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.452918][T29896] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  482.470563][T29896] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8794: bg 0: block 7: invalid block bitmap
[  482.503332][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.544996][T29911] delete_channel: no stack
[  482.549695][T29911] delete_channel: no stack
[  482.557484][T29911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29911 comm=syz.1.8799
[  482.571203][T29911] 0·: renamed from hsr_slave_1 (while UP)
[  482.579617][T29911] 0·: entered allmulticast mode
[  482.585344][T29911] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  482.602819][T29911] netlink: 'syz.1.8799': attribute type 10 has an invalid length.
[  482.610821][T29911] hsr0: entered promiscuous mode
[  482.615924][T29911] hsr0: entered allmulticast mode
[  482.620983][T29911] hsr_slave_0: entered allmulticast mode
[  482.629720][T29911] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  482.790654][T29925] syz.0.8806[29925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  482.790808][T29925] syz.0.8806[29925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  482.813122][T29922] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  482.813125][T29925] syz.0.8806[29925] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  482.943228][T29930] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  483.033208][T29945] delete_channel: no stack
[  483.038139][T29945] delete_channel: no stack
[  483.045770][T29945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29945 comm=syz.2.8812
[  483.060473][T29945] 0·: renamed from 
c1· (while UP)
[  483.068235][T29945] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  483.088542][T29950] tmpfs: Bad value for 'nr_blocks'
[  483.095010][T29945] netlink: 'syz.2.8812': attribute type 10 has an invalid length.
[  483.112218][T29945] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  483.202509][T29959] syz.4.8818[29959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.202590][T29959] syz.4.8818[29959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.214696][T29959] syz.4.8818[29959] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.394803][T29969] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  483.528865][T29978] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  483.573356][T29983] delete_channel: no stack
[  483.578039][T29983] delete_channel: no stack
[  483.585417][T29983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29983 comm=syz.1.8827
[  483.600487][T29983] __nla_validate_parse: 8 callbacks suppressed
[  483.600561][T29983] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8827'.
[  483.617398][T29983] 1·: renamed from 
c0· (while UP)
[  483.624269][T29983] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  483.640975][T29983] netlink: 'syz.1.8827': attribute type 10 has an invalid length.
[  483.648948][T29983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8827'.
[  483.658947][T29983] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  483.676298][T29987] syz.4.8829[29987] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  483.678993][T29987] netlink: 93 bytes leftover after parsing attributes in process `syz.4.8829'.
[  483.734861][T29989] xt_hashlimit: max too large, truncated to 1048576
[  483.757533][T29989] loop1: detected capacity change from 0 to 2048
[  483.783167][T29989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.796093][T29989] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  483.812897][T29989] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8830: bg 0: block 288: padding at end of block bitmap is not set
[  483.838947][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.922637][T29997] loop1: detected capacity change from 0 to 128
[  483.958433][T29999] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  484.081564][T30006] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  484.159132][T30011] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  484.213398][T30018] delete_channel: no stack
[  484.217886][T30018] delete_channel: no stack
[  484.243913][T30018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30018 comm=syz.2.8840
[  484.262783][T30021] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8841'.
[  484.281974][T30018] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8840'.
[  484.291139][T30018] 1·: renamed from 
c0· (while UP)
[  484.303130][T30018] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  484.333827][T30018] netlink: 'syz.2.8840': attribute type 10 has an invalid length.
[  484.341715][T30018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8840'.
[  484.596534][T30032] delete_channel: no stack
[  484.609947][T30032] delete_channel: no stack
[  484.629175][T30032] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30032 comm=syz.4.8845
[  484.652375][T30032] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8845'.
[  484.661300][T30032] 0·: renamed from hsr_slave_1 (while UP)
[  484.692866][T30032] 0·: entered allmulticast mode
[  484.708995][T30033] netlink: 'syz.4.8845': attribute type 10 has an invalid length.
[  484.716984][T30033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8845'.
[  484.726332][T30033] hsr0: entered promiscuous mode
[  484.731343][T30033] hsr0: entered allmulticast mode
[  484.736602][T30033] hsr_slave_0: entered allmulticast mode
[  484.767257][T30035] loop1: detected capacity change from 0 to 512
[  484.785161][T30035] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  484.905128][T30035] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm +}[@: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48834(4), depth 0(0)
[  484.936559][T30035] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm +}[@: Bad quota inode: 3, type: 0
[  484.960325][T30035] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  484.991596][T30035] EXT4-fs (loop1): mount failed
[  485.004491][T30052] netlink: 93 bytes leftover after parsing attributes in process `syz.3.8852'.
[  485.042513][T30054] delete_channel: no stack
[  485.047177][T30054] delete_channel: no stack
[  485.052458][   T29] kauditd_printk_skb: 471 callbacks suppressed
[  485.052474][   T29] audit: type=1326 audit(2000000080.400:40754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.085358][   T29] audit: type=1326 audit(2000000080.430:40755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.112827][   T29] audit: type=1326 audit(2000000080.430:40756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.137587][   T29] audit: type=1326 audit(2000000080.430:40757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.142168][T30054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30054 comm=syz.4.8853
[  485.161204][   T29] audit: type=1326 audit(2000000080.430:40758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.161267][   T29] audit: type=1326 audit(2000000080.430:40759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.161297][   T29] audit: type=1326 audit(2000000080.430:40760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  485.161330][   T29] audit: type=1326 audit(2000000080.430:40761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.178250][T30054] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8853'.
[  485.197454][   T29] audit: type=1326 audit(2000000080.430:40762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.197493][   T29] audit: type=1326 audit(2000000080.430:40763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30053 comm="syz.4.8853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  485.221535][T30054] 1·: renamed from 
c0· (while UP)
[  485.333540][T30054] net_ratelimit: 3 callbacks suppressed
[  485.333558][T30054] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  485.442061][T30065] delete_channel: no stack
[  485.448982][T30065] delete_channel: no stack
[  485.472050][T30065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30065 comm=syz.3.8857
[  485.496261][T30065] 0·: renamed from 
c1· (while UP)
[  485.517950][T30065] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  485.550734][T30074] netlink: 'syz.3.8857': attribute type 10 has an invalid length.
[  485.567762][T30074] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  485.620636][T30079] tmpfs: Bad value for 'nr_blocks'
[  485.635711][T30083] xt_hashlimit: max too large, truncated to 1048576
[  485.695983][T30088] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  485.731663][T30091] xt_hashlimit: max too large, truncated to 1048576
[  485.765493][T30095] delete_channel: no stack
[  485.772214][T30095] delete_channel: no stack
[  485.788161][T30095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30095 comm=syz.4.8868
[  485.803857][T30097] loop1: detected capacity change from 0 to 128
[  485.815803][T30095] 0·: renamed from 
c1· (while UP)
[  485.826237][T30097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  485.827175][T30095] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  485.842151][T30097] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.989086][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  486.026166][T30111] loop1: detected capacity change from 0 to 512
[  486.038313][T30111] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  486.055614][T30115] xt_hashlimit: max too large, truncated to 1048576
[  486.073150][T30117] tmpfs: Bad value for 'nr_blocks'
[  486.079629][T30111] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm +}[@: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 48834(4), depth 0(0)
[  486.097468][T30111] EXT4-fs error (device loop1): ext4_quota_enable:7056: comm +}[@: Bad quota inode: 3, type: 0
[  486.113810][T30111] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  486.136174][T30111] EXT4-fs (loop1): mount failed
[  486.171068][T30127] bpf_get_probe_write_proto: 8 callbacks suppressed
[  486.171090][T30127] syz.2.8881[30127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.187290][T30127] syz.2.8881[30127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.203296][T30127] syz.2.8881[30127] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.370777][T30146] xt_hashlimit: max too large, truncated to 1048576
[  486.881838][T30161] syz.1.8896[30161] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.881926][T30161] syz.1.8896[30161] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.893664][T30161] syz.1.8896[30161] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  486.953367][T30165] loop1: detected capacity change from 0 to 1024
[  486.984067][T30165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.053705][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.375637][T30191] syz.3.8907[30191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  487.375712][T30191] syz.3.8907[30191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  487.401561][T30191] syz.3.8907[30191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  487.506905][T30201] delete_channel: no stack
[  487.523994][T30201] delete_channel: no stack
[  487.532719][T30201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30201 comm=syz.3.8912
[  487.546527][T30201] 1·: renamed from 
c0· (while UP)
[  487.553697][T30201] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  487.571930][T30201] netlink: 'syz.3.8912': attribute type 10 has an invalid length.
[  487.580602][T30201] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  488.047824][T30213] delete_channel: no stack
[  488.052700][T30213] delete_channel: no stack
[  488.059964][T30213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30213 comm=syz.4.8917
[  488.074996][T30213] 1·: renamed from 
c0· (while UP)
[  488.081937][T30213] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  488.099210][T30213] netlink: 'syz.4.8917': attribute type 10 has an invalid length.
[  488.108043][T30213] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  488.165133][T30217] tmpfs: Bad value for 'nr_blocks'
[  488.223285][T30219] syz.0.8920[30219] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  488.457669][T30234] delete_channel: no stack
[  488.500114][T30234] delete_channel: no stack
[  488.516624][T30234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30234 comm=syz.0.8926
[  488.534594][T30234] 1·: renamed from 
c0· (while UP)
[  488.548472][T30234] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  488.566467][T30238] delete_channel: no stack
[  488.566900][T30234] netlink: 'syz.0.8926': attribute type 10 has an invalid length.
[  488.571792][T30240] delete_channel: no stack
[  488.579418][T30234] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  488.585018][T30238] delete_channel: no stack
[  488.613088][T30240] delete_channel: no stack
[  488.619693][T30241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30241 comm=syz.4.8929
[  488.631577][T30240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30240 comm=syz.2.8930
[  488.637022][T30241] __nla_validate_parse: 14 callbacks suppressed
[  488.637038][T30241] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8929'.
[  488.664768][T30241] 0·: renamed from 
c1· (while UP)
[  488.672613][T30240] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8930'.
[  488.682720][T30243] netlink: 93 bytes leftover after parsing attributes in process `syz.0.8931'.
[  488.691778][T30240] 0·: renamed from 
c1· (while UP)
[  488.699128][T30238] netlink: 'syz.4.8929': attribute type 10 has an invalid length.
[  488.707108][T30238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8929'.
[  488.718572][T30240] netlink: 'syz.2.8930': attribute type 10 has an invalid length.
[  488.726490][T30240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8930'.
[  488.735130][T30246] tmpfs: Bad value for 'nr_blocks'
[  488.833575][T30256] loop1: detected capacity change from 0 to 128
[  488.861297][T30256] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  488.898263][T30256] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  489.011102][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  489.066049][T30268] delete_channel: no stack
[  489.078206][T30268] delete_channel: no stack
[  489.456544][T30279] tmpfs: Bad value for 'nr_blocks'
[  489.548765][T30285] delete_channel: no stack
[  489.576227][T30285] delete_channel: no stack
[  489.589380][T30284] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  489.610223][T30285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30285 comm=syz.3.8947
[  489.662249][T30287] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8947'.
[  489.673302][T30287] 0·: renamed from 
c1· (while UP)
[  489.681077][T30285] netlink: 'syz.3.8947': attribute type 10 has an invalid length.
[  489.689065][T30285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8947'.
[  489.741337][T30299] FAULT_INJECTION: forcing a failure.
[  489.741337][T30299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  489.754561][T30299] CPU: 0 UID: 0 PID: 30299 Comm: syz.4.8953 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  489.765370][T30299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  489.775474][T30299] Call Trace:
[  489.778836][T30299]  <TASK>
[  489.781846][T30299]  dump_stack_lvl+0xf2/0x150
[  489.786821][T30299]  dump_stack+0x15/0x20
[  489.791204][T30299]  should_fail_ex+0x223/0x230
[  489.795969][T30299]  should_fail+0xb/0x10
[  489.800200][T30299]  should_fail_usercopy+0x1a/0x20
[  489.805304][T30299]  _copy_from_iter+0xd3/0xd20
[  489.810130][T30299]  ? kmalloc_reserve+0x16e/0x190
[  489.815117][T30299]  ? __build_skb_around+0x196/0x1f0
[  489.820356][T30299]  ? __alloc_skb+0x21f/0x310
[  489.824981][T30299]  ? __virt_addr_valid+0x1ed/0x250
[  489.830130][T30299]  ? __check_object_size+0x364/0x520
[  489.835473][T30299]  netlink_sendmsg+0x460/0x6e0
[  489.840282][T30299]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.845626][T30299]  __sock_sendmsg+0x140/0x180
[  489.850321][T30299]  ____sys_sendmsg+0x312/0x410
[  489.855149][T30299]  __sys_sendmsg+0x1d9/0x270
[  489.859790][T30299]  __x64_sys_sendmsg+0x46/0x50
[  489.864626][T30299]  x64_sys_call+0x2689/0x2d60
[  489.869319][T30299]  do_syscall_64+0xc9/0x1c0
[  489.873837][T30299]  ? clear_bhb_loop+0x55/0xb0
[  489.878545][T30299]  ? clear_bhb_loop+0x55/0xb0
[  489.883336][T30299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.889252][T30299] RIP: 0033:0x7f94ee14dff9
[  489.893684][T30299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.913306][T30299] RSP: 002b:00007f94ecdc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  489.921727][T30299] RAX: ffffffffffffffda RBX: 00007f94ee305f80 RCX: 00007f94ee14dff9
[  489.929750][T30299] RDX: 0000000000004810 RSI: 0000000020000280 RDI: 0000000000000005
[  489.937789][T30299] RBP: 00007f94ecdc1090 R08: 0000000000000000 R09: 0000000000000000
[  489.945832][T30299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.954000][T30299] R13: 0000000000000000 R14: 00007f94ee305f80 R15: 00007ffd42b897a8
[  489.961987][T30299]  </TASK>
[  490.016223][T30309] FAULT_INJECTION: forcing a failure.
[  490.016223][T30309] name failslab, interval 1, probability 0, space 0, times 0
[  490.028971][T30309] CPU: 0 UID: 0 PID: 30309 Comm: syz.4.8955 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  490.039761][T30309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  490.049837][T30309] Call Trace:
[  490.053210][T30309]  <TASK>
[  490.056210][T30309]  dump_stack_lvl+0xf2/0x150
[  490.060925][T30309]  dump_stack+0x15/0x20
[  490.065196][T30309]  should_fail_ex+0x223/0x230
[  490.070038][T30309]  ? __alloc_skb+0x10b/0x310
[  490.074665][T30309]  should_failslab+0x8f/0xb0
[  490.079420][T30309]  kmem_cache_alloc_node_noprof+0x51/0x2b0
[  490.085274][T30309]  __alloc_skb+0x10b/0x310
[  490.089758][T30309]  audit_log_start+0x368/0x6b0
[  490.094556][T30309]  ? kmem_cache_free+0xdc/0x2d0
[  490.099537][T30309]  audit_seccomp+0x4b/0x130
[  490.104142][T30309]  __seccomp_filter+0x6fa/0x1180
[  490.109121][T30309]  ? proc_fail_nth_write+0x12a/0x150
[  490.114493][T30309]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  490.120277][T30309]  ? vfs_write+0x580/0x910
[  490.124794][T30309]  ? __fget_files+0x1d4/0x210
[  490.129521][T30309]  __secure_computing+0x9f/0x1c0
[  490.134505][T30309]  syscall_trace_enter+0xd1/0x1f0
[  490.139606][T30309]  ? fpregs_assert_state_consistent+0x83/0xa0
[  490.145761][T30309]  do_syscall_64+0xaa/0x1c0
[  490.150278][T30309]  ? clear_bhb_loop+0x55/0xb0
[  490.154995][T30309]  ? clear_bhb_loop+0x55/0xb0
[  490.159695][T30309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.165610][T30309] RIP: 0033:0x7f94ee14ca3c
[  490.170119][T30309] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  490.189751][T30309] RSP: 002b:00007f94ecdc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  490.198190][T30309] RAX: ffffffffffffffda RBX: 00007f94ee305f80 RCX: 00007f94ee14ca3c
[  490.206211][T30309] RDX: 000000000000000f RSI: 00007f94ecdc10a0 RDI: 0000000000000006
[  490.214274][T30309] RBP: 00007f94ecdc1090 R08: 0000000000000000 R09: 0000000000000000
[  490.222253][T30309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.230273][T30309] R13: 0000000000000000 R14: 00007f94ee305f80 R15: 00007ffd42b897a8
[  490.238309][T30309]  </TASK>
[  490.241391][T30309] audit_log_lost: 535 callbacks suppressed
[  490.251868][T30309] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64
[  490.259621][T30309] audit: out of memory in audit_log_start
[  490.277366][   T29] audit: type=1400 audit(2000000085.620:41299): avc:  denied  { create } for  pid=30310 comm="syz.1.8956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  490.299994][T30311] loop1: detected capacity change from 0 to 128
[  490.307101][   T29] audit: type=1326 audit(2000000085.620:41300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30308 comm="syz.4.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94ee14cadf code=0x7ffc0000
[  490.330691][   T29] audit: type=1326 audit(2000000085.620:41301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30308 comm="syz.4.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94ee14cc8a code=0x7ffc0000
[  490.354475][   T29] audit: type=1326 audit(2000000085.620:41302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30308 comm="syz.4.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  490.378110][   T29] audit: type=1326 audit(2000000085.620:41303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30308 comm="syz.4.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ee14dff9 code=0x7ffc0000
[  490.411327][T30314] tmpfs: Bad value for 'nr_blocks'
[  490.420359][T30311] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  490.431514][   T29] audit: type=1400 audit(2000000085.770:41304): avc:  denied  { create } for  pid=30315 comm="syz.4.8958" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  490.439647][T30311] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  490.487433][   T29] audit: type=1400 audit(2000000085.780:41305): avc:  denied  { mount } for  pid=30310 comm="syz.1.8956" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  490.509334][   T29] audit: type=1400 audit(2000000085.800:41306): avc:  denied  { write } for  pid=30315 comm="syz.4.8958" name="file0" dev="tmpfs" ino=1639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  490.584287][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  490.619761][T30323] loop1: detected capacity change from 0 to 1024
[  490.642319][T30325] delete_channel: no stack
[  490.646999][T30325] delete_channel: no stack
[  490.654729][T30325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30325 comm=syz.4.8961
[  490.668310][T30325] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8961'.
[  490.677385][T30325] 1·: renamed from 
c0· (while UP)
[  490.684988][T30325] net_ratelimit: 6 callbacks suppressed
[  490.685005][T30325] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  490.715386][T30325] netlink: 'syz.4.8961': attribute type 10 has an invalid length.
[  490.723322][T30325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8961'.
[  490.733745][T30325] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  490.749898][T30318] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  490.781412][T30330] delete_channel: no stack
[  490.787649][T30323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  490.826141][T30330] delete_channel: no stack
[  490.867292][T30332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8963'.
[  490.959196][T30335] bond1: entered promiscuous mode
[  490.964431][T30335] bond1: entered allmulticast mode
[  490.974007][T30340] xt_HMARK: proto mask must be zero with L3 mode
[  490.994386][T30335] 8021q: adding VLAN 0 to HW filter on device bond1
[  491.005840][T30339] xt_hashlimit: max too large, truncated to 1048576
[  491.013675][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  491.271335][T30357] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  491.306650][T30359] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  491.364845][T30359] loop1: detected capacity change from 0 to 512
[  491.402346][T30359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  491.439041][T30359] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  491.523229][T30371] delete_channel: no stack
[  491.537774][T30371] delete_channel: no stack
[  491.640730][T30377] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  491.709154][T30384] xt_hashlimit: max too large, truncated to 1048576
[  491.768468][T30394] tmpfs: Bad value for 'nr_blocks'
[  491.852942][T30406] bpf_get_probe_write_proto: 5 callbacks suppressed
[  491.852960][T30406] syz.0.8990[30406] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  491.859700][T30406] syz.0.8990[30406] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  491.874291][T30406] syz.0.8990[30406] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.112930][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  492.157841][T30424] xt_hashlimit: max too large, truncated to 1048576
[  492.231038][T30434] syz.2.9003[30434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.231119][T30434] syz.2.9003[30434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.258509][T30440] delete_channel: no stack
[  492.268209][T30434] syz.2.9003[30434] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.291626][T30440] delete_channel: no stack
[  492.313341][T30443] delete_channel: no stack
[  492.330159][T30443] delete_channel: no stack
[  492.330092][T30440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30440 comm=syz.1.9006
[  492.360357][T30443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30443 comm=syz.4.9008
[  492.368281][T30440] 0·: renamed from 
c1· (while UP)
[  492.391769][T30440] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  492.407398][T30443] 0·: renamed from 
c1· (while UP)
[  492.416270][T30443] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  492.432123][T30440] netlink: 'syz.1.9006': attribute type 10 has an invalid length.
[  492.444313][T30440] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  492.460253][T30453] netlink: 'syz.4.9008': attribute type 10 has an invalid length.
[  492.468874][T30453] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  492.551022][T30460] xt_hashlimit: max too large, truncated to 1048576
[  492.563385][T30462] loop1: detected capacity change from 0 to 512
[  492.585909][T30462] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.9016: iget: bogus i_mode (0)
[  492.603948][T30462] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.9016: couldn't read orphan inode 17 (err -117)
[  492.638428][T30462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.690405][T30462] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  492.704631][T30462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9016: bg 0: block 7: invalid block bitmap
[  492.729597][T30473] syz.4.9020[30473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.729731][T30473] syz.4.9020[30473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.765755][T30473] syz.4.9020[30473] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  492.784407][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  492.872766][T30485] delete_channel: no stack
[  492.877378][T30485] delete_channel: no stack
[  492.884361][T30485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30485 comm=syz.1.9025
[  492.898755][T30485] 1·: renamed from 
c0· (while UP)
[  492.906332][T30485] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  492.923798][T30485] netlink: 'syz.1.9025': attribute type 10 has an invalid length.
[  492.932726][T30485] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  493.765378][T30508] syz.3.9034[30508] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  493.768623][T30508] __nla_validate_parse: 10 callbacks suppressed
[  493.768640][T30508] netlink: 93 bytes leftover after parsing attributes in process `syz.3.9034'.
[  493.855160][T30512] loop1: detected capacity change from 0 to 128
[  493.868202][T30514] delete_channel: no stack
[  493.876684][T30512] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  493.880070][T30514] delete_channel: no stack
[  493.899485][T30512] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  493.933417][T30517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9038'.
[  493.975839][T30517] bond1: entered promiscuous mode
[  493.980925][T30517] bond1: entered allmulticast mode
[  494.035828][T30517] 8021q: adding VLAN 0 to HW filter on device bond1
[  494.139749][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  494.261717][   T35] kernel write not supported for file /1280/attr/keycreate (pid: 35 comm: kworker/1:1)
[  494.440294][T30556] loop1: detected capacity change from 0 to 1024
[  494.714132][T30574] lo speed is unknown, defaulting to 1000
[  494.719918][T30574] lo speed is unknown, defaulting to 1000
[  494.734363][T30574] lo speed is unknown, defaulting to 1000
[  494.742337][T30574] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  494.764173][T30577] netlink: 93 bytes leftover after parsing attributes in process `syz.2.9060'.
[  494.772076][T30574] lo speed is unknown, defaulting to 1000
[  494.779886][T30577] netlink: 93 bytes leftover after parsing attributes in process `syz.2.9060'.
[  494.801029][T30574] lo speed is unknown, defaulting to 1000
[  494.807908][T30574] lo speed is unknown, defaulting to 1000
[  494.825152][T30574] lo speed is unknown, defaulting to 1000
[  494.838788][T30574] lo speed is unknown, defaulting to 1000
[  494.858556][T30574] lo speed is unknown, defaulting to 1000
[  494.873256][T30574] lo speed is unknown, defaulting to 1000
[  495.162857][T30591] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  495.324789][T30603] FAULT_INJECTION: forcing a failure.
[  495.324789][T30603] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  495.338009][T30603] CPU: 1 UID: 0 PID: 30603 Comm: syz.1.9071 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  495.348927][T30603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  495.359093][T30603] Call Trace:
[  495.362385][T30603]  <TASK>
[  495.365340][T30603]  dump_stack_lvl+0xf2/0x150
[  495.370028][T30603]  dump_stack+0x15/0x20
[  495.374211][T30603]  should_fail_ex+0x223/0x230
[  495.379029][T30603]  should_fail+0xb/0x10
[  495.383215][T30603]  should_fail_usercopy+0x1a/0x20
[  495.388278][T30603]  _copy_to_user+0x1e/0xa0
[  495.392738][T30603]  simple_read_from_buffer+0xa0/0x110
[  495.398189][T30603]  proc_fail_nth_read+0xf9/0x140
[  495.403160][T30603]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  495.408787][T30603]  vfs_read+0x195/0x720
[  495.412988][T30603]  ? __rcu_read_unlock+0x4e/0x70
[  495.418027][T30603]  ? __fget_files+0x1d4/0x210
[  495.422841][T30603]  ksys_read+0xeb/0x1b0
[  495.427043][T30603]  __x64_sys_read+0x42/0x50
[  495.431593][T30603]  x64_sys_call+0x27d3/0x2d60
[  495.436303][T30603]  do_syscall_64+0xc9/0x1c0
[  495.440923][T30603]  ? clear_bhb_loop+0x55/0xb0
[  495.445677][T30603]  ? clear_bhb_loop+0x55/0xb0
[  495.450467][T30603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.456400][T30603] RIP: 0033:0x7f26c53fca3c
[  495.460833][T30603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  495.480556][T30603] RSP: 002b:00007f26c4077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  495.489062][T30603] RAX: ffffffffffffffda RBX: 00007f26c55b5f80 RCX: 00007f26c53fca3c
[  495.497094][T30603] RDX: 000000000000000f RSI: 00007f26c40770a0 RDI: 0000000000000003
[  495.505098][T30603] RBP: 00007f26c4077090 R08: 0000000000000000 R09: 0000000000000000
[  495.513092][T30603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.521170][T30603] R13: 0000000000000000 R14: 00007f26c55b5f80 R15: 00007ffce8c29da8
[  495.529184][T30603]  </TASK>
[  495.602700][T30606] delete_channel: no stack
[  495.607186][T30606] delete_channel: no stack
[  495.612441][   T29] kauditd_printk_skb: 443 callbacks suppressed
[  495.612454][   T29] audit: type=1326 audit(2000000090.960:41748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.613945][T30606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30606 comm=syz.1.9073
[  495.618667][   T29] audit: type=1326 audit(2000000090.960:41749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.679130][   T29] audit: type=1326 audit(2000000090.960:41750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.703000][   T29] audit: type=1326 audit(2000000090.960:41751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.727080][   T29] audit: type=1326 audit(2000000090.960:41752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.751072][   T29] audit: type=1326 audit(2000000090.960:41753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.752095][T30607] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9073'.
[  495.774705][   T29] audit: type=1326 audit(2000000090.960:41754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  495.801909][T30607] 0·: renamed from 
c1· (while UP)
[  495.807659][   T29] audit: type=1326 audit(2000000090.960:41755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.836436][   T29] audit: type=1326 audit(2000000090.960:41756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.860073][   T29] audit: type=1326 audit(2000000090.960:41757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30605 comm="syz.1.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c53fdff9 code=0x7ffc0000
[  495.885262][T30607] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  496.053934][T30620] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  496.169707][T30630] loop1: detected capacity change from 0 to 512
[  496.193726][T30630] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.9081: iget: bogus i_mode (0)
[  496.205418][T30630] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.9081: couldn't read orphan inode 17 (err -117)
[  496.218771][T30630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.275961][T30633] xt_hashlimit: max too large, truncated to 1048576
[  496.286385][T30630] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  496.294983][T30630] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9081: bg 0: block 7: invalid block bitmap
[  496.342151][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.472142][T30642] delete_channel: no stack
[  496.476953][T30642] delete_channel: no stack
[  496.488552][T30642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30642 comm=syz.0.9086
[  496.512763][T30641] xt_hashlimit: max too large, truncated to 1048576
[  496.514145][T30642] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9086'.
[  496.546646][T30642] 0·: renamed from 
c1· (while UP)
[  496.558942][T30642] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  496.561963][T30641] loop1: detected capacity change from 0 to 2048
[  496.620958][T30641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.641720][T30641] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.672528][T30641] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9084: bg 0: block 288: padding at end of block bitmap is not set
[  496.748248][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.833305][T30657] xt_hashlimit: max too large, truncated to 1048576
[  496.974630][T30670] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9096'.
[  497.003201][T30672] FAULT_INJECTION: forcing a failure.
[  497.003201][T30672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.016414][T30672] CPU: 0 UID: 0 PID: 30672 Comm: syz.0.9097 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  497.027259][T30672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  497.037349][T30672] Call Trace:
[  497.040738][T30672]  <TASK>
[  497.043712][T30672]  dump_stack_lvl+0xf2/0x150
[  497.048334][T30672]  dump_stack+0x15/0x20
[  497.052541][T30672]  should_fail_ex+0x223/0x230
[  497.057310][T30672]  should_fail+0xb/0x10
[  497.061787][T30672]  should_fail_usercopy+0x1a/0x20
[  497.066884][T30672]  _copy_from_iter+0xd3/0xd20
[  497.071643][T30672]  ? __alloc_skb+0x1b5/0x310
[  497.076274][T30672]  ? kmalloc_reserve+0x16e/0x190
[  497.081250][T30672]  ? __build_skb_around+0x196/0x1f0
[  497.086517][T30672]  ? __alloc_skb+0x21f/0x310
[  497.091211][T30672]  ? __virt_addr_valid+0x1ed/0x250
[  497.096392][T30672]  ? __check_object_size+0x364/0x520
[  497.101812][T30672]  netlink_sendmsg+0x460/0x6e0
[  497.106641][T30672]  ? __pfx_netlink_sendmsg+0x10/0x10
[  497.112049][T30672]  __sock_sendmsg+0x140/0x180
[  497.116758][T30672]  ____sys_sendmsg+0x312/0x410
[  497.121701][T30672]  __sys_sendmsg+0x1d9/0x270
[  497.126401][T30672]  __x64_sys_sendmsg+0x46/0x50
[  497.131215][T30672]  x64_sys_call+0x2689/0x2d60
[  497.135992][T30672]  do_syscall_64+0xc9/0x1c0
[  497.140554][T30672]  ? clear_bhb_loop+0x55/0xb0
[  497.145312][T30672]  ? clear_bhb_loop+0x55/0xb0
[  497.150032][T30672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.155986][T30672] RIP: 0033:0x7f731a6bdff9
[  497.160454][T30672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.180094][T30672] RSP: 002b:00007f7319331038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  497.188612][T30672] RAX: ffffffffffffffda RBX: 00007f731a875f80 RCX: 00007f731a6bdff9
[  497.196621][T30672] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006
[  497.204772][T30672] RBP: 00007f7319331090 R08: 0000000000000000 R09: 0000000000000000
[  497.212785][T30672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.221072][T30672] R13: 0000000000000000 R14: 00007f731a875f80 R15: 00007ffe2e1edf78
[  497.229112][T30672]  </TASK>
[  497.306453][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9100'.
[  497.336888][T30675] FAULT_INJECTION: forcing a failure.
[  497.336888][T30675] name failslab, interval 1, probability 0, space 0, times 0
[  497.349467][T30684] bpf_get_probe_write_proto: 5 callbacks suppressed
[  497.349506][T30684] syz.0.9102[30684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.349567][T30684] syz.0.9102[30684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.349765][T30684] syz.0.9102[30684] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.356338][T30675] CPU: 1 UID: 0 PID: 30675 Comm: syz.2.9098 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  497.401615][T30675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  497.411852][T30675] Call Trace:
[  497.415136][T30675]  <TASK>
[  497.418095][T30675]  dump_stack_lvl+0xf2/0x150
[  497.422720][T30675]  dump_stack+0x15/0x20
[  497.426904][T30675]  should_fail_ex+0x223/0x230
[  497.431673][T30675]  ? iter_file_splice_write+0x102/0x980
[  497.437351][T30675]  should_failslab+0x8f/0xb0
[  497.441952][T30675]  __kmalloc_noprof+0xa5/0x370
[  497.446797][T30675]  iter_file_splice_write+0x102/0x980
[  497.452258][T30675]  ? current_time+0xfa/0x1a0
[  497.456885][T30675]  ? atime_needs_update+0x3c5/0x3e0
[  497.462102][T30675]  ? touch_atime+0x110/0x350
[  497.466841][T30675]  ? shmem_file_splice_read+0x572/0x5c0
[  497.472471][T30675]  ? __pfx_iter_file_splice_write+0x10/0x10
[  497.478607][T30675]  direct_splice_actor+0x160/0x2c0
[  497.483805][T30675]  splice_direct_to_actor+0x302/0x670
[  497.489239][T30675]  ? __pfx_direct_splice_actor+0x10/0x10
[  497.494956][T30675]  do_splice_direct+0xd7/0x150
[  497.499812][T30675]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  497.505889][T30675]  do_sendfile+0x39b/0x970
[  497.510387][T30675]  __x64_sys_sendfile64+0x110/0x150
[  497.515681][T30675]  x64_sys_call+0xed5/0x2d60
[  497.520307][T30675]  do_syscall_64+0xc9/0x1c0
[  497.524939][T30675]  ? clear_bhb_loop+0x55/0xb0
[  497.529693][T30675]  ? clear_bhb_loop+0x55/0xb0
[  497.534412][T30675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.540329][T30675] RIP: 0033:0x7fd8e9b9dff9
[  497.544809][T30675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.564501][T30675] RSP: 002b:00007fd8e8811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  497.572940][T30675] RAX: ffffffffffffffda RBX: 00007fd8e9d55f80 RCX: 00007fd8e9b9dff9
[  497.580972][T30675] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006
[  497.589059][T30675] RBP: 00007fd8e8811090 R08: 0000000000000000 R09: 0000000000000000
[  497.597057][T30675] R10: 000000000000e065 R11: 0000000000000246 R12: 0000000000000001
[  497.605036][T30675] R13: 0000000000000000 R14: 00007fd8e9d55f80 R15: 00007ffd06b060a8
[  497.613028][T30675]  </TASK>
[  497.684461][T30684] netlink: 93 bytes leftover after parsing attributes in process `syz.0.9102'.
[  497.694187][T30684] netlink: 93 bytes leftover after parsing attributes in process `syz.0.9102'.
[  497.759545][T30693] xt_hashlimit: max too large, truncated to 1048576
[  497.802841][T30698] syz.0.9109[30698] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.802917][T30698] syz.0.9109[30698] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.826569][T30698] syz.0.9109[30698] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  497.882987][T30703] 9pnet: Could not find request transport: fd3rfdno=‹ãל¸ˆ¶œ07&
[  498.105778][T30731] xt_hashlimit: max too large, truncated to 1048576
[  498.192335][T30741] tmpfs: Bad value for 'nr_blocks'
[  498.306041][T30747] FAULT_INJECTION: forcing a failure.
[  498.306041][T30747] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  498.319465][T30747] CPU: 0 UID: 0 PID: 30747 Comm: syz.0.9127 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  498.330269][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  498.340344][T30747] Call Trace:
[  498.343643][T30747]  <TASK>
[  498.346594][T30747]  dump_stack_lvl+0xf2/0x150
[  498.351216][T30747]  dump_stack+0x15/0x20
[  498.355480][T30747]  should_fail_ex+0x223/0x230
[  498.360200][T30747]  should_fail_alloc_page+0xfd/0x110
[  498.365546][T30747]  __alloc_pages_noprof+0x109/0x340
[  498.370856][T30747]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  498.376423][T30747]  folio_alloc_mpol_noprof+0x36/0x70
[  498.381771][T30747]  shmem_get_folio_gfp+0x3d1/0xd90
[  498.386944][T30747]  shmem_write_begin+0xa2/0x180
[  498.391936][T30747]  generic_perform_write+0x1a8/0x4a0
[  498.397512][T30747]  ? current_time+0xfa/0x1a0
[  498.402141][T30747]  shmem_file_write_iter+0xc2/0xe0
[  498.407446][T30747]  vfs_write+0x76a/0x910
[  498.411771][T30747]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  498.417614][T30747]  ksys_write+0xeb/0x1b0
[  498.422000][T30747]  __x64_sys_write+0x42/0x50
[  498.426718][T30747]  x64_sys_call+0x27dd/0x2d60
[  498.431464][T30747]  do_syscall_64+0xc9/0x1c0
[  498.436001][T30747]  ? clear_bhb_loop+0x55/0xb0
[  498.440761][T30747]  ? clear_bhb_loop+0x55/0xb0
[  498.445561][T30747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.451539][T30747] RIP: 0033:0x7f731a6bdff9
[  498.455992][T30747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  498.475709][T30747] RSP: 002b:00007f7319310038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  498.484192][T30747] RAX: ffffffffffffffda RBX: 00007f731a876058 RCX: 00007f731a6bdff9
[  498.492186][T30747] RDX: 000000000208e24b RSI: 00000000200004c0 RDI: 0000000000000009
[  498.500173][T30747] RBP: 00007f7319310090 R08: 0000000000000000 R09: 0000000000000000
[  498.508164][T30747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  498.516162][T30747] R13: 0000000000000000 R14: 00007f731a876058 R15: 00007ffe2e1edf78
[  498.524356][T30747]  </TASK>
[  498.566749][T30751] syz.3.9129[30751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.566829][T30751] syz.3.9129[30751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.578800][T30751] syz.3.9129[30751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  498.747763][T30762] syz.4.9133[30762] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  499.190472][T30773] usb usb9: usbfs: process 30773 (syz.0.9138) did not claim interface 0 before use
[  499.234899][T30773] __nla_validate_parse: 5 callbacks suppressed
[  499.234920][T30773] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9138'.
[  499.337920][T30779] delete_channel: no stack
[  499.346885][T30779] delete_channel: no stack
[  499.360192][T30779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30779 comm=syz.2.9140
[  499.485182][T30788] FAULT_INJECTION: forcing a failure.
[  499.485182][T30788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.498313][T30788] CPU: 1 UID: 0 PID: 30788 Comm: syz.0.9144 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  499.509104][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  499.519188][T30788] Call Trace:
[  499.522491][T30788]  <TASK>
[  499.525513][T30788]  dump_stack_lvl+0xf2/0x150
[  499.530237][T30788]  dump_stack+0x15/0x20
[  499.534532][T30788]  should_fail_ex+0x223/0x230
[  499.539236][T30788]  should_fail+0xb/0x10
[  499.543414][T30788]  should_fail_usercopy+0x1a/0x20
[  499.548490][T30788]  _copy_from_user+0x1e/0xd0
[  499.553094][T30788]  do_tcp_setsockopt+0x205/0x1550
[  499.558135][T30788]  ? selinux_socket_setsockopt+0x1e6/0x220
[  499.563961][T30788]  tcp_setsockopt+0x50/0xb0
[  499.568497][T30788]  sock_common_setsockopt+0x64/0x80
[  499.573872][T30788]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  499.579777][T30788]  __sys_setsockopt+0x1cc/0x240
[  499.584679][T30788]  __x64_sys_setsockopt+0x66/0x80
[  499.589798][T30788]  x64_sys_call+0x278d/0x2d60
[  499.594507][T30788]  do_syscall_64+0xc9/0x1c0
[  499.599038][T30788]  ? clear_bhb_loop+0x55/0xb0
[  499.603830][T30788]  ? clear_bhb_loop+0x55/0xb0
[  499.608702][T30788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.614714][T30788] RIP: 0033:0x7f731a6bdff9
[  499.619132][T30788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.639022][T30788] RSP: 002b:00007f7319331038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  499.647442][T30788] RAX: ffffffffffffffda RBX: 00007f731a875f80 RCX: 00007f731a6bdff9
[  499.655443][T30788] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003
[  499.663415][T30788] RBP: 00007f7319331090 R08: 0000000000000004 R09: 0000000000000000
[  499.671402][T30788] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001
[  499.679398][T30788] R13: 0000000000000000 R14: 00007f731a875f80 R15: 00007ffe2e1edf78
[  499.687407][T30788]  </TASK>
[  499.759665][T30790] syzkaller0: entered promiscuous mode
[  499.765299][T30790] syzkaller0: entered allmulticast mode
[  499.878627][T30790] lo speed is unknown, defaulting to 1000
[  499.988416][T30807] delete_channel: no stack
[  499.993492][T30807] delete_channel: no stack
[  500.001151][T30807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30807 comm=syz.0.9152
[  500.048937][T30806] loop1: detected capacity change from 0 to 512
[  500.059227][T30806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  500.093411][T30806] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  500.111913][T30806] EXT4-fs (loop1): 1 truncate cleaned up
[  500.118807][T30806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.230854][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.395301][T30825] xt_hashlimit: max too large, truncated to 1048576
[  500.512261][T30829] lo speed is unknown, defaulting to 1000
[  500.546974][T30829] FAULT_INJECTION: forcing a failure.
[  500.546974][T30829] name failslab, interval 1, probability 0, space 0, times 0
[  500.559621][T30829] CPU: 0 UID: 0 PID: 30829 Comm: syz.2.9158 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  500.570460][T30829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  500.580536][T30829] Call Trace:
[  500.583866][T30829]  <TASK>
[  500.586809][T30829]  dump_stack_lvl+0xf2/0x150
[  500.591445][T30829]  dump_stack+0x15/0x20
[  500.595613][T30829]  should_fail_ex+0x223/0x230
[  500.600321][T30829]  ? io_alloc_hash_table+0x2c/0x80
[  500.605524][T30829]  should_failslab+0x8f/0xb0
[  500.610248][T30829]  __kmalloc_noprof+0xa5/0x370
[  500.615100][T30829]  ? should_failslab+0x8f/0xb0
[  500.619948][T30829]  io_alloc_hash_table+0x2c/0x80
[  500.624954][T30829]  io_ring_ctx_alloc+0x95/0xd90
[  500.629844][T30829]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  500.635502][T30829]  io_uring_create+0x1cf/0x940
[  500.640309][T30829]  __se_sys_io_uring_setup+0x1d2/0x1e0
[  500.645790][T30829]  __x64_sys_io_uring_setup+0x31/0x40
[  500.651198][T30829]  x64_sys_call+0x1f7e/0x2d60
[  500.655981][T30829]  do_syscall_64+0xc9/0x1c0
[  500.660511][T30829]  ? clear_bhb_loop+0x55/0xb0
[  500.665221][T30829]  ? clear_bhb_loop+0x55/0xb0
[  500.669976][T30829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.675939][T30829] RIP: 0033:0x7fd8e9b9dff9
[  500.680371][T30829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.700023][T30829] RSP: 002b:00007fd8e87cefc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  500.708513][T30829] RAX: ffffffffffffffda RBX: 00007fd8e9d56130 RCX: 00007fd8e9b9dff9
[  500.716642][T30829] RDX: 0000000020000180 RSI: 0000000020000280 RDI: 00000000000005e4
[  500.724667][T30829] RBP: 0000000020000280 R08: 0000000000000000 R09: 0000000020000180
[  500.732653][T30829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  500.740869][T30829] R13: 0000000020000200 R14: 00000000000005e4 R15: 0000000020000180
[  500.748968][T30829]  </TASK>
[  500.803990][T30835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9161'.
[  500.835551][T30834] ./file0: Can't lookup blockdev
[  500.908906][T30841] ./file0: Can't lookup blockdev
[  501.074917][T30849] delete_channel: no stack
[  501.079491][T30849] delete_channel: no stack
[  501.085597][   T29] kauditd_printk_skb: 249 callbacks suppressed
[  501.085610][   T29] audit: type=1326 audit(2000000096.430:42007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.120737][T30849] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9166'.
[  501.173102][T30849] 1·: renamed from 
c0· (while UP)
[  501.179214][   T29] audit: type=1326 audit(2000000096.460:42008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.203137][   T29] audit: type=1326 audit(2000000096.460:42009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.227024][   T29] audit: type=1326 audit(2000000096.460:42010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.250801][   T29] audit: type=1326 audit(2000000096.460:42011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.274503][   T29] audit: type=1326 audit(2000000096.460:42012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.287353][T30856] loop1: detected capacity change from 0 to 512
[  501.298136][   T29] audit: type=1326 audit(2000000096.460:42013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  501.328424][   T29] audit: type=1326 audit(2000000096.460:42014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.352353][   T29] audit: type=1326 audit(2000000096.460:42015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.375878][   T29] audit: type=1326 audit(2000000096.460:42016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30848 comm="syz.3.9166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb7e5dff9 code=0x7ffc0000
[  501.378675][T30856] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  501.424303][T30849] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  501.461927][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9169'.
[  501.471131][T30856] EXT4-fs (loop1): 1 truncate cleaned up
[  501.477240][T30856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.582717][T30872] 9pnet_fd: Insufficient options for proto=fd
[  501.654900][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.802523][T30887] FAULT_INJECTION: forcing a failure.
[  501.802523][T30887] name failslab, interval 1, probability 0, space 0, times 0
[  501.815337][T30887] CPU: 0 UID: 0 PID: 30887 Comm: syz.1.9177 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  501.826220][T30887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  501.836358][T30887] Call Trace:
[  501.839649][T30887]  <TASK>
[  501.842669][T30887]  dump_stack_lvl+0xf2/0x150
[  501.847308][T30887]  dump_stack+0x15/0x20
[  501.851531][T30887]  should_fail_ex+0x223/0x230
[  501.856252][T30887]  ? do_eventfd+0x58/0x1b0
[  501.860740][T30887]  should_failslab+0x8f/0xb0
[  501.865365][T30887]  __kmalloc_cache_noprof+0x4b/0x2a0
[  501.870778][T30887]  ? __secure_computing+0x9f/0x1c0
[  501.876045][T30887]  do_eventfd+0x58/0x1b0
[  501.880320][T30887]  __x64_sys_eventfd2+0x2d/0x40
[  501.885200][T30887]  x64_sys_call+0x2805/0x2d60
[  501.889899][T30887]  do_syscall_64+0xc9/0x1c0
[  501.894608][T30887]  ? clear_bhb_loop+0x55/0xb0
[  501.899328][T30887]  ? clear_bhb_loop+0x55/0xb0
[  501.904032][T30887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.909953][T30887] RIP: 0033:0x7f26c53fdff9
[  501.914373][T30887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.934089][T30887] RSP: 002b:00007f26c4077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122
[  501.942596][T30887] RAX: ffffffffffffffda RBX: 00007f26c55b5f80 RCX: 00007f26c53fdff9
[  501.950595][T30887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400
[  501.958664][T30887] RBP: 00007f26c4077090 R08: 0000000000000000 R09: 0000000000000000
[  501.966680][T30887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.974707][T30887] R13: 0000000000000000 R14: 00007f26c55b5f80 R15: 00007ffce8c29da8
[  501.982780][T30887]  </TASK>
[  502.552583][T30896] delete_channel: no stack
[  502.557067][T30896] delete_channel: no stack
[  502.573655][T30896] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9182'.
[  502.575762][T30900] bpf_get_probe_write_proto: 5 callbacks suppressed
[  502.575780][T30900] syz.0.9184[30900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.589514][T30896] 1·: renamed from 
c0· (while UP)
[  502.589773][T30899] syz.3.9183[30899] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.607048][T30900] syz.0.9184[30900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.618593][T30900] syz.0.9184[30900] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.631082][T30899] syz.3.9183[30899] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.643204][T30896] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  502.654868][T30899] syz.3.9183[30899] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.719682][T30910] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  502.742603][T30913] FAULT_INJECTION: forcing a failure.
[  502.742603][T30913] name failslab, interval 1, probability 0, space 0, times 0
[  502.755362][T30913] CPU: 0 UID: 0 PID: 30913 Comm: syz.2.9188 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  502.766184][T30913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  502.776252][T30913] Call Trace:
[  502.779579][T30913]  <TASK>
[  502.782611][T30913]  dump_stack_lvl+0xf2/0x150
[  502.787267][T30913]  dump_stack+0x15/0x20
[  502.791429][T30913]  should_fail_ex+0x223/0x230
[  502.796204][T30913]  ? __se_sys_mount+0xf7/0x2d0
[  502.801061][T30913]  should_failslab+0x8f/0xb0
[  502.805682][T30913]  __kmalloc_cache_noprof+0x4b/0x2a0
[  502.811006][T30913]  __se_sys_mount+0xf7/0x2d0
[  502.815681][T30913]  ? fput+0x14e/0x190
[  502.819699][T30913]  ? ksys_write+0x17a/0x1b0
[  502.824463][T30913]  __x64_sys_mount+0x67/0x80
[  502.829092][T30913]  x64_sys_call+0x203e/0x2d60
[  502.833808][T30913]  do_syscall_64+0xc9/0x1c0
[  502.838335][T30913]  ? clear_bhb_loop+0x55/0xb0
[  502.843046][T30913]  ? clear_bhb_loop+0x55/0xb0
[  502.847773][T30913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.853745][T30913] RIP: 0033:0x7fd8e9b9dff9
[  502.858418][T30913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.878125][T30913] RSP: 002b:00007fd8e8811038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  502.886684][T30913] RAX: ffffffffffffffda RBX: 00007fd8e9d55f80 RCX: 00007fd8e9b9dff9
[  502.894668][T30913] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000
[  502.902720][T30913] RBP: 00007fd8e8811090 R08: 0000000020000300 R09: 0000000000000000
[  502.910720][T30913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.918917][T30913] R13: 0000000000000000 R14: 00007fd8e9d55f80 R15: 00007ffd06b060a8
[  502.926913][T30913]  </TASK>
[  502.978301][T30918] loop1: detected capacity change from 0 to 128
[  502.990016][T30910] sd 0:0:1:0: device reset
[  502.998771][T30918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  503.014179][T30921] syz.2.9191[30921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.014329][T30921] syz.2.9191[30921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.031097][T30916] syz.3.9189[30916] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.046152][T30918] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  503.095832][T30921] syz.2.9191[30921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  503.191899][T29347] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  503.247924][T30932] loop1: detected capacity change from 0 to 1024
[  503.277275][T30932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.366050][T29347] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.439283][T30939] netlink: 264 bytes leftover after parsing attributes in process `syz.3.9197'.
[  503.467715][T30941] delete_channel: no stack
[  503.472419][T30941] delete_channel: no stack
[  503.479297][T30941] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9198'.
[  503.488962][T30941] 0·: renamed from 
c1· (while UP)
[  503.497005][T30941] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  503.514252][T30942] loop1: detected capacity change from 0 to 128
[  506.516153][ T3381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.654780][ T3381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.705727][ T3381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.751014][   T29] kauditd_printk_skb: 158 callbacks suppressed
[  506.751033][   T29] audit: type=1400 audit(2000000102.090:42175): avc:  denied  { execmem } for  pid=30991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  506.785162][ T3381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.892319][ T3381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.904181][ T3381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.914506][ T3381] bond0 (unregistering): Released all slaves
[  506.966277][ T3381] hsr_slave_0: left promiscuous mode
[  506.972275][ T3381] 0·: left promiscuous mode
[  506.978755][ T3381] veth1_macvtap: left promiscuous mode
[  506.984356][ T3381] veth0_macvtap: left promiscuous mode
[  506.989914][ T3381] veth1_vlan: left promiscuous mode
[  506.995202][ T3381] veth0_vlan: left promiscuous mode
[  507.086932][ T3381] team0 (unregistering): Port device team_slave_1 removed
[  507.098857][ T3381] team0 (unregistering): Port device team_slave_0 removed
[  507.140197][   T24] lo speed is unknown, defaulting to 1000
[  507.559986][   T29] audit: type=1400 audit(2000000102.900:42176): avc:  denied  { execmem } for  pid=30992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  507.581878][   T29] audit: type=1400 audit(2000000102.930:42177): avc:  denied  { recv } for  pid=22135 comm="syz.3.5921" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  507.629730][   T29] audit: type=1400 audit(2000000102.970:42178): avc:  denied  { recv } for  pid=22135 comm="syz.3.5921" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  508.469131][   T29] audit: type=1400 audit(2000000103.810:42179): avc:  denied  { execmem } for  pid=30993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  509.497370][   T29] audit: type=1400 audit(2000000104.840:42180): avc:  denied  { execmem } for  pid=30994 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  510.606513][   T29] audit: type=1400 audit(2000000105.950:42181): avc:  denied  { execmem } for  pid=30995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  511.022050][   T29] audit: type=1400 audit(2000000106.370:42182): avc:  denied  { recv } for  pid=3332 comm="kworker/0:2" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  511.213457][   T29] audit: type=1400 audit(2000000106.560:42183): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  511.816028][   T29] audit: type=1400 audit(2000000107.160:42184): avc:  denied  { execmem } for  pid=30996 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  513.144502][   T29] audit: type=1400 audit(2000000108.490:42185): avc:  denied  { execmem } for  pid=30997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  514.572856][   T29] audit: type=1400 audit(2000000109.920:42186): avc:  denied  { execmem } for  pid=30998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
May 18 03:35:10 [  515.093576][   T29] audit: type=1400 audit(2000000110.440:42187): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  515.117064][   T29] audit: type=1400 audit(2000000110.440:42188): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[3005]: ps_sendpsmmsg: Connection refused
May 18 03:35:10 syzkaller daemon.err dhcpcd[3005]: ps_root_recvmsgcb: failed to send message to pid 28266: Connection refused
[  516.103930][   T29] audit: type=1400 audit(2000000111.450:42189): avc:  denied  { execmem } for  pid=30999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  517.710546][   T29] audit: type=1400 audit(2000000113.050:42190): avc:  denied  { execmem } for  pid=31000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  518.312609][   T29] audit: type=1400 audit(2000000113.660:42191): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  518.380868][   T29] audit: type=1400 audit(2000000113.720:42192): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  519.438978][   T29] audit: type=1400 audit(2000000114.780:42193): avc:  denied  { execmem } for  pid=31001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
May 18 03:35:15 [  519.777287][   T29] audit: type=1400 audit(2000000115.120:42194): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon.err dhcpcd[3005[  519.802370][   T29] audit: type=1400 audit(2000000115.150:42195): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
]: ps_sendpsmmsg: Connection refused
May 18 03:35:15 syzkaller daemon.err dhcpcd[3005]: ps_root_recvmsgcb: failed to send message to pid 28541: Connection refused
[  521.268126][   T29] audit: type=1400 audit(2000000116.610:42196): avc:  denied  { execmem } for  pid=31002 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
May 18 03:35:17 [  522.606484][   T29] audit: type=1400 audit(2000000117.950:42197): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  522.630560][   T29] audit: type=1400 audit(2000000117.980:42198): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[3005]: ps_sendpsmmsg: Connection refused
May 18 03:35:17 syzkaller daemon.err dhcpcd[3005]: ps_root_recvmsgcb: failed to send message to pid 28694: Connection refused
[  523.177085][   T29] audit: type=1400 audit(2000000118.520:42199): avc:  denied  { execmem } for  pid=31003 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
May 18 03:35:18 [  523.559852][   T29] audit: type=1400 audit(2000000118.900:42200): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
syzkaller daemon[  523.583153][   T29] audit: type=1400 audit(2000000118.900:42201): avc:  denied  { read } for  pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0
.err dhcpcd[3005]: ps_sendpsmmsg: Connection refused
May 18 03:35:18 syzkaller daemon.err dhcpcd[3005]: ps_root_recvmsgcb: failed to send message to pid 28718: Connection refused
[  525.205136][   T29] audit: type=1400 audit(2000000120.550:42202): avc:  denied  { execmem } for  pid=31004 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[  525.251668][   T29] audit: type=1400 audit(2000000120.570:42203): avc:  denied  { write } for  pid=3251 comm="syz-executor" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  525.275006][   T29] audit: type=1400 audit(2000000120.570:42204): avc:  denied  { write } for  pid=3251 comm="syz-executor" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  525.298159][   T29] audit: type=1400 audit(2000000120.570:42205): avc:  denied  { write } for  pid=3251 comm="syz-executor" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  525.321385][   T29] audit: type=1400 audit(2000000120.570:42206): avc:  denied  { write } for  pid=3251 comm="syz-executor" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  525.344890][   T29] audit: type=1400 audit(2000000120.570:42207): avc:  denied  { write } for  pid=3251 comm="syz-executor" path="pipe:[649]" dev="pipefs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0
[  525.383488][   T29] audit: type=1400 audit(2000000120.670:42208): avc:  denied  { recv } for  pid=26665 comm="syz-executor" saddr=10.128.0.163 src=33278 daddr=10.128.0.40 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  525.606228][   T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.715591][   T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.774966][   T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.835605][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.264291][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.274993][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.285262][   T36] bond0 (unregistering): Released all slaves
[  526.375594][   T36] hsr_slave_0: left promiscuous mode
[  526.381272][   T36] 0·: left promiscuous mode
[  526.387874][   T36] veth1_vlan: left promiscuous mode
[  526.393166][   T36] veth0_vlan: left promiscuous mode
[  526.471126][   T36] team0 (unregistering): Port device team_slave_1 removed
[  526.482739][   T36] team0 (unregistering): Port device team_slave_0 removed
[  526.836008][   T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.906172][   T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.974598][   T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.044725][   T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.110336][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.204839][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.254637][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.324311][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.614929][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.625589][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.635601][   T36] bond0 (unregistering): Released all slaves
[  527.645125][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.655394][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.665424][   T36] bond0 (unregistering): Released all slaves
[  527.674878][   T36] bond1 (unregistering): Released all slaves
[  527.737572][   T36] hsr_slave_0: left promiscuous mode
[  527.743627][   T36] 1·: left promiscuous mode
[  527.748519][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.755953][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.763732][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.771147][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.780055][   T36] hsr_slave_0: left promiscuous mode
[  527.786534][   T36] 0·: left promiscuous mode
[  527.794221][   T36] veth1_vlan: left promiscuous mode
[  527.799490][   T36] veth0_vlan: left promiscuous mode
[  527.805484][   T36] veth1_vlan: left promiscuous mode
[  527.810728][   T36] veth0_vlan: left promiscuous mode
[  527.929668][   T36] team0 (unregistering): Port device team_slave_1 removed
[  527.940986][   T36] team0 (unregistering): Port device team_slave_0 removed
[  528.006155][   T36] team0 (unregistering): Port device team_slave_1 removed
[  528.017696][   T36] team0 (unregistering): Port device team_slave_0 removed
[  528.603443][   T36] IPVS: stop unused estimator thread 0...
[  528.620181][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  528.620200][   T29] audit: type=1400 audit(2000000123.960:42220): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=33278 daddr=10.128.0.40 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  528.861861][   T29] audit: type=1400 audit(2000000124.210:42221): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=33278 daddr=10.128.0.40 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  530.081563][    C0] ==================================================================
[  530.089759][    C0] BUG: KCSAN: data-race in __tmigr_cpu_activate / tmigr_handle_remote
[  530.097931][    C0] 
[  530.100258][    C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1:
[  530.107621][    C0]  __tmigr_cpu_activate+0x55/0x200
[  530.112752][    C0]  tmigr_cpu_activate+0x8a/0xc0
[  530.117601][    C0]  timer_clear_idle+0x28/0x100
[  530.122363][    C0]  tick_nohz_restart_sched_tick+0x22/0x110
[  530.128188][    C0]  tick_nohz_idle_exit+0xfe/0x1d0
[  530.133220][    C0]  do_idle+0x1ee/0x230
[  530.137302][    C0]  cpu_startup_entry+0x25/0x30
[  530.142108][    C0]  start_secondary+0x96/0xa0
[  530.146704][    C0]  common_startup_64+0x12c/0x137
[  530.151749][    C0] 
[  530.154157][    C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0:
[  530.161694][    C0]  tmigr_handle_remote+0x26e/0x940
[  530.166812][    C0]  run_timer_softirq+0x5f/0x70
[  530.171596][    C0]  handle_softirqs+0xbf/0x280
[  530.176271][    C0]  irq_exit_rcu+0x3e/0x90
[  530.180599][    C0]  sysvec_apic_timer_interrupt+0x73/0x80
[  530.186246][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  530.192271][    C0]  madvise_cold_or_pageout_pte_range+0x54d/0xf30
[  530.198617][    C0]  walk_pgd_range+0x7ed/0xec0
[  530.203293][    C0]  __walk_page_range+0xc5/0x330
[  530.208161][    C0]  walk_page_range+0x395/0x4e0
[  530.213014][    C0]  do_madvise+0x1a7a/0x2660
[  530.217546][    C0]  __x64_sys_madvise+0x61/0x70
[  530.222335][    C0]  x64_sys_call+0x2320/0x2d60
[  530.227027][    C0]  do_syscall_64+0xc9/0x1c0
[  530.231624][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.237522][    C0] 
[  530.239868][    C0] value changed: 0x00 -> 0x01
[  530.244651][    C0] 
[  530.246985][    C0] Reported by Kernel Concurrency Sanitizer on:
[  530.253149][    C0] CPU: 0 UID: 0 PID: 22159 Comm: syz.3.5921 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0
[  530.263910][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  530.273962][    C0] ==================================================================
[  532.203874][   T29] audit: type=1400 audit(2000000127.550:42222): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=33278 daddr=10.128.0.40 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  532.301951][   T29] audit: type=1400 audit(2000000127.650:42223): avc:  denied  { recv } for  pid=0 comm="swapper/1" saddr=10.128.0.163 src=33278 daddr=10.128.0.40 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  532.381936][   T29] audit: type=1400 audit(2000000127.730:42224): avc:  denied  { recv } for  pid=22135 comm="syz.3.5921" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0
[  532.459817][   T29] audit: type=1400 audit(2000000127.800:42225): avc:  denied  { recv } for  pid=22135 comm="syz.3.5921" saddr=10.128.0.163 src=30030 daddr=10.128.0.40 dest=36458 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0