last executing test programs:

3.352400669s ago: executing program 2 (id=538):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0xb7fd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

3.351777349s ago: executing program 2 (id=539):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x28, 0x80, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x62, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x7ec}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0xf, 0x2}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x9, 0x4, 0xc0, 0x8, 0x8}, 0x47, &(0x7f0000000580)={0x5, 0xf, 0x47, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x5, 0x8001}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "7451dd5a8fff5e4198d693c6a2118afd"}, @ss_container_id={0x14, 0x10, 0x4, 0x26, "7ec7cf64f562e759c9acef6c855325ae"}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x6, 0xf00, 0x37a6, [0xf0]}]}, 0x5, [{0x8e, &(0x7f0000000840)=@string={0x8e, 0x3, "aa03bf1613bec0e2a6549849884863baae16a65d43ca49c060571b99600e8ea4a54a1bc97bfd3630cfef15216ad5ae0b438504137d98c4a802f9bede6b94961285c495d2b9cbeafa0c03da60b8b2f67975a192706a1a856a52bd8e91dce662cfde05fd2c62da54e66ab25cf64caf4ad0554bfd921ef2920991f237396467ea831a584872918ef86d1ae40fc1"}}, {0x1a, &(0x7f0000000600)=@string={0x1a, 0x3, "353855a0e96ef3d94f6f6814c13cdd6b538c041183418357"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x180c}}, {0x7f, &(0x7f0000000900)=@string={0x7f, 0x3, "172a4b47f58f80deaf802aac132edf312500a11e3d9acb5f67aac2e2631e1d28e39837cfff0414d0e688e3326ad368dcf99c1df1270b862ad4efd592afa3f9301b29993a8c4611f2c0cce9c4c3ede5d687cf5959cb6d38795c839b8591b2d2141dd2e05f45885194cfcf3faf8a86183a04829b5a5bbc5d9f342d18297f"}}, {0x52, &(0x7f0000000980)=@string={0x52, 0x3, "f47ba9908f0d1d2c3902d5acd57beb0cc8ceab4952cae8f21648f57f48a615c06aa7fff76b83a48d8eff6d2d7e64436816d0e54ad9962789ddf03881452c0ff2678fc518b1bb9eca790fd4f086b4ab04"}}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.808615067s ago: executing program 2 (id=552):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r5 = dup(r4)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x769}, 0x18)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000ffdfffffffffdff30630869308004500001c0000000000329078ac1e0101e00000010000000000089078"], 0x2e)

1.906214471s ago: executing program 2 (id=565):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2, 0x1}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x0, 0x6, 0x3})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000656761b40000000000feff00000000000a20000000000a01020000000000000000010000400900010073797a30000000002c000000d57201080000000000000000010000000900030073797a32000000000900010073797a30000000004c001aff2e231fe0add45efda611070000060a010400000000000000000100000008000b40000000000900010073797a3000000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140fffffffe14000000110001"], 0xc0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000710008002cbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x80)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
brk(0x200000001000)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0)

828.229177ms ago: executing program 0 (id=575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x6}, 0x18)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x40)

826.869077ms ago: executing program 4 (id=576):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x8, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0x10, 0x2}, {0x5, 0x5}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x41, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0xe, 0x3}, {0x9, 0x3}, {0xe}]}, @float={0x10, 0x0, 0x0, 0x10, 0x8}, @datasec={0xf, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xf, 0x8b}, {0x3, 0xb, 0x5}], 'BR'}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xfffffffb}}]}, {0x0, [0x5f, 0x61, 0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000002680)=""/4096, 0xe4, 0x1000, 0x0, 0x7ff, 0x0, @void, @value}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

796.683678ms ago: executing program 3 (id=577):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x0)
poll(&(0x7f0000000040)=[{r3, 0x2124}, {r3, 0xb0c4}], 0x2, 0x11ff)
shutdown(r3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x3c}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r11, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02200090780000"], 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)

779.935778ms ago: executing program 4 (id=578):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

741.170339ms ago: executing program 1 (id=579):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r0)

739.320529ms ago: executing program 4 (id=580):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

698.42619ms ago: executing program 4 (id=581):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000000300000000", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff0000000000"], 0x1bc}}, 0x4804)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000e00)={0x1, 0xfffffffffffffe00, 0x1, 0x39, 0x0, 0x0, 0x0, 0xfd, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x10}, 0x0, 0x0, 0x10040003, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
tkill(0x0, 0xe)
syz_clone3(&(0x7f0000000540)={0x28000000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0x0], 0x1}, 0x58)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000001, 0x0, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfd, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000001000)='cq_free\x00', r4, 0x0, 0xa}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x110, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bd, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000001240)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="980000005400000126bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="983cdfdc8136000000001da714e2e72070def65053159860ed2afb29a7f90000f3d5000100", @ANYRES32=0x0, @ANYBLOB="00020000e000000200000000000000000000000005ba000020000100", @ANYRES32=0x0, @ANYBLOB="00000200640101020000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="00020300ac1414aa0000000000000000000000008edd000020000100", @ANYRES32=0x0, @ANYBLOB="00000200"/18], 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$autofs(0xffffffffffffff9c, 0x0, 0x140, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

651.02535ms ago: executing program 0 (id=582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x18}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

650.122ms ago: executing program 1 (id=583):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x8, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0x10, 0x2}, {0x5, 0x5}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x41, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0xe, 0x3}, {0x9, 0x3}, {0xe}]}, @float={0x10, 0x0, 0x0, 0x10, 0x8}, @datasec={0xf, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xf, 0x8b}, {0x3, 0xb, 0x5}], 'BR'}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xfffffffb}}]}, {0x0, [0x5f, 0x61, 0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000002680)=""/4096, 0xe4, 0x1000, 0x0, 0x7ff, 0x0, @void, @value}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

599.170981ms ago: executing program 2 (id=584):
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000340)={&(0x7f00000011c0), 0x0})
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000018ab58b9d4bda859fb2013e5f230000000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x20006d00, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x1fb)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', <r7=>0x0, 0x29, 0x69, 0x4, 0x405, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x80, 0x80, 0x20000401, 0xffffff81}})
getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@private2, <r8=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', <r9=>0x0, 0x700, 0x7, 0x5, 0x2, {{0xe, 0x4, 0x3, 0x4, 0x38, 0x65, 0x0, 0x4d, 0x4, 0x0, @broadcast, @private=0xa010102, {[@rr={0x7, 0x23, 0xf5, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}]}}}}})
r10 = socket(0x400000000010, 0x2, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, 0x0, 0x8080)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0)
getpeername$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r13=>0x0}, &(0x7f0000000c00)=0x14)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf25090000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d3000000000000000000000000c00018008000100", @ANYRES32=r6, @ANYBLOB="2b58a8ee3621535e", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="140002006970766c616e310000000000000000001400020073797a5f74756e0000000000000000001400020076657468315f6d6163767461700000001400020076657468305f746f5f62726964676500600001801400020076657468305f746f5f62617461647600140002006d6163766c616e31000000000000000008000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r12, @ANYBLOB="1400020069703665727370616e3000000000000020000180140002006c6f000000000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x800)
connect$netlink(r4, 0x0, 0x0)
ftruncate(r4, 0x2007ffc)
sendfile(r4, r4, 0x0, 0x800000009)
writev(0xffffffffffffffff, 0x0, 0x0)

598.328961ms ago: executing program 1 (id=585):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x10238d, 0x10003, 0x4, 0x4, 0x8, 0x20005, 0x2d, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231", 0xc5}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

527.067722ms ago: executing program 1 (id=586):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

499.008302ms ago: executing program 3 (id=587):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xb7fd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

461.757113ms ago: executing program 1 (id=588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
r5 = open(&(0x7f0000000140)='./file0\x00', 0x10f3c0, 0x186)
fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@usrquota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000020000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000000080014"], 0x4c}}, 0x0)

455.176293ms ago: executing program 3 (id=589):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) (async)
r3 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r3, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200)
openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) (async)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
dup(r5) (async)
r6 = dup(r5)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote}}}}}}}, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000040))
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r10, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001140)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x47}, 0x1c, 0x0, 0x0, &(0x7f0000001480)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7594}}], 0x30}}], 0x2, 0x4040005)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@md0, 0x0, &(0x7f0000000ac0))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r11, 0x25, 0x0, @val=@netfilter}, 0x40) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r11, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r12, 0x4)
mq_unlink(&(0x7f0000000000)='eth0\x00')

391.733504ms ago: executing program 0 (id=590):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = epoll_create(0x203ff)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="070000d7f3a4fafb390bb5ff010028efe3ff0d762da8040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94)
read(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r6, &(0x7f0000000280)={0x2000000, 0x200000000000000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8)
sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=<r10=>r9, @ANYRESHEX=r0], 0x28}}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=r10, @ANYRES8=r2, @ANYRES8=r3, @ANYRES16=r6], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000500))
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x3)

386.732634ms ago: executing program 0 (id=591):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0, 0x0, 0x2}, 0x18)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

335.911805ms ago: executing program 0 (id=592):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
r6 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c06417e436a106993e1e5ad8311dabcd25ca", 0x24}, {0x0}], 0x2}}], 0x1, 0x24000004)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f00000000c0)={0x1, 0x1, [@multicast]})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYBLOB="10040cfe43265e612a9afb5718f665b277362d7514f62ce37b3c878ec6e28b06acded84cd2954dc19a2b494c272ceaceca30b31e78de35765e18c81554bfe245386e005b9dbb79a846f88e5370fc84e6261ac26a1d54e68b2f3c80247cb6f7ea1964f0c3e96e7faaa5472161ea71f1d1a7be4af390dab82134eed0e2ef66a350abad6e93280b54da898422edaef3d19d2abdb3b0de972612b5d413254f911bd57a075aedf48247007cfeb2d793735eb5d3b545198ac97f8fd5bf"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

199.959367ms ago: executing program 1 (id=593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffe0}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x9}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x20001000)

157.938618ms ago: executing program 4 (id=594):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r0)

157.375287ms ago: executing program 3 (id=595):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x8, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0x10, 0x2}, {0x5, 0x5}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x41, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {0xe, 0x3}, {0x9, 0x3}, {0xe}]}, @float={0x10, 0x0, 0x0, 0x10, 0x8}, @datasec={0xf, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xf, 0x8b}, {0x3, 0xb, 0x5}], 'BR'}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xfffffffb}}]}, {0x0, [0x5f, 0x61, 0x61, 0x5f, 0x0, 0x61]}}, &(0x7f0000002680)=""/4096, 0xe4, 0x1000, 0x0, 0x7ff, 0x0, @void, @value}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)

113.587158ms ago: executing program 3 (id=596):
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x7, 0x8, 0x5, 0x0, 0x8, 0x20000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x80000001, 0x2}, 0x4100, 0x8, 0x1, 0x2, 0x4, 0x401, 0x18, 0x0, 0x3fc, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0x7, 0x8, 0x5, 0x0, 0x8, 0x20000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x80000001, 0x2}, 0x4100, 0x8, 0x1, 0x2, 0x4, 0x401, 0x18, 0x0, 0x3fc, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x32}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}}, 0x80)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf32(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0x2, 0x7, 0x3, 0x7ff, 0x2, 0x6, 0x80, 0x119, 0x38, 0x1e0, 0x5, 0x7ff, 0x20, 0x2, 0x7fff, 0x5, 0x829}, [{0x6, 0xf, 0x40, 0x9, 0x8, 0x0, 0x2, 0x7f}, {0x6, 0x3, 0x4, 0x3, 0x7fff, 0x3ff, 0x9, 0x2}], "fd5c4192ea0ef0368665254933", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x685)
dup(r0) (async)
r4 = dup(r0)
sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3fa, 0x20, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0x0, 0x1}}, 0x20}}, 0x4000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80000001}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x9d48e8e0affffafd, 0x40, 0x10}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x6}]}, &(0x7f0000000a40)='GPL\x00', 0x101, 0x25, &(0x7f0000000a80)=""/37, 0x0, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000ac0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x1, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x0, 0x1, 0x9, 0xc}], 0x10, 0xfffffff8, @void, @value}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x80000001}, [@jmp={0x5, 0x0, 0x3, 0x7, 0x9d48e8e0affffafd, 0x40, 0x10}, @cb_func={0x18, 0xc, 0x4, 0x0, 0x6}]}, &(0x7f0000000a40)='GPL\x00', 0x101, 0x25, &(0x7f0000000a80)=""/37, 0x0, 0xa, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000ac0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x1, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x0, 0x1, 0x9, 0xc}], 0x10, 0xfffffff8, @void, @value}, 0x94)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000cc0)={0xa, 0x4e24, 0x6000000, @remote, 0x906a}, 0x1c) (async)
connect$inet6(r4, &(0x7f0000000cc0)={0xa, 0x4e24, 0x6000000, @remote, 0x906a}, 0x1c)
openat(r4, &(0x7f0000000d00)='./file0\x00', 0x100, 0x45) (async)
r6 = openat(r4, &(0x7f0000000d00)='./file0\x00', 0x100, 0x45)
sendto$inet_nvme_pdu(r6, &(0x7f0000000d40)=@data_h2c_hdigest={{0x6, 0x5, 0x18, 0x1c, 0x80000000}, 0x200, 0x7ff, 0x10f, 0x6, "e532c95d"}, 0x80, 0x0, 0x0, 0x0) (async)
sendto$inet_nvme_pdu(r6, &(0x7f0000000d40)=@data_h2c_hdigest={{0x6, 0x5, 0x18, 0x1c, 0x80000000}, 0x200, 0x7ff, 0x10f, 0x6, "e532c95d"}, 0x80, 0x0, 0x0, 0x0)
r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14, 0x80000)
sendmmsg$inet(r7, &(0x7f0000001040)=[{{&(0x7f0000000e40)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="1631d418f72a079e1542616f796d49df712e4db7035a34ff30d7901086413e2b4976f5d2b7cc7fadc15e7d88ef046ebdc483b345fc8fc223410f5f3b805b90a55799", 0x42}], 0x1, &(0x7f0000000f40)=[@ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x4d, [@private=0xa010100, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@cipso={0x86, 0x47, 0x1, [{0x7, 0xa, "b65e056800d295d9"}, {0x3, 0x7, "9c98285cdc"}, {0x0, 0x9, "be8d0230ef2e5c"}, {0x0, 0x6, "46a02c3f"}, {0x5, 0x2}, {0x0, 0xf, "6fbcfd7e6043dd85fa56c2df59"}, {0x2, 0x2}, {0x6, 0x5, "6a5d19"}, {0x2, 0x5, "fa2631"}, {0x7, 0x4, "c226"}]}, @noop, @lsrr={0x83, 0x13, 0xbe, [@broadcast, @remote, @multicast1, @multicast1]}, @ssrr={0x89, 0xb, 0x18, [@multicast1, @private=0xa010100]}, @ssrr={0x89, 0x13, 0xf5, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @end, @generic={0x89, 0xe, "fa148fe201b02c96cef2e373"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0xf0}}], 0x1, 0x4000)
getsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002280), 0x2200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x0, 0x1c, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001200)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x10, '\x00', r8, @fallback=0x3c, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002240)={0x0, 0x8, 0xe000, 0x2}, 0x10, 0xffffffffffffffff, r5, 0x4, &(0x7f00000022c0)=[r4, r6, r9, r6, r4, r6], &(0x7f0000002300)=[{0x4, 0x5, 0x6, 0x85aa5174d3e5d431}, {0x4, 0x1, 0x8, 0x6}, {0x0, 0x3, 0x8, 0x8}, {0x2, 0x3, 0x10, 0xa}], 0x10, 0xff, @void, @value}, 0x94)
gettid() (async)
r10 = gettid()
perf_event_open(&(0x7f0000002400)={0x3, 0x80, 0x6, 0x0, 0xdf, 0x0, 0x0, 0x8000000000000001, 0x4000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7fff, 0x7}, 0x7, 0x3, 0x5, 0x2, 0x2, 0x401, 0x5, 0x0, 0xb2, 0x0, 0x7fffffffffffffff}, r10, 0x7, r4, 0x2)
mq_unlink(&(0x7f0000002480)='+:\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000024c0)=0x89d1) (async)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000024c0)=0x89d1)
socket$kcm(0x29, 0x4, 0x0)
bind$packet(r9, &(0x7f0000002500)={0x11, 0x7, r8, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14)
stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580))
openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/cgroups\x00', 0x0, 0x0)
chmod(&(0x7f0000002640)='./file0\x00', 0x0)

35.741909ms ago: executing program 3 (id=597):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000000)
readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8}, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000100)=0x2, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r2 = gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000003c0)='\x00', &(0x7f00000004c0)="cd92241512aa0acec7722bd3bf99e5e6b4f2612389a55cbcdee69c0cbba8d7e430ece2b958451d12321aee84283b3d8e0678991bafdb2d39aff6842c01822686b4ec9b77e36c4a46ec17681ef7fe4bbb00cb5940abac83ea9080d0ed3efeb93b0fe6330ac60736007d950eb4aecaac219f176cc46a1ee7761d89328adf42d0df7e0b9c33345e319e0554f684f6d949b0af3bef167c25d9850dfac4586220b14a24e4b529554ba908765b54ffac56acea89d1c02f49737383693827564a2963361df8bf2b4f17ae923b51480697f2aba6b7838d7443baa4cb383996613452725161d6"}}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000)
getpgid(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

32.93411ms ago: executing program 0 (id=598):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)='%-010d \x00'}, 0x20)
r5 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (fail_nth: 1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, 0x0, 0x302})
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r8)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x200c0d2, &(0x7f0000000400)={[{@usrjquota}]}, 0x21, 0x554, &(0x7f00000007c0)="$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")
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x8005, 0x4)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)

28.45958ms ago: executing program 2 (id=599):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x4660, 0x10, 0x2000003, 0x288}, &(0x7f0000000140)=<r4=>0x0, &(0x7f00000003c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
close_range(r1, r2, 0x0)

0s ago: executing program 4 (id=600):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x10238d, 0x10003, 0x4, 0x4, 0x8, 0x20005, 0x2d, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e", 0xc7}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0)

kernel console output (not intermixed with test programs):

llmulticast mode
[   28.965807][ T3304] bridge_slave_1: entered promiscuous mode
[   29.004082][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.011286][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.018554][ T3305] bridge_slave_0: entered allmulticast mode
[   29.025181][ T3305] bridge_slave_0: entered promiscuous mode
[   29.047819][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   29.057981][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.067255][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.074406][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.081722][ T3305] bridge_slave_1: entered allmulticast mode
[   29.088256][ T3305] bridge_slave_1: entered promiscuous mode
[   29.094486][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.101601][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.108825][ T3306] bridge_slave_0: entered allmulticast mode
[   29.115204][ T3306] bridge_slave_0: entered promiscuous mode
[   29.122031][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.129060][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.155018][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.166529][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.173542][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.199500][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.214139][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.233595][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.240708][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.247928][ T3306] bridge_slave_1: entered allmulticast mode
[   29.254398][ T3306] bridge_slave_1: entered promiscuous mode
[   29.294040][ T3304] team0: Port device team_slave_0 added
[   29.300989][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.323233][ T3304] team0: Port device team_slave_1 added
[   29.330014][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.340603][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.371427][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.387770][ T3312] hsr_slave_0: entered promiscuous mode
[   29.393710][ T3312] hsr_slave_1: entered promiscuous mode
[   29.421555][ T3305] team0: Port device team_slave_0 added
[   29.432934][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.440098][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.447371][ T3314] bridge_slave_0: entered allmulticast mode
[   29.454185][ T3314] bridge_slave_0: entered promiscuous mode
[   29.461328][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.468402][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.494397][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.505672][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.512696][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.538941][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.555353][ T3305] team0: Port device team_slave_1 added
[   29.563501][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.570646][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.577809][ T3314] bridge_slave_1: entered allmulticast mode
[   29.584249][ T3314] bridge_slave_1: entered promiscuous mode
[   29.598605][ T3306] team0: Port device team_slave_0 added
[   29.619126][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.626128][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.652138][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.669203][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.679218][ T3306] team0: Port device team_slave_1 added
[   29.699906][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.706904][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.733227][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.745076][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.785463][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.792627][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.818587][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.831683][ T3304] hsr_slave_0: entered promiscuous mode
[   29.838024][ T3304] hsr_slave_1: entered promiscuous mode
[   29.843968][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.851604][ T3304] Cannot create hsr debugfs directory
[   29.864883][ T3314] team0: Port device team_slave_0 added
[   29.874042][ T3314] team0: Port device team_slave_1 added
[   29.880270][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.887470][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.913635][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.937470][ T3305] hsr_slave_0: entered promiscuous mode
[   29.943413][ T3305] hsr_slave_1: entered promiscuous mode
[   29.949560][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   29.957162][ T3305] Cannot create hsr debugfs directory
[   29.990938][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.997975][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.024259][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.053806][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.060828][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.087020][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.139562][ T3314] hsr_slave_0: entered promiscuous mode
[   30.145532][ T3314] hsr_slave_1: entered promiscuous mode
[   30.151681][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.159284][ T3314] Cannot create hsr debugfs directory
[   30.166789][ T3306] hsr_slave_0: entered promiscuous mode
[   30.173242][ T3306] hsr_slave_1: entered promiscuous mode
[   30.179102][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.186689][ T3306] Cannot create hsr debugfs directory
[   30.283709][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   30.311381][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   30.324730][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   30.336236][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   30.375832][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   30.389960][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   30.400403][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   30.411763][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   30.435687][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   30.445063][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   30.457393][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   30.473179][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   30.511169][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.527865][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.536743][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.548431][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.567780][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   30.578677][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   30.588487][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   30.603731][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   30.615145][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   30.627625][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   30.653947][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.661074][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.669725][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.676805][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.703634][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.743282][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.763756][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   30.772003][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   30.788102][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.795230][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.804607][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.811792][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.829119][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.836256][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.849030][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.873112][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.880218][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.895856][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.907497][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   30.922543][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.933752][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   30.943732][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.950849][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.970830][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.978043][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.988898][  T146] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.996184][  T146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.005061][  T146] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.012202][  T146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.030735][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.041246][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.095158][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.105643][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.135789][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   31.146304][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.163251][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.194371][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.279688][ T3312] veth0_vlan: entered promiscuous mode
[   31.289457][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.302554][ T3312] veth1_vlan: entered promiscuous mode
[   31.321210][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.345343][ T3312] veth0_macvtap: entered promiscuous mode
[   31.378933][ T3312] veth1_macvtap: entered promiscuous mode
[   31.408980][ T3305] veth0_vlan: entered promiscuous mode
[   31.433656][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.443747][ T3305] veth1_vlan: entered promiscuous mode
[   31.467494][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.475998][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.484833][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.493639][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.502688][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.522224][ T3306] veth0_vlan: entered promiscuous mode
[   31.533652][ T3305] veth0_macvtap: entered promiscuous mode
[   31.542437][ T3305] veth1_macvtap: entered promiscuous mode
[   31.553726][ T3306] veth1_vlan: entered promiscuous mode
[   31.564239][ T3304] veth0_vlan: entered promiscuous mode
[   31.582488][ T3314] veth0_vlan: entered promiscuous mode
[   31.591533][ T3314] veth1_vlan: entered promiscuous mode
[   31.605972][ T3304] veth1_vlan: entered promiscuous mode
[   31.616187][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.622050][ T3306] veth0_macvtap: entered promiscuous mode
[   31.648632][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.663471][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.671742][ T3314] veth0_macvtap: entered promiscuous mode
[   31.683250][ T3306] veth1_macvtap: entered promiscuous mode
[   31.691303][ T3314] veth1_macvtap: entered promiscuous mode
[   31.705473][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.714333][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.723100][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.732062][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.750464][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.760664][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.769076][ T3304] veth0_macvtap: entered promiscuous mode
[   31.776887][ T3304] veth1_macvtap: entered promiscuous mode
[   31.800670][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.814504][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.824761][ T3474] loop3: detected capacity change from 0 to 2048
[   31.834685][ T3474] ext4: Unknown parameter 'appraise'
[   31.838904][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.854549][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.863527][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.872440][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.882186][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.895348][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.910857][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.919829][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.928702][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.933827][   T29] kauditd_printk_skb: 33 callbacks suppressed
[   31.933844][   T29] audit: type=1326 audit(1750185203.689:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   31.937583][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.946260][   T29] audit: type=1326 audit(1750185203.699:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.003218][   T29] audit: type=1326 audit(1750185203.759:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.026456][   T29] audit: type=1326 audit(1750185203.759:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.049661][   T29] audit: type=1326 audit(1750185203.759:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.073412][   T29] audit: type=1326 audit(1750185203.759:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.096536][   T29] audit: type=1326 audit(1750185203.759:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.119976][   T29] audit: type=1326 audit(1750185203.759:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.143158][   T29] audit: type=1326 audit(1750185203.759:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.166357][   T29] audit: type=1326 audit(1750185203.759:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3475 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   32.191218][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.200130][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.209014][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.218012][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.370014][ T3491] loop4: detected capacity change from 0 to 512
[   32.393401][ T3491] =======================================================
[   32.393401][ T3491] WARNING: The mand mount option has been deprecated and
[   32.393401][ T3491]          and is ignored by this kernel. Remove the mand
[   32.393401][ T3491]          option from the mount to silence this warning.
[   32.393401][ T3491] =======================================================
[   32.434168][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'.
[   32.508372][ T3505] loop1: detected capacity change from 0 to 512
[   32.529242][ T3501] sd 0:0:1:0: device reset
[   32.535400][ T3505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   32.562238][ T3491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   32.611637][ T3505] EXT4-fs (loop1): 1 orphan inode deleted
[   32.621171][ T3491] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.5: invalid block
[   32.635940][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.652073][ T2623] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   32.653315][ T3491] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 4294967295 (level 1)
[   32.671000][ T3505] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   32.691772][ T3491] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 4294967295 (level 1)
[   32.709404][ T3491] EXT4-fs (loop4): 2 truncates cleaned up
[   32.715919][ T3491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.731520][ T3491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.890910][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.468973][ T3525] capability: warning: `syz.3.16' uses deprecated v2 capabilities in a way that may be insecure
[   33.653183][ T3533] loop0: detected capacity change from 0 to 512
[   33.680903][ T3533] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   33.742855][ T3533] EXT4-fs (loop0): orphan cleanup on readonly fs
[   33.755044][ T3539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   33.768318][ T3533] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.20: Block bitmap for bg 0 marked uninitialized
[   33.769089][ T3535] loop2: detected capacity change from 0 to 8192
[   33.784165][ T3533] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   33.806421][ T3533] EXT4-fs (loop0): 1 orphan inode deleted
[   33.829315][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   33.843652][ T3533] EXT4-fs (loop0): shut down requested (1)
[   33.850200][ T3509]  loop2: p1 p3 p4
[   33.867898][ T3509] loop2: p3 size 4294967040 extends beyond EOD, truncated
[   33.886385][ T3509] loop2: p4 start 261888 is beyond EOD, truncated
[   33.890820][ T3545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'.
[   33.919590][ T3535]  loop2: p1 p3 p4
[   33.924395][ T3535] loop2: p3 size 4294967040 extends beyond EOD, truncated
[   33.943692][ T3535] loop2: p4 start 261888 is beyond EOD, truncated
[   34.012807][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   34.018767][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   34.056445][ T3533] syz.0.20 (3533) used greatest stack depth: 10872 bytes left
[   34.085935][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.102435][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   34.112576][ T3551] ALSA: seq fatal error: cannot create timer (-19)
[   34.115912][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   34.197956][ T3562] xt_hashlimit: max too large, truncated to 1048576
[   34.267805][ T3566] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET)
[   34.357383][ T3572] loop0: detected capacity change from 0 to 128
[   34.384699][ T3572] FAT-fs (loop0): Directory bread(block 32) failed
[   34.399320][ T3572] FAT-fs (loop0): Directory bread(block 33) failed
[   34.411449][ T3572] FAT-fs (loop0): Directory bread(block 34) failed
[   34.419719][ T3572] FAT-fs (loop0): Directory bread(block 35) failed
[   34.426626][ T3572] FAT-fs (loop0): Directory bread(block 36) failed
[   34.444259][ T3572] FAT-fs (loop0): Directory bread(block 37) failed
[   34.453686][ T3572] FAT-fs (loop0): Directory bread(block 38) failed
[   34.456080][    C0] hrtimer: interrupt took 45537 ns
[   34.460895][ T3572] FAT-fs (loop0): Directory bread(block 39) failed
[   34.472516][ T3572] FAT-fs (loop0): Directory bread(block 40) failed
[   34.479511][ T3572] FAT-fs (loop0): Directory bread(block 41) failed
[   34.534652][ T3569] syz.0.31: attempt to access beyond end of device
[   34.534652][ T3569] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128
[   34.548594][ T3569] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[   34.556758][ T3569] FAT-fs (loop0): Filesystem has been set read-only
[   34.573740][ T3569] syz.0.31: attempt to access beyond end of device
[   34.573740][ T3569] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128
[   34.587528][ T3569] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[   34.644944][ T3587] mmap: syz.0.37 (3587) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   34.661921][ T3584] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   34.673791][ T3584] SELinux: failed to load policy
[   34.831177][ T3596] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use)
[   34.845174][ T3596] program syz.0.41 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   34.889904][ T3601] loop4: detected capacity change from 0 to 1024
[   34.896846][ T3601] EXT4-fs: inline encryption not supported
[   34.926954][ T3601] EXT4-fs: Ignoring removed bh option
[   34.942152][ T3554] syz.3.26 (3554) used greatest stack depth: 10848 bytes left
[   34.973561][ T3601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.074519][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.178956][ T3623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'.
[   35.205357][ T3625] loop2: detected capacity change from 0 to 164
[   35.214810][ T3625] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=164
[   35.440204][ T3646] syzkaller1: entered promiscuous mode
[   35.445772][ T3646] syzkaller1: entered allmulticast mode
[   35.550799][ T3650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'.
[   35.559697][ T3650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'.
[   35.574690][ T3651] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.60'.
[   35.598047][ T3651] loop0: detected capacity change from 0 to 512
[   35.621793][ T3651] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[   35.641306][ T3651] EXT4-fs: error: could not find journal device path
[   35.654793][ T3653] loop1: detected capacity change from 0 to 1024
[   35.689602][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.736332][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.867291][ T3671] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.082388][ T3690] loop3: detected capacity change from 0 to 512
[   36.089153][ T3690] EXT4-fs: Ignoring removed oldalloc option
[   36.095196][ T3690] EXT4-fs: Invalid want_extra_isize 269045717
[   36.108960][ T3692] process 'syz.2.73' launched './file0' with NULL argv: empty string added
[   36.152799][ T3692] loop2: detected capacity change from 0 to 2048
[   36.178565][ T3692]  loop2: p1 < > p4
[   36.186698][ T3692] loop2: p4 size 8388608 extends beyond EOD, truncated
[   36.245180][ T3701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.77'.
[   36.268877][ T3696] loop1: detected capacity change from 0 to 2048
[   36.323813][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   36.324602][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   36.422249][ T3701] xt_CT: You must specify a L4 protocol and not use inversions on it
[   36.460333][ T3711] loop0: detected capacity change from 0 to 4096
[   36.511066][ T3711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.538205][ T3711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.589036][ T3711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'.
[   36.618833][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'.
[   36.627789][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'.
[   36.772853][ T3737] Zero length message leads to an empty skb
[   36.984957][   T29] kauditd_printk_skb: 566 callbacks suppressed
[   36.984979][   T29] audit: type=1400 audit(1750185208.679:680): avc:  denied  { execmem } for  pid=3748 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   37.010449][   T29] audit: type=1326 audit(1750185208.699:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   37.033781][   T29] audit: type=1326 audit(1750185208.699:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   37.561992][ T3745] syz.0.91 (3745) used greatest stack depth: 10760 bytes left
[   37.613718][ T3762] Invalid ELF header magic: != ELF
[   37.716548][   T29] audit: type=1400 audit(1750185209.469:683): avc:  denied  { create } for  pid=3768 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.735937][   T29] audit: type=1400 audit(1750185209.469:684): avc:  denied  { write } for  pid=3768 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.868194][   T29] audit: type=1400 audit(1750185209.629:685): avc:  denied  { getopt } for  pid=3778 comm="syz.4.105" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.954866][   T29] audit: type=1326 audit(1750185209.649:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   37.978236][   T29] audit: type=1326 audit(1750185209.649:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   38.001608][   T29] audit: type=1326 audit(1750185209.649:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   38.024949][   T29] audit: type=1326 audit(1750185209.649:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3778 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   38.295743][ T3797] tmpfs: Bad value for 'mpol'
[   38.300912][ T3798] FAULT_INJECTION: forcing a failure.
[   38.300912][ T3798] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.314101][ T3798] CPU: 0 UID: 0 PID: 3798 Comm: syz.2.110 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   38.314139][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   38.314157][ T3798] Call Trace:
[   38.314162][ T3798]  <TASK>
[   38.314235][ T3798]  __dump_stack+0x1d/0x30
[   38.314293][ T3798]  dump_stack_lvl+0xe8/0x140
[   38.314312][ T3798]  dump_stack+0x15/0x1b
[   38.314330][ T3798]  should_fail_ex+0x265/0x280
[   38.314371][ T3798]  should_fail+0xb/0x20
[   38.314483][ T3798]  should_fail_usercopy+0x1a/0x20
[   38.314520][ T3798]  _copy_from_user+0x1c/0xb0
[   38.314639][ T3798]  __sys_bpf+0x178/0x790
[   38.314685][ T3798]  __x64_sys_bpf+0x41/0x50
[   38.314719][ T3798]  x64_sys_call+0x2478/0x2fb0
[   38.314768][ T3798]  do_syscall_64+0xd2/0x200
[   38.314791][ T3798]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   38.314823][ T3798]  ? clear_bhb_loop+0x40/0x90
[   38.314848][ T3798]  ? clear_bhb_loop+0x40/0x90
[   38.314873][ T3798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.314897][ T3798] RIP: 0033:0x7f761e78e929
[   38.314988][ T3798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.315010][ T3798] RSP: 002b:00007f761cdf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   38.315034][ T3798] RAX: ffffffffffffffda RBX: 00007f761e9b5fa0 RCX: 00007f761e78e929
[   38.315046][ T3798] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   38.315057][ T3798] RBP: 00007f761cdf7090 R08: 0000000000000000 R09: 0000000000000000
[   38.315069][ T3798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.315080][ T3798] R13: 0000000000000000 R14: 00007f761e9b5fa0 R15: 00007ffc6a9adb68
[   38.315097][ T3798]  </TASK>
[   38.568112][ T3805] loop1: detected capacity change from 0 to 128
[   38.625538][ T3805] syz.1.115: attempt to access beyond end of device
[   38.625538][ T3805] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[   38.712562][   T55] kworker/u8:4: attempt to access beyond end of device
[   38.712562][   T55] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[   38.910490][ T3822] loop3: detected capacity change from 0 to 256
[   39.266646][ T3822] FAT-fs (loop3): bogus number of FAT sectors
[   39.272968][ T3822] FAT-fs (loop3): Can't find a valid FAT filesystem
[   39.437753][ T3850] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   39.696764][ T3883] loop4: detected capacity change from 0 to 1024
[   39.704125][ T3881] SELinux: failed to load policy
[   39.714440][ T3881] __nla_validate_parse: 1 callbacks suppressed
[   39.714457][ T3881] netlink: 1 bytes leftover after parsing attributes in process `syz.2.139'.
[   39.732471][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.776831][ T3883] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   39.806047][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   39.835511][ T3895] loop0: detected capacity change from 0 to 512
[   39.843958][ T3895] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[   39.863672][ T3895] EXT4-fs: error: could not find journal device path
[   39.949932][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.994468][ T3901] loop2: detected capacity change from 0 to 2048
[   40.035170][ T3903] tap0: tun_chr_ioctl cmd 1074025677
[   40.043442][ T3903] tap0: linktype set to 769
[   40.050504][ T3527]  loop2: p1 < > p4
[   40.055775][ T3527] loop2: p4 size 8388608 extends beyond EOD, truncated
[   40.069352][ T3901]  loop2: p1 < > p4
[   40.075199][ T3901] loop2: p4 size 8388608 extends beyond EOD, truncated
[   40.091015][ T3903] netlink: 'syz.4.148': attribute type 9 has an invalid length.
[   40.253420][ T3903] loop4: detected capacity change from 0 to 512
[   40.264421][ T3509] udevd[3509]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   40.271734][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   40.325066][ T2623] failed while handling packet from 1:16385
[   40.325094][ T2623] failed while handling packet from 1:16385
[   40.332014][ T2623] failed while handling packet from 1:16385
[   40.339951][ T2623] failed while handling packet from 1:16385
[   40.346218][ T2623] failed while handling packet from 1:16385
[   40.353615][ T2623] failed while handling packet from 1:16385
[   40.360852][ T2623] failed while handling packet from 1:16385
[   40.391654][ T2623] failed while handling packet from 1:16385
[   40.397767][ T2623] failed while handling packet from 1:16385
[   40.413982][ T3925] loop2: detected capacity change from 0 to 128
[   40.423292][ T2623] failed while handling packet from 1:16385
[   40.426303][ T2623] failed while handling packet from 1:16385
[   40.432623][ T2623] failed while handling packet from 1:16385
[   40.438934][ T2623] failed while handling packet from 1:16385
[   40.446935][ T2623] failed while handling packet from 1:16385
[   40.453173][ T2623] failed while handling packet from 1:16385
[   40.459866][ T2623] failed while handling packet from 1:16385
[   40.465817][ T2623] failed while handling packet from 1:16385
[   40.471886][ T2623] failed while handling packet from 1:16385
[   40.478351][ T2623] failed while handling packet from 1:16385
[   40.484885][ T2623] failed while handling packet from 1:16385
[   40.491285][ T2623] failed while handling packet from 1:16385
[   40.497448][ T2623] failed while handling packet from 1:16385
[   40.503378][ T2623] failed while handling packet from 1:16385
[   40.509163][ T3925] FAT-fs (loop2): bogus number of reserved sectors
[   40.509604][ T2623] failed while handling packet from 1:16385
[   40.515209][ T3925] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   40.515227][ T3925] FAT-fs (loop2): Can't find a valid FAT filesystem
[   40.527570][ T3903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.148: Parent and EA inode have the same ino 15
[   40.528107][ T2623] failed while handling packet from 1:16385
[   40.528124][ T2623] failed while handling packet from 1:16385
[   40.528137][ T2623] failed while handling packet from 1:16385
[   40.528160][ T2623] failed while handling packet from 1:16385
[   40.528176][ T2623] failed while handling packet from 1:16385
[   40.528191][ T2623] failed while handling packet from 1:16385
[   40.528283][ T2623] failed while handling packet from 1:16385
[   40.560174][ T3903] EXT4-fs (loop4): Remounting filesystem read-only
[   40.570163][ T2623] failed while handling packet from 1:16385
[   40.607162][ T3903] EXT4-fs (loop4): 1 orphan inode deleted
[   40.613786][ T2623] failed while handling packet from 1:16385
[   40.623465][ T2623] failed while handling packet from 1:16385
[   40.629918][ T2623] failed while handling packet from 1:16385
[   40.636019][ T2623] failed while handling packet from 1:16385
[   40.642332][ T2623] failed while handling packet from 1:16385
[   40.654025][ T2623] failed while handling packet from 1:16385
[   40.660505][ T2623] failed while handling packet from 1:16385
[   40.661935][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.666614][ T2623] failed while handling packet from 1:16385
[   40.666633][ T2623] failed while handling packet from 1:16385
[   40.666649][ T2623] failed while handling packet from 1:16385
[   40.666664][ T2623] failed while handling packet from 1:16385
[   40.666679][ T2623] failed while handling packet from 1:16385
[   40.666694][ T2623] failed while handling packet from 1:16385
[   40.666791][ T2623] failed while handling packet from 1:16385
[   40.721220][ T3903] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   40.721894][ T2623] failed while handling packet from 1:16385
[   40.736721][ T2623] failed while handling packet from 1:16385
[   40.743714][ T2623] failed while handling packet from 1:16385
[   40.750100][ T2623] failed while handling packet from 1:16385
[   40.756320][ T2623] failed while handling packet from 1:16385
[   40.771877][ T2623] failed while handling packet from 1:16385
[   40.779175][ T2623] failed while handling packet from 1:16385
[   40.785305][ T2623] failed while handling packet from 1:16385
[   40.791616][ T2623] failed while handling packet from 1:16385
[   40.802167][ T2623] failed while handling packet from 1:16385
[   40.813652][ T2623] failed while handling packet from 1:16385
[   40.822453][ T2623] failed while handling packet from 1:16385
[   40.828755][ T2623] failed while handling packet from 1:16385
[   40.835997][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.836261][ T2623] failed while handling packet from 1:16385
[   40.853715][ T2623] failed while handling packet from 1:16385
[   40.859988][ T2623] failed while handling packet from 1:16385
[   40.866002][ T2623] failed while handling packet from 1:16385
[   40.878659][ T2623] failed while handling packet from 1:16385
[   40.884921][ T2623] failed while handling packet from 1:16385
[   40.891122][ T2623] failed while handling packet from 1:16385
[   40.897310][ T2623] failed while handling packet from 1:16385
[   40.903315][ T2623] failed while handling packet from 1:16385
[   40.909541][ T2623] failed while handling packet from 1:16385
[   40.927811][ T2623] failed while handling packet from 1:16385
[   40.933978][ T2623] failed while handling packet from 1:16385
[   40.944859][ T2623] failed while handling packet from 1:16385
[   40.951123][ T2623] failed while handling packet from 1:16385
[   40.957691][ T2623] failed while handling packet from 1:16385
[   40.970213][ T2623] failed while handling packet from 1:16385
[   40.976407][ T2623] failed while handling packet from 1:16385
[   40.983308][ T2623] failed while handling packet from 1:16385
[   40.990224][ T2623] failed while handling packet from 1:16385
[   40.998961][ T2623] failed while handling packet from 1:16385
[   41.006156][ T2623] failed while handling packet from 1:16385
[   41.012531][ T2623] failed while handling packet from 1:16385
[   41.018634][ T2623] failed while handling packet from 1:16385
[   41.024712][ T2623] failed while handling packet from 1:16385
[   41.033849][ T2623] failed while handling packet from 1:16385
[   41.040174][ T2623] failed while handling packet from 1:16385
[   41.056421][ T2623] failed while handling packet from 1:16385
[   41.062909][ T2623] failed while handling packet from 1:16385
[   41.070195][ T2623] failed while handling packet from 1:16385
[   41.076304][ T2623] failed while handling packet from 1:16385
[   41.092664][ T3947] FAULT_INJECTION: forcing a failure.
[   41.092664][ T3947] name failslab, interval 1, probability 0, space 0, times 1
[   41.111369][ T3947] CPU: 1 UID: 0 PID: 3947 Comm: syz.0.166 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   41.111402][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   41.111417][ T3947] Call Trace:
[   41.111425][ T3947]  <TASK>
[   41.111434][ T3947]  __dump_stack+0x1d/0x30
[   41.111462][ T3947]  dump_stack_lvl+0xe8/0x140
[   41.111487][ T3947]  dump_stack+0x15/0x1b
[   41.111509][ T3947]  should_fail_ex+0x265/0x280
[   41.111549][ T3947]  should_failslab+0x8c/0xb0
[   41.111642][ T3947]  kmem_cache_alloc_node_noprof+0x57/0x320
[   41.111674][ T3947]  ? __alloc_skb+0x101/0x320
[   41.111713][ T3947]  __alloc_skb+0x101/0x320
[   41.111748][ T3947]  netlink_alloc_large_skb+0xba/0xf0
[   41.111865][ T3947]  netlink_sendmsg+0x3cf/0x6b0
[   41.111893][ T3947]  ? __pfx_netlink_sendmsg+0x10/0x10
[   41.111919][ T3947]  __sock_sendmsg+0x142/0x180
[   41.111975][ T3947]  ____sys_sendmsg+0x31e/0x4e0
[   41.112091][ T3947]  ___sys_sendmsg+0x17b/0x1d0
[   41.112170][ T3947]  __x64_sys_sendmsg+0xd4/0x160
[   41.112265][ T3947]  x64_sys_call+0x2999/0x2fb0
[   41.112288][ T3947]  do_syscall_64+0xd2/0x200
[   41.112310][ T3947]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.112379][ T3947]  ? clear_bhb_loop+0x40/0x90
[   41.112440][ T3947]  ? clear_bhb_loop+0x40/0x90
[   41.112468][ T3947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.112575][ T3947] RIP: 0033:0x7fcda280e929
[   41.112595][ T3947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.112613][ T3947] RSP: 002b:00007fcda0e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   41.112646][ T3947] RAX: ffffffffffffffda RBX: 00007fcda2a35fa0 RCX: 00007fcda280e929
[   41.112658][ T3947] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[   41.112671][ T3947] RBP: 00007fcda0e77090 R08: 0000000000000000 R09: 0000000000000000
[   41.112686][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   41.112698][ T3947] R13: 0000000000000000 R14: 00007fcda2a35fa0 R15: 00007ffd37dc3118
[   41.112717][ T3947]  </TASK>
[   41.122525][ T2623] failed while handling packet from 1:16385
[   41.333544][ T2623] failed while handling packet from 1:16385
[   41.339553][ T2623] failed while handling packet from 1:16385
[   41.345927][ T2623] failed while handling packet from 1:16385
[   41.351946][ T2623] failed while handling packet from 1:16385
[   41.358108][ T2623] failed while handling packet from 1:16385
[   41.423037][ T2623] failed while handling packet from 1:16385
[   41.435294][ T3956] loop2: detected capacity change from 0 to 256
[   41.476569][ T2623] failed while handling packet from 1:16385
[   41.476597][ T2623] failed while handling packet from 1:16385
[   41.482872][ T2623] failed while handling packet from 1:16385
[   41.488972][ T2623] failed while handling packet from 1:16385
[   41.495049][ T2623] failed while handling packet from 1:16385
[   41.495973][ T3959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.501971][ T2623] failed while handling packet from 1:16385
[   41.518449][ T2623] failed while handling packet from 1:16385
[   41.524398][ T2623] failed while handling packet from 1:16385
[   41.530645][ T2623] failed while handling packet from 1:16385
[   41.536623][ T2623] failed while handling packet from 1:16385
[   41.544161][ T3962] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[   41.558053][ T3962] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'.
[   41.596320][ T2623] failed while handling packet from 1:16385
[   41.596350][ T2623] failed while handling packet from 1:16385
[   41.602925][ T2623] failed while handling packet from 1:16385
[   41.609055][ T2623] failed while handling packet from 1:16385
[   41.621253][ T3962] team0: Failed to send port change of device geneve1 via netlink (err -105)
[   41.638394][ T2623] failed while handling packet from 1:16385
[   41.638415][ T2623] failed while handling packet from 1:16385
[   41.644428][ T3962] team0: Failed to send options change via netlink (err -105)
[   41.658071][ T3962] team0: Port device geneve1 added
[   41.679953][ T2623] failed while handling packet from 1:16385
[   41.679982][ T2623] failed while handling packet from 1:16385
[   41.686079][ T2623] failed while handling packet from 1:16385
[   41.694073][ T2623] failed while handling packet from 1:16385
[   41.704066][ T3959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.724354][ T2623] failed while handling packet from 1:16385
[   41.724384][ T2623] failed while handling packet from 1:16385
[   41.731002][ T2623] failed while handling packet from 1:16385
[   41.743210][ T2623] failed while handling packet from 1:16385
[   41.753175][ T2623] failed while handling packet from 1:16385
[   41.759442][ T2623] failed while handling packet from 1:16385
[   41.765701][ T2623] failed while handling packet from 1:16385
[   41.777883][ T3971] pim6reg1: entered promiscuous mode
[   41.789521][ T3971] pim6reg1: entered allmulticast mode
[   41.802972][ T3959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.815217][ T2623] failed while handling packet from 1:16385
[   41.815243][ T2623] failed while handling packet from 1:16385
[   41.821438][ T2623] failed while handling packet from 1:16385
[   41.830562][ T2623] failed while handling packet from 1:16385
[   41.840461][ T2623] failed while handling packet from 1:16385
[   41.846694][ T2623] failed while handling packet from 1:16385
[   41.853889][ T2623] failed while handling packet from 1:16385
[   41.863933][ T3959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.880921][ T2623] failed while handling packet from 1:16385
[   41.880948][ T2623] failed while handling packet from 1:16385
[   41.886891][ T2623] failed while handling packet from 1:16385
[   41.894398][ T2623] failed while handling packet from 1:16385
[   41.955497][ T3978] loop3: detected capacity change from 0 to 256
[   41.963373][ T2623] failed while handling packet from 1:16385
[   41.979393][ T3959] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.982992][ T3978] vfat: Unknown parameter 'uni��s*�3<sk'
[   41.995205][ T2623] failed while handling packet from 1:16385
[   42.002926][   T29] kauditd_printk_skb: 469 callbacks suppressed
[   42.002944][   T29] audit: type=1326 audit(1750185213.759:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   42.039111][   T29] audit: type=1326 audit(1750185213.759:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   42.075869][ T2623] failed while handling packet from 1:16385
[   42.075897][ T2623] failed while handling packet from 1:16385
[   42.093081][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'.
[   42.096433][ T3959] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.127048][ T2623] failed while handling packet from 1:16385
[   42.127087][ T2623] failed while handling packet from 1:16385
[   42.133496][ T2623] failed while handling packet from 1:16385
[   42.142252][ T2623] failed while handling packet from 1:16385
[   42.148624][ T2623] failed while handling packet from 1:16385
[   42.181484][ T2623] failed while handling packet from 1:16385
[   42.190829][ T2623] failed while handling packet from 1:16385
[   42.197881][ T2623] failed while handling packet from 1:16385
[   42.204276][ T2623] failed while handling packet from 1:16385
[   42.210277][   T29] audit: type=1400 audit(1750185213.809:1161): avc:  denied  { ioctl } for  pid=3977 comm="syz.3.180" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   42.241505][   T29] audit: type=1326 audit(1750185213.849:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   42.264888][   T29] audit: type=1326 audit(1750185213.849:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec33e8e929 code=0x7ffc0000
[   42.288417][ T2623] failed while handling packet from 1:16385
[   42.288438][ T2623] failed while handling packet from 1:16385
[   42.294764][ T2623] failed while handling packet from 1:16385
[   42.301966][ T2623] failed while handling packet from 1:16385
[   42.307960][ T2623] failed while handling packet from 1:16385
[   42.311007][ T3962] syz.1.172 (3962) used greatest stack depth: 10376 bytes left
[   42.315469][ T2623] failed while handling packet from 1:16385
[   42.327597][ T2623] failed while handling packet from 1:16385
[   42.333689][ T2623] failed while handling packet from 1:16385
[   42.339909][ T2623] failed while handling packet from 1:16385
[   42.345973][ T2623] failed while handling packet from 1:16385
[   42.353037][ T2623] failed while handling packet from 1:16385
[   42.359438][ T2623] failed while handling packet from 1:16385
[   42.365730][ T2623] failed while handling packet from 1:16385
[   42.372108][ T2623] failed while handling packet from 1:16385
[   42.378241][ T3992] 9pnet: Could not find request transport: 0xffffffffffffffff
[   42.394232][ T3992] loop0: detected capacity change from 0 to 128
[   42.401729][ T3959] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.421153][ T3959] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.447063][ T3991] syz.0.184: attempt to access beyond end of device
[   42.447063][ T3991] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128
[   42.460561][ T3991] Buffer I/O error on dev loop0, logical block 128, lost async page write
[   42.477715][   T29] audit: type=1400 audit(1750185214.209:1164): avc:  denied  { create } for  pid=3983 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.489108][ T2623] failed while handling packet from 1:16385
[   42.497178][   T29] audit: type=1400 audit(1750185214.229:1165): avc:  denied  { write } for  pid=3983 comm="syz.4.183" path="socket:[6539]" dev="sockfs" ino=6539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   42.536745][ T2623] failed while handling packet from 1:16385
[   42.536782][ T2623] failed while handling packet from 1:16385
[   42.550386][ T2623] failed while handling packet from 1:16385
[   42.556362][ T2623] failed while handling packet from 1:16385
[   42.583414][ T2623] failed while handling packet from 1:16385
[   42.624627][ T2623] failed while handling packet from 1:16385
[   42.637700][   T29] audit: type=1326 audit(1750185214.299:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   42.655676][ T2623] failed while handling packet from 1:16385
[   42.667275][   T29] audit: type=1326 audit(1750185214.299:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   42.696399][ T2623] failed while handling packet from 1:16385
[   42.696721][ T2623] failed while handling packet from 1:16385
[   42.696922][   T29] audit: type=1326 audit(1750185214.299:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3997 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   42.708699][ T2623] failed while handling packet from 1:16385
[   42.754553][ T2623] failed while handling packet from 1:16385
[   42.766294][ T2623] failed while handling packet from 1:16385
[   42.772743][ T2623] failed while handling packet from 1:16385
[   42.778880][ T2623] failed while handling packet from 1:16385
[   42.784858][ T2623] failed while handling packet from 1:16385
[   42.790984][ T2623] failed while handling packet from 1:16385
[   42.796919][ T2623] failed while handling packet from 1:16385
[   42.802712][ T4011] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in;
[   42.802712][ T4011]    program syz.2.192 not setting count and/or reply_len properly
[   42.803161][ T2623] failed while handling packet from 1:16385
[   42.826148][ T2623] failed while handling packet from 1:16385
[   42.832505][ T2623] failed while handling packet from 1:16385
[   42.839092][ T2623] failed while handling packet from 1:16385
[   42.887275][ T2623] failed while handling packet from 1:16385
[   42.901673][ T2623] failed while handling packet from 1:16385
[   42.908804][ T2623] failed while handling packet from 1:16385
[   42.916664][ T2623] failed while handling packet from 1:16385
[   42.928867][ T2623] failed while handling packet from 1:16385
[   42.942560][ T2623] failed while handling packet from 1:16385
[   42.967175][ T2623] failed while handling packet from 1:16385
[   42.973228][ T2623] failed while handling packet from 1:16385
[   42.986438][ T2623] failed while handling packet from 1:16385
[   43.002761][ T2623] failed while handling packet from 1:16385
[   43.013054][ T2623] failed while handling packet from 1:16385
[   43.019853][ T2623] failed while handling packet from 1:16385
[   43.043471][ T2623] failed while handling packet from 1:16385
[   43.096643][ T2623] failed while handling packet from 1:16385
[   43.114590][ T2623] failed while handling packet from 1:16385
[   43.132286][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[   43.134838][ T2623] failed while handling packet from 1:16385
[   43.138484][ T4045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'.
[   43.162146][ T4045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'.
[   43.190928][ T2623] failed while handling packet from 1:16385
[   43.190956][ T2623] failed while handling packet from 1:16385
[   43.191309][ T4051] loop2: detected capacity change from 0 to 512
[   43.209854][ T2623] failed while handling packet from 1:16385
[   43.209877][ T2623] failed while handling packet from 1:16385
[   43.216278][ T2623] failed while handling packet from 1:16385
[   43.222606][ T4045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'.
[   43.223313][ T2623] failed while handling packet from 1:16385
[   43.228622][ T4045] netlink: 'syz.3.203': attribute type 6 has an invalid length.
[   43.254761][ T2623] failed while handling packet from 1:16385
[   43.254789][ T2623] failed while handling packet from 1:16385
[   43.276776][ T2623] failed while handling packet from 1:16385
[   43.316906][ T2623] failed while handling packet from 1:16385
[   43.355730][ T2623] failed while handling packet from 1:16385
[   43.361930][ T2623] failed while handling packet from 1:16385
[   43.368073][ T2623] failed while handling packet from 1:16385
[   43.374713][ T2623] failed while handling packet from 1:16385
[   43.391966][ T4064] loop4: detected capacity change from 0 to 2048
[   43.412601][ T2623] failed while handling packet from 1:16385
[   43.412627][ T2623] failed while handling packet from 1:16385
[   43.418702][ T2623] failed while handling packet from 1:16385
[   43.425060][ T2623] failed while handling packet from 1:16385
[   43.431076][ T2623] failed while handling packet from 1:16385
[   43.437242][ T2623] failed while handling packet from 1:16385
[   43.443181][ T2623] failed while handling packet from 1:16385
[   43.449382][ T2623] failed while handling packet from 1:16385
[   43.455601][ T4064]  loop4: p1 < > p4
[   43.465800][ T2623] failed while handling packet from 1:16385
[   43.465901][ T2623] failed while handling packet from 1:16385
[   43.473058][ T2623] failed while handling packet from 1:16385
[   43.479490][ T4064] loop4: p4 size 8388608 extends beyond EOD, truncated
[   43.485572][ T4036] loop1: detected capacity change from 0 to 1024
[   43.492486][ T2623] failed while handling packet from 1:16385
[   43.511046][ T2623] failed while handling packet from 1:16385
[   43.528367][ T2623] failed while handling packet from 1:16385
[   43.529353][ T4036] EXT4-fs: Ignoring removed orlov option
[   43.538539][ T2623] failed while handling packet from 1:16384
[   43.576402][ T2623] failed while handling packet from 1:16384
[   43.576421][ T2623] failed while handling packet from 1:16384
[   43.582432][ T2623] failed while handling packet from 1:16384
[   43.582449][ T2623] failed while handling packet from 1:16384
[   43.582465][ T2623] failed while handling packet from 1:16384
[   43.582477][ T2623] failed while handling packet from 1:16384
[   43.582490][ T2623] failed while handling packet from 1:16384
[   43.582509][ T2623] failed while handling packet from 1:16384
[   43.582523][ T2623] failed while handling packet from 1:16384
[   43.582537][ T2623] failed while handling packet from 1:16384
[   43.582721][ T2623] failed while handling packet from 1:16386
[   43.588535][ T4075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   43.595613][ T2623] failed while handling packet from 1:16386
[   43.616452][ T4081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.218'.
[   43.642615][ T2623] failed while handling packet from 1:16386
[   43.662253][ T4075] lo speed is unknown, defaulting to 1000
[   43.663611][ T2623] failed while handling packet from 1:16386
[   43.678026][ T4075] lo speed is unknown, defaulting to 1000
[   43.678599][ T2623] failed while handling packet from 1:16386
[   43.685126][ T4075] lo speed is unknown, defaulting to 1000
[   43.690112][ T2623] failed while handling packet from 1:16386
[   43.707261][ T4036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.709403][ T2623] failed while handling packet from 1:16386
[   43.714648][ T4075] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   43.726008][ T2623] failed while handling packet from 1:16386
[   43.739367][ T2623] failed while handling packet from 1:16386
[   43.745352][ T2623] failed while handling packet from 1:16386
[   43.751300][ T2623] failed while handling packet from 1:16386
[   43.757453][ T2623] failed while handling packet from 1:16386
[   43.763555][ T2623] failed while handling packet from 1:16386
[   43.769594][ T2623] failed while handling packet from 1:16386
[   43.775625][ T2623] failed while handling packet from 1:16386
[   43.782019][ T2623] failed while handling packet from 1:16386
[   43.789080][ T4075] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   43.803947][ T4081] netlink: 'syz.2.218': attribute type 7 has an invalid length.
[   43.837791][ T2623] failed while handling packet from 1:16386
[   43.837820][ T2623] failed while handling packet from 1:16386
[   43.851897][ T4075] lo speed is unknown, defaulting to 1000
[   43.866042][ T2623] failed while handling packet from 1:16386
[   43.866068][ T2623] failed while handling packet from 1:16386
[   43.890274][ T4086] netlink: 388 bytes leftover after parsing attributes in process `syz.4.219'.
[   43.893762][ T2623] failed while handling packet from 1:16386
[   43.898504][ T4075] lo speed is unknown, defaulting to 1000
[   43.919738][ T2623] failed while handling packet from 1:16386
[   43.919770][ T2623] failed while handling packet from 1:16386
[   43.941314][ T2623] failed while handling packet from 1:16386
[   43.944974][ T4075] lo speed is unknown, defaulting to 1000
[   43.961933][ T4091] loop0: detected capacity change from 0 to 2048
[   43.971201][ T2623] failed while handling packet from 1:16386
[   43.971269][ T2623] failed while handling packet from 1:16386
[   43.979278][ T2623] failed while handling packet from 1:16386
[   43.985500][ T2623] failed while handling packet from 1:16386
[   43.993411][ T2623] failed while handling packet from 1:16386
[   43.999462][ T4075] lo speed is unknown, defaulting to 1000
[   43.999944][ T4087] lo speed is unknown, defaulting to 1000
[   44.008989][ T4091] Alternate GPT is invalid, using primary GPT.
[   44.025895][ T4091]  loop0: p2 p3 p7
[   44.031156][ T2623] failed while handling packet from 1:16386
[   44.031197][ T2623] failed while handling packet from 1:16386
[   44.034058][ T4075] lo speed is unknown, defaulting to 1000
[   44.037808][ T2623] failed while handling packet from 1:16386
[   44.055006][ T4091] SELinux:  Context : is not valid (left unmapped).
[   44.078377][ T2623] failed while handling packet from 1:16386
[   44.078412][ T2623] failed while handling packet from 1:16386
[   44.084563][ T2623] failed while handling packet from 1:16386
[   44.090624][ T2623] failed while handling packet from 1:16386
[   44.096656][ T2623] failed while handling packet from 1:16386
[   44.141862][ T2623] failed while handling packet from 1:16386
[   44.148200][ T2623] failed while handling packet from 1:16386
[   44.151032][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.154292][ T2623] failed while handling packet from 1:16386
[   44.161545][ T4099] loop3: detected capacity change from 0 to 128
[   44.249203][ T2623] failed while handling packet from 1:16386
[   44.249273][ T2623] failed while handling packet from 1:16386
[   44.262516][ T2623] failed while handling packet from 1:16386
[   44.290925][ T2623] failed while handling packet from 1:16386
[   44.299013][ T4112] random: crng reseeded on system resumption
[   44.312076][ T2623] failed while handling packet from 1:16386
[   44.312168][ T2623] failed while handling packet from 1:16386
[   44.347814][ T2623] failed while handling packet from 1:16386
[   44.357698][ T2623] failed while handling packet from 1:16386
[   44.363933][ T2623] failed while handling packet from 1:16386
[   44.370352][ T2623] failed while handling packet from 1:16386
[   44.377152][ T2623] failed while handling packet from 1:16386
[   44.383830][ T2623] failed while handling packet from 1:16386
[   44.384710][ T4118] loop1: detected capacity change from 0 to 1024
[   44.390023][ T2623] failed while handling packet from 1:16386
[   44.428307][ T2623] failed while handling packet from 1:16386
[   44.442292][ T2623] failed while handling packet from 1:16386
[   44.448769][ T2623] failed while handling packet from 1:16386
[   44.455104][ T2623] failed while handling packet from 1:16386
[   44.482207][ T4118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.485391][ T2623] failed while handling packet from 1:16386
[   44.494157][ T4118] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.501123][ T2623] failed while handling packet from 1:16386
[   44.517890][ T2623] failed while handling packet from 1:16386
[   44.523897][ T2623] failed while handling packet from 1:16386
[   44.523923][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.523923][   T37] loop3: rw=1, sector=145, nr_sectors = 8 limit=128
[   44.524020][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.524020][   T37] loop3: rw=1, sector=161, nr_sectors = 8 limit=128
[   44.533179][ T2623] failed while handling packet from 1:16386
[   44.538368][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.538368][   T37] loop3: rw=1, sector=177, nr_sectors = 8 limit=128
[   44.549608][ T2623] failed while handling packet from 1:16386
[   44.566364][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.566364][   T37] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[   44.569549][ T2623] failed while handling packet from 1:16386
[   44.601611][ T2623] failed while handling packet from 1:16386
[   44.609951][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.609951][   T37] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[   44.630662][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.630662][   T37] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[   44.651240][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.651240][   T37] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[   44.673573][ T4118] netlink: 'syz.1.233': attribute type 4 has an invalid length.
[   44.698656][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.698656][   T37] loop3: rw=1, sector=257, nr_sectors = 8 limit=128
[   44.718060][ T4135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'.
[   44.735870][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.737565][   T37] kworker/u8:2: attempt to access beyond end of device
[   44.737565][   T37] loop3: rw=1, sector=273, nr_sectors = 8 limit=128
[   44.839756][ T4141] 9pnet_fd: Insufficient options for proto=fd
[   44.853766][ T4142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.243'.
[   44.879805][ T4141] netlink: 'syz.1.244': attribute type 3 has an invalid length.
[   44.887565][ T4141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.244'.
[   44.896695][ T4145] loop3: detected capacity change from 0 to 512
[   44.915480][ T4148] loop0: detected capacity change from 0 to 1024
[   44.927619][ T4148] EXT4-fs: Ignoring removed nobh option
[   44.933382][ T4148] EXT4-fs: Ignoring removed bh option
[   44.941241][ T4143] lo speed is unknown, defaulting to 1000
[   44.968569][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.002490][ T4142] loop4: detected capacity change from 0 to 512
[   45.019237][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.032874][ T4145] EXT4-fs (loop3): 1 orphan inode deleted
[   45.043164][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.061522][ T4145] ext4 filesystem being mounted at /syzcgroup/cpu/syz3/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[   45.083300][   T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   45.103018][   T37] EXT4-fs (loop3): Remounting filesystem read-only
[   45.110885][ T4145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.363799][ T4167] netlink: 'syz.3.252': attribute type 6 has an invalid length.
[   45.378454][ T4169] loop1: detected capacity change from 0 to 764
[   45.395070][ T4167] hsr0: entered promiscuous mode
[   45.400665][ T4167] hsr0: entered allmulticast mode
[   45.405821][ T4167] hsr_slave_0: entered allmulticast mode
[   45.411925][ T4167] hsr_slave_1: entered allmulticast mode
[   45.436163][ T4169] lo speed is unknown, defaulting to 1000
[   45.595393][ T4169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   45.800396][ T4199] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 !
[   46.062185][ T4215] Illegal XDP return value 4294967294 on prog  (id 270) dev N/A, expect packet loss!
[   46.151376][ T4230] ipt_ECN: cannot use operation on non-tcp rule
[   46.270856][ T4230] lo speed is unknown, defaulting to 1000
[   46.498541][ T4249] loop0: detected capacity change from 0 to 512
[   46.506357][ T4249] ext4: Unknown parameter 'dont_measure'
[   46.520629][ T4249] loop0: detected capacity change from 0 to 512
[   46.549437][ T4249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.565896][ T4249] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.594678][ T4255] loop1: detected capacity change from 0 to 512
[   46.609303][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.622725][ T4255] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   46.636261][ T4255] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.282: bg 0: block 217: padding at end of block bitmap is not set
[   46.665824][ T4261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'.
[   46.674981][ T4261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'.
[   46.705712][ T4265] loop3: detected capacity change from 0 to 512
[   46.713916][ T4265] EXT4-fs (loop3): orphan cleanup on readonly fs
[   46.714071][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.720352][ T4265] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[   46.720740][ T4265] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   46.738537][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.768967][ T4265] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.286: attempt to clear invalid blocks 2 len 1
[   46.783067][ T4265] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.286: invalid indirect mapped block 1819239214 (level 0)
[   46.802601][ T4265] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.286: invalid indirect mapped block 1819239214 (level 1)
[   46.820340][ T4265] EXT4-fs (loop3): 1 truncate cleaned up
[   46.831236][ T4272] loop2: detected capacity change from 0 to 512
[   46.839388][ T4265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   46.841973][ T4272] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   46.864847][ T4272] EXT4-fs (loop2): 1 truncate cleaned up
[   46.872554][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.895271][ T4276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.290'.
[   46.904969][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.919777][ T4272] 9pnet_fd: Insufficient options for proto=fd
[   46.927915][ T4272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.289'.
[   46.962782][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.991114][ T4284] loop3: detected capacity change from 0 to 512
[   47.008367][   T29] kauditd_printk_skb: 278 callbacks suppressed
[   47.008385][   T29] audit: type=1400 audit(1750185218.769:1444): avc:  denied  { connect } for  pid=4288 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   47.037375][ T4284] ext4: Bad value for 'stripe'
[   47.039808][   T29] audit: type=1400 audit(1750185218.799:1445): avc:  denied  { write } for  pid=4288 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   47.061769][   T29] audit: type=1400 audit(1750185218.799:1446): avc:  denied  { write } for  pid=4290 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   47.065167][ T4294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[   47.081891][   T29] audit: type=1400 audit(1750185218.819:1447): avc:  denied  { append } for  pid=4291 comm="syz.1.297" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   47.087877][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   47.088032][ T4294] vhci_hcd vhci_hcd.0: Device attached
[   47.139349][   T29] audit: type=1400 audit(1750185218.899:1448): avc:  denied  { read write } for  pid=4283 comm="syz.3.296" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.162983][   T29] audit: type=1400 audit(1750185218.899:1449): avc:  denied  { open } for  pid=4283 comm="syz.3.296" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.186466][   T29] audit: type=1400 audit(1750185218.899:1450): avc:  denied  { create } for  pid=4283 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   47.198075][ T4294] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[   47.213130][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   47.220901][ T4294] vhci_hcd vhci_hcd.0: Device attached
[   47.254007][ T4309] loop3: detected capacity change from 0 to 1024
[   47.261271][ T4297] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7)
[   47.267867][ T4297] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   47.275780][ T4297] vhci_hcd vhci_hcd.0: Device attached
[   47.281899][ T4313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.302'.
[   47.302353][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.325084][ T4294] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14)
[   47.332070][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   47.340088][ T4294] vhci_hcd vhci_hcd.0: Device attached
[   47.356203][ T4294] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   47.365551][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.377030][ T1037] usb 3-1: new low-speed USB device number 2 using vhci_hcd
[   47.391544][ T4313] loop4: detected capacity change from 0 to 8192
[   47.398663][ T4294] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(18)
[   47.405479][ T4294] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   47.413015][ T4294] vhci_hcd vhci_hcd.0: Device attached
[   47.422247][   T29] audit: type=1400 audit(1750185219.179:1451): avc:  denied  { read } for  pid=4322 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   47.443396][ T4324] vhci_hcd: connection closed
[   47.443611][ T4295] vhci_hcd: connection reset by peer
[   47.443742][ T4300] vhci_hcd: connection closed
[   47.448466][ T4304] vhci_hcd: connection closed
[   47.462024][   T37] vhci_hcd: stop threads
[   47.463080][   T29] audit: type=1326 audit(1750185219.219:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   47.466923][   T37] vhci_hcd: release socket
[   47.466953][   T37] vhci_hcd: disconnect device
[   47.471435][   T29] audit: type=1326 audit(1750185219.219:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.3.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   47.505055][   T37] vhci_hcd: stop threads
[   47.528211][ T4320] vhci_hcd: connection closed
[   47.532428][   T37] vhci_hcd: release socket
[   47.532456][   T37] vhci_hcd: disconnect device
[   47.547188][   T37] vhci_hcd: stop threads
[   47.551486][   T37] vhci_hcd: release socket
[   47.556032][   T37] vhci_hcd: disconnect device
[   47.563158][   T37] vhci_hcd: stop threads
[   47.567526][   T37] vhci_hcd: release socket
[   47.572094][   T37] vhci_hcd: disconnect device
[   47.586107][   T37] vhci_hcd: stop threads
[   47.590633][   T37] vhci_hcd: release socket
[   47.595094][   T37] vhci_hcd: disconnect device
[   47.598231][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[   47.626707][ T4329] wireguard0: entered promiscuous mode
[   47.632515][ T4329] wireguard0: entered allmulticast mode
[   47.670575][ T4339] FAULT_INJECTION: forcing a failure.
[   47.670575][ T4339] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.683874][ T4339] CPU: 1 UID: 0 PID: 4339 Comm: syz.0.310 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   47.683907][ T4339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   47.683931][ T4339] Call Trace:
[   47.683941][ T4339]  <TASK>
[   47.683951][ T4339]  __dump_stack+0x1d/0x30
[   47.683996][ T4339]  dump_stack_lvl+0xe8/0x140
[   47.684021][ T4339]  dump_stack+0x15/0x1b
[   47.684085][ T4339]  should_fail_ex+0x265/0x280
[   47.684127][ T4339]  should_fail+0xb/0x20
[   47.684234][ T4339]  should_fail_usercopy+0x1a/0x20
[   47.684340][ T4339]  strncpy_from_user+0x25/0x230
[   47.684368][ T4339]  ? kmem_cache_alloc_noprof+0x186/0x310
[   47.684437][ T4339]  ? getname_flags+0x80/0x3b0
[   47.684469][ T4339]  getname_flags+0xae/0x3b0
[   47.684496][ T4339]  user_path_at+0x28/0x130
[   47.684547][ T4339]  do_faccessat+0x380/0x800
[   47.684583][ T4339]  __x64_sys_faccessat2+0x51/0x60
[   47.684684][ T4339]  x64_sys_call+0x2e69/0x2fb0
[   47.684712][ T4339]  do_syscall_64+0xd2/0x200
[   47.684734][ T4339]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.684764][ T4339]  ? clear_bhb_loop+0x40/0x90
[   47.684847][ T4339]  ? clear_bhb_loop+0x40/0x90
[   47.684876][ T4339]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.684902][ T4339] RIP: 0033:0x7fcda280e929
[   47.684920][ T4339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.685002][ T4339] RSP: 002b:00007fcda0e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7
[   47.685071][ T4339] RAX: ffffffffffffffda RBX: 00007fcda2a35fa0 RCX: 00007fcda280e929
[   47.685085][ T4339] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006
[   47.685133][ T4339] RBP: 00007fcda0e77090 R08: 0000000000000000 R09: 0000000000000000
[   47.685148][ T4339] R10: 0000000000001300 R11: 0000000000000246 R12: 0000000000000001
[   47.685234][ T4339] R13: 0000000000000000 R14: 00007fcda2a35fa0 R15: 00007ffd37dc3118
[   47.685252][ T4339]  </TASK>
[   47.951770][ T4351] loop4: detected capacity change from 0 to 128
[   47.979160][ T4351] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   47.996163][ T4351] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.063610][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   48.495551][ T4369] FAULT_INJECTION: forcing a failure.
[   48.495551][ T4369] name failslab, interval 1, probability 0, space 0, times 0
[   48.508316][ T4369] CPU: 0 UID: 0 PID: 4369 Comm: syz.0.322 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   48.508343][ T4369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   48.508455][ T4369] Call Trace:
[   48.508461][ T4369]  <TASK>
[   48.508469][ T4369]  __dump_stack+0x1d/0x30
[   48.508531][ T4369]  dump_stack_lvl+0xe8/0x140
[   48.508553][ T4369]  dump_stack+0x15/0x1b
[   48.508569][ T4369]  should_fail_ex+0x265/0x280
[   48.508600][ T4369]  should_failslab+0x8c/0xb0
[   48.508630][ T4369]  kmem_cache_alloc_noprof+0x50/0x310
[   48.508720][ T4369]  ? skb_clone+0x151/0x1f0
[   48.508746][ T4369]  skb_clone+0x151/0x1f0
[   48.508766][ T4369]  __netlink_deliver_tap+0x2c9/0x500
[   48.508803][ T4369]  netlink_unicast+0x64c/0x670
[   48.508944][ T4369]  netlink_sendmsg+0x58b/0x6b0
[   48.508971][ T4369]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.508993][ T4369]  __sock_sendmsg+0x142/0x180
[   48.509017][ T4369]  ____sys_sendmsg+0x31e/0x4e0
[   48.509136][ T4369]  ___sys_sendmsg+0x17b/0x1d0
[   48.509231][ T4369]  __x64_sys_sendmsg+0xd4/0x160
[   48.509256][ T4369]  x64_sys_call+0x2999/0x2fb0
[   48.509276][ T4369]  do_syscall_64+0xd2/0x200
[   48.509294][ T4369]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.509323][ T4369]  ? clear_bhb_loop+0x40/0x90
[   48.509352][ T4369]  ? clear_bhb_loop+0x40/0x90
[   48.509380][ T4369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.509402][ T4369] RIP: 0033:0x7fcda280e929
[   48.509416][ T4369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.509432][ T4369] RSP: 002b:00007fcda0e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.509467][ T4369] RAX: ffffffffffffffda RBX: 00007fcda2a35fa0 RCX: 00007fcda280e929
[   48.509484][ T4369] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006
[   48.509497][ T4369] RBP: 00007fcda0e77090 R08: 0000000000000000 R09: 0000000000000000
[   48.509512][ T4369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.509604][ T4369] R13: 0000000000000000 R14: 00007fcda2a35fa0 R15: 00007ffd37dc3118
[   48.509622][ T4369]  </TASK>
[   49.013488][ T4373] netlink: 'syz.1.324': attribute type 2 has an invalid length.
[   49.045060][ T4376] loop0: detected capacity change from 0 to 512
[   49.128677][ T4376] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[   49.152827][ T4376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4376 comm=syz.0.325
[   49.420581][ T4403] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   49.420618][ T4402] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   49.462270][ T4407] SELinux: syz.1.337 (4407) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   49.496636][ T4408] SELinux:  policydb magic number 0x47cff8c does not match expected magic number 0xf97cff8c
[   49.534828][ T4408] SELinux: failed to load policy
[   49.559262][ T4408] openvswitch: netlink: Message has 6 unknown bytes.
[   49.806241][ T4424] lo speed is unknown, defaulting to 1000
[   50.039695][ T4443] loop4: detected capacity change from 0 to 512
[   50.067781][ T4443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   50.080672][ T4443] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.349: Unimplemented hash flags: 0x0001
[   50.092188][ T4443] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.349: Corrupt directory, running e2fsck is recommended
[   50.131730][ T4449] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.349: Unimplemented hash flags: 0x0001
[   50.143258][ T4449] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.349: Corrupt directory, running e2fsck is recommended
[   50.192091][ T4454] sd 0:0:1:0: device reset
[   50.254881][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.273991][ T4463] loop2: detected capacity change from 0 to 256
[   50.305919][ T4465] __nla_validate_parse: 7 callbacks suppressed
[   50.305941][ T4465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.359'.
[   50.322228][ T4463] FAT-fs (loop2): codepage cp864 not found
[   50.471258][ T4484] FAULT_INJECTION: forcing a failure.
[   50.471258][ T4484] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.484514][ T4484] CPU: 0 UID: 0 PID: 4484 Comm: syz.1.365 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   50.484545][ T4484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.484557][ T4484] Call Trace:
[   50.484564][ T4484]  <TASK>
[   50.484574][ T4484]  __dump_stack+0x1d/0x30
[   50.484600][ T4484]  dump_stack_lvl+0xe8/0x140
[   50.484652][ T4484]  dump_stack+0x15/0x1b
[   50.484667][ T4484]  should_fail_ex+0x265/0x280
[   50.484714][ T4484]  should_fail+0xb/0x20
[   50.484749][ T4484]  should_fail_usercopy+0x1a/0x20
[   50.484784][ T4484]  _copy_from_iter+0xcf/0xe40
[   50.484849][ T4484]  ? mntput+0x4b/0x80
[   50.484880][ T4484]  ? terminate_walk+0x27f/0x2a0
[   50.484910][ T4484]  tun_get_user+0x144/0x2500
[   50.484951][ T4484]  ? ref_tracker_alloc+0x1f2/0x2f0
[   50.485029][ T4484]  ? selinux_file_permission+0x1e4/0x320
[   50.485059][ T4484]  tun_chr_write_iter+0x15e/0x210
[   50.485100][ T4484]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   50.485133][ T4484]  vfs_write+0x4a0/0x8e0
[   50.485194][ T4484]  ksys_write+0xda/0x1a0
[   50.485240][ T4484]  __x64_sys_write+0x40/0x50
[   50.485262][ T4484]  x64_sys_call+0x2cdd/0x2fb0
[   50.485287][ T4484]  do_syscall_64+0xd2/0x200
[   50.485305][ T4484]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.485336][ T4484]  ? clear_bhb_loop+0x40/0x90
[   50.485413][ T4484]  ? clear_bhb_loop+0x40/0x90
[   50.485434][ T4484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.485456][ T4484] RIP: 0033:0x7f677c30e929
[   50.485525][ T4484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.485575][ T4484] RSP: 002b:00007f677a977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   50.485593][ T4484] RAX: ffffffffffffffda RBX: 00007f677c535fa0 RCX: 00007f677c30e929
[   50.485604][ T4484] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 0000000000000005
[   50.485618][ T4484] RBP: 00007f677a977090 R08: 0000000000000000 R09: 0000000000000000
[   50.485629][ T4484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.485640][ T4484] R13: 0000000000000000 R14: 00007f677c535fa0 R15: 00007ffd2f0a2b28
[   50.485658][ T4484]  </TASK>
[   50.829533][ T4501] FAULT_INJECTION: forcing a failure.
[   50.829533][ T4501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.842727][ T4501] CPU: 1 UID: 0 PID: 4501 Comm: syz.1.371 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   50.842841][ T4501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.842858][ T4501] Call Trace:
[   50.842866][ T4501]  <TASK>
[   50.842876][ T4501]  __dump_stack+0x1d/0x30
[   50.842955][ T4501]  dump_stack_lvl+0xe8/0x140
[   50.842980][ T4501]  dump_stack+0x15/0x1b
[   50.843054][ T4501]  should_fail_ex+0x265/0x280
[   50.843140][ T4501]  should_fail+0xb/0x20
[   50.843173][ T4501]  should_fail_usercopy+0x1a/0x20
[   50.843204][ T4501]  _copy_from_user+0x1c/0xb0
[   50.843247][ T4501]  ___sys_recvmsg+0xaa/0x370
[   50.843358][ T4501]  do_recvmmsg+0x1ef/0x540
[   50.843408][ T4501]  ? fput+0x8f/0xc0
[   50.843434][ T4501]  __x64_sys_recvmmsg+0xe5/0x170
[   50.843457][ T4501]  x64_sys_call+0x1c6a/0x2fb0
[   50.843478][ T4501]  do_syscall_64+0xd2/0x200
[   50.843509][ T4501]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.843535][ T4501]  ? clear_bhb_loop+0x40/0x90
[   50.843556][ T4501]  ? clear_bhb_loop+0x40/0x90
[   50.843578][ T4501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.843650][ T4501] RIP: 0033:0x7f677c30e929
[   50.843666][ T4501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.843683][ T4501] RSP: 002b:00007f677a977038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   50.843730][ T4501] RAX: ffffffffffffffda RBX: 00007f677c535fa0 RCX: 00007f677c30e929
[   50.843742][ T4501] RDX: 000000000000006f RSI: 0000200000002480 RDI: 0000000000000003
[   50.843754][ T4501] RBP: 00007f677a977090 R08: 0000000000000000 R09: 0000000000000000
[   50.843770][ T4501] R10: 0000000040002003 R11: 0000000000000246 R12: 0000000000000001
[   50.843782][ T4501] R13: 0000000000000000 R14: 00007f677c535fa0 R15: 00007ffd2f0a2b28
[   50.843825][ T4501]  </TASK>
[   51.032320][ T4505] ref_ctr_offset mismatch. inode: 0x15b offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0
[   51.119089][ T4513] lo speed is unknown, defaulting to 1000
[   51.298718][ T4525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'.
[   51.353798][   T10] IPVS: starting estimator thread 0...
[   51.420603][ T4528] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   51.447039][ T4526] IPVS: using max 2304 ests per chain, 115200 per kthread
[   51.451084][ T4528] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0
[   51.810087][ T4538] 9pnet_fd: Insufficient options for proto=fd
[   52.291799][ T4515] syz.0.377 (4515) used greatest stack depth: 10120 bytes left
[   52.362232][   T29] kauditd_printk_skb: 341 callbacks suppressed
[   52.362252][   T29] audit: type=1326 audit(1750185224.119:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.392149][   T29] audit: type=1326 audit(1750185224.119:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.422879][ T1037] usb 3-1: enqueue for inactive port 0
[   52.426229][   T29] audit: type=1400 audit(1750185224.149:1797): avc:  denied  { name_connect } for  pid=4566 comm="syz.2.388" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   52.439037][ T1037] usb 3-1: enqueue for inactive port 0
[   52.450533][   T29] audit: type=1326 audit(1750185224.169:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.479266][   T29] audit: type=1326 audit(1750185224.169:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.502783][   T29] audit: type=1326 audit(1750185224.169:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.526216][   T29] audit: type=1326 audit(1750185224.169:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.549466][   T29] audit: type=1326 audit(1750185224.169:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.551276][ T1037] vhci_hcd: vhci_device speed not set
[   52.572802][   T29] audit: type=1326 audit(1750185224.169:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.601588][   T29] audit: type=1326 audit(1750185224.179:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1b4683e929 code=0x7ffc0000
[   52.636655][ T4578] loop0: detected capacity change from 0 to 512
[   52.644955][ T4578] EXT4-fs: Ignoring removed i_version option
[   52.652309][ T4578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.667961][ T4578] EXT4-fs (loop0): orphan cleanup on readonly fs
[   52.684548][ T4578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.391: bg 0: block 248: padding at end of block bitmap is not set
[   52.718334][ T4578] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.391: Failed to acquire dquot type 1
[   52.750198][ T4578] EXT4-fs (loop0): 1 truncate cleaned up
[   52.775381][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.793604][ T4583] lo speed is unknown, defaulting to 1000
[   52.829628][ T4578] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   52.858273][ T4578] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   52.907118][ T4578] ext4 filesystem being remounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   52.924011][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.391'.
[   53.097277][ T4578] syz.0.391 (4578) used greatest stack depth: 9304 bytes left
[   53.120807][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.240997][ T4614] loop3: detected capacity change from 0 to 512
[   53.305801][ T4623] SELinux: syz.4.407 (4623) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.344327][ T4624] sd 0:0:1:0: device reset
[   53.398450][ T4614] journal_path: Non-blockdev passed as './bus'
[   53.404792][ T4614] EXT4-fs: error: could not find journal device path
[   53.870162][ T4636] lo speed is unknown, defaulting to 1000
[   53.909059][ T4641] loop4: detected capacity change from 0 to 1024
[   53.989348][ T4646] loop1: detected capacity change from 0 to 128
[   54.009189][ T4647] loop4: detected capacity change from 0 to 128
[   54.037954][ T4647] EXT4-fs: Ignoring removed nobh option
[   54.059534][ T4647] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.114906][ T4647] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.306264][ T4662] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   54.425263][ T4664] loop0: detected capacity change from 0 to 512
[   54.433056][ T4661] loop2: detected capacity change from 0 to 8192
[   54.480387][ T4664] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.418: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   54.538833][ T4664] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.418: Bad quota inode: 3, type: 0
[   54.618829][ T4664] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   54.674608][ T4667] lo speed is unknown, defaulting to 1000
[   54.697292][ T4664] EXT4-fs (loop0): mount failed
[   54.887067][ T4670] netlink: 'syz.0.418': attribute type 1 has an invalid length.
[   54.894910][ T4670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.418'.
[   55.290635][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'.
[   55.328321][ T4688] FAULT_INJECTION: forcing a failure.
[   55.328321][ T4688] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.341497][ T4688] CPU: 1 UID: 0 PID: 4688 Comm: syz.1.425 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   55.341559][ T4688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.341572][ T4688] Call Trace:
[   55.341579][ T4688]  <TASK>
[   55.341587][ T4688]  __dump_stack+0x1d/0x30
[   55.341683][ T4688]  dump_stack_lvl+0xe8/0x140
[   55.341702][ T4688]  dump_stack+0x15/0x1b
[   55.341719][ T4688]  should_fail_ex+0x265/0x280
[   55.341776][ T4688]  should_fail+0xb/0x20
[   55.341804][ T4688]  should_fail_usercopy+0x1a/0x20
[   55.341843][ T4688]  _copy_from_user+0x1c/0xb0
[   55.341865][ T4688]  __copy_msghdr+0x244/0x300
[   55.341967][ T4688]  ___sys_sendmsg+0x109/0x1d0
[   55.342067][ T4688]  __sys_sendmmsg+0x178/0x300
[   55.342098][ T4688]  __x64_sys_sendmmsg+0x57/0x70
[   55.342198][ T4688]  x64_sys_call+0x2f2f/0x2fb0
[   55.342219][ T4688]  do_syscall_64+0xd2/0x200
[   55.342238][ T4688]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.342265][ T4688]  ? clear_bhb_loop+0x40/0x90
[   55.342409][ T4688]  ? clear_bhb_loop+0x40/0x90
[   55.342431][ T4688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.342494][ T4688] RIP: 0033:0x7f677c30e929
[   55.342509][ T4688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.342526][ T4688] RSP: 002b:00007f677a977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   55.342544][ T4688] RAX: ffffffffffffffda RBX: 00007f677c535fa0 RCX: 00007f677c30e929
[   55.342559][ T4688] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[   55.342571][ T4688] RBP: 00007f677a977090 R08: 0000000000000000 R09: 0000000000000000
[   55.342592][ T4688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   55.342658][ T4688] R13: 0000000000000000 R14: 00007f677c535fa0 R15: 00007ffd2f0a2b28
[   55.342678][ T4688]  </TASK>
[   55.720396][ T4697] sd 0:0:1:0: device reset
[   55.878078][ T4700] netlink: 'syz.1.432': attribute type 4 has an invalid length.
[   56.013537][ T4713] loop1: detected capacity change from 0 to 128
[   56.306031][ T4725] lo speed is unknown, defaulting to 1000
[   56.426189][ T4726] can0: slcan on ttyS3.
[   56.487881][ T4726] can0 (unregistered): slcan off ttyS3.
[   56.745464][ T4728] loop0: detected capacity change from 0 to 8192
[   56.753017][ T4728] vfat: Unknown parameter ''
[   56.758334][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   56.923471][ T4745] loop1: detected capacity change from 0 to 128
[   56.941560][ T4737] @: renamed from vlan0 (while UP)
[   56.977729][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   56.985613][ T4745] FAT-fs (loop1): Filesystem has been set read-only
[   57.012920][ T4745] bio_check_eod: 103 callbacks suppressed
[   57.012938][ T4745] syz.1.450: attempt to access beyond end of device
[   57.012938][ T4745] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   57.050382][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   57.058512][ T4745] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   57.061552][ T4752] loop2: detected capacity change from 0 to 764
[   57.067302][ T4743] syz.1.450: attempt to access beyond end of device
[   57.067302][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.086859][ T4743] syz.1.450: attempt to access beyond end of device
[   57.086859][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.103329][ T4752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.452'.
[   57.103587][ T4743] syz.1.450: attempt to access beyond end of device
[   57.103587][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.256083][ T4743] syz.1.450: attempt to access beyond end of device
[   57.256083][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.353970][ T4754] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   57.360586][ T4754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   57.368224][ T4754] vhci_hcd vhci_hcd.0: Device attached
[   57.391952][ T4743] syz.1.450: attempt to access beyond end of device
[   57.391952][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.454879][ T4762] loop2: detected capacity change from 0 to 512
[   57.490496][ T4743] syz.1.450: attempt to access beyond end of device
[   57.490496][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.513810][ T4762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   57.523787][ T4762] EXT4-fs (loop2): bad geometry: block count 1024 exceeds size of device (256 blocks)
[   57.533475][   T29] kauditd_printk_skb: 272 callbacks suppressed
[   57.533492][   T29] audit: type=1400 audit(1750185229.269:2075): avc:  denied  { mounton } for  pid=4761 comm="syz.2.457" path="/95/bus" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   57.557288][ T4743] syz.1.450: attempt to access beyond end of device
[   57.557288][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.575398][ T4765] lo speed is unknown, defaulting to 1000
[   57.583194][ T4743] syz.1.450: attempt to access beyond end of device
[   57.583194][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.596500][ T4743] syz.1.450: attempt to access beyond end of device
[   57.596500][ T4743] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   57.720800][ T4769] loop3: detected capacity change from 0 to 512
[   57.741651][   T29] audit: type=1107 audit(1750185229.499:2076): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ӽ$�=^h���W�a��-��8�4)jN�`��x�K؜���ITy���z�*<�Z<c��(�G��-�v���6�M1�\C̶�݈v��k���$T;�9��$'
[   57.760352][ T4769] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.771324][ T4769] EXT4-fs: Mount option(s) incompatible with ext3
[   57.780487][   T29] audit: type=1400 audit(1750185229.539:2077): avc:  denied  { wake_alarm } for  pid=4770 comm="syz.1.459" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.806641][ T4769] loop3: detected capacity change from 0 to 512
[   57.813521][ T4769] journal_path: Non-blockdev passed as './file0'
[   57.819945][ T4769] EXT4-fs: error: could not find journal device path
[   57.856078][ T4776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'.
[   57.868754][   T29] audit: type=1400 audit(1750185229.629:2078): avc:  denied  { shutdown } for  pid=4770 comm="syz.1.459" laddr=fe80::f lport=50622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   57.917144][ T4778] Falling back ldisc for ttyS3.
[   57.947202][   T29] audit: type=1400 audit(1750185229.699:2079): avc:  denied  { connect } for  pid=4781 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   57.966719][   T29] audit: type=1400 audit(1750185229.699:2080): avc:  denied  { setattr } for  pid=4781 comm="syz.3.465" name="" dev="pipefs" ino=9098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   57.971768][ T4773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.007677][ T4773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.023917][   T29] audit: type=1400 audit(1750185229.779:2081): avc:  denied  { create } for  pid=4772 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   58.050580][   T29] audit: type=1400 audit(1750185229.809:2082): avc:  denied  { connect } for  pid=4772 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   58.070857][   T29] audit: type=1326 audit(1750185229.809:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f761e78e929 code=0x7ffc0000
[   58.094276][   T29] audit: type=1326 audit(1750185229.809:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.2.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f761e78e929 code=0x7ffc0000
[   58.131446][ T4759] vhci_hcd: connection closed
[   58.135541][ T2623] vhci_hcd: stop threads
[   58.144810][ T2623] vhci_hcd: release socket
[   58.149347][ T2623] vhci_hcd: disconnect device
[   58.155439][ T4788] loop1: detected capacity change from 0 to 512
[   58.160050][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'.
[   58.164517][ T4788] EXT4-fs: Ignoring removed oldalloc option
[   58.171585][ T4793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[   58.185599][ T4793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   58.213415][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.231227][ T4795] loop3: detected capacity change from 0 to 512
[   58.239404][ T4788] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.260229][ T4795] EXT4-fs (loop3): Invalid log block size: 20
[   58.275215][ T4788] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.467: bg 0: block 217: padding at end of block bitmap is not set
[   58.323454][ T4806] sd 0:0:1:0: device reset
[   58.332025][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.435382][ T4816] netlink: '+}[@': attribute type 13 has an invalid length.
[   58.451154][ T4822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'.
[   58.515258][ T4816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.530862][ T3368] lo speed is unknown, defaulting to 1000
[   58.649912][ T4839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'.
[   58.668382][ T4839] bridge_slave_1: left allmulticast mode
[   58.674387][ T4839] bridge_slave_1: left promiscuous mode
[   58.680421][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.703348][ T4839] bridge_slave_0: left allmulticast mode
[   58.709300][ T4839] bridge_slave_0: left promiscuous mode
[   58.715031][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.716686][ T4842] loop0: detected capacity change from 0 to 512
[   58.734543][ T4842] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.488: casefold flag without casefold feature
[   58.752774][ T4842] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.488: couldn't read orphan inode 15 (err -117)
[   58.766274][ T4842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.791111][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.879940][ T4851] lo speed is unknown, defaulting to 1000
[   58.982359][ T4860] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[   59.251010][ T4885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.506'.
[   59.350804][ T4874] loop0: detected capacity change from 0 to 512
[   59.370644][ T4874] EXT4-fs (loop0): too many log groups per flexible block group
[   59.378775][ T4874] EXT4-fs (loop0): failed to initialize mballoc (-12)
[   59.402055][ T4874] EXT4-fs (loop0): mount failed
[   59.674196][ T4907] loop1: detected capacity change from 0 to 128
[   60.620219][ T4915] sd 0:0:1:0: device reset
[   60.756419][ T4931] loop4: detected capacity change from 0 to 1024
[   60.764802][ T4931] EXT4-fs: Ignoring removed nobh option
[   60.770794][ T4931] EXT4-fs: Ignoring removed nobh option
[   60.800098][ T4931] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   60.816068][ T4931] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: comm syz.4.521: inode #4294967295: comm syz.4.521: iget: illegal inode #
[   60.816364][ T4931] EXT4-fs (loop4): no journal found
[   60.816376][ T4931] EXT4-fs (loop4): can't get journal size
[   60.817192][ T4931] EXT4-fs (loop4): failed to initialize system zone (-22)
[   60.850054][ T4931] EXT4-fs (loop4): mount failed
[   60.904805][ T4946] netlink: 'syz.1.527': attribute type 13 has an invalid length.
[   60.950121][ T4946] gretap0: refused to change device tx_queue_len
[   60.956703][ T4946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   60.981732][ T4935] netlink: 188 bytes leftover after parsing attributes in process `syz.2.524'.
[   61.188972][ T4955] loop1: detected capacity change from 0 to 512
[   61.251251][ T4959] lo speed is unknown, defaulting to 1000
[   61.289227][ T4955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.320343][ T4955] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.341722][ T4955] EXT4-fs error (device loop1): ext4_empty_dir:3075: inode #12: comm syz.1.530: invalid size
[   61.443065][ T4975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.455057][ T4975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.471250][ T4975] loop3: detected capacity change from 0 to 512
[   61.492770][ T4975] loop3: detected capacity change from 0 to 2048
[   61.499844][ T4975] EXT4-fs: Ignoring removed bh option
[   61.519584][ T4975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.695840][ T5003] sd 0:0:1:0: device reset
[   61.753949][ T5008] loop0: detected capacity change from 0 to 512
[   61.771009][ T5008] EXT4-fs (loop0): 1 orphan inode deleted
[   61.778333][ T5008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.791876][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   61.793280][ T5008] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.820122][ T5008] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   61.844276][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.920297][ T4997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   61.942896][ T4997] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28
[   61.943735][ T5015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[   61.955566][ T4997] EXT4-fs (loop3): This should not happen!! Data will be lost
[   61.955566][ T4997] 
[   61.974509][ T4997] EXT4-fs (loop3): Total free blocks count 0
[   61.980645][ T4997] EXT4-fs (loop3): Free/Dirty block details
[   61.986572][ T4997] EXT4-fs (loop3): free_blocks=2415919104
[   61.992402][ T4997] EXT4-fs (loop3): dirty_blocks=8224
[   61.997860][ T4997] EXT4-fs (loop3): Block reservation details
[   62.003860][ T4997] EXT4-fs (loop3): i_reserved_data_blocks=514
[   62.074284][ T5022] Timeout policy `syz0' can only be used by L3 protocol number 34878
[   62.118632][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.196361][ T5034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=213 sclass=netlink_route_socket pid=5034 comm=syz.0.557
[   62.202054][ T5032] loop1: detected capacity change from 0 to 2048
[   62.211080][ T5034] loop0: detected capacity change from 0 to 256
[   62.229705][ T5032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.245749][ T5032] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   62.261528][ T5032] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   62.274016][ T5032] EXT4-fs (loop1): This should not happen!! Data will be lost
[   62.274016][ T5032] 
[   62.283784][ T5032] EXT4-fs (loop1): Total free blocks count 0
[   62.289795][ T5032] EXT4-fs (loop1): Free/Dirty block details
[   62.295715][ T5032] EXT4-fs (loop1): free_blocks=2415919504
[   62.301536][ T5032] EXT4-fs (loop1): dirty_blocks=64
[   62.306685][ T5032] EXT4-fs (loop1): Block reservation details
[   62.312722][ T5032] EXT4-fs (loop1): i_reserved_data_blocks=4
[   62.334228][  T146] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   62.347150][ T5041] loop0: detected capacity change from 0 to 512
[   62.354659][ T5041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   62.366091][ T5041] EXT4-fs (loop0): 1 truncate cleaned up
[   62.372387][ T5041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.385515][ T5041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.428462][ T5045] netlink: 'syz.1.559': attribute type 7 has an invalid length.
[   62.436590][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[   62.503293][ T5047] FAULT_INJECTION: forcing a failure.
[   62.503293][ T5047] name failslab, interval 1, probability 0, space 0, times 0
[   62.516139][ T5047] CPU: 0 UID: 0 PID: 5047 Comm: syz.1.560 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   62.516250][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.516264][ T5047] Call Trace:
[   62.516270][ T5047]  <TASK>
[   62.516280][ T5047]  __dump_stack+0x1d/0x30
[   62.516348][ T5047]  dump_stack_lvl+0xe8/0x140
[   62.516368][ T5047]  dump_stack+0x15/0x1b
[   62.516389][ T5047]  should_fail_ex+0x265/0x280
[   62.516480][ T5047]  should_failslab+0x8c/0xb0
[   62.516512][ T5047]  __kmalloc_noprof+0xa5/0x3e0
[   62.516544][ T5047]  ? offload_action_alloc+0x2b/0x180
[   62.516579][ T5047]  offload_action_alloc+0x2b/0x180
[   62.516751][ T5047]  tcf_action_offload_add_ex+0x11f/0x3c0
[   62.516797][ T5047]  tcf_action_init+0x333/0x6d0
[   62.516819][ T5047]  ? mark_reg_read+0x59/0x340
[   62.516874][ T5047]  tc_ctl_action+0x291/0x830
[   62.516990][ T5047]  ? __pfx_tc_ctl_action+0x10/0x10
[   62.517034][ T5047]  rtnetlink_rcv_msg+0x657/0x6d0
[   62.517062][ T5047]  netlink_rcv_skb+0x123/0x220
[   62.517094][ T5047]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   62.517207][ T5047]  rtnetlink_rcv+0x1c/0x30
[   62.517229][ T5047]  netlink_unicast+0x59e/0x670
[   62.517263][ T5047]  netlink_sendmsg+0x58b/0x6b0
[   62.517314][ T5047]  ? __pfx_netlink_sendmsg+0x10/0x10
[   62.517438][ T5047]  __sock_sendmsg+0x142/0x180
[   62.517466][ T5047]  ____sys_sendmsg+0x31e/0x4e0
[   62.517516][ T5047]  ___sys_sendmsg+0x17b/0x1d0
[   62.517579][ T5047]  __x64_sys_sendmsg+0xd4/0x160
[   62.517612][ T5047]  x64_sys_call+0x2999/0x2fb0
[   62.517690][ T5047]  do_syscall_64+0xd2/0x200
[   62.517712][ T5047]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.517807][ T5047]  ? clear_bhb_loop+0x40/0x90
[   62.517883][ T5047]  ? clear_bhb_loop+0x40/0x90
[   62.517911][ T5047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.517983][ T5047] RIP: 0033:0x7f677c30e929
[   62.517998][ T5047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.518019][ T5047] RSP: 002b:00007f677a977038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   62.518043][ T5047] RAX: ffffffffffffffda RBX: 00007f677c535fa0 RCX: 00007f677c30e929
[   62.518059][ T5047] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006
[   62.518074][ T5047] RBP: 00007f677a977090 R08: 0000000000000000 R09: 0000000000000000
[   62.518089][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.518132][ T5047] R13: 0000000000000000 R14: 00007f677c535fa0 R15: 00007ffd2f0a2b28
[   62.518154][ T5047]  </TASK>
[   62.806011][  T146] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   62.845693][ T5049] loop4: detected capacity change from 0 to 2048
[   62.880412][ T5049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.973652][   T29] kauditd_printk_skb: 567 callbacks suppressed
[   62.973684][   T29] audit: type=1400 audit(1750185234.729:2651): avc:  denied  { create } for  pid=5052 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   62.983164][ T5059] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   63.001295][   T29] audit: type=1400 audit(1750185234.739:2652): avc:  denied  { setopt } for  pid=5052 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   63.034341][   T29] audit: type=1400 audit(1750185234.739:2653): avc:  denied  { block_suspend } for  pid=5052 comm="syz.1.564" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.055921][   T29] audit: type=1400 audit(1750185234.739:2654): avc:  denied  { name_bind } for  pid=5052 comm="syz.1.564" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   63.097702][ T5059] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   63.110257][ T5059] EXT4-fs (loop4): This should not happen!! Data will be lost
[   63.110257][ T5059] 
[   63.119961][ T5059] EXT4-fs (loop4): Total free blocks count 0
[   63.125980][ T5059] EXT4-fs (loop4): Free/Dirty block details
[   63.131963][ T5059] EXT4-fs (loop4): free_blocks=2415919504
[   63.137996][ T5059] EXT4-fs (loop4): dirty_blocks=64
[   63.143140][ T5059] EXT4-fs (loop4): Block reservation details
[   63.149323][ T5059] EXT4-fs (loop4): i_reserved_data_blocks=4
[   63.192442][ T5066] loop1: detected capacity change from 0 to 512
[   63.199409][ T5066] EXT4-fs: Ignoring removed orlov option
[   63.205372][   T29] audit: type=1400 audit(1750185234.929:2655): avc:  denied  { ioctl } for  pid=5048 comm="syz.4.562" path="/84/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   63.238193][ T5066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.255838][ T5066] EXT4-fs (loop1): orphan cleanup on readonly fs
[   63.277242][   T29] audit: type=1400 audit(1750185235.039:2656): avc:  denied  { watch watch_reads } for  pid=5067 comm="syz.3.561" path="/95/control" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   63.283587][ T5066] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.566: bg 0: block 248: padding at end of block bitmap is not set
[   63.337007][   T29] audit: type=1326 audit(1750185235.039:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5067 comm="syz.3.561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4683e929 code=0x0
[   63.339772][ T5066] Quota error (device loop1): write_blk: dquota write failed
[   63.369875][ T5066] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   63.381314][ T5066] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.566: Failed to acquire dquot type 1
[   63.396414][ T5066] EXT4-fs (loop1): 1 truncate cleaned up
[   63.402900][ T5066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.428662][   T29] audit: type=1400 audit(1750185235.189:2658): avc:  denied  { create } for  pid=5065 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   63.567451][ T5073] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.566: deleted inode referenced: 12
[   63.594744][ T5073] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.566: deleted inode referenced: 12
[   63.639204][ T5066] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.566: deleted inode referenced: 12
[   63.682228][ T3441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 18 with error 28
[   63.753419][ T5077] SELinux: syz.4.568 (5077) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   63.785283][ T5079] random: crng reseeded on system resumption
[   63.828181][ T5081] xt_CT: You must specify a L4 protocol and not use inversions on it
[   63.845508][ T5081] SELinux:  policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c
[   63.855973][ T5081] SELinux: failed to load policy
[   63.980555][ T5090] loop0: detected capacity change from 0 to 512
[   63.990923][ T5090] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   64.009710][ T5090] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   64.028626][ T5090] EXT4-fs (loop0): 1 truncate cleaned up
[   64.034929][ T5090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.093080][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.103864][ T5090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.216511][ T5102] vlan0: entered allmulticast mode
[   64.221771][ T5102] bridge_slave_0: entered allmulticast mode
[   64.278507][ T5108] loop4: detected capacity change from 0 to 512
[   64.285666][ T5108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.304223][ T5108] EXT4-fs (loop4): 1 truncate cleaned up
[   64.335347][ T5108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.358536][ T5116] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   64.423875][ T5127] xt_connbytes: Forcing CT accounting to be enabled
[   64.433970][ T5126] loop1: detected capacity change from 0 to 1024
[   64.445822][ T5127] set match dimension is over the limit!
[   64.473257][ T5126] EXT4-fs: Ignoring removed nobh option
[   64.479211][ T5126] EXT4-fs: Ignoring removed bh option
[   64.491063][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'.
[   64.533277][ T5126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.557154][ T5128] hsr_slave_1 (unregistering): left promiscuous mode
[   64.610058][ T5143] loop2: detected capacity change from 0 to 128
[   64.628942][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.644556][ T5143] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   64.662676][ T5137] loop0: detected capacity change from 0 to 256
[   64.671321][ T5137] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   64.696321][ T5143] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.696634][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.741168][ T5149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'.
[   64.765426][ T5149] hsr_slave_0: left promiscuous mode
[   64.784289][ T5149] hsr_slave_1: left promiscuous mode
[   64.828038][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   64.871292][ T5161] ==================================================================
[   64.879463][ T5161] BUG: KCSAN: data-race in getrusage / vms_clear_ptes
[   64.886261][ T5161] 
[   64.888596][ T5161] write to 0xffff88811f60dd30 of 8 bytes by task 5168 on cpu 0:
[   64.896329][ T5161]  vms_clear_ptes+0x18f/0x2d0
[   64.901120][ T5161]  vms_complete_munmap_vmas+0x159/0x440
[   64.906718][ T5161]  do_vmi_align_munmap+0x383/0x3d0
[   64.911876][ T5161]  do_vmi_munmap+0x1db/0x220
[   64.916488][ T5161]  __vm_munmap+0x1a1/0x280
[   64.920928][ T5161]  __x64_sys_munmap+0x36/0x50
[   64.925658][ T5161]  x64_sys_call+0xa65/0x2fb0
[   64.930287][ T5161]  do_syscall_64+0xd2/0x200
[   64.934840][ T5161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.940760][ T5161] 
[   64.943098][ T5161] read to 0xffff88811f60dd30 of 8 bytes by task 5161 on cpu 1:
[   64.950654][ T5161]  getrusage+0xa52/0xbb0
[   64.954927][ T5161]  io_sq_thread+0x5dd/0x1180
[   64.959534][ T5161]  ret_from_fork+0xdd/0x150
[   64.964054][ T5161]  ret_from_fork_asm+0x1a/0x30
[   64.968842][ T5161] 
[   64.971175][ T5161] value changed: 0x00000000000014ea -> 0x0000000000001614
[   64.978309][ T5161] 
[   64.980670][ T5161] Reported by Kernel Concurrency Sanitizer on:
[   64.986931][ T5161] CPU: 1 UID: 0 PID: 5161 Comm: iou-sqp-5159 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) 
[   64.999627][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   65.009718][ T5161] ==================================================================
[   65.019692][ T5168] loop0: detected capacity change from 0 to 512
[   65.026812][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.045271][ T5168] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.598: Bad quota inum: 29696, type: 1
[   65.066336][ T5168] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix.
[   65.081739][ T5168] EXT4-fs (loop0): mount failed