last executing test programs:

6.572260165s ago: executing program 4 (id=183):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x20040800)

6.461726892s ago: executing program 4 (id=184):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x6, 0x1, 0x1, 0x9, 0x7, 0x2, 0x7}, &(0x7f0000000240)={0xa, 0x5, 0x1, 0x9, 0x1, 0xff, 0xfffffffffffff7d4, 0x1}, &(0x7f00000002c0)={0x2, 0x9, 0x401, 0x8, 0x8, 0x400000000000000, 0x8, 0xe}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0xff]}, 0x8})
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94)
ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd)
fcntl$setsig(r2, 0xa, 0x11)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000005d51000000000000000000e6ffffff00779cb14444d0790c955bba6d8e99d59ff5d2beb806bbe13f92d54a050033c51e90bfaeb9a6cd8cea4c19fcc7c9093a58d01713c03cc3dd2b3a743912f4df67c5d5e3190085249eb29cb8a4cd4b3df7bb07193fceb074807128a3359f8157c5b6a6a296580ed55d6fc17a61ca78cfdc9fa068ea45f68dc7308d164f1790a5628527964cd5a24ae959e71ef151", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa)
recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

6.341530058s ago: executing program 4 (id=187):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3e}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095000000000000004d6b4855a9617a11936e120ddd34317d9a3bbdaef98337c59f9b4ef5c8559a21cbd95b7fb954e51ec10279a251f34b149d428e0c03dbbeabff6c03854368e1072332a6200ada624bf6476feaf6fa651375bfed05de47365fb6872ae0de638fbe2b22d58debaea2061890625a1fc23c5f9edb1cb6b77403055ea74354e1c3a0d2cc51ab3ad9978ec15c5e5f"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
tee(r1, r1, 0x800, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80080001", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5.62459055s ago: executing program 4 (id=195):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x1, 0x1, 0x200, 0xa0000001, 0x2, 0x2a, 0x1ba}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
r7 = getpid()
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}}}}}}, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
syz_clone(0x50000091, 0x0, 0x0, 0x0, 0x0, 0x0)

5.2953891s ago: executing program 4 (id=201):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40086604, 0x0)

5.093293922s ago: executing program 4 (id=204):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008050)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4)
syz_emit_ethernet(0x384, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x0, 0x8, 0x376, 0x66, 0x0, 0xd3, 0x2f, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x13, 0x76, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x82, 0x7, "dc15ec09f8"}, @rr={0x7, 0x13, 0x86, [@broadcast, @remote, @loopback, @initdev={0xac, 0x1e, 0x2, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x4, [{@local, 0xeee}, {@remote, 0x4}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa9, 0x0, [], "13ddcccb02623b008d0db127b0fb1c34081f9457921b46009ce3eb50869fcd7a6421931c9c8d4b1f617b8af285b7fff65125d1cb700fd7a46c13f10e15fa01db513b7622bb260f02d722fa51780f501b9d3178da2eff77766d4e1cc3d9609ac502693b4068bbfc4d88ea461013ffc0d3ebc72f19426431ae8fe719a3067552e05858e7e1720f8af7782daa2fe60ba01c07e784d61e59a1290269e3c2861e495eba2c8ed9a8ca934028"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "4ebf8ab0854d651bfc65619a1a9fcc4d3ebff995dbb6fb15c303a55c621d982763fa033e2698e8b1ebcecc84427ace9daee53946541f1bfad5f5e0b26ba32af90f6792d78cf470c264b84b2f5279b3ff87e5ac2f503edafdebe43c2eeda194396d3aed81eea9c730271866e876d3603da10daecf52fb9f81"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0xc, 0x1], "2a99007f6ec894bd273d055dc96ae4b92c8d234d8d6c28c74fb02d0f909efa0d05865dc627537c61e680482015a8a75f915387156b5133348b00172c83511ae7621b3c5d3f54ce6b9abc39fc2a653818d6151f271512beb2fd5bbfe4aac81ce06ab8703512d36d4d3a59b37bb5d0af92c069ef3bd22f8da3b139266232dc0b14daaa0639f390b4a1590b5033446ae869fe37324b2c8294a30f318a65054647aba0aded08a15a9ca08734f355dfb69561a0c82d85dccfef2770a3cca691d83fcdd185ae6eb0"}, {0x8, 0x88be, 0x1, {{0xf, 0x1, 0x41, 0x0, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x0, 0x0, 0x1, 0x1, 0x5, 0x7e}, 0x2, {0x8, 0x5, 0x3, 0x5, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "66ec34494d46036a91b0431f9e8c7f0dcfc0351f7f70ca861baa212c315f5b57944b6cb33c89bb77c2daab546d81be75bc54409bb5133564fbbb1d15c4ea08e14c88f15bd46171cfeed5558bed5585fd87d2b7a9ae630074397a56b79be282709cb39fba98c8efad5ec1df7d1edf5782a0be6256561726a4e9ceeb0f08cabb54c6412cbdcac7fb120b96bff81a391b098847203b8402e6d3546a93ebdf0258e419cdc59e57cb97b50a42d722395826c3b5bedf8defa12cf0cbef72abde57792af533bce672a53e1cd37ddad890a910eadadc89da8367a73b34769d86270a61694954ade59c2e07a39d9acbaa9dbcb155"}}}}}}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x16)
chdir(&(0x7f0000000140)='./file0\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

4.130997698s ago: executing program 1 (id=215):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffefff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x60)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[], 0x48)
capset(0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4000080)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004000)
sendmsg(0xffffffffffffffff, 0x0, 0x24008081)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3.628581047s ago: executing program 0 (id=218):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014)
close_range(r2, 0xffffffffffffffff, 0x0)

3.402160501s ago: executing program 0 (id=220):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3e}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095000000000000004d6b4855a9617a11936e120ddd34317d9a3bbdaef98337c59f9b4ef5c8559a21cbd95b7fb954e51ec10279a251f34b149d428e0c03dbbeabff6c03854368e1072332a6200ada624bf6476feaf6fa651375bfed05de47365fb6872ae0de638fbe2b22d58debaea2061890625a1fc23c5f9edb1cb6b77403055ea74354e1c3a0d2cc51ab3ad9978ec15c5e5f"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
tee(r1, r1, 0x800, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.90672744s ago: executing program 1 (id=222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xb4dbc584f84cfbae}, 0x80)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", ""]}, 0x14}}, 0x805)
r1 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x132, 0xffffffffffffffff, 0xffffd000)
request_key(0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x2, 0x4)

2.669817863s ago: executing program 0 (id=223):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000006d00010021bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000020008001c00", @ANYRES32, @ANYBLOB="8b262848b4dfd79389163a6d5003576cdc40e4cf0a78cb3ce8a02f02c3399a7579c3bf74703c605bfd51668bbddc39117a9950ee0700a4bec3da043a34384b719fb5f7d9601a76b5ce151fa403c3fb83542eab88545d18c3cd5a1df5956d3ae71d85766f569bcb4c4be68bbc6dc63cd69ca97a333a768cac"], 0x28}, 0x1, 0x0, 0x0, 0x8814}, 0x4000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b00)="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", 0x1fd}], 0x1}, 0x4000)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006669620014000280080001400000000008000240000019020900010073797a30000000000900020073797a3200"], 0x78}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\a'], 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010001fff2cbd70000000008000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000003c001280080001006774700030000280050005000100000008000300270f"], 0x5c}}, 0x8000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)

2.567849409s ago: executing program 1 (id=225):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x82b}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39)

2.470656165s ago: executing program 1 (id=228):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1)
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xce, 0x7f, 0x10, @private0, @mcast2, 0x80, 0x10, 0x559, 0x1}})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r2, 0x1)
futex_waitv(&(0x7f0000000140)=[{0x70d2, &(0x7f0000000000)=0x100000000, 0x86}], 0x1, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0)
r3 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xa9525000)
link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @loopback, 0x9}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000340), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0)
r6 = inotify_init1(0x800)
inotify_add_watch(r6, &(0x7f0000000300)='./file0\x00', 0x800000ad)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000001540)={0x1, 0x0, 0x1000, 0x1000, &(0x7f00000004c0)="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", 0x49, 0x0, &(0x7f00000014c0)="878bf15991512f0b63cdb7f0825e81a159678944c11b1f823acd7edc8cacdae74ca39705bdb292f227c2428dcf7128073980ee5947946b067dbc9b571e3fa8d1a019c353d0638b28af"})
bpf$LINK_DETACH(0x22, &(0x7f00000015c0)=r0, 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil)

2.359803242s ago: executing program 0 (id=231):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
unshare(0x6020400)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
timer_gettime(0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
stat(&(0x7f0000000b40)='./file0\x00', 0x0)
fremovexattr(r1, &(0x7f00000001c0)=@known='trusted.overlay.origin\x00')

2.100719817s ago: executing program 0 (id=233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x800)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2000044, &(0x7f00000003c0), 0x1, 0x572, &(0x7f0000000400)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x7fffffff)
unshare(0xa000200)
r8 = semget$private(0x0, 0x4000, 0x0)
semctl$IPC_RMID(r8, 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x3e, 0x0, &(0x7f0000000300)="aa673bfce91f3f94542f07f51c7ecb34643c85beb1647f89368a3d294df5992607318e26aae246bbe8388c0d8841e1d69fa7b1be0501360727c51208f73d", 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000"], 0xb8}}, 0x0)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r10, 0x4bfb, &(0x7f0000000000))
ptrace(0x10, r4)

2.014186592s ago: executing program 2 (id=234):
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000a010300000000000000000400000314000000090a01010000000000000000010000011400000011000100000000000000000002ec000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x12, r6, 0x0, 0x0, 0x0, 0x40002262, 0x0, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.318516222s ago: executing program 3 (id=236):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0)

1.171569411s ago: executing program 1 (id=237):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1000040, &(0x7f0000000ac0)={[{@nouid32}, {@nodioread_nolock}, {@nodiscard}, {@noauto_da_alloc}, {@dax_inode}, {@commit}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'commit'}}]}, 0xfd, 0x5a3, &(0x7f00000002c0)="$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")
set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x1000, 0x1, 0x69}, &(0x7f0000000500)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1})
io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
close_range(r1, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, &(0x7f0000000100), 0x12)
socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000008c0)}, 0x0, 0xe2e, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8)
fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0)
setuid(0xee00)
r6 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000007030000000004000100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0xc054)
write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001a141f06d0005000400000000000900020073797a31000000001400cefb3054697f129012440300686173683a69702c706f72742c6970000c00"], 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x88442, 0xc0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000880), 0x6}, 0x408, 0x44000000032, 0x43a1bd76, 0x5, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

1.112604004s ago: executing program 2 (id=238):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001840)={@val={0x8, 0x82b}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39)

1.091553765s ago: executing program 3 (id=239):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55, r2}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0xee00}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x17, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00')
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0)

1.01670072s ago: executing program 2 (id=240):
memfd_secret(0x0)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r0, &(0x7f0000000180)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13)
write$P9_RWRITE(r0, &(0x7f0000000100)={0xb, 0x77, 0x2, 0xd}, 0xb)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x103000, 0x3b0)
read$msr(r1, &(0x7f00000002c0)=""/4096, 0x1000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000080000000086e42a80accb8ec35021160700000d0000000000000000000900020073797a310000000005000140fe8000010000000000000000a31f00"/88], 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.01642891s ago: executing program 3 (id=241):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r4, 0x1d06, 0x6}, &(0x7f00000000c0)=0xc)

907.803686ms ago: executing program 2 (id=242):
r0 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888)

620.008433ms ago: executing program 3 (id=243):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000514210626bd"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x0)

359.417669ms ago: executing program 3 (id=244):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001900"/17], 0x50)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x4, 0xa, 0x4, 0x8, 0x8}, @call={0x85, 0x0, 0x0, 0xa1}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfff}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30b1a10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @generic={0x0, 0x9, 0x5, 0x9, 0x7}], &(0x7f0000000980)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r3, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x100, 0x4)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000056, 0x3)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000000c0)="37cb0c9a71992613ec17359461bfde")
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r5)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e21, @loopback}, 0x2, 0x1, 0x3, 0x1}}, 0x26)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

313.206421ms ago: executing program 3 (id=245):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$inet6(0xa, 0x3, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
readv(0xffffffffffffffff, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000200), 0x0)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

220.788907ms ago: executing program 1 (id=246):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a2c8c7ee030000000000000885", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,k'])
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x7, 0xaa0d9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffe, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x8000, 0x10002, 0x0, 0x6, 0x1ff, 0x20005, 0xb, 0x0, 0x353, 0x0, 0x22000006}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x4}, {0x1d}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'dummy0\x00', @broadcast})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty, 0xe0}, 0x1c, 0x0}}], 0x300, 0x0)
bind$inet(r8, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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")
r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r10, 0x2000)
sendto$inet(r8, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)

49.876617ms ago: executing program 2 (id=247):
syz_clone(0x50000091, 0x0, 0x0, 0x0, 0x0, 0x0)

496.499µs ago: executing program 0 (id=248):
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1)
open(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x28)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2094)
ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)

0s ago: executing program 2 (id=249):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
timerfd_create(0x3, 0x80800)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}, 0x1c)
connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7ff}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
[   34.130762][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   34.130779][   T28] audit: type=1400 audit(1770871948.283:70): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   34.159810][   T28] audit: type=1400 audit(1770871948.313:71): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.162107][ T3296] cgroup: Unknown subsys name 'net'
[   34.187543][   T28] audit: type=1400 audit(1770871948.343:72): avc:  denied  { unmount } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   34.286510][ T3296] cgroup: Unknown subsys name 'cpuset'
[   34.292694][ T3296] cgroup: Unknown subsys name 'rlimit'
[   34.423615][   T28] audit: type=1400 audit(1770871948.573:73): avc:  denied  { setattr } for  pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   34.447205][   T28] audit: type=1400 audit(1770871948.583:74): avc:  denied  { create } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.478749][   T28] audit: type=1400 audit(1770871948.583:75): avc:  denied  { write } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.499229][   T28] audit: type=1400 audit(1770871948.583:76): avc:  denied  { read } for  pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   34.504266][ T3299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   34.519681][   T28] audit: type=1400 audit(1770871948.603:77): avc:  denied  { mounton } for  pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   34.553051][   T28] audit: type=1400 audit(1770871948.603:78): avc:  denied  { mount } for  pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   34.576425][   T28] audit: type=1400 audit(1770871948.603:79): avc:  denied  { read } for  pid=3034 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   34.610812][ T3296] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   36.489262][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   36.534191][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   36.573551][ T3315] chnl_net:caif_netlink_parms(): no params data found
[   36.615654][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.622791][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.629937][ T3308] bridge_slave_0: entered allmulticast mode
[   36.636454][ T3308] bridge_slave_0: entered promiscuous mode
[   36.645338][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.652506][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.659642][ T3308] bridge_slave_1: entered allmulticast mode
[   36.666211][ T3308] bridge_slave_1: entered promiscuous mode
[   36.683028][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   36.723525][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.731155][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.738359][ T3315] bridge_slave_0: entered allmulticast mode
[   36.744881][ T3315] bridge_slave_0: entered promiscuous mode
[   36.760364][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.767495][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   36.774704][ T3317] bridge_slave_0: entered allmulticast mode
[   36.781420][ T3317] bridge_slave_0: entered promiscuous mode
[   36.790259][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.797357][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.804703][ T3317] bridge_slave_1: entered allmulticast mode
[   36.811162][ T3317] bridge_slave_1: entered promiscuous mode
[   36.823881][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.834206][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.843519][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.850857][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state
[   36.858044][ T3315] bridge_slave_1: entered allmulticast mode
[   36.864524][ T3315] bridge_slave_1: entered promiscuous mode
[   36.903704][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.912959][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   36.922847][ T3308] team0: Port device team_slave_0 added
[   36.936126][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.949142][ T3308] team0: Port device team_slave_1 added
[   36.960288][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.990289][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.004439][ T3317] team0: Port device team_slave_0 added
[   37.022217][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.029277][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.055219][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.066810][ T3317] team0: Port device team_slave_1 added
[   37.084795][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.091817][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.117824][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.136239][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.143365][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.150661][ T3312] bridge_slave_0: entered allmulticast mode
[   37.157152][ T3312] bridge_slave_0: entered promiscuous mode
[   37.167239][ T3315] team0: Port device team_slave_0 added
[   37.178955][ T3315] team0: Port device team_slave_1 added
[   37.184570][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.191742][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.199000][ T3312] bridge_slave_1: entered allmulticast mode
[   37.205524][ T3312] bridge_slave_1: entered promiscuous mode
[   37.232697][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.239756][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.265732][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.280962][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.288217][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   37.295440][ T3310] bridge_slave_0: entered allmulticast mode
[   37.301845][ T3310] bridge_slave_0: entered promiscuous mode
[   37.313292][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.320446][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   37.327677][ T3310] bridge_slave_1: entered allmulticast mode
[   37.334318][ T3310] bridge_slave_1: entered promiscuous mode
[   37.345669][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.352614][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.378824][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.396321][ T3308] hsr_slave_0: entered promiscuous mode
[   37.402383][ T3308] hsr_slave_1: entered promiscuous mode
[   37.413548][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.420550][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.446646][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.461142][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.476508][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   37.486034][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.493119][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.519058][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.536081][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.551330][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   37.613053][ T3312] team0: Port device team_slave_0 added
[   37.620989][ T3315] hsr_slave_0: entered promiscuous mode
[   37.627078][ T3315] hsr_slave_1: entered promiscuous mode
[   37.632942][ T3315] debugfs: 'hsr0' already exists in 'hsr'
[   37.638729][ T3315] Cannot create hsr debugfs directory
[   37.646612][ T3317] hsr_slave_0: entered promiscuous mode
[   37.653014][ T3317] hsr_slave_1: entered promiscuous mode
[   37.659139][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   37.664872][ T3317] Cannot create hsr debugfs directory
[   37.671314][ T3310] team0: Port device team_slave_0 added
[   37.680537][ T3312] team0: Port device team_slave_1 added
[   37.696622][ T3310] team0: Port device team_slave_1 added
[   37.702533][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.709565][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.735481][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.749237][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.756289][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.782220][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.853052][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   37.860066][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.886091][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   37.915087][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   37.922106][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   37.948200][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   37.961906][ T3312] hsr_slave_0: entered promiscuous mode
[   37.967997][ T3312] hsr_slave_1: entered promiscuous mode
[   37.974026][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   37.979795][ T3312] Cannot create hsr debugfs directory
[   38.056712][ T3310] hsr_slave_0: entered promiscuous mode
[   38.062905][ T3310] hsr_slave_1: entered promiscuous mode
[   38.068944][ T3310] debugfs: 'hsr0' already exists in 'hsr'
[   38.074696][ T3310] Cannot create hsr debugfs directory
[   38.142095][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   38.151394][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   38.175023][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   38.186399][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   38.232484][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.242289][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.253540][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.262337][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.291992][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   38.307529][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   38.316425][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   38.337955][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   38.348177][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.357489][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.366785][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.375227][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.421739][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.433647][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.449854][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   38.457226][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.465981][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.474790][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.505239][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.512374][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.522152][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.529230][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.568891][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.591039][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.610316][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   38.630264][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   38.638694][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.646011][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.660392][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.667632][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.690728][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.697903][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.707815][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.715004][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.728263][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.742261][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.768970][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   38.796672][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.803806][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.817049][ T3315] 8021q: adding VLAN 0 to HW filter on device team0
[   38.830213][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.842863][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.850059][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.861658][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   38.903974][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   38.918491][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   38.930846][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.937919][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.947429][   T30] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.954496][   T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.021892][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   39.047399][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.088607][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.103974][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.183587][ T3308] veth0_vlan: entered promiscuous mode
[   39.218770][ T3308] veth1_vlan: entered promiscuous mode
[   39.225304][ T3312] veth0_vlan: entered promiscuous mode
[   39.236388][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.254324][ T3312] veth1_vlan: entered promiscuous mode
[   39.294950][ T3312] veth0_macvtap: entered promiscuous mode
[   39.303370][ T3312] veth1_macvtap: entered promiscuous mode
[   39.311756][ T3308] veth0_macvtap: entered promiscuous mode
[   39.331365][ T3308] veth1_macvtap: entered promiscuous mode
[   39.344479][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.361908][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.377671][ T3310] veth0_vlan: entered promiscuous mode
[   39.386089][ T3317] veth0_vlan: entered promiscuous mode
[   39.394971][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.404076][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.417724][ T3310] veth1_vlan: entered promiscuous mode
[   39.427897][   T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.437015][   T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.454205][   T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.463135][   T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.473826][ T3317] veth1_vlan: entered promiscuous mode
[   39.480302][   T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.489201][   T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.506995][   T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.516755][   T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.532757][ T3315] veth0_vlan: entered promiscuous mode
[   39.544047][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   39.544063][   T28] audit: type=1400 audit(1770871953.703:90): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.kaSPys/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.562855][ T3310] veth0_macvtap: entered promiscuous mode
[   39.575769][   T28] audit: type=1400 audit(1770871953.703:91): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   39.611231][   T28] audit: type=1400 audit(1770871953.703:92): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.kaSPys/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   39.613744][ T3317] veth0_macvtap: entered promiscuous mode
[   39.637954][   T28] audit: type=1400 audit(1770871953.703:93): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   39.664321][   T28] audit: type=1400 audit(1770871953.713:94): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.kaSPys/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   39.673387][ T3315] veth1_vlan: entered promiscuous mode
[   39.699905][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   39.706244][   T28] audit: type=1400 audit(1770871953.713:95): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/root/syzkaller.kaSPys/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   39.725067][ T3310] veth1_macvtap: entered promiscuous mode
[   39.748803][   T28] audit: type=1400 audit(1770871953.713:96): avc:  denied  { unmount } for  pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   39.768602][   T28] audit: type=1400 audit(1770871953.733:97): avc:  denied  { mounton } for  pid=3308 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   39.791913][   T28] audit: type=1400 audit(1770871953.733:98): avc:  denied  { mount } for  pid=3308 comm="syz-executor" name="/" dev="gadgetfs" ino=3913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   39.799566][ T3315] veth0_macvtap: entered promiscuous mode
[   39.834514][   T28] audit: type=1400 audit(1770871953.953:99): avc:  denied  { read write } for  pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   39.861155][ T3315] veth1_macvtap: entered promiscuous mode
[   39.878645][ T3317] veth1_macvtap: entered promiscuous mode
[   39.900589][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.920915][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.933241][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.950692][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.959044][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.969298][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.982206][    C1] hrtimer: interrupt took 27665 ns
[   39.996230][ T3454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.012419][ T3454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.047713][ T3454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.058297][ T3454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.093607][ T3454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.110341][ T3483] loop4: detected capacity change from 0 to 512
[   40.116079][ T3454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.161680][ T3454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.186468][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.201722][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.215086][ T3485] loop2: detected capacity change from 0 to 512
[   40.231182][ T3492] loop0: detected capacity change from 0 to 1024
[   40.243712][ T3492] =======================================================
[   40.243712][ T3492] WARNING: The mand mount option has been deprecated and
[   40.243712][ T3492]          and is ignored by this kernel. Remove the mand
[   40.243712][ T3492]          option from the mount to silence this warning.
[   40.243712][ T3492] =======================================================
[   40.279177][ T3492] EXT4-fs: Ignoring removed bh option
[   40.284703][ T3492] ext4: Bad value for 'max_batch_time'
[   40.290322][ T3483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.307625][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.323821][ T3490] loop3: detected capacity change from 0 to 512
[   40.331019][ T3485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   40.352530][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.374727][ T3483] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   40.388768][ T3352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.398193][ T3485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   40.415909][ T3490] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   40.455607][ T3490] EXT4-fs (loop3): orphan cleanup on readonly fs
[   40.471647][ T3490] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.4: corrupted inode contents
[   40.503127][ T3490] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[   40.503637][ T3490] EXT4-fs (loop3): Remounting filesystem read-only
[   40.529243][ T3485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3: bg 0: block 4: invalid block bitmap
[   40.715828][ T3485] loop2: lost filesystem error report for type 5 error -117
[   40.720712][ T3485] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   40.760732][ T3490] EXT4-fs (loop3): 1 truncate cleaned up
[   40.776645][ T3321] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   40.849321][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6'.
[   40.875320][ T3321] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   40.942583][ T3485] EXT4-fs (loop2): 1 truncate cleaned up
[   40.963035][ T3321] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[   41.066639][ T3485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.083752][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.179962][ T3485] syz.2.3 (3485) used greatest stack depth: 9032 bytes left
[   41.194373][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   41.194763][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.352450][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.763879][ T3523] loop3: detected capacity change from 0 to 512
[   41.780425][ T3531] loop1: detected capacity change from 0 to 1024
[   41.881078][ T3531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.019525][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.049214][ T3531] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.1.10: path /1/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[   42.072510][ T3523] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.198878][ T3523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'.
[   42.221765][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.235596][ T3541] loop0: detected capacity change from 0 to 512
[   42.279009][ T3547] loop1: detected capacity change from 0 to 1024
[   42.279281][ T3544] loop2: detected capacity change from 0 to 2048
[   42.295976][ T3541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   42.316710][ T3547] EXT4-fs: inline encryption not supported
[   42.347762][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.354409][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.429049][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.456630][ T3541] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.12: bg 0: block 4: invalid block bitmap
[   42.476931][ T3541] loop0: lost filesystem error report for type 5 error -117
[   42.479232][ T3541] EXT4-fs (loop0): 1 truncate cleaned up
[   42.518781][ T3541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.606449][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.649283][ T3556] loop1: detected capacity change from 0 to 512
[   42.664789][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.931583][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.021485][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.050611][ T3556] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.130721][ T3560] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.202798][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.219951][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[   43.234632][ T3569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17'.
[   43.741109][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.759032][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.863102][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.901144][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.987078][ T3594] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET)
[   44.049063][ T3587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.118639][ T3587] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.198552][ T3600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.609621][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.677916][ T3610] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   44.717240][   T28] kauditd_printk_skb: 63 callbacks suppressed
[   44.717261][   T28] audit: type=1400 audit(1770871958.873:157): avc:  denied  { cpu } for  pid=3609 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   44.749054][   T28] audit: type=1400 audit(1770871958.903:158): avc:  denied  { create } for  pid=3609 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.768134][ T3610] netlink: 76 bytes leftover after parsing attributes in process `syz.2.25'.
[   44.778874][   T28] audit: type=1400 audit(1770871958.903:159): avc:  denied  { write } for  pid=3609 comm="syz.2.25" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   44.966938][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.036693][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.090415][   T28] audit: type=1400 audit(1770871959.243:160): avc:  denied  { read } for  pid=3623 comm="syz.0.28" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   45.138126][ T3610] Zero length message leads to an empty skb
[   45.140996][   T28] audit: type=1400 audit(1770871959.243:161): avc:  denied  { open } for  pid=3623 comm="syz.0.28" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   45.148414][ T3622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.167731][   T28] audit: type=1400 audit(1770871959.273:162): avc:  denied  { map_read map_write } for  pid=3623 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   45.201009][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.204940][   T28] audit: type=1400 audit(1770871959.273:163): avc:  denied  { read } for  pid=3623 comm="syz.0.28" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   45.235176][   T28] audit: type=1400 audit(1770871959.273:164): avc:  denied  { open } for  pid=3623 comm="syz.0.28" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   45.259788][   T28] audit: type=1400 audit(1770871959.273:165): avc:  denied  { ioctl } for  pid=3623 comm="syz.0.28" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   45.287903][   T28] audit: type=1400 audit(1770871959.373:166): avc:  denied  { read } for  pid=3609 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   45.544727][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.556338][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'.
[   45.904695][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.948723][ T3649] set_capacity_and_notify: 6 callbacks suppressed
[   45.948742][ T3649] loop3: detected capacity change from 0 to 128
[   45.971299][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'.
[   46.139758][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'.
[   46.166338][ T3665] syz.3.35: attempt to access beyond end of device
[   46.166338][ T3665] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128
[   46.208575][ T3665] syz.3.35: attempt to access beyond end of device
[   46.208575][ T3665] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128
[   46.228065][ T3667] syz.3.35: attempt to access beyond end of device
[   46.228065][ T3667] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128
[   46.316718][ T3665] syz.3.35: attempt to access beyond end of device
[   46.316718][ T3665] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128
[   46.331805][ T3670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[   46.381452][ T3667] syz.3.35: attempt to access beyond end of device
[   46.381452][ T3667] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128
[   46.440154][ T3665] syz.3.35: attempt to access beyond end of device
[   46.440154][ T3665] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128
[   46.490594][ T3667] syz.3.35: attempt to access beyond end of device
[   46.490594][ T3667] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128
[   46.540145][ T3665] syz.3.35: attempt to access beyond end of device
[   46.540145][ T3665] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128
[   46.575625][ T3667] syz.3.35: attempt to access beyond end of device
[   46.575625][ T3667] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128
[   46.629631][ T3665] syz.3.35: attempt to access beyond end of device
[   46.629631][ T3665] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128
[   46.713266][ T3685] loop4: detected capacity change from 0 to 128
[   46.725422][ T3685] FAT-fs (loop4): Directory bread(block 414) failed
[   46.736798][ T3676] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   46.746268][ T3685] FAT-fs (loop4): Directory bread(block 415) failed
[   46.756467][ T3685] FAT-fs (loop4): Directory bread(block 416) failed
[   46.764818][ T3685] FAT-fs (loop4): Directory bread(block 417) failed
[   46.771837][ T3676] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   46.773987][ T3685] FAT-fs (loop4): Directory bread(block 418) failed
[   46.794036][ T3685] FAT-fs (loop4): Directory bread(block 419) failed
[   46.800811][ T3685] FAT-fs (loop4): Directory bread(block 420) failed
[   46.807845][ T3685] FAT-fs (loop4): Directory bread(block 421) failed
[   46.822508][ T3685] FAULT_INJECTION: forcing a failure.
[   46.822508][ T3685] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   46.835922][ T3685] CPU: 0 UID: 0 PID: 3685 Comm: syz.4.44 Not tainted syzkaller #0 PREEMPT(full) 
[   46.835955][ T3685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   46.835972][ T3685] Call Trace:
[   46.835978][ T3685]  <TASK>
[   46.835987][ T3685]  __dump_stack+0x1d/0x30
[   46.836019][ T3685]  dump_stack_lvl+0x95/0xd0
[   46.836040][ T3685]  dump_stack+0x15/0x1b
[   46.836060][ T3685]  should_fail_ex+0x263/0x280
[   46.836136][ T3685]  should_fail+0xb/0x20
[   46.836162][ T3685]  should_fail_usercopy+0x1a/0x20
[   46.836226][ T3685]  strncpy_from_user+0x27/0x250
[   46.836252][ T3685]  ? kmem_cache_alloc_noprof+0x18c/0x400
[   46.836285][ T3685]  do_getname+0x59/0x1c0
[   46.836347][ T3685]  __se_sys_mknod+0x21/0xf0
[   46.836378][ T3685]  __x64_sys_mknod+0x43/0x50
[   46.836413][ T3685]  x64_sys_call+0x2acd/0x3020
[   46.836438][ T3685]  do_syscall_64+0x12c/0x370
[   46.836551][ T3685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.836579][ T3685] RIP: 0033:0x7f6457e5bf79
[   46.836599][ T3685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.836621][ T3685] RSP: 002b:00007f64568b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[   46.836651][ T3685] RAX: ffffffffffffffda RBX: 00007f64580d5fa0 RCX: 00007f6457e5bf79
[   46.836746][ T3685] RDX: 0000000000000709 RSI: 0000000000000008 RDI: 00002000000002c0
[   46.836763][ T3685] RBP: 00007f64568b7090 R08: 0000000000000000 R09: 0000000000000000
[   46.836817][ T3685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   46.836833][ T3685] R13: 00007f64580d6038 R14: 00007f64580d5fa0 R15: 00007ffc4d652798
[   46.836858][ T3685]  </TASK>
[   47.057912][ T3698] loop1: detected capacity change from 0 to 512
[   47.065083][ T3698] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   47.079725][ T3699] loop4: detected capacity change from 0 to 2048
[   47.118551][ T3699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.287869][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'.
[   47.325503][ T3710] netlink: 'syz.1.46': attribute type 1 has an invalid length.
[   47.499330][ T3718] loop3: detected capacity change from 0 to 128
[   48.027864][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.142574][ T3735] loop4: detected capacity change from 0 to 1024
[   48.161984][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   48.198226][ T3735] EXT4-fs: Ignoring removed orlov option
[   48.231810][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.255016][ T3735] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.58: failed to insert inode 15: doubly allocated?
[   48.276150][ T3735] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[   48.294127][ T3736] netlink: 'syz.0.56': attribute type 21 has an invalid length.
[   48.329147][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.339177][ T3711] FAULT_INJECTION: forcing a failure.
[   48.339177][ T3711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.356743][ T3711] CPU: 1 UID: 0 PID: 3711 Comm: syz.2.49 Not tainted syzkaller #0 PREEMPT(full) 
[   48.356768][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   48.356781][ T3711] Call Trace:
[   48.356788][ T3711]  <TASK>
[   48.356795][ T3711]  __dump_stack+0x1d/0x30
[   48.356825][ T3711]  dump_stack_lvl+0x95/0xd0
[   48.356890][ T3711]  dump_stack+0x15/0x1b
[   48.356917][ T3711]  should_fail_ex+0x263/0x280
[   48.357049][ T3711]  should_fail+0xb/0x20
[   48.357082][ T3711]  should_fail_usercopy+0x1a/0x20
[   48.357120][ T3711]  _copy_to_user+0x20/0xa0
[   48.357242][ T3711]  simple_read_from_buffer+0xb5/0x130
[   48.357283][ T3711]  proc_fail_nth_read+0x10e/0x150
[   48.357384][ T3711]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   48.357412][ T3711]  vfs_read+0x1ab/0x7f0
[   48.357495][ T3711]  ? _raw_spin_unlock_irqrestore+0x9/0x30
[   48.357518][ T3711]  ? __rcu_read_unlock+0x4e/0x70
[   48.357629][ T3711]  ? __fget_files+0x184/0x1c0
[   48.357732][ T3711]  ? mutex_lock+0x57/0x90
[   48.357781][ T3711]  ksys_read+0xdc/0x1a0
[   48.357814][ T3711]  __x64_sys_read+0x40/0x50
[   48.357840][ T3711]  x64_sys_call+0x2886/0x3020
[   48.357870][ T3711]  do_syscall_64+0x12c/0x370
[   48.357992][ T3711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.358016][ T3711] RIP: 0033:0x7fad92a6c84e
[   48.358030][ T3711] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   48.358048][ T3711] RSP: 002b:00007fad914e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   48.358067][ T3711] RAX: ffffffffffffffda RBX: 00007fad914e66c0 RCX: 00007fad92a6c84e
[   48.358081][ T3711] RDX: 000000000000000f RSI: 00007fad914e60a0 RDI: 0000000000000005
[   48.358139][ T3711] RBP: 00007fad914e6090 R08: 0000000000000000 R09: 0000000000000000
[   48.358154][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.358168][ T3711] R13: 00007fad92d26128 R14: 00007fad92d26090 R15: 00007ffeae951408
[   48.358186][ T3711]  </TASK>
[   48.606105][ T3741] sctp: [Deprecated]: syz.4.59 (pid 3741) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.606105][ T3741] Use struct sctp_sack_info instead
[   48.735946][ T3745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.61'.
[   48.855040][ T3749] loop1: detected capacity change from 0 to 2364
[   48.945993][ T3753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.64'.
[   49.033431][ T3756] loop1: detected capacity change from 0 to 2048
[   49.100983][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.173590][ T3764] loop2: detected capacity change from 0 to 2048
[   49.249807][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.312946][ T3770] uprobe: syz.4.69:3770 failed to unregister, leaking uprobe
[   49.934756][ T3783] FAULT_INJECTION: forcing a failure.
[   49.934756][ T3783] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.017328][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.054309][ T3783] CPU: 0 UID: 0 PID: 3783 Comm: syz.4.73 Not tainted syzkaller #0 PREEMPT(full) 
[   50.054371][ T3783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   50.054386][ T3783] Call Trace:
[   50.054392][ T3783]  <TASK>
[   50.054399][ T3783]  __dump_stack+0x1d/0x30
[   50.054427][ T3783]  dump_stack_lvl+0x95/0xd0
[   50.054457][ T3783]  dump_stack+0x15/0x1b
[   50.054529][ T3783]  should_fail_ex+0x263/0x280
[   50.054558][ T3783]  should_fail+0xb/0x20
[   50.054640][ T3783]  should_fail_usercopy+0x1a/0x20
[   50.054679][ T3783]  _copy_from_user+0x1c/0xb0
[   50.054774][ T3783]  do_fcntl+0x2ab/0xf80
[   50.054809][ T3783]  __se_sys_fcntl+0xb1/0x120
[   50.054856][ T3783]  __x64_sys_fcntl+0x43/0x50
[   50.054887][ T3783]  x64_sys_call+0x2844/0x3020
[   50.054960][ T3783]  do_syscall_64+0x12c/0x370
[   50.054992][ T3783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.055015][ T3783] RIP: 0033:0x7f6457e5bf79
[   50.055047][ T3783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   50.055152][ T3783] RSP: 002b:00007f64568b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[   50.055192][ T3783] RAX: ffffffffffffffda RBX: 00007f64580d5fa0 RCX: 00007f6457e5bf79
[   50.055211][ T3783] RDX: 0000200000000040 RSI: 000000000000040c RDI: 0000000000000003
[   50.055226][ T3783] RBP: 00007f64568b7090 R08: 0000000000000000 R09: 0000000000000000
[   50.055239][ T3783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.055251][ T3783] R13: 00007f64580d6038 R14: 00007f64580d5fa0 R15: 00007ffc4d652798
[   50.055291][ T3783]  </TASK>
[   50.279484][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   50.279501][   T28] audit: type=1400 audit(1770871964.433:204): avc:  denied  { create } for  pid=3784 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   50.311851][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.324233][   T28] audit: type=1400 audit(1770871964.463:205): avc:  denied  { bind } for  pid=3784 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   50.402206][ T3790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'.
[   50.445756][ T3793] loop4: detected capacity change from 0 to 512
[   50.466951][   T28] audit: type=1400 audit(1770871964.603:206): avc:  denied  { remount } for  pid=3791 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   50.556255][   T28] audit: type=1400 audit(1770871964.713:207): avc:  denied  { listen } for  pid=3802 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   50.628043][   T28] audit: type=1400 audit(1770871964.783:208): avc:  denied  { connect } for  pid=3804 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   50.700346][   T28] audit: type=1400 audit(1770871964.803:209): avc:  denied  { ioctl } for  pid=3804 comm="syz.4.82" path="socket:[5103]" dev="sockfs" ino=5103 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   50.795447][   T28] audit: type=1400 audit(1770871964.823:210): avc:  denied  { ioctl } for  pid=3806 comm="syz.2.83" path="socket:[5517]" dev="sockfs" ino=5517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   50.846149][   T28] audit: type=1400 audit(1770871964.823:211): avc:  denied  { bind } for  pid=3806 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   50.865607][   T28] audit: type=1400 audit(1770871964.953:212): avc:  denied  { create } for  pid=3806 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   50.886063][   T28] audit: type=1400 audit(1770871964.963:213): avc:  denied  { write } for  pid=3806 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   50.950149][ T3818] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.86'.
[   50.959326][ T3818] netlink: zone id is out of range
[   50.964459][ T3818] netlink: zone id is out of range
[   50.969666][ T3818] netlink: zone id is out of range
[   50.983425][ T3818] netlink: set zone limit has 8 unknown bytes
[   50.998234][ T3818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3818 comm=syz.0.86
[   51.146036][ T3385] IPVS: starting estimator thread 0...
[   51.285480][ T3825] IPVS: using max 1776 ests per chain, 88800 per kthread
[   51.989876][ T3839] vhci_hcd vhci_hcd.0: invalid port number 255
[   52.083968][ T3844] loop2: detected capacity change from 0 to 512
[   52.103030][ T3844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.285745][ T3844] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.95: invalid indirect mapped block 4294967295 (level 1)
[   52.417526][ T3844] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.427677][ T3844] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.95: invalid indirect mapped block 4294967295 (level 1)
[   52.515642][ T3844] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   52.532178][ T3844] EXT4-fs (loop2): 2 truncates cleaned up
[   52.628720][ T3844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   53.331055][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.453100][ T3860] netlink: 824 bytes leftover after parsing attributes in process `syz.3.100'.
[   53.608743][ T3868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'.
[   53.661589][ T3867] loop4: detected capacity change from 0 to 512
[   53.723054][ T3862] loop2: detected capacity change from 0 to 512
[   53.929486][ T3862] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.101: invalid indirect mapped block 256 (level 2)
[   53.954570][ T3879] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   54.013428][ T3862] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   54.015121][ T3862] EXT4-fs (loop2): 2 truncates cleaned up
[   54.102443][ T3862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.195822][ T3884] loop3: detected capacity change from 0 to 512
[   54.224908][ T3884] EXT4-fs: old and new quota format mixing
[   54.336683][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.343949][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.474909][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.523254][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.988414][   T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.025982][   T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.034945][   T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.052317][   T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.071074][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.081174][ T3903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'.
[   55.348294][ T3919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.483536][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   55.483590][   T28] audit: type=1400 audit(1770871969.523:249): avc:  denied  { bind } for  pid=3917 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   55.538008][ T3922] netlink: 52 bytes leftover after parsing attributes in process `syz.2.117'.
[   55.643590][   T28] audit: type=1400 audit(1770871969.533:250): avc:  denied  { name_bind } for  pid=3917 comm="syz.0.120" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   55.821222][   T28] audit: type=1400 audit(1770871969.533:251): avc:  denied  { node_bind } for  pid=3917 comm="syz.0.120" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   56.127774][ T3933] loop1: detected capacity change from 0 to 1024
[   56.157265][ T3933] EXT4-fs: Ignoring removed bh option
[   56.162716][ T3933] ext4: Bad value for 'max_batch_time'
[   56.344507][ T3937] loop4: detected capacity change from 0 to 2048
[   56.437625][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.593089][ T3944] FAULT_INJECTION: forcing a failure.
[   56.593089][ T3944] name failslab, interval 1, probability 0, space 0, times 0
[   56.617571][ T3944] CPU: 0 UID: 0 PID: 3944 Comm: syz.3.125 Not tainted syzkaller #0 PREEMPT(full) 
[   56.617643][ T3944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   56.617661][ T3944] Call Trace:
[   56.617669][ T3944]  <TASK>
[   56.617678][ T3944]  __dump_stack+0x1d/0x30
[   56.617778][ T3944]  dump_stack_lvl+0x95/0xd0
[   56.617807][ T3944]  dump_stack+0x15/0x1b
[   56.617827][ T3944]  should_fail_ex+0x263/0x280
[   56.617891][ T3944]  should_failslab+0x8c/0xb0
[   56.617928][ T3944]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   56.617967][ T3944]  ? __alloc_skb+0x2f0/0x4b0
[   56.618071][ T3944]  __alloc_skb+0x2f0/0x4b0
[   56.618173][ T3944]  ? __alloc_skb+0x219/0x4b0
[   56.618214][ T3944]  netlink_ack+0xfd/0x500
[   56.618235][ T3944]  netlink_rcv_skb+0x192/0x220
[   56.618259][ T3944]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   56.618360][ T3944]  rtnetlink_rcv+0x1c/0x30
[   56.618386][ T3944]  netlink_unicast+0x5c0/0x690
[   56.618432][ T3944]  netlink_sendmsg+0x5c8/0x6f0
[   56.618461][ T3944]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.618604][ T3944]  ____sys_sendmsg+0x5af/0x600
[   56.618636][ T3944]  ___sys_sendmsg+0x195/0x1e0
[   56.618682][ T3944]  __x64_sys_sendmsg+0xd4/0x160
[   56.618715][ T3944]  x64_sys_call+0x194c/0x3020
[   56.618785][ T3944]  do_syscall_64+0x12c/0x370
[   56.618827][ T3944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.618877][ T3944] RIP: 0033:0x7fb2cf3ebf79
[   56.618898][ T3944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   56.618922][ T3944] RSP: 002b:00007fb2cde3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.618949][ T3944] RAX: ffffffffffffffda RBX: 00007fb2cf665fa0 RCX: 00007fb2cf3ebf79
[   56.618967][ T3944] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[   56.618984][ T3944] RBP: 00007fb2cde3f090 R08: 0000000000000000 R09: 0000000000000000
[   56.619000][ T3944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.619032][ T3944] R13: 00007fb2cf666038 R14: 00007fb2cf665fa0 R15: 00007fffc53b7468
[   56.619050][ T3944]  </TASK>
[   56.918209][ T3948] loop3: detected capacity change from 0 to 128
[   56.949833][ T3948] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   56.982864][ T3948] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   57.011986][ T3948] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks
[   57.055475][ T3948] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted
[   57.186620][   T28] audit: type=1400 audit(1770871971.343:252): avc:  denied  { create } for  pid=3946 comm="syz.3.126" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   57.336764][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   57.355569][   T28] audit: type=1400 audit(1770871971.373:253): avc:  denied  { add_name } for  pid=3946 comm="syz.3.126" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   57.395502][   T28] audit: type=1400 audit(1770871971.443:254): avc:  denied  { write } for  pid=3951 comm="syz.2.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   57.483831][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.861287][   T28] audit: type=1400 audit(1770871972.013:255): avc:  denied  { perfmon } for  pid=3965 comm="syz.3.131" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   57.978535][ T3966] loop3: detected capacity change from 0 to 1024
[   58.003133][   T28] audit: type=1400 audit(1770871972.053:256): avc:  denied  { watch watch_reads } for  pid=3965 comm="syz.3.131" path="/proc/69" dev="proc" ino=6369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   58.031440][   T28] audit: type=1400 audit(1770871972.183:257): avc:  denied  { bpf } for  pid=3967 comm="syz.4.132" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   58.055351][ T3966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.097115][ T3966] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.131: corrupted xattr block 113: invalid header
[   58.116675][ T3966] EXT4-fs (loop3): Remounting filesystem read-only
[   58.124923][   T28] audit: type=1400 audit(1770871972.273:258): avc:  denied  { create } for  pid=3965 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   58.268174][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.879899][ T3983] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'.
[   59.045621][ T3986] loop1: detected capacity change from 0 to 128
[   59.087087][ T3986] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.100713][ T3987] uprobe: syz.4.137:3987 failed to unregister, leaking uprobe
[   59.126558][ T3986] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.218736][ T3992] FAULT_INJECTION: forcing a failure.
[   59.218736][ T3992] name failslab, interval 1, probability 0, space 0, times 0
[   59.242308][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.276037][ T3992] CPU: 1 UID: 0 PID: 3992 Comm: syz.4.138 Not tainted syzkaller #0 PREEMPT(full) 
[   59.276079][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   59.276095][ T3992] Call Trace:
[   59.276104][ T3992]  <TASK>
[   59.276113][ T3992]  __dump_stack+0x1d/0x30
[   59.276142][ T3992]  dump_stack_lvl+0x95/0xd0
[   59.276229][ T3992]  dump_stack+0x15/0x1b
[   59.276264][ T3992]  should_fail_ex+0x263/0x280
[   59.276371][ T3992]  should_failslab+0x8c/0xb0
[   59.276403][ T3992]  kmem_cache_alloc_noprof+0x66/0x400
[   59.276478][ T3992]  ? alloc_empty_file+0x76/0x200
[   59.276503][ T3992]  alloc_empty_file+0x76/0x200
[   59.276523][ T3992]  dentry_open+0x2d/0x90
[   59.276601][ T3992]  __se_sys_acct+0x17b/0x4f0
[   59.276639][ T3992]  __x64_sys_acct+0x1f/0x30
[   59.276695][ T3992]  x64_sys_call+0x2e7f/0x3020
[   59.276720][ T3992]  do_syscall_64+0x12c/0x370
[   59.276809][ T3992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.276837][ T3992] RIP: 0033:0x7f6457e5bf79
[   59.276853][ T3992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.276870][ T3992] RSP: 002b:00007f64568b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[   59.276938][ T3992] RAX: ffffffffffffffda RBX: 00007f64580d5fa0 RCX: 00007f6457e5bf79
[   59.276954][ T3992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[   59.277017][ T3992] RBP: 00007f64568b7090 R08: 0000000000000000 R09: 0000000000000000
[   59.277029][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.277041][ T3992] R13: 00007f64580d6038 R14: 00007f64580d5fa0 R15: 00007ffc4d652798
[   59.277072][ T3992]  </TASK>
[   59.558679][ T4004] loop4: detected capacity change from 0 to 2048
[   59.586415][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.643087][ T4009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   59.886278][ T4013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'.
[   60.522522][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.551782][ T4019] loop2: detected capacity change from 0 to 512
[   60.585438][ T4019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   60.596963][ T4021] FAULT_INJECTION: forcing a failure.
[   60.596963][ T4021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.612977][ T4019] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.146: invalid indirect mapped block 4294967295 (level 1)
[   60.645539][ T4021] CPU: 0 UID: 0 PID: 4021 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(full) 
[   60.645571][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   60.645589][ T4021] Call Trace:
[   60.645598][ T4021]  <TASK>
[   60.645607][ T4021]  __dump_stack+0x1d/0x30
[   60.645645][ T4021]  dump_stack_lvl+0x95/0xd0
[   60.645670][ T4021]  dump_stack+0x15/0x1b
[   60.645779][ T4021]  should_fail_ex+0x263/0x280
[   60.645812][ T4021]  should_fail+0xb/0x20
[   60.645840][ T4021]  should_fail_usercopy+0x1a/0x20
[   60.645911][ T4021]  _copy_from_user+0x1c/0xb0
[   60.646013][ T4021]  copy_from_sockptr+0x48/0x70
[   60.646057][ T4021]  ip_mroute_setsockopt+0x5cd/0x980
[   60.646091][ T4021]  do_ip_setsockopt+0xcea/0x2290
[   60.646223][ T4021]  ip_setsockopt+0x58/0x110
[   60.646272][ T4021]  raw_setsockopt+0xbd/0x150
[   60.646359][ T4021]  sock_common_setsockopt+0x69/0x80
[   60.646443][ T4021]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   60.646554][ T4021]  __sys_setsockopt+0x184/0x200
[   60.646582][ T4021]  __x64_sys_setsockopt+0x64/0x80
[   60.646608][ T4021]  x64_sys_call+0x2327/0x3020
[   60.646643][ T4021]  do_syscall_64+0x12c/0x370
[   60.646724][ T4021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.646750][ T4021] RIP: 0033:0x7fb2cf3ebf79
[   60.646780][ T4021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.646804][ T4021] RSP: 002b:00007fb2cde3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.646855][ T4021] RAX: ffffffffffffffda RBX: 00007fb2cf665fa0 RCX: 00007fb2cf3ebf79
[   60.646941][ T4021] RDX: 00000000000000cd RSI: 0000000000000000 RDI: 0000000000000003
[   60.646957][ T4021] RBP: 00007fb2cde3f090 R08: 000000000000003c R09: 0000000000000000
[   60.646975][ T4021] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.646992][ T4021] R13: 00007fb2cf666038 R14: 00007fb2cf665fa0 R15: 00007fffc53b7468
[   60.647023][ T4021]  </TASK>
[   60.665547][ T4019] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   60.915644][ T4019] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.146: invalid indirect mapped block 4294967295 (level 1)
[   60.938986][ T4031] FAULT_INJECTION: forcing a failure.
[   60.938986][ T4031] name failslab, interval 1, probability 0, space 0, times 0
[   60.957079][ T4033] hsr0: entered promiscuous mode
[   60.989381][ T4019] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   60.989464][ T4031] CPU: 1 UID: 0 PID: 4031 Comm: syz.4.150 Not tainted syzkaller #0 PREEMPT(full) 
[   60.989555][ T4031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   60.989568][ T4031] Call Trace:
[   60.989574][ T4031]  <TASK>
[   60.989580][ T4031]  __dump_stack+0x1d/0x30
[   60.989606][ T4031]  dump_stack_lvl+0x95/0xd0
[   60.989634][ T4031]  dump_stack+0x15/0x1b
[   60.989728][ T4031]  should_fail_ex+0x263/0x280
[   60.989763][ T4031]  should_failslab+0x8c/0xb0
[   60.989795][ T4031]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   60.989907][ T4031]  ? __alloc_skb+0x2f0/0x4b0
[   60.989948][ T4031]  __alloc_skb+0x2f0/0x4b0
[   60.990018][ T4031]  ? __alloc_skb+0x219/0x4b0
[   60.990054][ T4031]  netlink_ack+0xfd/0x500
[   60.990076][ T4031]  netlink_rcv_skb+0x192/0x220
[   60.990100][ T4031]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   60.990271][ T4031]  nfnetlink_rcv+0x167/0x1720
[   60.990310][ T4031]  ? __kfree_skb+0x109/0x150
[   60.990346][ T4031]  ? nlmon_xmit+0x4f/0x60
[   60.990427][ T4031]  ? consume_skb+0x49/0x140
[   60.990461][ T4031]  ? nlmon_xmit+0x4f/0x60
[   60.990554][ T4031]  ? dev_hard_start_xmit+0x3a8/0x3e0
[   60.990582][ T4031]  ? __dev_queue_xmit+0x139a/0x1f20
[   60.990608][ T4031]  ? __dev_queue_xmit+0x148/0x1f20
[   60.990635][ T4031]  ? ref_tracker_free+0x37d/0x3e0
[   60.990750][ T4031]  ? __netlink_deliver_tap+0x4dc/0x500
[   60.990781][ T4031]  netlink_unicast+0x5c0/0x690
[   60.990824][ T4031]  netlink_sendmsg+0x5c8/0x6f0
[   60.990917][ T4031]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.990944][ T4031]  ____sys_sendmsg+0x5af/0x600
[   60.990975][ T4031]  ___sys_sendmsg+0x195/0x1e0
[   60.991021][ T4031]  __x64_sys_sendmsg+0xd4/0x160
[   60.991134][ T4031]  x64_sys_call+0x194c/0x3020
[   60.991167][ T4031]  do_syscall_64+0x12c/0x370
[   60.991209][ T4031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.991306][ T4031] RIP: 0033:0x7f6457e5bf79
[   60.991326][ T4031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.991349][ T4031] RSP: 002b:00007f64568b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.991375][ T4031] RAX: ffffffffffffffda RBX: 00007f64580d5fa0 RCX: 00007f6457e5bf79
[   60.991422][ T4031] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003
[   60.991505][ T4031] RBP: 00007f64568b7090 R08: 0000000000000000 R09: 0000000000000000
[   60.991520][ T4031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.991532][ T4031] R13: 00007f64580d6038 R14: 00007f64580d5fa0 R15: 00007ffc4d652798
[   60.991552][ T4031]  </TASK>
[   60.991729][ T4019] EXT4-fs (loop2): 2 truncates cleaned up
[   61.270307][ T4019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.322908][   T28] kauditd_printk_skb: 1 callbacks suppressed
[   61.322996][   T28] audit: type=1400 audit(1770871975.473:260): avc:  denied  { ioctl } for  pid=4041 comm="syz.3.155" path="socket:[5947]" dev="sockfs" ino=5947 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   61.353461][ T4042] loop4: detected capacity change from 0 to 2048
[   61.390938][ T4042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.407400][ T4049] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64
[   61.415528][ T4049] audit: out of memory in audit_log_start
[   61.420145][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.446432][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.484748][   T28] audit: type=1400 audit(1770871975.623:261): avc:  denied  { write } for  pid=4050 comm="syz.0.160" path="socket:[5955]" dev="sockfs" ino=5955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   61.675452][   T28] audit: type=1400 audit(1770871975.623:262): avc:  denied  { module_request } for  pid=4050 comm="syz.0.160" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   61.867095][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.045859][ T4065] loop2: detected capacity change from 0 to 512
[   62.064085][ T4065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   62.180801][ T4065] EXT4-fs (loop2): 1 truncate cleaned up
[   62.203561][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.247603][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.259842][   T28] audit: type=1400 audit(1770871976.413:263): avc:  denied  { map } for  pid=4064 comm="syz.2.162" path="/23/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.331297][   T28] audit: type=1400 audit(1770871976.413:264): avc:  denied  { execute } for  pid=4064 comm="syz.2.162" path="/23/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   62.388829][ T4075] netlink: 'syz.4.164': attribute type 1 has an invalid length.
[   62.407029][   T28] audit: type=1400 audit(1770871976.553:265): avc:  denied  { create } for  pid=4079 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   62.444624][ T4075] bond1: entered promiscuous mode
[   62.450504][ T4075] bond1: entered allmulticast mode
[   62.455960][ T4075] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.465025][   T28] audit: type=1400 audit(1770871976.563:266): avc:  denied  { ioctl } for  pid=4079 comm="syz.0.168" path="socket:[6010]" dev="sockfs" ino=6010 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   62.490209][   T28] audit: type=1400 audit(1770871976.613:267): avc:  denied  { map } for  pid=4064 comm="syz.2.162" path="/23/file1/cgroup.controllers" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   62.530829][ T4084] macvlan2: entered promiscuous mode
[   62.555554][ T4084] macvlan2: entered allmulticast mode
[   62.562238][ T4084] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   62.595075][ T4078] loop3: detected capacity change from 0 to 512
[   62.638357][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.668040][ T4078] EXT4-fs error (device loop3): __ext4_iget:5426: inode #3: block 127744: comm syz.3.167: invalid block
[   62.695190][ T4078] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   62.705655][ T4078] EXT4-fs error (device loop3): ext4_quota_enable:7192: comm syz.3.167: Bad quota inode: 3, type: 0
[   62.726381][ T4078] loop3: lost filesystem error report for type 5 error -117
[   62.727725][ T4078] EXT4-fs warning (device loop3): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   62.755700][ T4078] EXT4-fs (loop3): mount failed
[   62.791108][ T4104] xt_addrtype: ipv6 does not support BROADCAST matching
[   62.895782][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[   63.195120][ T4126] loop1: detected capacity change from 0 to 512
[   63.368021][ T4126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.576274][ T4126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.182: invalid indirect mapped block 4294967295 (level 1)
[   63.599386][ T4126] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   63.599594][ T4126] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.182: invalid indirect mapped block 4294967295 (level 1)
[   63.622808][ T4126] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   63.623045][ T4126] EXT4-fs (loop1): 2 truncates cleaned up
[   63.646045][ T4126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.718970][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.059519][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'.
[   64.175563][ T4167] tmpfs: Bad value for 'mpol'
[   64.193213][ T4165] loop1: detected capacity change from 0 to 512
[   64.213209][ T4165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   64.234671][ T4165] EXT4-fs error (device loop1): ext4_init_orphan_info:620: comm syz.1.196: orphan file block 0: bad magic
[   64.246137][ T4165] loop1: lost filesystem error report for type 5 error -117
[   64.248319][ T4165] EXT4-fs (loop1): Remounting filesystem read-only
[   64.266173][ T4165] EXT4-fs (loop1): mount failed
[   64.295001][ T4108] kexec: Could not allocate control_code_buffer
[   64.304488][ T4165] netem: change failed
[   64.310603][ T4165] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'.
[   64.321045][ T4165] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.196'.
[   64.370901][ T4173] loop3: detected capacity change from 0 to 512
[   64.391268][ T4178] loop4: detected capacity change from 0 to 128
[   64.404731][ T4173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.435840][ T4178] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   64.464401][ T4173] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.199: invalid block
[   64.480387][ T4178] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   64.491554][ T4173] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.491717][ T4173] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.199: invalid indirect mapped block 4294967295 (level 1)
[   64.515270][ T4173] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.515626][ T4173] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.199: invalid indirect mapped block 4294967295 (level 1)
[   64.521894][ T4178] EXT4-fs warning (device loop4): __ext4_ioctl:1557: Setting inode version is not supported with metadata_csum enabled.
[   64.524857][ T4173] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   64.551808][ T4173] EXT4-fs (loop3): 2 truncates cleaned up
[   64.576140][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.614493][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   64.652771][ T4190] FAULT_INJECTION: forcing a failure.
[   64.652771][ T4190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.765447][ T4190] CPU: 0 UID: 0 PID: 4190 Comm: syz.1.205 Not tainted syzkaller #0 PREEMPT(full) 
[   64.765553][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   64.765570][ T4190] Call Trace:
[   64.765578][ T4190]  <TASK>
[   64.765593][ T4190]  __dump_stack+0x1d/0x30
[   64.765626][ T4190]  dump_stack_lvl+0x95/0xd0
[   64.765653][ T4190]  dump_stack+0x15/0x1b
[   64.765732][ T4190]  should_fail_ex+0x263/0x280
[   64.765767][ T4190]  should_fail+0xb/0x20
[   64.765820][ T4190]  should_fail_usercopy+0x1a/0x20
[   64.765909][ T4190]  _copy_from_iter+0xcf/0xea0
[   64.765952][ T4190]  ? __build_skb_around+0x164/0x1c0
[   64.765994][ T4190]  ? __build_skb+0x59/0x70
[   64.766147][ T4190]  ? is_vmalloc_addr+0x37/0x90
[   64.766185][ T4190]  netlink_sendmsg+0x4ae/0x6f0
[   64.766276][ T4190]  ? __pfx_netlink_sendmsg+0x10/0x10
[   64.766305][ T4190]  ____sys_sendmsg+0x5af/0x600
[   64.766333][ T4190]  ___sys_sendmsg+0x195/0x1e0
[   64.766429][ T4190]  __x64_sys_sendmsg+0xd4/0x160
[   64.766483][ T4190]  x64_sys_call+0x194c/0x3020
[   64.766517][ T4190]  do_syscall_64+0x12c/0x370
[   64.766560][ T4190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.766623][ T4190] RIP: 0033:0x7f1f2a96bf79
[   64.766639][ T4190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.766660][ T4190] RSP: 002b:00007f1f293c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   64.766685][ T4190] RAX: ffffffffffffffda RBX: 00007f1f2abe5fa0 RCX: 00007f1f2a96bf79
[   64.766703][ T4190] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[   64.766768][ T4190] RBP: 00007f1f293c7090 R08: 0000000000000000 R09: 0000000000000000
[   64.766785][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.766832][ T4190] R13: 00007f1f2abe6038 R14: 00007f1f2abe5fa0 R15: 00007ffdbf28aab8
[   64.766859][ T4190]  </TASK>
[   65.017583][ T4196] capability: warning: `syz.0.208' uses deprecated v2 capabilities in a way that may be insecure
[   65.076629][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.240326][ T4203] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2)
[   65.252381][ T4203] bond1 (unregistering): Released all slaves
[   65.288985][ T4209] FAULT_INJECTION: forcing a failure.
[   65.288985][ T4209] name failslab, interval 1, probability 0, space 0, times 0
[   65.306801][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) 
[   65.306833][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   65.306845][ T4209] Call Trace:
[   65.306851][ T4209]  <TASK>
[   65.306857][ T4209]  __dump_stack+0x1d/0x30
[   65.306890][ T4209]  dump_stack_lvl+0x95/0xd0
[   65.306918][ T4209]  dump_stack+0x15/0x1b
[   65.306950][ T4209]  should_fail_ex+0x263/0x280
[   65.306982][ T4209]  should_failslab+0x8c/0xb0
[   65.307009][ T4209]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   65.307061][ T4209]  ? __alloc_skb+0x2f0/0x4b0
[   65.307181][ T4209]  __alloc_skb+0x2f0/0x4b0
[   65.307215][ T4209]  ? __alloc_skb+0x219/0x4b0
[   65.307252][ T4209]  netlink_alloc_large_skb+0xbf/0xf0
[   65.307352][ T4209]  netlink_sendmsg+0x40c/0x6f0
[   65.307383][ T4209]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.307428][ T4209]  ____sys_sendmsg+0x5af/0x600
[   65.307505][ T4209]  ___sys_sendmsg+0x195/0x1e0
[   65.307546][ T4209]  __x64_sys_sendmsg+0xd4/0x160
[   65.307571][ T4209]  x64_sys_call+0x194c/0x3020
[   65.307639][ T4209]  do_syscall_64+0x12c/0x370
[   65.307688][ T4209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.307739][ T4209] RIP: 0033:0x7fb2cf3ebf79
[   65.307804][ T4209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.307821][ T4209] RSP: 002b:00007fb2cde3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.307844][ T4209] RAX: ffffffffffffffda RBX: 00007fb2cf665fa0 RCX: 00007fb2cf3ebf79
[   65.307862][ T4209] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[   65.307877][ T4209] RBP: 00007fb2cde3f090 R08: 0000000000000000 R09: 0000000000000000
[   65.307894][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.307910][ T4209] R13: 00007fb2cf666038 R14: 00007fb2cf665fa0 R15: 00007fffc53b7468
[   65.307940][ T4209]  </TASK>
[   65.573609][ T4215] netlink: 328 bytes leftover after parsing attributes in process `syz.2.214'.
[   65.671590][ T4213] netlink: 130020 bytes leftover after parsing attributes in process `syz.3.213'.
[   65.747241][ T4219] loop2: detected capacity change from 0 to 2048
[   65.815813][ T4213] netlink: del zone limit has 4 unknown bytes
[   66.165050][ T4231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.219'.
[   66.537150][   T28] kauditd_printk_skb: 111 callbacks suppressed
[   66.537166][   T28] audit: type=1400 audit(1770871980.693:379): avc:  denied  { create } for  pid=4236 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.576396][ T4237] ------------[ cut here ]------------
[   66.581912][ T4237] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[   66.604813][   T28] audit: type=1400 audit(1770871980.723:380): avc:  denied  { setopt } for  pid=4236 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.606511][ T4237] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.221/4237
[   66.636632][ T4237] Modules linked in:
[   66.640573][ T4237] CPU: 1 UID: 0 PID: 4237 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) 
[   66.649819][ T4237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   66.659988][ T4237] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660
[   66.664463][   T28] audit: type=1400 audit(1770871980.723:381): avc:  denied  { write } for  pid=4236 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   66.666293][ T4237] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08
[   66.666319][ T4237] RSP: 0018:ffffc9010f393368 EFLAGS: 00010246
[   66.711551][ T4237] RAX: ffff888104e02ae8 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd
[   66.719686][ T4237] RDX: ffffffff867fa164 RSI: ffffffff866bfe54 RDI: ffffffff86fbdb50
[   66.727805][ T4237] RBP: ffff88811c16aa70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[   66.736017][ T4237] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811c16aa30
[   66.744070][ T4237] R13: 00000000ffffdfcc R14: ffff88811c16aa7c R15: ffff88811c16aa68
[   66.752243][ T4237] FS:  00007fad915076c0(0000) GS:ffff8882aec41000(0000) knlGS:0000000000000000
[   66.761292][ T4237] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   66.767994][ T4237] CR2: 0000200000017038 CR3: 000000011c7f8000 CR4: 00000000003506f0
[   66.776030][ T4237] DR0: 00000000000003ff DR1: 0000000000000000 DR2: 0000000000000000
[   66.784033][ T4237] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   66.792169][ T4237] Call Trace:
[   66.795494][ T4237]  <TASK>
[   66.798494][ T4237]  reg_set_min_max+0x1c8/0x260
[   66.803305][ T4237]  check_cond_jmp_op+0x13b0/0x1ab0
[   66.808516][ T4237]  do_check+0x4a9b/0x9860
[   66.813002][ T4237]  do_check_common+0xd0b/0x1630
[   66.817983][ T4237]  bpf_check+0x2f6d/0xcc10
[   66.822544][ T4237]  ? __alloc_frozen_pages_noprof+0x18a/0x350
[   66.828674][ T4237]  ? alloc_pages_bulk_noprof+0x4a1/0x520
[   66.834392][ T4237]  ? __vmap_pages_range_noflush+0xb9c/0xcc0
[   66.840455][ T4237]  ? css_rstat_updated+0xbb/0x280
[   66.845558][ T4237]  ? pcpu_block_update+0x310/0x3b0
[   66.850707][ T4237]  ? pcpu_block_refresh_hint+0x157/0x170
[   66.856667][ T4237]  ? pcpu_block_update_hint_alloc+0x640/0x660
[   66.862784][ T4237]  ? css_rstat_updated+0xbb/0x280
[   66.867918][ T4237]  ? mod_memcg_state+0x182/0x260
[   66.872963][ T4237]  ? __rcu_read_unlock+0x4e/0x70
[   66.878068][ T4237]  ? avc_has_perm_noaudit+0xab/0x130
[   66.883384][ T4237]  ? avc_has_perm+0x101/0x190
[   66.888254][ T4237]  ? selinux_bpf_prog_load+0x197/0x1c0
[   66.893898][ T4237]  ? security_bpf_prog_load+0x9e/0x140
[   66.899510][ T4237]  bpf_prog_load+0xf76/0x1140
[   66.904276][ T4237]  ? security_bpf+0x2b/0x90
[   66.908850][ T4237]  __sys_bpf+0x505/0x7e0
[   66.913169][ T4237]  __x64_sys_bpf+0x41/0x50
[   66.917680][ T4237]  x64_sys_call+0x10cb/0x3020
[   66.922458][ T4237]  do_syscall_64+0x12c/0x370
[   66.927145][ T4237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.933081][ T4237] RIP: 0033:0x7fad92aabf79
[   66.937573][ T4237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   66.957651][ T4237] RSP: 002b:00007fad91507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   66.966415][ T4237] RAX: ffffffffffffffda RBX: 00007fad92d25fa0 RCX: 00007fad92aabf79
[   66.974536][ T4237] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[   66.982574][ T4237] RBP: 00007fad92b427e0 R08: 0000000000000000 R09: 0000000000000000
[   66.990684][ T4237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.998797][ T4237] R13: 00007fad92d26038 R14: 00007fad92d25fa0 R15: 00007ffeae951408
[   67.006829][ T4237]  </TASK>
[   67.009870][ T4237] ---[ end trace 0000000000000000 ]---
[   67.096398][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'.
[   67.146847][ T4242] gtp0: entered promiscuous mode
[   67.164019][ T4242] gtp0: entered allmulticast mode
[   67.469448][   T28] audit: type=1326 audit(1770871981.623:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.568788][   T28] audit: type=1326 audit(1770871981.623:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.616477][   T28] audit: type=1326 audit(1770871981.623:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.655647][   T28] audit: type=1326 audit(1770871981.623:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.799038][   T28] audit: type=1326 audit(1770871981.623:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.822661][   T28] audit: type=1326 audit(1770871981.623:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.854145][   T28] audit: type=1326 audit(1770871981.623:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f11dbf79 code=0x7ffc0000
[   67.893031][ T4279] loop3: detected capacity change from 0 to 1024
[   67.900519][ T4279] EXT4-fs: Ignoring removed nobh option
[   67.930790][ T4254] process 'syz.1.228' launched './file0' with NULL argv: empty string added
[   67.950647][ T4279] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.127365][ T4279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'.
[   68.180359][ T4279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'.
[   68.521517][ T4292] loop1: detected capacity change from 0 to 1024
[   68.544961][ T4292] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   68.709654][ T4299] loop3: detected capacity change from 0 to 512
[   68.735546][ T4299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.873467][ T4299] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.241: invalid indirect mapped block 4294967295 (level 1)
[   68.887604][ T4299] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   68.887818][ T4299] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.241: invalid indirect mapped block 4294967295 (level 1)
[   68.911048][ T4299] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   68.915562][ T4299] EXT4-fs (loop3): 2 truncates cleaned up
[   69.144936][ T4292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4292 comm=syz.1.237
[   69.194903][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'.
[   69.316437][ T4309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'.
[   69.526762][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'.
[   69.535855][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.246'.
[   69.549757][ T4318] dummy0: entered promiscuous mode
[   69.565599][ T4318] dummy0: entered allmulticast mode
[   69.857516][ T4318] loop1: detected capacity change from 0 to 512
[   69.953623][ T4324] ==================================================================
[   69.961783][ T4324] BUG: KCSAN: data-race in _copy_from_iter / copy_mc_to_kernel
[   69.968377][ T4318] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   69.969375][ T4324] 
[   69.969385][ T4324] read to 0xffff88810bdab000 of 4096 bytes by task 4327 on cpu 0:
[   69.969407][ T4324]  copy_mc_to_kernel+0x43/0xb0
[   69.969435][ T4324]  copy_page_range+0x1aad/0x3cf0
[   69.969479][ T4324]  dup_mmap+0x852/0xf00
[   69.969506][ T4324]  copy_mm+0x119/0x370
[   69.969531][ T4324]  copy_process+0xe22/0x20c0
[   69.969556][ T4324]  kernel_clone+0x16b/0x5b0
[   69.969583][ T4324]  __x64_sys_clone+0x143/0x180
[   69.969612][ T4324]  x64_sys_call+0x1222/0x3020
[   69.969645][ T4324]  do_syscall_64+0x12c/0x370
[   69.969684][ T4324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.969711][ T4324] 
[   69.969718][ T4324] write to 0xffff88810bdab000 of 4096 bytes by task 4324 on cpu 1:
[   69.969740][ T4324]  _copy_from_iter+0x106/0xea0
[   69.969773][ T4324]  copy_page_from_iter+0x178/0x2a0
[   69.969813][ T4324]  process_vm_rw+0x6ad/0x9c0
[   69.969849][ T4324]  __x64_sys_process_vm_writev+0x78/0x90
[   69.969887][ T4324]  x64_sys_call+0x1592/0x3020
[   69.969916][ T4324]  do_syscall_64+0x12c/0x370
[   70.077005][ T4324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.082942][ T4324] 
[   70.085281][ T4324] Reported by Kernel Concurrency Sanitizer on:
[   70.091450][ T4324] CPU: 1 UID: 0 PID: 4324 Comm: syz.2.249 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   70.102232][ T4324] Tainted: [W]=WARN
[   70.106047][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[   70.116120][ T4324] ==================================================================
[   70.168644][ T4318] EXT4-fs (loop1): 1 truncate cleaned up
[   70.564022][ T3310] EXT4-fs unmount: 7 callbacks suppressed
[   70.564042][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.