last executing test programs:

31.548248961s ago: executing program 2 (id=303):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0)
syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, 0x0, 0x0)

31.353991774s ago: executing program 2 (id=305):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
msgsnd(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000000000000561282f3614da13bf64b2c636ca7ff9e15215c22ddde90b8721847e7dc9d8d3eb2c52bc37ace9744530e7fbee9a0c523beb089af3ac1d5c25e27db97b339ec570e96b3240888d13b13cf1e92c772c3857083de1308c22d34d8d332000000000fa2b06058216f880eaa98718eb10bd2f2f4b1781757c12a3923b730741dd38b0eb2177858bf8a9f6c0707cf72fd23129b1ef1abf520b2c6a9b516076ee1585cf5d9e90b3447bb9807bb29fc2332abc7836a7e7646cafa7c695e2c334b9d3f31cbb64c63a8c4a91d58a3c0cb38af91726b28f51046b41c4366c04dba4efa96569639c361d81d1450e8823fb1c8004df38d65414a122c51c3ae1e61a8300d9b1ce77179485103d93c79c4e5e284bd71155fdbc6d21c297689f1161fd184e386399225588ef24a4ea03a983840cef40f12bc9928e25aa555814ba40552a897a9e0c91bf62d70271bf0475f9e4c9c92ac92c3342bb09f1e4ef1dc96e0cc3cbe5b6f3e1a2c346f498de8bab9a4d187ce4010cc62b3ded2ebb7a63ab5d4c1813098ab5ae98320b063871d3c929ffb0cc021de66c9bab0669ec3ca98cc8f0328a009ecd9036482ef49b1683cb6a44916e07503cdc1075be6a5aa958b9ea9d51ec13cf07f18877a40855c2767619c6cf46dfdbae82cd62e"], 0xbe, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(0x0, 0xd4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x18)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800059071ac1a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4)

30.373393319s ago: executing program 2 (id=315):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

30.26258294s ago: executing program 2 (id=318):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000200)={[{@numtail}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@shortname_win95}, {@fat=@tz_utc}, {@numtail}, {@shortname_mixed}, {@fat=@usefree}, {@shortname_winnt}, {}, {@uni_xlate}, {@fat=@quiet}, {@shortname_mixed}, {@fat=@flush}, {@shortname_win95}, {@utf8}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x40, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mknod(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x10)
lseek(r0, 0x80000000100f9, 0x0)
symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

29.511705271s ago: executing program 2 (id=322):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x81800)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb024, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
close_range(r0, r2, 0x0)
getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000100)=""/175, &(0x7f00000001c0)=0xaf)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r2}, 0x18)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={@private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x8, 0x0, 0x100, 0x0, 0x10010, r1})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x80, 0x20)
connect$pppl2tp(r3, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x4, @private1, 0x9}}}, 0x32)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x20300, 0x0)
getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85)
r5 = syz_clone(0x8000200, &(0x7f0000000440)="174aa8", 0x3, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="63aeaed52387c3c656279e4aa563c323cf370d8bb3231fa57fe8c65bece87c8df5ba54771ebc0d")
write$cgroup_subtree(r4, &(0x7f0000000540)={[{0x2d, 'hugetlb'}]}, 0x9)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$int_in(r6, 0x82cf852924d36b83, &(0x7f0000000580)=0x9)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18, r6}, 0x18)
r7 = timerfd_create(0x2, 0x80800)
clock_gettime(0x0, &(0x7f0000000640)={<r8=>0x0, <r9=>0x0})
clock_gettime(0x0, &(0x7f0000000680)={<r10=>0x0, <r11=>0x0})
timerfd_settime(r7, 0x0, &(0x7f00000006c0)={{r8, r9+10000000}, {r10, r11+10000000}}, &(0x7f0000000700))
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000740)={0x0, 0x4, 0x4, 0x8, @vifc_lcl_ifindex=r1, @multicast1}, 0x10)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000780)={0x32, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x50, {0x2, 0x12, 0xff, 0x0, [0x1ff, 0x5, 0x8, 0x73, 0x1a730e8a, 0xf6, 0x9, 0x2, 0x7]}}, @ra={0x5, 0x2, 0xb}, @generic={0x4, 0x49, "e3df218ce57c4d89666588574ef0b6feefb43489080f5bc464eae41ea581ce420f051d4ac4315df618140cd3829a1bdbc353c6f834e32a8a4bfa3b3c23fea8fb247ee3326b54e66a5b"}, @padn]}, 0xb8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000840)='cachefiles_link\x00', r3, 0x0, 0x6}, 0x18)
r12 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x4000010, r12, 0x100000000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000008c0)={0x3, 'veth1_vlan\x00', {0x690b}, 0x80})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000900), 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000980)={0x5, &(0x7f0000000940)=[{0x4, 0x9, 0x3, 0x80000000}, {0x8, 0x74, 0x8, 0x1}, {0x4, 0x9, 0x9, 0xc}, {0x1, 0x7, 0x8, 0x1bbe0000}, {0xc, 0x2, 0x6, 0x5}]})
perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x40, 0x8, 0x7, 0xe, 0x0, 0x7, 0x22000, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x8}, 0x11825, 0x7a, 0x5, 0x6, 0x5, 0xa5, 0x3, 0x0, 0x4, 0x0, 0x9}, r5, 0x5, 0xffffffffffffffff, 0x8)

29.101215717s ago: executing program 2 (id=329):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a27030000000000000000000000000000fdffffffffffffff0000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

29.084912427s ago: executing program 32 (id=329):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r3}, 0x18)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.407604345s ago: executing program 5 (id=729):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

1.921442182s ago: executing program 5 (id=739):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000007000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302009f0000000500000000260004002218fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75653d0371a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000001f0b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf4000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000000140), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2})
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000380)='r', 0x1}], 0x1)
r6 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0)

1.602526787s ago: executing program 0 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0)

1.580238257s ago: executing program 4 (id=748):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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")
r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
write$9p(r3, 0x0, 0x0)
chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xee00)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
sendmsg$rds(r7, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00')
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r11}, 0x10)
listen(r10, 0x3)

1.579485457s ago: executing program 0 (id=749):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
msgsnd(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xbe, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(0x0, 0xd4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sync()
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800059071ac1a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4)

1.497209438s ago: executing program 4 (id=750):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
readv(r1, &(0x7f0000002c00)=[{&(0x7f00000017c0)=""/196, 0xc4}, {&(0x7f00000018c0)=""/149, 0xfffffeb8}], 0x2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000180)={0x0, 0x800, 0x4, {0x6b, 0x6}, 0x80000001, 0x8a})
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket(0x1e, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TCXONC(r7, 0x540a, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES8=r7], 0x50)
sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000001480)=@l2tp6={0xa, 0x0, 0xc0000, @empty, 0x3, 0x3}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="9f57ef", 0x3}, {&(0x7f0000001500)="f4393e636f8e416b6d52aa49eeef211681dce2ff21ca0f017bd310aa113532b85870780c103aaafe9892600c45b3a9a167d6ee9ffac8118360a7ef227ea7676e6d0f24b18dd2aa9169001128877e6fbd1ad746e4ebef60ca25eff55a12eba2a649f6fba1e5cf306b3b802f0f76b0b6e9decbd4", 0x73}, {&(0x7f0000001580)="846ffcb7d75dd409f00e5223a48b5cfd1de0e8da40c53fb4855b44984eb2a57133c037a723d8798907574eceafc12a6eefb739664259bcc9e361cb414eb22ef24c7c36b3a3faf6313968c65c9abab7840d1d3dab1f845a97b25a212b9fd056d8426c7c13bec3d8857f3feac7f3a292f0eefea5d8e4d4013f76a0", 0x7a}, {&(0x7f0000001600)="59ca4702cb1ee86ebfc9a1fae94e69fba09a8d1cd84f6759442804612defc6a15f1b4bb2130a1db625318dea78c544710e027003afaf8aa578783e0ac57c6970f70dc96b06d8f32c1ec81470629abb9a506a015608b7fa1ab7bca88380ca261a48fc4ca915e869379df1ecd9d1ab6824470cea02513b41fad392739447cdb9fd6b69f16d5aa52274b5f78a4655b6cae430b45fddd19adf618c89475952d78f713e197d408ee34b", 0xa7}], 0x4, &(0x7f0000001980)=[{0x18, 0x1, 0x6d4, "aa38"}, {0x68, 0x20d, 0x1ff, "f8c5a04709f8e89c46ecd30de715b83b10ac67457d0f379ab17fa18cb753a1dffdb1de874e9622bccb893a4e4437db4930cc0f27b115fb86012940ab27e0953b8399732e8d76ad7a7a22e9076cecb573a9"}, {0x1010, 0x108, 0x5, "83ac4a0a05155ce51f82fd14e33e4c4b1b170a0eb6ac25eb0c2f0f40008131a21ad90472c376a845bd817e046dff676522b0c06169ff7995de29190c575209c9021c77b9088a8ad73db7176792b2268c13035aae8d6845111cec7d254bec0c09c42becb745c50da514f005ed052eba69a02bad2ca46adef9c6e23e788a02df34f0b5c662fb40ff10c40faa8ef574790d317225aec1c75857edda90ebcc5dbc240e65c7b96acf9c8f4bf24f15378913667214a6b012bd743f24b705afbff91bf5c31c3a395dc66ca9842666ea785ff13327e7fcecf092a3231248863d4594451341a692058a0a5b3affdeea7c3de0bef2230df322e4eeb18cc0aac32950757054226f32494f2d60a413f4271299bd02350eddcd76aad56b34288bfe11d2a617d2cb5b02d101583f15d90bd4e825d5827118bbcd7c1a1d41f048899f66732cc809600cff2a5c099a06b2b77980659b7a0e2a2f0b3e5a68a6d58951c2341eb8e3b4778bc89f1f9c6ab515cb9b08cbc3654b138aa856283dd2d6111ac9f81a24f6cfda02c669c7f5d5e04fce9a399241be88b77180ed7c443d4bb9d9f813c6926665e6021d8ed209d343593f16d2e59fef30b8553381b6d6398efca697718aec809dacc8ca71944271d31df551e5104c83624f16f3caab9bdfeaea130ab2db0621a63ffe63df58581fb38e0e1f89e87e0004920415c0bc4a26e14e93e66419f39be8bb074a441aa98ef995b89260703c487e3b38286d59fb95a622232bc1c4185f8fed617eac735cb4f383beadbbdc5ce0661602364b01cd6766c7ef065ae94e152d99f95109ffb4906f7dbe361ae09615d0764cc172d37b0f70f11930b12903f7fdba753a1153b74ec5588665a5736a03ffcc81997f4c458776e5250c9c89fc65802417fd6ccdd18290588f1f36f8828a197f9a642f68408ab40a68daf28b9c0ac0a42e2a8977061b7a03d0408bc6ed1f796841b1abf6181bef2fd76461bef2a8b45ba50d7846c37c4d7e02949d9f445620c959f56fdc733b37b65c6edce7ef8174181578ef0aaaaca3fa94a2ff265414521865ad24a6b0af0d8e1ef9ebe6a5a20e6959bd809059d971d39da91ded2c590efd62b85c018ee9b3b09b67525a8b320c9a76718533c6a51acc880da321b54c8676e94e6e3e167fc63b0afcf34f2270220da907c1565d086744b16b443ba741383a8c1b35f8b140501941e7868f51ea3840a89511a034202264182bc96f2b3905da88ebe5e7bfec76505798374c8b3dcf5ace529bd78b5b6182b90d31710c6e7e3cf29417890ec1ca19f8f59262c18cea267fc5c03902473d6b83e9408e05ab35f0b06d85f21edca5ccc6055f43aaa1960431e1d14761cd31bbcbdf2f25243dbc3f03fb35b6199a8d6847fbaec2961430238fc2bc64b2538a065095001da67838e59803f53447f6657cf2a868928cbafa5436f47f2e7af3094da4f0df8bd6d55a639cda7357c9e8d6186b0e330a6dc905d7c7d44c9f736206a90280779fdeed81238e401c2013b1902dd73be8aa425b8c85dac8a6c65eca0dd45a93e4714f260226236ac40b7c3f56fb2a168537d790fc4085d035df86abd508aca257c3d8cf26706816ef0c35da424590daf0e2cebb266759345f419bb26f35fe1274932df254d1911a54683ff122508814f680863907778dfc93cb1a7d3f895012d62878910237e7f1993c487338569b351243850365aa2bc1c03c40e4342c316b78c947aa6d179eb02d16cfd7b256c767692c8ba462d33d70c80638a9f31c877ef3304db094cb87bf2bfcee665df3e042209d28671c6710217bfb50c2fa36bd7e6f55b106223c06e1ea97496a23e1b106afd1348b31ff71152137d31766d8ac09ae78608e935fcc37b0bfdaaa186317de6867205205979b7e4bc7cdb6ab24cfd7613dbe9474f132ff6f57766b582bce467a8a135e905be3a4fa1ee5ed12f3a44703b191e58d5ff8e2d2c4c83a5b7070fefce3f6e5699ce1ed49b6b250a7ca5234fba52f553110b5c77375c062ee7a31f26197034ffffdd95370b171a635d3bccc4f9dc1bf749392c3f4450c6a978071d7a22813b0d1aacdf891cd5c6ad8508265a43e7c8bdeed9511a88028b7348bc469b8040716053c693987b87130596c63f9d8759b09e0556755f9d7c803c3eb1219e1b5bc38d6139048f82d432cd1e1dd21d026485d58cdd4951499d7f58fc03b1cc11af7470b531dd7294c657a25eec1e12cd30ff0cb34faa6cb3ad2607faed35acb458c90b22221899b621365b069f818fc0edf59379e9a90b293be32339ecd3869eef7b9e9abe5b12dea4b80b8fd1cadd150606ec12c3657fbc406bb057e02d852717b97bd553345814627cfe35ef1e79edad07808f8ddfe0e5c67427d7e053bde3e01bcda0cd95c8dd140cd37490e1664b1bd067622689e5fecf0c8a160e94104262ebefffa64c8a27bf0e1734422c99a7bf739203ac1bd05c7a79eb0682b724873f9a3f23722f452443298ec339d39fde5f65be79756bda2c7aa9380e2805a795fafa3806e51fb211355078c13fee9425946bf6fbe04298441a17c836c16f0645629ae07838e95d2547d0c22c12cb4e608c4655ea9034bedf82318d0ed552a0eb77871c408a5c3ad04e4c57d062cc78b18f6205b39e24c858ac8715991ac19b52476fcc047bf158c0356b869f01c3d8e1af41af5ef8cd04976546e616a04cb7f05dc916d3242578fcedb6d93b287b150b2ff0ef6898ce4055cf03f32fa3c5a4fbe2dd60fa47629c6db1313674d5567799dd276ad0c0b49b3043d99f9058f88a0780f4d625ac762bc44da03bc46a8edf2950cbb1ef8dd378d6bb64b52e3431fac906061d602280b73b8174e69039d271878c82bb4a7fe956a13a621131d26ffd00135f559c1eac76f136ddf673caed0f73b1e2437133146402d7eec87fdeaa011560a186a3db796f6e0ac79cc05d2bb2fe1e1089c9d953715fb0bb297e62ae5b8ed1fc9a1c8e28b035e287d8434e62ea0aac059c72b5d9e9a7507a7b190200d7c4850cd34ec81db7ac9b6995236b37d40fd82cec995ddd3af64f9e579a50ddd578562ff6d13c6b61caff17a5d224c309f8ef5a7c668d90e92612e5a1b670c53f6dd43b1311713274618c1a1a92a1238682e176474aa3528bc840e46b13585bf567156bc2193be3833fe84f69616b261d901e6d17a98b1c227c3ffe082be1efa5e6e2cc910513d5e7db43a99a944cbe1fa7d096859b4013668dbfa95cc6f3f7c651934a2378d048c67abe1de6b21338ab18e07ab18c15f49b460dc0f40507eb2f625fa1d1e9bdcd4c2300ef231aac6851b098f2a532bfabd5d9e7e5ce2f8781a2e2985d43fbe92e77b4894f7e6351f28caae490760f8868552adf1a960058e608d504d41c718277eb2ef7d94bbaf796367c307c08b3815051c1b453906692718d369ab8952582ab0282d701ba6a55af3e61ceac0a9715eb3af40c7c268b24d5be71700b9af6b2c87127627ac60482e976bedfe9eeb136498b20f8a1b335544c85ddf2bd8ac34c0c12c123d7837ce7213d94b8b4cabae6308af886de6619ae23166b6925404bdf0409002309392096f6fac5d7c22539d3542ba6ef46c94e69e1aa02753180dd0ddc7127bee62e222d6b819378fe2af43d6b790a544dae3faaad402c0dc6905df241b8e8e649855e83e704802e11816fbd3693f787c61d574ca73167c6b662d7b366e7575ece8607f1f9193f754397c3d54fcfa226aa7150c34f02900a4a2c84bc0f598c08d58e60ed5869bab748455f95f67ab30dc0592a5508bb971db71fe43ce0ce6c895123fd92556f9b5724727e78f40ab34df0801d08a12e106e68c898cfc6212d8be4cf64fe1ee05a871c7e50d0ac7fd1a1ed83c8156aae0bcba328a6ceede6268a9dd52e6d284c5dfadf46d8a08702525f7b61d44acca993b4bf95f726480b7a003ca08adca81c05c5d59bddecb83a2bf5d4bfb9e5c664cef0fad3a66c57c5b7c109d97a71f0649b88cc7c342f9994c21c1a09767e12d2970f3b1756d7b0ab6159bdaf1965c84d6e8925602b7a24bde8e6ee65674e39cde74ccf26a535a511d791226a5a155c4f01fe5c51a2fb29e49700ab9579ffb84aac79a8cc780c9bca7db01d5c94996e57e31acbd642795745675cfcea964c1ccac96c9932031cd2298ba220eaf582b6c94499c2e9cf9002caa6524780ab8f3547f7f89b106b9cf0b893f2cc53d21f855c12a0d47840f114f1003811e5284af6e3e52ea38e00c8bbcb77aaed988b6e4bd6de77d466aa0720afaa8a2b04679fea6ee7069004d983a309d96409d5c773793e683fcf46abe2514c17f626b7d5609b299c0160dc4e965ddf9ca6bbe932a36c8534a8efac19fff778be59744f2db6f7ce6749039fb830425ac8a99f86e097bbb78b4bd9f5fd9762b9223fbfc75d3c8c23a683d9613f3f8324e0f2201f0c6e390fa5b971f8f9f9515c011e6a60c43bbf6ec4338f295f7f7c51938d2eddc2e5715bc3aaa49d09e375a61ecb6e5d0741e98a65a9ab19d88432302bb0d25b7e7d509cf8daee08ff39a0d9a141cf8827acc41e8ffafcaaad36776a2974d85f72949874bd4b906ee5ab6ca2ef3e741d27212225666cdd6924405a90f9e5c682d280a4b1ab3d73f31407437ed947f407fd9419e2e49597b8939ad59d28fbbe2896bd0f85b60b890e8dcd9e5647c9e426ee78a1999cc108580672138ec7fcc59ba5e440e5a0a88fb1acfb163f818a2a73fead516850e7c1967af7d62e035c2e92bc55f345b9469fec303f3294aa441b73d1bd314f6c3ae1d11c35a2dcc95ee04aa4054891f98c2fa75df769af1ab5b1d9f4c2d2f800a08d286551cf092d0af7e4d2c4a04ae790afb348e9144e6dbd96955bd5b8186afeb1fb74ba8ee70fcc6a77c2cf8f48138b19d693fd322b171a164999a84b47e9b801933ea44b886ac3bc199d83ebc61cec5c9f95c71b1e6ad50a424f3aef44ee6618086b8165ea52fc8b18b68589053022331fd28b95c1fdf6c06cceef4b7e1e447f770ff620cf210a22f99aa45d6e7cb78f6748a6658bef707c59a7dbf4f78e511be49b7e862259042dc64673d4c44a714959491b6313c6e9e1edd6acd826144436908a58b68dda6f12b5d24a743fe0254e7badaba780a82e50963296b4ea5c594b697fd3490c08b419d2f74aeba98f3b818db37d81bad2f016c5ab3f3ee4a35a587e4dabd70645d69ef47d615817a0e05ca7186cca8d62914a25abda830793eb2067f38b43ece80d44773d079d436434f4af92d773b126bf93c7a45ef335dbecfc59061722131d372912a7c2a7e0f16bb0fb8c9ff05ca6d53480555ce2bff99c05ac1f1218be9b99b2dd37c096a2ff830311ebe13784a5c149825a901ffebeeb4c1b9414bbb172c0423eda2f8c34490c4d6eb0b0cfd210e0924a965ec2ed6969523c9dc0109ef0c7cffefe4040b2431ebff18008116550dd2144f768a93b2117da6da9a3bc6d098d6cb46e8b5e836398475a97cdd79fc5de770049fc2d68c587ede2167348d08c6646e743322c6ae5d557c9270e3980d5fcdb085b98e4887a8783880fd6fc49b7988bbca9ec24df9d231bf56953db5880705a9d91ced9a8ff6286c7aefe8acdd98134067b9f204c4e23d750a7362fee20f37116347e57097e460600e535b43d10070a37dcfce0ecb1fb944a406fc63cd8cf112de58acaa8818e84265d4ba91d579eba0744f5a7ca40a94f5e953350866c223f0eb2efd8f1a1a18e77dc7ac8375110490c41e9d82389c8b1d008d64fd2db8909ebd7256775fc4a9f8c1"}], 0x1090}, 0x4000000)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0)

1.496896609s ago: executing program 4 (id=751):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0x200, 0x7)

1.496079869s ago: executing program 4 (id=752):
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x11120, 0x5dd8, 0x0, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000002c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff9}, 0x18)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x8002, 0x20)
sendfile(r0, r0, 0x0, 0x7a680000)

1.40528142s ago: executing program 0 (id=753):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.38394551s ago: executing program 0 (id=754):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280), 0xf6, 0x452, &(0x7f0000000440)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x1, 0xffd)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000eadc5e18617e0c6018460e6cd668a67a69b94013f54e1aff76ce6a48070d3195834f8420999c596a2e4c57abb9ee2a2d6f9858817e8fe7f508ea83b493ec4e6789ef5839e09d0e60bc147ed6f39196dd2067d86ebb798fbd6b151bcbcecd5205415584cc6b5c0e32292718d9277509fbaece86bcd88cff3438aedd00"/147], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc)
pwrite64(r6, 0x0, 0x0, 0x9000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x28)
ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000100)=0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000086c0)={'ip6_vti0\x00', &(0x7f0000008640)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xc, 0x7, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x40, 0x2, 0xfffffffb}})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009100), 0x0, 0x20008010)
open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
fallocate(r9, 0x40, 0x401, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r6, @ANYBLOB="a703f1a492dcc0a63472515542928f345df64efca8e87d5393c6c6b53eb78c66894e5a20a4674d2e91a13dc314816bd4d0c877d78c113d7838df7aa71a5e853f501591edc41a7c675e7175146b7d2f49396bd5b00ef937a3280600000000000000a259beaa620b445c430dfa35b2037efb28", @ANYBLOB="00000000000051f3aa2b0000000000007b8af8ff000000003fa200000000000007020000f8ffffffb703000008e053f4d14c46000000b704000000000000850000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xde, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)

1.093510494s ago: executing program 5 (id=756):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r4, r4, &(0x7f0000000000)=0x80000002, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=<r5=>r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008580000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1.051775155s ago: executing program 3 (id=757):
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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")
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
futimesat(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)

997.997186ms ago: executing program 1 (id=759):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYRES16=r0], 0x20}}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c6eba2178bd417834bc4cb503e1b9ed821f1e950a3ee72b6b81699c4151a01332f50a1b668621eddfa77ad9b913946f0eb9dec88464887dbafa671a10231c32d44492906d05498f1412c2e6e0cadda5af203e619d27ed8b271069cd2e73c45c3e2ca34ff0f00006a252599c69c7b4af30eff204084e637b74020a41b4dbeae691c15cd277ad6d09080451c0a282338757e7e207b0bbbfa28436807e43d23da5d5fce0afaf3afddea5dd5d65a6aad330a0ae5bfac4b1fd0238fa7e2d18dead57038779aa760fa708a265185f07bd77b2b4b98d0218de8813d2109000000707e8ea4e33336b915eacb201f969eebf6a364bb4fdcef6eb54102f83bd169f87dba6c549867fc0fd4f2576d407fe674309d92d3524fcabf00000000000000008f48e6553f7019ed20136d56a6f62ecbc8f2b4ff7046cf4df155da447681137659939f9a4f2a19b4c5b0149fb08454091665169be87b0d431f2e804002e91f7b0e5a7017db944cb7d87ccc353fdf91981679ce8999b28ce6f69ff0d3c0058b525b40d7b40b2af4372ce93fdc3e5ee60ea47b7b8c95f806a588ffe8d80faabb2bb2ca6c6a8e968f7fe397578a29967e94b7a6e7", @ANYRES16=r2, @ANYBLOB="000827bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)

955.046476ms ago: executing program 5 (id=760):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed", 0x48}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805df805dc75e6c3301fa9919904fd70483d7f5a421aec8cffd6bb05e", 0x6f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64", 0xcf}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71b", 0x17}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

954.357036ms ago: executing program 1 (id=761):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xa3a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100000000000000000000001801"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = io_uring_setup(0x139a, &(0x7f000000c480)={0x0, 0xeb9e, 0x400, 0x1, 0x10000003})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{0x0}], 0x1)
r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x2cb})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x340, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10)
sendto$inet6(r6, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'})
getrlimit(0x1, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

953.758406ms ago: executing program 3 (id=762):
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a80)={[{@nodelalloc}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@norecovery}, {@barrier}, {@lazytime}, {@sb}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffd}}, {@data_journal}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@permit_directio}, {@fowner_eq}, {@context={'context', 0x3d, 'unconfined_u'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@audit}]}, 0x1, 0x56d, &(0x7f0000000ec0)="$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") (fail_nth: 4)

633.417831ms ago: executing program 3 (id=763):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

632.640621ms ago: executing program 1 (id=764):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
msgsnd(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000000000000561282f3614da13bf64b2c636ca7ff9e15215c22ddde90b8721847e7dc9d8d3eb2c52bc37ace9744530e7fbee9a0c523beb089af3ac1d5c25e27db97b339ec570e96b3240888d13b13cf1e92c772c3857083de1308c22d34d8d332000000000fa2b06058216f880eaa98718eb10bd2f2f4b1781757c12a3923b730741dd38b0eb2177858bf8a9f6c0707cf72fd23129b1ef1abf520b2c6a9b516076ee1585cf5d9e90b3447bb9807bb29fc2332abc7836a7e7646cafa7c695e2c334b9d3f31cbb64c63a8c4a91d58a3c0cb38af91726b28f51046b41c4366c04dba4efa96569639c361d81d1450e8823fb1c8004df38d65414a122c51c3ae1e61a8300d9b1ce77179485103d93c79c4e5e284bd71155fdbc6d21c297689f1161fd184e386399225588ef24a4ea03a983840cef40f12bc9928e25aa555814ba40552a897a9e0c91bf62d70271bf0475f9e4c9c92ac92c3342bb09f1e4ef1dc96e0cc3cbe5b6f3e1a2c346f498de8bab9a4d187ce4010cc62b3ded2ebb7a63ab5d4c1813098ab5ae98320b063871d3c929ffb0cc021de66c9bab0669ec3ca98cc8f0328a009ecd9036482ef49b1683cb6a44916e07503cdc1075be6a5aa958b9ea9d51ec13cf07f18877a40855c2767619c6cf46dfdbae82cd62e"], 0xbe, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(0x0, 0xd4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sync()
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800059071ac1a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4)

618.988831ms ago: executing program 4 (id=765):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r7, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x7}, @val={0xc}}}}, 0x28}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)

328.801795ms ago: executing program 4 (id=766):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00100000007b018d05000000000000000000140e00000000000000a637d37aecab354e1b80ebcd00e6f72523aa038b63e32aba948cacaec88702188177558e5bacf9911207b3dfd84219053cc2f90e43b983353d072196b29c4be479c5bf9646ae9acfb690097e4fba33af38e6740caf5f57bba2e4b473db84a2b959a2af05aa8bcdae370a554c23caa333d833f6f9151fc2f1e4e7749b0e03243ac336b5965ea4adddde4fb2a9"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
pause()

324.476465ms ago: executing program 1 (id=767):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

314.371046ms ago: executing program 3 (id=768):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}})

284.300196ms ago: executing program 1 (id=769):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

186.499218ms ago: executing program 3 (id=770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732"], 0xa8}}, 0x0)

185.766667ms ago: executing program 3 (id=771):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0x3}, 0x8)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1}, 0x18)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
readv(r2, &(0x7f0000000540)=[{0x0}, {&(0x7f00000001c0)=""/105, 0x69}], 0x2)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r3)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000005c0)={'fscrypt:', @auto=[0x664b4fdc8b229575, 0x37, 0x31, 0x31, 0x61, 0x37, 0x61, 0x30, 0x64, 0x0, 0x39, 0x33, 0x64, 0x65, 0x66, 0x36]}, &(0x7f0000000640)={0x0, "c76ef8dc09ae7a2037c478ab57fa3e85d7ea2be01e52f3f548827f151b580443d435d857de45835ec23087181e32ad27ce0ec6f2fef7d36e3780fd80c227499a", 0x35}, 0x48, r4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed", 0x48}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805df805dc75e6c3301fa9919904fd70483d7f5a421aec8cffd6bb05e", 0x6f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64", 0xcf}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71b", 0x17}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

141.428098ms ago: executing program 5 (id=772):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30080, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5, 0x8, 0x2543}, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18400, 0x108)
getdents64(r1, 0x0, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

82.362079ms ago: executing program 0 (id=773):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000019c0)={0x28, r2, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x7}, @val={0xc}}}}, 0x28}}, 0x0)

77.213649ms ago: executing program 1 (id=774):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc0}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000002b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind$unix(r5, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4200, 0x1)
write$9p(r2, &(0x7f0000000240)="3bf606dd", 0x4)
sendfile(r2, r6, 0x0, 0x7ffff000)
syz_io_uring_setup(0x234, &(0x7f0000000380)={0x0, 0x80f9, 0x80, 0x3, 0xfb, 0x0, r2}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xda, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
fadvise64(r10, 0x0, 0x0, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180), 0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f00000004c0)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4)
r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0)
r12 = openat(r11, &(0x7f0000000340)='./file2\x00', 0x141842, 0x0)
pwritev2(r12, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)

12.93658ms ago: executing program 0 (id=775):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r3}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0), 0x0)

0s ago: executing program 5 (id=776):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xa0}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x9, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
msgsnd(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xbe, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = creat(0x0, 0xd4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3, 0x0, 0x80000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sync()
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800059071ac1a0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), 0x4)

kernel console output (not intermixed with test programs):

  56.374424][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.374437][ T4096] R13: 0000000000000000 R14: 00007fd1c23c5fa0 R15: 00007ffd6cc6fea8
[   56.374460][ T4096]  </TASK>
[   56.606277][ T4098] loop4: detected capacity change from 0 to 512
[   56.632054][ T4098] EXT4-fs (loop4): 1 orphan inode deleted
[   56.647580][   T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   56.657450][   T51] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1
[   56.688257][ T4098] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.764992][ T4110] geneve2: entered promiscuous mode
[   56.772613][ T4108] SET target dimension over the limit!
[   56.816151][ T4112] FAULT_INJECTION: forcing a failure.
[   56.816151][ T4112] name failslab, interval 1, probability 0, space 0, times 0
[   56.828886][ T4112] CPU: 0 UID: 0 PID: 4112 Comm: syz.4.231 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   56.828926][ T4112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   56.828949][ T4112] Call Trace:
[   56.828957][ T4112]  <TASK>
[   56.828966][ T4112]  __dump_stack+0x1d/0x30
[   56.828989][ T4112]  dump_stack_lvl+0xe8/0x140
[   56.829028][ T4112]  dump_stack+0x15/0x1b
[   56.829050][ T4112]  should_fail_ex+0x265/0x280
[   56.829153][ T4112]  should_failslab+0x8c/0xb0
[   56.829186][ T4112]  kmem_cache_alloc_node_noprof+0x57/0x320
[   56.829226][ T4112]  ? __alloc_skb+0x101/0x320
[   56.829264][ T4112]  __alloc_skb+0x101/0x320
[   56.829338][ T4112]  netlink_alloc_large_skb+0xba/0xf0
[   56.829397][ T4112]  netlink_sendmsg+0x3cf/0x6b0
[   56.829433][ T4112]  ? __pfx_netlink_sendmsg+0x10/0x10
[   56.829544][ T4112]  __sock_sendmsg+0x142/0x180
[   56.829569][ T4112]  ____sys_sendmsg+0x31e/0x4e0
[   56.829608][ T4112]  ___sys_sendmsg+0x17b/0x1d0
[   56.829643][ T4112]  __x64_sys_sendmsg+0xd4/0x160
[   56.829664][ T4112]  x64_sys_call+0x2999/0x2fb0
[   56.829745][ T4112]  do_syscall_64+0xd0/0x1a0
[   56.829774][ T4112]  ? clear_bhb_loop+0x25/0x80
[   56.829802][ T4112]  ? clear_bhb_loop+0x25/0x80
[   56.829830][ T4112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.829855][ T4112] RIP: 0033:0x7f4b8bcae969
[   56.829905][ T4112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.829993][ T4112] RSP: 002b:00007f4b8a317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   56.830071][ T4112] RAX: ffffffffffffffda RBX: 00007f4b8bed5fa0 RCX: 00007f4b8bcae969
[   56.830087][ T4112] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[   56.830102][ T4112] RBP: 00007f4b8a317090 R08: 0000000000000000 R09: 0000000000000000
[   56.830147][ T4112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.830162][ T4112] R13: 0000000000000000 R14: 00007f4b8bed5fa0 R15: 00007ffe80f113e8
[   56.830184][ T4112]  </TASK>
[   57.069084][ T4116] netlink: 'syz.2.233': attribute type 32 has an invalid length.
[   57.121112][ T4121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.229353][ T4130] loop3: detected capacity change from 0 to 1024
[   57.236091][ T4130] EXT4-fs: Ignoring removed nobh option
[   57.241787][ T4130] EXT4-fs: Ignoring removed nobh option
[   57.259946][ T4132] FAULT_INJECTION: forcing a failure.
[   57.259946][ T4132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.273309][ T4132] CPU: 1 UID: 0 PID: 4132 Comm: syz.2.239 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   57.273398][ T4132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   57.273410][ T4132] Call Trace:
[   57.273417][ T4132]  <TASK>
[   57.273425][ T4132]  __dump_stack+0x1d/0x30
[   57.273445][ T4132]  dump_stack_lvl+0xe8/0x140
[   57.273541][ T4132]  dump_stack+0x15/0x1b
[   57.273629][ T4132]  should_fail_ex+0x265/0x280
[   57.273666][ T4132]  should_fail+0xb/0x20
[   57.273702][ T4132]  should_fail_usercopy+0x1a/0x20
[   57.273776][ T4132]  _copy_from_user+0x1c/0xb0
[   57.273803][ T4132]  ___sys_recvmsg+0xaa/0x370
[   57.273828][ T4132]  ? __rcu_read_unlock+0x4f/0x70
[   57.273905][ T4132]  __x64_sys_recvmsg+0xd1/0x160
[   57.273929][ T4132]  x64_sys_call+0xf19/0x2fb0
[   57.273953][ T4132]  do_syscall_64+0xd0/0x1a0
[   57.273980][ T4132]  ? clear_bhb_loop+0x25/0x80
[   57.274000][ T4132]  ? clear_bhb_loop+0x25/0x80
[   57.274056][ T4132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.274085][ T4132] RIP: 0033:0x7f39ce8de969
[   57.274099][ T4132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.274115][ T4132] RSP: 002b:00007f39ccf47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[   57.274147][ T4132] RAX: ffffffffffffffda RBX: 00007f39ceb05fa0 RCX: 00007f39ce8de969
[   57.274162][ T4132] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003
[   57.274220][ T4132] RBP: 00007f39ccf47090 R08: 0000000000000000 R09: 0000000000000000
[   57.274231][ T4132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.274305][ T4132] R13: 0000000000000000 R14: 00007f39ceb05fa0 R15: 00007ffc6221b548
[   57.274328][ T4132]  </TASK>
[   57.287668][ T4130] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   57.508238][ T4130] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.238: inode #4294967295: comm syz.3.238: iget: illegal inode #
[   57.664360][ T4130] EXT4-fs (loop3): no journal found
[   57.669711][ T4130] EXT4-fs (loop3): can't get journal size
[   57.679819][ T4130] EXT4-fs (loop3): failed to initialize system zone (-22)
[   57.687165][ T4130] EXT4-fs (loop3): mount failed
[   57.691669][ T4142] loop4: detected capacity change from 0 to 512
[   57.706136][ T4130] loop3: detected capacity change from 0 to 1024
[   57.721997][ T4130] EXT4-fs: Ignoring removed nobh option
[   57.727666][ T4130] EXT4-fs: Ignoring removed nobh option
[   57.738300][ T4130] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   57.739364][ T4142] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.759623][ T4130] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.238: inode #4294967295: comm syz.3.238: iget: illegal inode #
[   57.784043][ T4130] EXT4-fs (loop3): no journal found
[   57.789351][ T4130] EXT4-fs (loop3): can't get journal size
[   57.789519][ T4148] loop2: detected capacity change from 0 to 512
[   57.816468][ T4148] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   57.881647][ T4130] EXT4-fs (loop3): failed to initialize system zone (-22)
[   57.890124][ T4130] EXT4-fs (loop3): mount failed
[   58.157448][ T4159] netlink: 'syz.3.244': attribute type 3 has an invalid length.
[   58.205988][ T4163] loop2: detected capacity change from 0 to 1024
[   58.211814][ T4165] loop3: detected capacity change from 0 to 512
[   58.237567][ T4165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.250251][ T4167] loop4: detected capacity change from 0 to 2048
[   58.250622][ T4165] EXT4-fs (loop3): 1 truncate cleaned up
[   58.263014][ T4163] EXT4-fs: Ignoring removed bh option
[   58.268528][ T4163] EXT4-fs: inline encryption not supported
[   58.299114][ T4163] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   58.342064][ T4173] loop3: detected capacity change from 0 to 128
[   58.350134][ T4163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[   58.398965][ T4163] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm syz.2.246: lblock 2 mapped to illegal pblock 2 (length 1)
[   58.415666][ T4173] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.427452][ T4163] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   58.444802][ T4163] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.246: lblock 0 mapped to illegal pblock 48 (length 1)
[   58.468460][ T4173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'.
[   58.477430][ T4173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.249'.
[   58.496848][ T4163] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.246: Failed to acquire dquot type 0
[   58.534274][ T4163] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[   58.534313][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'.
[   58.561667][ T4163] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #11: comm syz.2.246: mark_inode_dirty error
[   58.596342][ T4163] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117)
[   58.618365][ T4163] EXT4-fs (loop2): 1 orphan inode deleted
[   58.644689][   T31] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   58.674220][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0
[   58.729102][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0
[   58.756598][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem
[   58.780543][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error
[   58.833778][ T4186] loop2: detected capacity change from 0 to 512
[   58.868217][ T4186] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   58.948966][ T4186] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.253: Failed to acquire dquot type 0
[   58.978070][ T4186] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   59.037382][ T4186] EXT4-fs (loop2): 1 truncate cleaned up
[   59.151991][   T29] kauditd_printk_skb: 7 callbacks suppressed
[   59.152019][   T29] audit: type=1400 audit(1746915612.586:458): avc:  denied  { create } for  pid=4183 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   59.295828][   T29] audit: type=1400 audit(1746915612.716:459): avc:  denied  { bind } for  pid=4196 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.315110][   T29] audit: type=1400 audit(1746915612.716:460): avc:  denied  { setopt } for  pid=4196 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   59.337304][ T4200] loop3: detected capacity change from 0 to 512
[   59.393864][ T4200] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.259: bg 0: block 35: padding at end of block bitmap is not set
[   59.418787][ T4200] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   59.428518][ T4200] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.259: invalid indirect mapped block 4294967295 (level 1)
[   59.457136][ T4205] loop4: detected capacity change from 0 to 512
[   59.473896][ T4200] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.259: invalid indirect mapped block 4294967295 (level 2)
[   59.497319][ T4205] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   59.519456][ T4200] EXT4-fs (loop3): 1 truncate cleaned up
[   59.552415][ T4205] EXT4-fs (loop4): 1 truncate cleaned up
[   59.634728][ T4217] loop4: detected capacity change from 0 to 512
[   59.642918][ T4217] EXT4-fs: Ignoring removed orlov option
[   59.794118][ T4218] netlink: 'syz.2.265': attribute type 3 has an invalid length.
[   59.804599][ T4217] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.830764][   T29] audit: type=1326 audit(1746915613.266:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   59.877009][   T29] audit: type=1326 audit(1746915613.266:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   59.900475][   T29] audit: type=1326 audit(1746915613.266:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   59.923734][   T29] audit: type=1326 audit(1746915613.266:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   59.946982][   T29] audit: type=1400 audit(1746915613.266:465): avc:  denied  { unlink } for  pid=4216 comm="syz.4.264" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   59.969349][   T29] audit: type=1326 audit(1746915613.266:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   59.992735][   T29] audit: type=1326 audit(1746915613.266:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8bcae969 code=0x7ffc0000
[   60.335508][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.270'.
[   60.459448][ T4242] loop4: detected capacity change from 0 to 512
[   60.480563][ T4242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   60.519938][ T4242] EXT4-fs (loop4): 1 truncate cleaned up
[   60.767403][ T4250] loop4: detected capacity change from 0 to 1024
[   60.774257][ T4250] EXT4-fs: Ignoring removed mblk_io_submit option
[   60.797019][ T4250] EXT4-fs: Ignoring removed nobh option
[   60.802646][ T4250] EXT4-fs: Ignoring removed bh option
[   60.863600][ T4250] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.277: inode #327696: comm syz.4.277: iget: illegal inode #
[   60.891826][ T4250] EXT4-fs (loop4): Remounting filesystem read-only
[   60.928726][ T4258] loop3: detected capacity change from 0 to 512
[   60.964704][ T4250] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.277: cleanup dec ref error -30
[   60.982396][ T4261] loop1: detected capacity change from 0 to 512
[   60.989243][ T4250] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.277: dec ref error=-30
[   61.004128][ T4258] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.278: bg 0: block 35: padding at end of block bitmap is not set
[   61.029328][ T4261] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   61.054585][ T4258] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   61.075001][ T4261] EXT4-fs (loop1): 1 truncate cleaned up
[   61.085595][ T4258] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.278: invalid indirect mapped block 4294967295 (level 1)
[   61.169343][ T4258] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.278: invalid indirect mapped block 4294967295 (level 2)
[   61.227933][ T4258] EXT4-fs (loop3): 1 truncate cleaned up
[   61.291192][ T4276] FAULT_INJECTION: forcing a failure.
[   61.291192][ T4276] name failslab, interval 1, probability 0, space 0, times 0
[   61.304015][ T4276] CPU: 0 UID: 0 PID: 4276 Comm: syz.0.285 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   61.304048][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   61.304061][ T4276] Call Trace:
[   61.304067][ T4276]  <TASK>
[   61.304075][ T4276]  __dump_stack+0x1d/0x30
[   61.304154][ T4276]  dump_stack_lvl+0xe8/0x140
[   61.304176][ T4276]  dump_stack+0x15/0x1b
[   61.304196][ T4276]  should_fail_ex+0x265/0x280
[   61.304233][ T4276]  should_failslab+0x8c/0xb0
[   61.304281][ T4276]  kmem_cache_alloc_node_noprof+0x57/0x320
[   61.304321][ T4276]  ? __alloc_skb+0x101/0x320
[   61.304377][ T4276]  __alloc_skb+0x101/0x320
[   61.304415][ T4276]  netlink_alloc_large_skb+0xba/0xf0
[   61.304453][ T4276]  netlink_sendmsg+0x3cf/0x6b0
[   61.304512][ T4276]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.304593][ T4276]  __sock_sendmsg+0x142/0x180
[   61.304623][ T4276]  ____sys_sendmsg+0x31e/0x4e0
[   61.304710][ T4276]  ___sys_sendmsg+0x17b/0x1d0
[   61.304763][ T4276]  __x64_sys_sendmsg+0xd4/0x160
[   61.304818][ T4276]  x64_sys_call+0x2999/0x2fb0
[   61.304838][ T4276]  do_syscall_64+0xd0/0x1a0
[   61.304889][ T4276]  ? clear_bhb_loop+0x25/0x80
[   61.304915][ T4276]  ? clear_bhb_loop+0x25/0x80
[   61.304943][ T4276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.304969][ T4276] RIP: 0033:0x7f713d77e969
[   61.304986][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.305045][ T4276] RSP: 002b:00007f713bde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.305082][ T4276] RAX: ffffffffffffffda RBX: 00007f713d9a5fa0 RCX: 00007f713d77e969
[   61.305094][ T4276] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004
[   61.305105][ T4276] RBP: 00007f713bde7090 R08: 0000000000000000 R09: 0000000000000000
[   61.305116][ T4276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.305162][ T4276] R13: 0000000000000000 R14: 00007f713d9a5fa0 R15: 00007fff0e363eb8
[   61.305181][ T4276]  </TASK>
[   61.616019][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'.
[   61.774479][ T4287] loop1: detected capacity change from 0 to 164
[   61.852496][ T4292] netlink: 'syz.1.291': attribute type 3 has an invalid length.
[   61.953549][ T4297] loop2: detected capacity change from 0 to 512
[   61.976205][ T4301] netlink: 'syz.1.293': attribute type 7 has an invalid length.
[   61.983938][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'.
[   62.007539][ T4297] EXT4-fs: Ignoring removed oldalloc option
[   62.013634][ T4297] EXT4-fs: inline encryption not supported
[   62.019573][ T4297] EXT4-fs: Ignoring removed mblk_io_submit option
[   62.030632][ T4303] loop4: detected capacity change from 0 to 512
[   62.036661][ T4304] FAULT_INJECTION: forcing a failure.
[   62.036661][ T4304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.050078][ T4304] CPU: 1 UID: 0 PID: 4304 Comm: syz.1.293 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   62.050111][ T4304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   62.050191][ T4304] Call Trace:
[   62.050198][ T4304]  <TASK>
[   62.050245][ T4304]  __dump_stack+0x1d/0x30
[   62.050276][ T4304]  dump_stack_lvl+0xe8/0x140
[   62.050300][ T4304]  dump_stack+0x15/0x1b
[   62.050413][ T4304]  should_fail_ex+0x265/0x280
[   62.050448][ T4304]  should_fail+0xb/0x20
[   62.050483][ T4304]  should_fail_usercopy+0x1a/0x20
[   62.050531][ T4304]  _copy_to_user+0x20/0xa0
[   62.050558][ T4304]  simple_read_from_buffer+0xb5/0x130
[   62.050588][ T4304]  proc_fail_nth_read+0x100/0x140
[   62.050633][ T4304]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   62.050665][ T4304]  vfs_read+0x19d/0x6f0
[   62.050688][ T4304]  ? __rcu_read_unlock+0x4f/0x70
[   62.050788][ T4304]  ? __fget_files+0x184/0x1c0
[   62.050817][ T4304]  ksys_read+0xda/0x1a0
[   62.050842][ T4304]  __x64_sys_read+0x40/0x50
[   62.050872][ T4304]  x64_sys_call+0x2d77/0x2fb0
[   62.050960][ T4304]  do_syscall_64+0xd0/0x1a0
[   62.050991][ T4304]  ? clear_bhb_loop+0x25/0x80
[   62.051018][ T4304]  ? clear_bhb_loop+0x25/0x80
[   62.051044][ T4304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.051070][ T4304] RIP: 0033:0x7fe34836d37c
[   62.051088][ T4304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   62.051106][ T4304] RSP: 002b:00007fe3469b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.051127][ T4304] RAX: ffffffffffffffda RBX: 00007fe348596080 RCX: 00007fe34836d37c
[   62.051142][ T4304] RDX: 000000000000000f RSI: 00007fe3469b60a0 RDI: 0000000000000006
[   62.051213][ T4304] RBP: 00007fe3469b6090 R08: 0000000000000000 R09: 0000000000000000
[   62.051318][ T4304] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000001
[   62.051332][ T4304] R13: 0000000000000000 R14: 00007fe348596080 R15: 00007ffec95ac078
[   62.051356][ T4304]  </TASK>
[   62.267322][ T4297] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   62.348013][ T4303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.294: bg 0: block 35: padding at end of block bitmap is not set
[   62.397214][ T4303] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   62.434604][ T4303] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.294: invalid indirect mapped block 4294967295 (level 1)
[   62.489035][ T4303] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.294: invalid indirect mapped block 4294967295 (level 2)
[   62.508337][ T4297] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.290: bg 0: block 64: padding at end of block bitmap is not set
[   62.705780][ T4303] EXT4-fs (loop4): 1 truncate cleaned up
[   62.721948][ T4297] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.290: Failed to acquire dquot type 0
[   62.758321][ T4297] EXT4-fs (loop2): 1 truncate cleaned up
[   62.937809][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   62.974510][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   63.020989][ T4324] netlink: 'syz.0.300': attribute type 3 has an invalid length.
[   63.491275][ T4339] random: crng reseeded on system resumption
[   63.743169][ T4358] bridge_slave_0: left allmulticast mode
[   63.748942][ T4358] bridge_slave_0: left promiscuous mode
[   63.754784][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.788790][ T4358] bridge_slave_1: left allmulticast mode
[   63.794530][ T4358] bridge_slave_1: left promiscuous mode
[   63.800399][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.841000][ T4360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4360 comm=syz.3.308
[   63.886519][ T4358] bond0: (slave bond_slave_1): Releasing backup interface
[   63.941079][ T4358] team0: Port device team_slave_0 removed
[   63.987089][ T4358] team0: Port device team_slave_1 removed
[   64.138203][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.145702][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.162850][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.170397][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.215025][ T4356] netlink: 'syz.1.310': attribute type 3 has an invalid length.
[   64.229618][   T36] srz1: Port: 1 Link DOWN
[   64.278149][ T4364] loop1: detected capacity change from 0 to 512
[   64.290750][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'.
[   64.301800][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'.
[   64.307312][ T4364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.313: bg 0: block 35: padding at end of block bitmap is not set
[   64.329511][ T4368] netlink: 'syz.4.312': attribute type 3 has an invalid length.
[   64.394165][   T29] kauditd_printk_skb: 23 callbacks suppressed
[   64.394181][   T29] audit: type=1400 audit(1746915617.826:489): avc:  denied  { nlmsg_write } for  pid=4374 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.421284][ T4376] netlink: 'syz.2.315': attribute type 32 has an invalid length.
[   64.444166][ T4364] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   64.463983][ T4364] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.313: invalid indirect mapped block 4294967295 (level 1)
[   64.487437][ T4364] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.313: invalid indirect mapped block 4294967295 (level 2)
[   64.502285][ T4364] EXT4-fs (loop1): 1 truncate cleaned up
[   64.583231][ T4381] loop2: detected capacity change from 0 to 256
[   64.630451][ T4383] loop4: detected capacity change from 0 to 512
[   64.640810][ T4383] EXT4-fs: Ignoring removed oldalloc option
[   64.646830][ T4383] EXT4-fs: inline encryption not supported
[   64.652760][ T4383] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.740271][ T4383] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.772882][ T4383] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.316: bg 0: block 64: padding at end of block bitmap is not set
[   64.798646][ T4383] Quota error (device loop4): write_blk: dquota write failed
[   64.804288][ T4381] FAT-fs (loop2): Directory bread(block 64) failed
[   64.806142][ T4383] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[   64.822675][ T4383] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.316: Failed to acquire dquot type 0
[   64.833981][ T4381] FAT-fs (loop2): Directory bread(block 65) failed
[   64.834156][ T4383] EXT4-fs (loop4): 1 truncate cleaned up
[   64.840680][ T4381] FAT-fs (loop2): Directory bread(block 66) failed
[   64.840707][ T4381] FAT-fs (loop2): Directory bread(block 67) failed
[   64.840735][ T4381] FAT-fs (loop2): Directory bread(block 68) failed
[   64.866135][ T4381] FAT-fs (loop2): Directory bread(block 69) failed
[   64.872831][ T4381] FAT-fs (loop2): Directory bread(block 70) failed
[   64.879515][ T4381] FAT-fs (loop2): Directory bread(block 71) failed
[   64.886142][ T4381] FAT-fs (loop2): Directory bread(block 72) failed
[   64.892751][ T4381] FAT-fs (loop2): Directory bread(block 73) failed
[   64.902923][   T29] audit: type=1400 audit(1746915618.336:490): avc:  denied  { mount } for  pid=4379 comm="syz.2.318" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   65.117775][   T29] audit: type=1400 audit(1746915618.536:491): avc:  denied  { mounton } for  pid=4379 comm="syz.2.318" path="/64/bus/bus" dev="loop2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[   65.169402][   T29] audit: type=1400 audit(1746915618.596:492): avc:  denied  { unmount } for  pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   65.206134][ T4395] loop4: detected capacity change from 0 to 512
[   65.210102][ T3322] FAT-fs (loop2): error, corrupted directory (invalid entries)
[   65.220392][ T3322] FAT-fs (loop2): Filesystem has been set read-only
[   65.249083][ T4395] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.323: bg 0: block 35: padding at end of block bitmap is not set
[   65.275717][ T4395] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   65.293786][ T4398] netlink: 'syz.3.324': attribute type 3 has an invalid length.
[   65.333534][ T4395] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.323: invalid indirect mapped block 4294967295 (level 1)
[   65.374481][ T4395] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.323: invalid indirect mapped block 4294967295 (level 2)
[   65.435006][ T4395] EXT4-fs (loop4): 1 truncate cleaned up
[   65.443352][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'.
[   65.476530][   T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.572034][   T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.582520][ T4408] loop1: detected capacity change from 0 to 128
[   65.626981][   T29] audit: type=1400 audit(1746915619.056:493): avc:  denied  { execmem } for  pid=4409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   65.681939][   T29] audit: type=1400 audit(1746915619.086:494): avc:  denied  { remount } for  pid=4407 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   65.697184][   T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.701728][   T29] audit: type=1400 audit(1746915619.096:495): avc:  denied  { create } for  pid=4407 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   65.731408][   T29] audit: type=1400 audit(1746915619.096:496): avc:  denied  { bind } for  pid=4407 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   65.779181][   T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.927568][   T56] bridge_slave_1: left allmulticast mode
[   65.933460][   T56] bridge_slave_1: left promiscuous mode
[   65.939577][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.958275][   T56] bridge_slave_0: left allmulticast mode
[   65.964007][   T56] bridge_slave_0: left promiscuous mode
[   65.970180][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.199626][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   66.212100][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   66.229319][   T56] bond0 (unregistering): Released all slaves
[   66.249739][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'.
[   66.277837][ T4436] netem: change failed
[   66.305884][   T56] hsr_slave_0: left promiscuous mode
[   66.314971][   T56] hsr_slave_1: left promiscuous mode
[   66.322226][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.329791][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.360587][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.368314][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.390231][   T56] veth1_macvtap: left promiscuous mode
[   66.403771][   T56] veth0_macvtap: left promiscuous mode
[   66.415055][   T56] veth1_vlan: left promiscuous mode
[   66.427027][   T56] veth0_vlan: left promiscuous mode
[   66.600772][   T56] team0 (unregistering): Port device team_slave_1 removed
[   66.611245][   T56] team0 (unregistering): Port device team_slave_0 removed
[   66.737488][ T4414] chnl_net:caif_netlink_parms(): no params data found
[   66.839143][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.846346][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.908981][ T4414] bridge_slave_0: entered allmulticast mode
[   66.930993][ T4414] bridge_slave_0: entered promiscuous mode
[   66.950204][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.957414][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.004643][ T4414] bridge_slave_1: entered allmulticast mode
[   67.016977][ T4414] bridge_slave_1: entered promiscuous mode
[   67.054431][ T4414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.088438][ T4414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.210077][ T4414] team0: Port device team_slave_0 added
[   67.220887][ T4414] team0: Port device team_slave_1 added
[   67.257148][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.264160][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.290299][ T4414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.410426][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.417527][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.443750][ T4414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.487730][ T4414] hsr_slave_0: entered promiscuous mode
[   67.501406][ T4414] hsr_slave_1: entered promiscuous mode
[   67.514178][ T4414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.531210][ T4414] Cannot create hsr debugfs directory
[   67.703581][ T4414] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   67.726973][ T4414] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   67.745359][ T4414] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   67.768613][ T4414] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   67.790151][ T4493] loop4: detected capacity change from 0 to 1024
[   67.797286][ T4493] EXT4-fs: Ignoring removed nobh option
[   67.802917][ T4493] EXT4-fs: Ignoring removed bh option
[   67.862231][ T4414] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.898711][ T4414] 8021q: adding VLAN 0 to HW filter on device team0
[   67.941051][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.948342][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.981352][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.988539][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.041988][ T4414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.085862][ T4499] netlink: 'syz.4.357': attribute type 3 has an invalid length.
[   68.181497][ T4414] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.446604][ T4414] veth0_vlan: entered promiscuous mode
[   68.513295][ T4414] veth1_vlan: entered promiscuous mode
[   68.543563][ T4414] veth0_macvtap: entered promiscuous mode
[   68.555762][ T4414] veth1_macvtap: entered promiscuous mode
[   68.577617][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.588189][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.598306][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.608808][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.618941][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.629467][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.674503][ T4530] loop1: detected capacity change from 0 to 1024
[   68.678918][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.697071][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.707597][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.717893][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.728641][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.729552][ T4530] EXT4-fs: Ignoring removed orlov option
[   68.738811][ T4414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.744360][ T4530] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.754790][ T4414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.855578][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.875424][ T4414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.884417][ T4414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.893488][ T4414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.902410][ T4414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.016189][ T4543] loop5: detected capacity change from 0 to 512
[   69.026459][ T4545] netlink: 'syz.1.366': attribute type 3 has an invalid length.
[   69.042898][ T4543] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   69.083227][ T4543] EXT4-fs (loop5): 1 truncate cleaned up
[   69.103057][ T4549] loop1: detected capacity change from 0 to 512
[   69.132198][ T4549] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.370: bg 0: block 35: padding at end of block bitmap is not set
[   69.162415][ T4549] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   69.174611][ T4549] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.370: invalid indirect mapped block 4294967295 (level 1)
[   69.208732][ T4549] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.370: invalid indirect mapped block 4294967295 (level 2)
[   69.259330][ T4549] EXT4-fs (loop1): 1 truncate cleaned up
[   69.379000][ T4562] bridge0: entered promiscuous mode
[   69.393543][ T4562] macvlan3: entered promiscuous mode
[   69.414573][ T4562] bridge0: port 1(macvlan3) entered blocking state
[   69.421341][ T4562] bridge0: port 1(macvlan3) entered disabled state
[   69.445590][ T4562] macvlan3: entered allmulticast mode
[   69.451148][ T4562] bridge0: entered allmulticast mode
[   69.475607][ T4562] macvlan3: left allmulticast mode
[   69.481345][ T4562] bridge0: left allmulticast mode
[   69.559171][ T4562] bridge0: left promiscuous mode
[   69.641116][ T4575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.661443][ T4575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.757357][ T4581] netlink: 'syz.3.380': attribute type 3 has an invalid length.
[   70.342114][ T4604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.366328][ T4604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.490604][ T4604] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[   70.497326][ T4604] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   70.505249][ T4604] vhci_hcd vhci_hcd.0: Device attached
[   70.519580][ T4610] vhci_hcd: connection closed
[   70.519896][   T56] vhci_hcd: stop threads
[   70.528234][ T4549] syz.1.370 (4549) used greatest stack depth: 6192 bytes left
[   70.529021][   T56] vhci_hcd: release socket
[   70.540980][   T56] vhci_hcd: disconnect device
[   70.564490][ T3316] EXT4-fs unmount: 77 callbacks suppressed
[   70.564507][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.609460][   T29] kauditd_printk_skb: 259 callbacks suppressed
[   70.609477][   T29] audit: type=1400 audit(1746915624.046:756): avc:  denied  { write } for  pid=4614 comm="syz.1.393" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   70.670299][ T4616] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581
[   70.692691][   T29] audit: type=1400 audit(1746915624.086:757): avc:  denied  { open } for  pid=4614 comm="syz.1.393" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   70.716735][   T29] audit: type=1400 audit(1746915624.086:758): avc:  denied  { execute } for  pid=4614 comm="syz.1.393" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   70.742995][   T29] audit: type=1326 audit(1746915624.116:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.766746][   T29] audit: type=1326 audit(1746915624.116:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.790693][   T29] audit: type=1326 audit(1746915624.116:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.814068][   T29] audit: type=1326 audit(1746915624.116:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.837565][   T29] audit: type=1326 audit(1746915624.116:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.840311][ T4625] syzkaller0: entered allmulticast mode
[   70.861051][   T29] audit: type=1326 audit(1746915624.116:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   70.890385][   T29] audit: type=1326 audit(1746915624.116:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4614 comm="syz.1.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34836e969 code=0x7ffc0000
[   71.276109][ T4638] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.339752][ T4642] loop3: detected capacity change from 0 to 512
[   71.348111][ T4642] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.404: bg 0: block 35: padding at end of block bitmap is not set
[   71.362785][ T4642] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   71.372172][ T4642] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.404: invalid indirect mapped block 4294967295 (level 1)
[   71.386357][ T4642] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.404: invalid indirect mapped block 4294967295 (level 2)
[   71.401716][ T4642] EXT4-fs (loop3): 1 truncate cleaned up
[   71.407898][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.761482][ T4650] loop1: detected capacity change from 0 to 164
[   71.825883][ T4652] loop1: detected capacity change from 0 to 1024
[   71.860861][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.878673][ T4652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'.
[   71.933764][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.069841][ T4663] loop4: detected capacity change from 0 to 1024
[   72.093555][ T4663] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[   72.136140][ T4663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   72.170456][ T4663] System zones: 0-1, 3-36
[   72.196173][ T4668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.410'.
[   72.206123][ T4663] EXT4-fs (loop4): orphan cleanup on readonly fs
[   72.241063][ T4663] EXT4-fs (loop4): 1 orphan inode deleted
[   72.261756][ T4663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.392017][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.432295][ T4674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'.
[   72.464309][ T4678] netlink: 'syz.0.415': attribute type 3 has an invalid length.
[   72.468038][ T4677] loop4: detected capacity change from 0 to 512
[   72.494849][ T4677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   72.518222][ T4677] EXT4-fs (loop4): 1 truncate cleaned up
[   72.524418][ T4677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.527843][ T4680] netlink: 'syz.1.416': attribute type 3 has an invalid length.
[   72.579687][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.621738][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.655265][ T4689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.431'.
[   72.700388][ T4694] loop4: detected capacity change from 0 to 512
[   72.748356][ T4694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   72.773364][ T4694] EXT4-fs (loop4): 1 truncate cleaned up
[   72.779886][ T4694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.866417][ T4702] loop5: detected capacity change from 0 to 164
[   72.988584][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.073423][ T4716] netlink: 'syz.4.428': attribute type 3 has an invalid length.
[   73.218426][ T4723] netlink: 8 bytes leftover after parsing attributes in process `+}[@'.
[   73.226996][ T4723] netlink: 4 bytes leftover after parsing attributes in process `+}[@'.
[   73.243013][ T4728] FAULT_INJECTION: forcing a failure.
[   73.243013][ T4728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.256499][ T4728] CPU: 0 UID: 0 PID: 4728 Comm: syz.1.433 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   73.256533][ T4728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   73.256548][ T4728] Call Trace:
[   73.256554][ T4728]  <TASK>
[   73.256561][ T4728]  __dump_stack+0x1d/0x30
[   73.256588][ T4728]  dump_stack_lvl+0xe8/0x140
[   73.256610][ T4728]  dump_stack+0x15/0x1b
[   73.256680][ T4728]  should_fail_ex+0x265/0x280
[   73.256713][ T4728]  should_fail+0xb/0x20
[   73.256746][ T4728]  should_fail_usercopy+0x1a/0x20
[   73.256791][ T4728]  _copy_to_user+0x20/0xa0
[   73.256814][ T4728]  simple_read_from_buffer+0xb5/0x130
[   73.256879][ T4728]  proc_fail_nth_read+0x100/0x140
[   73.256951][ T4728]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   73.256982][ T4728]  vfs_read+0x19d/0x6f0
[   73.257024][ T4728]  ? __rcu_read_unlock+0x4f/0x70
[   73.257047][ T4728]  ? __fget_files+0x184/0x1c0
[   73.257075][ T4728]  ? __sys_bind+0x1f9/0x2a0
[   73.257113][ T4728]  ksys_read+0xda/0x1a0
[   73.257145][ T4728]  __x64_sys_read+0x40/0x50
[   73.257249][ T4728]  x64_sys_call+0x2d77/0x2fb0
[   73.257355][ T4728]  do_syscall_64+0xd0/0x1a0
[   73.257378][ T4728]  ? clear_bhb_loop+0x25/0x80
[   73.257398][ T4728]  ? clear_bhb_loop+0x25/0x80
[   73.257460][ T4728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.257484][ T4728] RIP: 0033:0x7fe34836d37c
[   73.257513][ T4728] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   73.257530][ T4728] RSP: 002b:00007fe3469d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   73.257554][ T4728] RAX: ffffffffffffffda RBX: 00007fe348595fa0 RCX: 00007fe34836d37c
[   73.257569][ T4728] RDX: 000000000000000f RSI: 00007fe3469d70a0 RDI: 0000000000000004
[   73.257584][ T4728] RBP: 00007fe3469d7090 R08: 0000000000000000 R09: 0000000000000000
[   73.257599][ T4728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.257613][ T4728] R13: 0000000000000000 R14: 00007fe348595fa0 R15: 00007ffec95ac078
[   73.257636][ T4728]  </TASK>
[   73.499749][ T4732] loop1: detected capacity change from 0 to 128
[   73.525970][ T4732] FAT-fs (loop1): bogus logical sector size 0
[   73.532158][ T4732] FAT-fs (loop1): Can't find a valid FAT filesystem
[   73.559664][ T4734] netlink: 'syz.5.439': attribute type 3 has an invalid length.
[   73.599704][ T4736] loop1: detected capacity change from 0 to 164
[   73.615918][ T4738] loop5: detected capacity change from 0 to 2048
[   73.642656][ T4738] EXT4-fs: Ignoring removed oldalloc option
[   73.697836][ T4738] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   73.795096][ T4738] loop5: detected capacity change from 0 to 2048
[   73.823081][ T4738] EXT4-fs: Ignoring removed nobh option
[   73.830482][ T4738] EXT4-fs (loop5): Invalid log block size: 8
[   73.896616][ T4755] netlink: 'syz.0.448': attribute type 3 has an invalid length.
[   73.965316][ T4758] loop5: detected capacity change from 0 to 1024
[   74.011013][ T4758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.068111][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[   74.068339][ T4758] FAULT_INJECTION: forcing a failure.
[   74.068339][ T4758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.091002][ T4758] CPU: 1 UID: 0 PID: 4758 Comm: syz.5.449 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   74.091029][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   74.091040][ T4758] Call Trace:
[   74.091046][ T4758]  <TASK>
[   74.091053][ T4758]  __dump_stack+0x1d/0x30
[   74.091077][ T4758]  dump_stack_lvl+0xe8/0x140
[   74.091166][ T4758]  dump_stack+0x15/0x1b
[   74.091186][ T4758]  should_fail_ex+0x265/0x280
[   74.091220][ T4758]  should_fail+0xb/0x20
[   74.091292][ T4758]  should_fail_usercopy+0x1a/0x20
[   74.091322][ T4758]  copy_page_from_iter_atomic+0x21b/0xff0
[   74.091385][ T4758]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[   74.091420][ T4758]  generic_perform_write+0x2c2/0x490
[   74.091460][ T4758]  ext4_buffered_write_iter+0x1ee/0x3c0
[   74.091522][ T4758]  ? ext4_file_write_iter+0xfe/0xf00
[   74.091557][ T4758]  ext4_file_write_iter+0x383/0xf00
[   74.091588][ T4758]  ? path_openat+0x1bf8/0x2170
[   74.091687][ T4758]  ? _parse_integer_limit+0x170/0x190
[   74.091730][ T4758]  do_iter_readv_writev+0x41e/0x4c0
[   74.091766][ T4758]  vfs_writev+0x2c9/0x870
[   74.091809][ T4758]  __se_sys_pwritev2+0xfc/0x1c0
[   74.091852][ T4758]  __x64_sys_pwritev2+0x67/0x80
[   74.091885][ T4758]  x64_sys_call+0x1cea/0x2fb0
[   74.091921][ T4758]  do_syscall_64+0xd0/0x1a0
[   74.091942][ T4758]  ? clear_bhb_loop+0x25/0x80
[   74.092015][ T4758]  ? clear_bhb_loop+0x25/0x80
[   74.092065][ T4758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.092090][ T4758] RIP: 0033:0x7f2fc617e969
[   74.092108][ T4758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.092130][ T4758] RSP: 002b:00007f2fc47e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[   74.092148][ T4758] RAX: ffffffffffffffda RBX: 00007f2fc63a5fa0 RCX: 00007f2fc617e969
[   74.092159][ T4758] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000b
[   74.092253][ T4758] RBP: 00007f2fc47e7090 R08: 0000000000000000 R09: 0000000000000000
[   74.092264][ T4758] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001
[   74.092284][ T4758] R13: 0000000000000000 R14: 00007f2fc63a5fa0 R15: 00007ffce7682448
[   74.092302][ T4758]  </TASK>
[   74.355167][ T4768] loop4: detected capacity change from 0 to 1024
[   74.362229][ T4768] EXT4-fs: Ignoring removed nobh option
[   74.368073][ T4768] EXT4-fs: Ignoring removed bh option
[   74.382085][ T4766] process 'syz.0.452' launched '/dev/fd/7' with NULL argv: empty string added
[   74.433677][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.457270][ T4779] FAULT_INJECTION: forcing a failure.
[   74.457270][ T4779] name failslab, interval 1, probability 0, space 0, times 0
[   74.470290][ T4779] CPU: 1 UID: 0 PID: 4779 Comm: syz.0.458 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   74.470321][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   74.470336][ T4779] Call Trace:
[   74.470344][ T4779]  <TASK>
[   74.470401][ T4779]  __dump_stack+0x1d/0x30
[   74.470428][ T4779]  dump_stack_lvl+0xe8/0x140
[   74.470451][ T4779]  dump_stack+0x15/0x1b
[   74.470467][ T4779]  should_fail_ex+0x265/0x280
[   74.470503][ T4779]  should_failslab+0x8c/0xb0
[   74.470563][ T4779]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   74.470585][ T4779]  ? cond_bools_copy+0x30/0x80
[   74.470604][ T4779]  ? __pfx_cond_bools_destroy+0x10/0x10
[   74.470622][ T4779]  kmemdup_noprof+0x2b/0x70
[   74.470670][ T4779]  ? __pfx_cond_bools_destroy+0x10/0x10
[   74.470694][ T4779]  cond_bools_copy+0x30/0x80
[   74.470754][ T4779]  ? __pfx_cond_bools_destroy+0x10/0x10
[   74.470774][ T4779]  hashtab_duplicate+0x11b/0x360
[   74.470807][ T4779]  ? __pfx_cond_bools_copy+0x10/0x10
[   74.470833][ T4779]  cond_policydb_dup+0xd2/0x4e0
[   74.470860][ T4779]  security_set_bools+0xa0/0x340
[   74.470919][ T4768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.470937][ T4779]  sel_commit_bools_write+0x1ea/0x270
[   74.470965][ T4779]  vfs_writev+0x3eb/0x870
[   74.471069][ T4779]  ? __pfx_sel_commit_bools_write+0x10/0x10
[   74.471113][ T4779]  ? mutex_lock+0xd/0x30
[   74.471157][ T4779]  do_writev+0xe7/0x210
[   74.471234][ T4779]  __x64_sys_writev+0x45/0x50
[   74.471276][ T4779]  x64_sys_call+0x2006/0x2fb0
[   74.471305][ T4779]  do_syscall_64+0xd0/0x1a0
[   74.471334][ T4779]  ? clear_bhb_loop+0x25/0x80
[   74.471440][ T4779]  ? clear_bhb_loop+0x25/0x80
[   74.471467][ T4779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.471495][ T4779] RIP: 0033:0x7f713d77e969
[   74.471515][ T4779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.471537][ T4779] RSP: 002b:00007f713bde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   74.471605][ T4779] RAX: ffffffffffffffda RBX: 00007f713d9a5fa0 RCX: 00007f713d77e969
[   74.471621][ T4779] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003
[   74.471711][ T4779] RBP: 00007f713bde7090 R08: 0000000000000000 R09: 0000000000000000
[   74.471726][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   74.471742][ T4779] R13: 0000000000000000 R14: 00007f713d9a5fa0 R15: 00007fff0e363eb8
[   74.471806][ T4779]  </TASK>
[   74.583755][ T4787] netlink: 'syz.0.460': attribute type 3 has an invalid length.
[   74.731630][ T4789] tipc: Started in network mode
[   74.736666][ T4789] tipc: Node identity ac14140f, cluster identity 4711
[   74.751201][ T4789] tipc: New replicast peer: 255.255.255.255
[   74.754014][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.757364][ T4789] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.778044][ T4784] netlink: 'syz.5.457': attribute type 13 has an invalid length.
[   74.962946][ T4801] FAULT_INJECTION: forcing a failure.
[   74.962946][ T4801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.976207][ T4801] CPU: 0 UID: 0 PID: 4801 Comm: syz.0.465 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   74.976294][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   74.976309][ T4801] Call Trace:
[   74.976317][ T4801]  <TASK>
[   74.976326][ T4801]  __dump_stack+0x1d/0x30
[   74.976352][ T4801]  dump_stack_lvl+0xe8/0x140
[   74.976392][ T4801]  dump_stack+0x15/0x1b
[   74.976411][ T4801]  should_fail_ex+0x265/0x280
[   74.976447][ T4801]  should_fail+0xb/0x20
[   74.976515][ T4801]  should_fail_usercopy+0x1a/0x20
[   74.976538][ T4801]  _copy_from_iter+0xcf/0xdd0
[   74.976560][ T4801]  ? __build_skb_around+0x1a0/0x200
[   74.976598][ T4801]  ? __alloc_skb+0x223/0x320
[   74.976637][ T4801]  netlink_sendmsg+0x471/0x6b0
[   74.976758][ T4801]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.976798][ T4801]  __sock_sendmsg+0x142/0x180
[   74.976847][ T4801]  ____sys_sendmsg+0x31e/0x4e0
[   74.976870][ T4801]  ___sys_sendmsg+0x17b/0x1d0
[   74.976901][ T4801]  __x64_sys_sendmsg+0xd4/0x160
[   74.976925][ T4801]  x64_sys_call+0x2999/0x2fb0
[   74.976947][ T4801]  do_syscall_64+0xd0/0x1a0
[   74.977040][ T4801]  ? clear_bhb_loop+0x25/0x80
[   74.977067][ T4801]  ? clear_bhb_loop+0x25/0x80
[   74.977093][ T4801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.977118][ T4801] RIP: 0033:0x7f713d77e969
[   74.977137][ T4801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.977229][ T4801] RSP: 002b:00007f713bde7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.977251][ T4801] RAX: ffffffffffffffda RBX: 00007f713d9a5fa0 RCX: 00007f713d77e969
[   74.977335][ T4801] RDX: 0000000000004004 RSI: 0000200000000940 RDI: 0000000000000003
[   74.977400][ T4801] RBP: 00007f713bde7090 R08: 0000000000000000 R09: 0000000000000000
[   74.977414][ T4801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   74.977429][ T4801] R13: 0000000000000000 R14: 00007f713d9a5fa0 R15: 00007fff0e363eb8
[   74.977530][ T4801]  </TASK>
[   74.982987][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.015918][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[   75.019295][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.023624][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'.
[   75.251028][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.261412][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.366059][ T4784] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.375241][ T4784] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.384305][ T4784] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.393543][ T4784] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.617619][ T4807] netlink: 'syz.0.467': attribute type 32 has an invalid length.
[   75.625515][ T4807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'.
[   75.698679][ T4822] loop1: detected capacity change from 0 to 512
[   75.716303][ T4822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   75.748027][ T4822] EXT4-fs (loop1): 1 truncate cleaned up
[   75.784797][ T4822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.807593][ T4828] netlink: 'syz.3.473': attribute type 3 has an invalid length.
[   75.819843][   T23] tipc: Node number set to 2886997007
[   75.942022][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.964205][ T4836] loop1: detected capacity change from 0 to 512
[   75.980098][ T4836] EXT4-fs (loop1): orphan cleanup on readonly fs
[   75.987431][ T4836] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.478: bad orphan inode 13
[   76.012250][ T4836] ext4_test_bit(bit=12, block=18) = 1
[   76.018706][ T4836] is_bad_inode(inode)=0
[   76.023001][ T4836] NEXT_ORPHAN(inode)=2130706432
[   76.027898][ T4836] max_ino=32
[   76.031326][ T4836] i_nlink=1
[   76.042225][ T4836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.180838][   T29] kauditd_printk_skb: 98 callbacks suppressed
[   76.180855][   T29] audit: type=1400 audit(1746916397.720:864): avc:  denied  { execute } for  pid=4835 comm="syz.1.478" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   76.212319][ T4836] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   76.241914][ T4836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.478: bg 0: block 248: padding at end of block bitmap is not set
[   76.258064][ T4836] Quota error (device loop1): write_blk: dquota write failed
[   76.265551][ T4836] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   76.275667][ T4836] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.478: Failed to acquire dquot type 1
[   76.296919][ T4836] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   76.342527][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.396101][ T4849] netlink: 'syz.5.483': attribute type 4 has an invalid length.
[   76.423470][ T4849] : renamed from bond0
[   76.445892][   T29] audit: type=1400 audit(1746916398.004:865): avc:  denied  { connect } for  pid=4850 comm="syz.1.482" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.470166][ T4851] openvswitch: netlink: Message has 6 unknown bytes.
[   76.498144][   T29] audit: type=1400 audit(1746916398.004:866): avc:  denied  { write } for  pid=4850 comm="syz.1.482" path="socket:[9028]" dev="sockfs" ino=9028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   76.554803][ T4864] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   76.593282][ T4866] loop3: detected capacity change from 0 to 512
[   76.601860][ T4866] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   76.623288][ T4866] EXT4-fs (loop3): 1 truncate cleaned up
[   76.630001][ T4866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.821216][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.862500][ T4879] FAULT_INJECTION: forcing a failure.
[   76.862500][ T4879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.875923][ T4879] CPU: 1 UID: 0 PID: 4879 Comm: syz.4.493 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   76.875957][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   76.875972][ T4879] Call Trace:
[   76.876050][ T4879]  <TASK>
[   76.876060][ T4879]  __dump_stack+0x1d/0x30
[   76.876084][ T4879]  dump_stack_lvl+0xe8/0x140
[   76.876103][ T4879]  dump_stack+0x15/0x1b
[   76.876118][ T4879]  should_fail_ex+0x265/0x280
[   76.876202][ T4879]  should_fail+0xb/0x20
[   76.876234][ T4879]  should_fail_usercopy+0x1a/0x20
[   76.876289][ T4879]  _copy_from_iter+0xcf/0xdd0
[   76.876307][ T4879]  ? __build_skb_around+0x1a0/0x200
[   76.876343][ T4879]  ? __alloc_skb+0x223/0x320
[   76.876383][ T4879]  netlink_sendmsg+0x471/0x6b0
[   76.876472][ T4879]  ? __pfx_netlink_sendmsg+0x10/0x10
[   76.876592][ T4879]  __sock_sendmsg+0x142/0x180
[   76.876620][ T4879]  ____sys_sendmsg+0x31e/0x4e0
[   76.876643][ T4879]  ___sys_sendmsg+0x17b/0x1d0
[   76.876674][ T4879]  __x64_sys_sendmsg+0xd4/0x160
[   76.876713][ T4879]  x64_sys_call+0x2999/0x2fb0
[   76.876740][ T4879]  do_syscall_64+0xd0/0x1a0
[   76.876765][ T4879]  ? clear_bhb_loop+0x25/0x80
[   76.876785][ T4879]  ? clear_bhb_loop+0x25/0x80
[   76.876811][ T4879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.876912][ T4879] RIP: 0033:0x7f4b8bcae969
[   76.876930][ T4879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.876951][ T4879] RSP: 002b:00007f4b8a317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   76.877012][ T4879] RAX: ffffffffffffffda RBX: 00007f4b8bed5fa0 RCX: 00007f4b8bcae969
[   76.877047][ T4879] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[   76.877062][ T4879] RBP: 00007f4b8a317090 R08: 0000000000000000 R09: 0000000000000000
[   76.877076][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.877090][ T4879] R13: 0000000000000000 R14: 00007f4b8bed5fa0 R15: 00007ffe80f113e8
[   76.877112][ T4879]  </TASK>
[   77.095284][   T29] audit: type=1326 audit(1746916398.676:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   77.120004][   T29] audit: type=1326 audit(1746916398.676:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   77.144156][   T29] audit: type=1326 audit(1746916398.676:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   77.168165][   T29] audit: type=1326 audit(1746916398.676:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   77.192592][   T29] audit: type=1326 audit(1746916398.676:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   77.218201][ T4880] loop3: detected capacity change from 0 to 164
[   77.275974][ T4882] __nla_validate_parse: 3 callbacks suppressed
[   77.275992][ T4882] netlink: 52 bytes leftover after parsing attributes in process `syz.1.494'.
[   77.292389][ T4888] loop3: detected capacity change from 0 to 512
[   77.322819][ T4888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.496: bg 0: block 35: padding at end of block bitmap is not set
[   77.374403][ T4888] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   77.386363][ T4888] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.496: invalid indirect mapped block 4294967295 (level 1)
[   77.442674][ T4888] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.496: invalid indirect mapped block 4294967295 (level 2)
[   77.484108][ T4898] loop5: detected capacity change from 0 to 1024
[   77.498400][ T4888] EXT4-fs (loop3): 1 truncate cleaned up
[   77.510523][ T4900] loop4: detected capacity change from 0 to 512
[   77.519499][ T4888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.533954][ T4900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   77.538196][ T4898] EXT4-fs: Ignoring removed nobh option
[   77.550393][ T4898] EXT4-fs: Ignoring removed bh option
[   77.554165][ T4900] EXT4-fs (loop4): 1 truncate cleaned up
[   77.562162][ T4900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.629407][ T4898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.682513][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.727816][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.759628][ T4908] FAULT_INJECTION: forcing a failure.
[   77.759628][ T4908] name failslab, interval 1, probability 0, space 0, times 0
[   77.772331][ T4908] CPU: 0 UID: 0 PID: 4908 Comm: syz.1.506 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   77.772385][ T4908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   77.772400][ T4908] Call Trace:
[   77.772408][ T4908]  <TASK>
[   77.772417][ T4908]  __dump_stack+0x1d/0x30
[   77.772439][ T4908]  dump_stack_lvl+0xe8/0x140
[   77.772462][ T4908]  dump_stack+0x15/0x1b
[   77.772571][ T4908]  should_fail_ex+0x265/0x280
[   77.772607][ T4908]  should_failslab+0x8c/0xb0
[   77.772636][ T4908]  kmem_cache_alloc_node_noprof+0x57/0x320
[   77.772672][ T4908]  ? __alloc_skb+0x101/0x320
[   77.772744][ T4908]  __alloc_skb+0x101/0x320
[   77.772777][ T4908]  netlink_alloc_large_skb+0xba/0xf0
[   77.772872][ T4908]  netlink_sendmsg+0x3cf/0x6b0
[   77.772906][ T4908]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.772940][ T4908]  __sock_sendmsg+0x142/0x180
[   77.772966][ T4908]  ____sys_sendmsg+0x31e/0x4e0
[   77.773045][ T4908]  ___sys_sendmsg+0x17b/0x1d0
[   77.773076][ T4908]  __x64_sys_sendmsg+0xd4/0x160
[   77.773099][ T4908]  x64_sys_call+0x2999/0x2fb0
[   77.773119][ T4908]  do_syscall_64+0xd0/0x1a0
[   77.773142][ T4908]  ? clear_bhb_loop+0x25/0x80
[   77.773243][ T4908]  ? clear_bhb_loop+0x25/0x80
[   77.773264][ T4908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.773285][ T4908] RIP: 0033:0x7fe34836e969
[   77.773299][ T4908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.773354][ T4908] RSP: 002b:00007fe3469d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.773373][ T4908] RAX: ffffffffffffffda RBX: 00007fe348595fa0 RCX: 00007fe34836e969
[   77.773385][ T4908] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e
[   77.773396][ T4908] RBP: 00007fe3469d7090 R08: 0000000000000000 R09: 0000000000000000
[   77.773408][ T4908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   77.773431][ T4908] R13: 0000000000000000 R14: 00007fe348595fa0 R15: 00007ffec95ac078
[   77.773448][ T4908]  </TASK>
[   78.054036][ T4919] loop5: detected capacity change from 0 to 1024
[   78.083378][ T4919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.121387][ T4922] bridge0: entered promiscuous mode
[   78.122751][ T4919] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.126738][ T4922] vlan3: entered promiscuous mode
[   78.156213][ T4919] EXT4-fs error (device loop5): ext4_map_blocks:709: inode #15: block 1: comm syz.5.508: lblock 1 mapped to illegal pblock 1 (length 1)
[   78.236506][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.342275][ T4930] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   78.719264][ T4949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'.
[   78.789954][ T4951] validate_nla: 2 callbacks suppressed
[   78.789980][ T4951] netlink: 'syz.4.519': attribute type 3 has an invalid length.
[   78.864830][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.044423][ T4963] netlink: 52 bytes leftover after parsing attributes in process `syz.0.522'.
[   79.192208][ T4969] loop3: detected capacity change from 0 to 512
[   79.234497][ T4969] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.527: bg 0: block 35: padding at end of block bitmap is not set
[   79.273240][ T4969] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   79.282596][ T4969] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.527: invalid indirect mapped block 4294967295 (level 1)
[   79.297087][ T4969] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.527: invalid indirect mapped block 4294967295 (level 2)
[   79.315362][ T4973] loop1: detected capacity change from 0 to 1024
[   79.322188][ T4969] EXT4-fs (loop3): 1 truncate cleaned up
[   79.328610][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.341547][ T4973] EXT4-fs: Ignoring removed nobh option
[   79.347365][ T4973] EXT4-fs: Ignoring removed bh option
[   79.374128][ T4973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.518402][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.622361][ T4986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.532'.
[   79.660845][ T4988] loop1: detected capacity change from 0 to 512
[   79.668232][ T4988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.680826][ T4988] EXT4-fs (loop1): 1 truncate cleaned up
[   79.691032][ T4988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.697071][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.756274][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.938804][ T5005] loop1: detected capacity change from 0 to 1024
[   79.956021][ T5005] EXT4-fs: Ignoring removed nobh option
[   79.962284][ T5005] EXT4-fs: Ignoring removed bh option
[   80.007668][ T5005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.041983][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.109793][ T5017] netlink: 32 bytes leftover after parsing attributes in process `syz.5.544'.
[   80.179096][ T5020] loop1: detected capacity change from 0 to 164
[   80.224610][ T5026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.546'.
[   80.234177][ T5026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.546'.
[   80.252529][ T5025] loop3: detected capacity change from 0 to 512
[   80.271536][ T5025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   80.285688][ T5025] EXT4-fs (loop3): 1 truncate cleaned up
[   80.294774][ T5025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.394570][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.455935][ T5038] loop4: detected capacity change from 0 to 512
[   80.466700][ T5040] FAULT_INJECTION: forcing a failure.
[   80.466700][ T5040] name failslab, interval 1, probability 0, space 0, times 0
[   80.479552][ T5040] CPU: 0 UID: 0 PID: 5040 Comm: syz.3.550 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   80.479590][ T5040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   80.479602][ T5040] Call Trace:
[   80.479607][ T5040]  <TASK>
[   80.479614][ T5040]  __dump_stack+0x1d/0x30
[   80.479634][ T5040]  dump_stack_lvl+0xe8/0x140
[   80.479729][ T5040]  dump_stack+0x15/0x1b
[   80.479750][ T5040]  should_fail_ex+0x265/0x280
[   80.479788][ T5040]  should_failslab+0x8c/0xb0
[   80.479821][ T5040]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   80.479886][ T5040]  ? sidtab_sid2str_get+0xa0/0x130
[   80.479944][ T5040]  kmemdup_noprof+0x2b/0x70
[   80.479966][ T5040]  sidtab_sid2str_get+0xa0/0x130
[   80.480006][ T5040]  security_sid_to_context_core+0x1eb/0x2e0
[   80.480103][ T5040]  security_sid_to_context+0x27/0x40
[   80.480130][ T5040]  selinux_lsmprop_to_secctx+0x67/0xf0
[   80.480164][ T5040]  security_lsmprop_to_secctx+0x43/0x80
[   80.480317][ T5040]  audit_log_task_context+0x77/0x190
[   80.480413][ T5040]  audit_log_task+0xf4/0x250
[   80.480440][ T5040]  audit_seccomp+0x61/0x100
[   80.480462][ T5040]  ? __seccomp_filter+0x68c/0x10d0
[   80.480488][ T5040]  __seccomp_filter+0x69d/0x10d0
[   80.480513][ T5040]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   80.480579][ T5040]  ? vfs_write+0x75e/0x8d0
[   80.480615][ T5040]  __secure_computing+0x82/0x150
[   80.480636][ T5040]  syscall_trace_enter+0xcf/0x1e0
[   80.480667][ T5040]  do_syscall_64+0xaa/0x1a0
[   80.480689][ T5040]  ? clear_bhb_loop+0x25/0x80
[   80.480712][ T5040]  ? clear_bhb_loop+0x25/0x80
[   80.480734][ T5040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.480797][ T5040] RIP: 0033:0x7fd1c219e969
[   80.480811][ T5040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.480827][ T5040] RSP: 002b:00007fd1c0807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[   80.480849][ T5040] RAX: ffffffffffffffda RBX: 00007fd1c23c5fa0 RCX: 00007fd1c219e969
[   80.480863][ T5040] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003
[   80.480875][ T5040] RBP: 00007fd1c0807090 R08: 0000200000000080 R09: 0000000000000000
[   80.480886][ T5040] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.480933][ T5040] R13: 0000000000000000 R14: 00007fd1c23c5fa0 R15: 00007ffd6cc6fea8
[   80.480952][ T5040]  </TASK>
[   80.728799][ T5038] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.552: bg 0: block 35: padding at end of block bitmap is not set
[   80.764472][ T5040] loop3: detected capacity change from 0 to 512
[   80.791911][ T5040] EXT4-fs: dax option not supported
[   80.804133][ T5038] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   80.834834][ T5043] loop5: detected capacity change from 0 to 1024
[   80.852494][ T5038] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.552: invalid indirect mapped block 4294967295 (level 1)
[   80.874375][ T5043] EXT4-fs: Ignoring removed nobh option
[   80.880101][ T5043] EXT4-fs: Ignoring removed bh option
[   80.885837][ T5038] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.552: invalid indirect mapped block 4294967295 (level 2)
[   80.904638][ T5048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'.
[   80.915854][ T5043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.929936][ T5038] EXT4-fs (loop4): 1 truncate cleaned up
[   80.936547][ T5048] FAULT_INJECTION: forcing a failure.
[   80.936547][ T5048] name failslab, interval 1, probability 0, space 0, times 0
[   80.937055][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.949665][ T5048] CPU: 0 UID: 0 PID: 5048 Comm: syz.1.555 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   80.949703][ T5048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   80.949720][ T5048] Call Trace:
[   80.949727][ T5048]  <TASK>
[   80.949736][ T5048]  __dump_stack+0x1d/0x30
[   80.949774][ T5048]  dump_stack_lvl+0xe8/0x140
[   80.949862][ T5048]  dump_stack+0x15/0x1b
[   80.949884][ T5048]  should_fail_ex+0x265/0x280
[   80.949925][ T5048]  should_failslab+0x8c/0xb0
[   80.949962][ T5048]  kmem_cache_alloc_node_noprof+0x57/0x320
[   80.950012][ T5048]  ? __alloc_skb+0x101/0x320
[   80.950052][ T5048]  __alloc_skb+0x101/0x320
[   80.950091][ T5048]  netlink_alloc_large_skb+0xba/0xf0
[   80.950158][ T5048]  netlink_sendmsg+0x3cf/0x6b0
[   80.950202][ T5048]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.950244][ T5048]  __sock_sendmsg+0x142/0x180
[   80.950327][ T5048]  ____sys_sendmsg+0x31e/0x4e0
[   80.950434][ T5048]  ___sys_sendmsg+0x17b/0x1d0
[   80.950473][ T5048]  __x64_sys_sendmsg+0xd4/0x160
[   80.950503][ T5048]  x64_sys_call+0x2999/0x2fb0
[   80.950530][ T5048]  do_syscall_64+0xd0/0x1a0
[   80.950596][ T5048]  ? clear_bhb_loop+0x25/0x80
[   80.950623][ T5048]  ? clear_bhb_loop+0x25/0x80
[   80.950650][ T5048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.950677][ T5048] RIP: 0033:0x7fe34836e969
[   80.950749][ T5048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.950844][ T5048] RSP: 002b:00007fe3469d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.950868][ T5048] RAX: ffffffffffffffda RBX: 00007fe348595fa0 RCX: 00007fe34836e969
[   80.950969][ T5048] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[   80.950984][ T5048] RBP: 00007fe3469d7090 R08: 0000000000000000 R09: 0000000000000000
[   80.951000][ T5048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.951015][ T5048] R13: 0000000000000000 R14: 00007fe348595fa0 R15: 00007ffec95ac078
[   80.951037][ T5048]  </TASK>
[   80.960862][ T5052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.556'.
[   81.183265][   T29] kauditd_printk_skb: 91 callbacks suppressed
[   81.183282][   T29] audit: type=1326 audit(1746916402.865:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   81.214255][   T29] audit: type=1326 audit(1746916402.876:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   81.240627][   T29] audit: type=1326 audit(1746916402.876:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   81.264730][   T29] audit: type=1326 audit(1746916402.876:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5053 comm="syz.0.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   81.302120][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.363900][ T5062] netlink: 'syz.3.561': attribute type 3 has an invalid length.
[   81.506526][ T5075] netlink: 'syz.5.564': attribute type 3 has an invalid length.
[   81.689199][ T5084] netlink: 48 bytes leftover after parsing attributes in process `syz.5.567'.
[   81.698565][   T29] audit: type=1400 audit(1746916403.506:964): avc:  denied  { bind } for  pid=5083 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   81.717982][   T29] audit: type=1400 audit(1746916403.506:965): avc:  denied  { name_bind } for  pid=5083 comm="syz.5.567" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   81.739299][   T29] audit: type=1400 audit(1746916403.506:966): avc:  denied  { node_bind } for  pid=5083 comm="syz.5.567" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   81.835438][ T5088] loop5: detected capacity change from 0 to 512
[   81.854310][ T5088] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.569: bg 0: block 35: padding at end of block bitmap is not set
[   81.870318][ T5088] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   81.924512][ T5088] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.569: invalid indirect mapped block 4294967295 (level 1)
[   81.959369][ T5088] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.569: invalid indirect mapped block 4294967295 (level 2)
[   81.977195][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.997116][ T5091] loop1: detected capacity change from 0 to 512
[   82.003731][ T5093] loop4: detected capacity change from 0 to 512
[   82.004184][ T5093] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.017939][ T5091] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   82.018705][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   82.039192][ T5088] EXT4-fs (loop5): 1 truncate cleaned up
[   82.045456][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.048175][ T5096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.572'.
[   82.068908][ T5091] EXT4-fs (loop1): 1 truncate cleaned up
[   82.075291][ T5093] EXT4-fs (loop4): 1 truncate cleaned up
[   82.082765][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.108610][ T5091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.255363][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.274285][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.291395][   T29] audit: type=1400 audit(1746916404.135:967): avc:  denied  { create } for  pid=5104 comm="syz.5.575" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   82.326958][   T29] audit: type=1400 audit(1746916404.177:968): avc:  denied  { create } for  pid=5104 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   82.347656][   T29] audit: type=1400 audit(1746916404.177:969): avc:  denied  { ioctl } for  pid=5104 comm="syz.5.575" path="socket:[10391]" dev="sockfs" ino=10391 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   82.404683][ T5110] loop1: detected capacity change from 0 to 1024
[   82.430568][ T5110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   82.433045][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.450497][ T5113] loop5: detected capacity change from 0 to 2048
[   82.457998][ T5110] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   82.475986][ T5110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[   82.485435][ T5110] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1)
[   82.500839][ T5110] EXT4-fs (loop1): Remounting filesystem read-only
[   82.507695][ T5110] EXT4-fs (loop1): 1 orphan inode deleted
[   82.514112][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.527807][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.528790][ T5123] FAULT_INJECTION: forcing a failure.
[   82.528790][ T5123] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   82.550009][ T5123] CPU: 0 UID: 0 PID: 5123 Comm: syz.0.580 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   82.550039][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   82.550052][ T5123] Call Trace:
[   82.550059][ T5123]  <TASK>
[   82.550068][ T5123]  __dump_stack+0x1d/0x30
[   82.550171][ T5123]  dump_stack_lvl+0xe8/0x140
[   82.550239][ T5123]  dump_stack+0x15/0x1b
[   82.550270][ T5123]  should_fail_ex+0x265/0x280
[   82.550308][ T5123]  should_fail+0xb/0x20
[   82.550399][ T5123]  should_fail_usercopy+0x1a/0x20
[   82.550421][ T5123]  _copy_to_user+0x20/0xa0
[   82.550447][ T5123]  simple_read_from_buffer+0xb5/0x130
[   82.550476][ T5123]  proc_fail_nth_read+0x100/0x140
[   82.550561][ T5123]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   82.550709][ T5123]  vfs_read+0x19d/0x6f0
[   82.550736][ T5123]  ? __rcu_read_unlock+0x4f/0x70
[   82.550761][ T5123]  ? __fget_files+0x184/0x1c0
[   82.550796][ T5123]  ksys_read+0xda/0x1a0
[   82.550858][ T5123]  __x64_sys_read+0x40/0x50
[   82.550887][ T5123]  x64_sys_call+0x2d77/0x2fb0
[   82.550971][ T5123]  do_syscall_64+0xd0/0x1a0
[   82.550994][ T5123]  ? clear_bhb_loop+0x25/0x80
[   82.551017][ T5123]  ? clear_bhb_loop+0x25/0x80
[   82.551049][ T5123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.551071][ T5123] RIP: 0033:0x7f713d77d37c
[   82.551087][ T5123] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   82.551105][ T5123] RSP: 002b:00007f713bde7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   82.551125][ T5123] RAX: ffffffffffffffda RBX: 00007f713d9a5fa0 RCX: 00007f713d77d37c
[   82.551212][ T5123] RDX: 000000000000000f RSI: 00007f713bde70a0 RDI: 0000000000000003
[   82.551281][ T5123] RBP: 00007f713bde7090 R08: 0000000000000000 R09: 0000000000000000
[   82.551347][ T5123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.551361][ T5123] R13: 0000000000000000 R14: 00007f713d9a5fa0 R15: 00007fff0e363eb8
[   82.551384][ T5123]  </TASK>
[   82.758113][ T5113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.784459][ T5128] netlink: 'syz.0.582': attribute type 3 has an invalid length.
[   82.794067][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.579'.
[   82.807862][ T5110] loop1: detected capacity change from 0 to 512
[   82.909240][ T5110] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1
[   82.921784][ T5135] netlink: 'syz.4.583': attribute type 3 has an invalid length.
[   82.980981][ T5138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.584'.
[   82.997656][ T5110] EXT4-fs (loop1): 1 truncate cleaned up
[   83.022798][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.035651][ T5110] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.047234][ T5110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.225052][ T5156] loop3: detected capacity change from 0 to 164
[   83.234660][ T5154] FAULT_INJECTION: forcing a failure.
[   83.234660][ T5154] name failslab, interval 1, probability 0, space 0, times 0
[   83.247597][ T5154] CPU: 0 UID: 0 PID: 5154 Comm: syz.4.592 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   83.247641][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   83.247657][ T5154] Call Trace:
[   83.247682][ T5154]  <TASK>
[   83.247691][ T5154]  __dump_stack+0x1d/0x30
[   83.247711][ T5154]  dump_stack_lvl+0xe8/0x140
[   83.247729][ T5154]  dump_stack+0x15/0x1b
[   83.247744][ T5154]  should_fail_ex+0x265/0x280
[   83.247786][ T5154]  should_failslab+0x8c/0xb0
[   83.247830][ T5154]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   83.247851][ T5154]  ? sidtab_sid2str_get+0xa0/0x130
[   83.247880][ T5154]  ? skb_put+0xa9/0xf0
[   83.247991][ T5154]  kmemdup_noprof+0x2b/0x70
[   83.248011][ T5154]  sidtab_sid2str_get+0xa0/0x130
[   83.248047][ T5154]  security_sid_to_context_core+0x1eb/0x2e0
[   83.248133][ T5154]  security_sid_to_context+0x27/0x40
[   83.248166][ T5154]  avc_audit_post_callback+0x9d/0x520
[   83.248218][ T5154]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   83.248304][ T5154]  common_lsm_audit+0x1b8/0x230
[   83.248327][ T5154]  ? __pfx_avc_audit_post_callback+0x10/0x10
[   83.248367][ T5154]  slow_avc_audit+0x104/0x140
[   83.248449][ T5154]  avc_has_perm+0x128/0x150
[   83.248492][ T5154]  selinux_uring_allowed+0x74/0x80
[   83.248588][ T5154]  security_uring_allowed+0x2c/0x60
[   83.248625][ T5154]  __se_sys_io_uring_setup+0xe1/0x210
[   83.248715][ T5154]  ? __bpf_trace_sys_enter+0x10/0x30
[   83.248742][ T5154]  ? __traceiter_sys_enter+0x5c/0x80
[   83.248766][ T5154]  ? trace_sys_enter+0xd0/0x110
[   83.248872][ T5154]  __x64_sys_io_uring_setup+0x31/0x40
[   83.248911][ T5154]  x64_sys_call+0x184b/0x2fb0
[   83.248937][ T5154]  do_syscall_64+0xd0/0x1a0
[   83.248962][ T5154]  ? clear_bhb_loop+0x25/0x80
[   83.249092][ T5154]  ? clear_bhb_loop+0x25/0x80
[   83.249112][ T5154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.249139][ T5154] RIP: 0033:0x7f4b8bcae969
[   83.249153][ T5154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.249170][ T5154] RSP: 002b:00007f4b8a316fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[   83.249267][ T5154] RAX: ffffffffffffffda RBX: 00007f4b8bed5fa0 RCX: 00007f4b8bcae969
[   83.249278][ T5154] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c
[   83.249292][ T5154] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000
[   83.249343][ T5154] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   83.249354][ T5154] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000
[   83.249375][ T5154]  </TASK>
[   83.586691][ T5161] netlink: 'syz.0.596': attribute type 3 has an invalid length.
[   83.591186][ T4414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.887303][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.604'.
[   83.887365][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.604'.
[   83.895729][ T5184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'.
[   83.937343][ T5190] netlink: 'syz.3.608': attribute type 3 has an invalid length.
[   83.966438][ T5192] loop1: detected capacity change from 0 to 512
[   83.970149][ T5192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.971209][ T5192] EXT4-fs (loop1): 1 truncate cleaned up
[   83.971665][ T5192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.041342][ T5200] tipc: Started in network mode
[   84.041373][ T5200] tipc: Node identity ac14140f, cluster identity 4711
[   84.041473][ T5200] tipc: New replicast peer: 255.255.255.255
[   84.041577][ T5200] tipc: Enabled bearer <udp:syz2>, priority 10
[   84.058614][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.089403][ T5198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'.
[   84.142092][ T5204] tmpfs: Unknown parameter 'contextùQ|!‡v½óv½Ã['
[   84.254239][ T5217] netlink: 3 bytes leftover after parsing attributes in process `syz.4.615'.
[   84.276625][ T5200] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.285830][ T5200] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.295021][ T5200] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.304220][ T5200] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.310754][ T5215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'.
[   84.324304][ T5220] syz.4.615 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   84.336732][ T5220] xt_CT: You must specify a L4 protocol and not use inversions on it
[   84.359508][ T5217] 0ªX¹¦À: renamed from caif0
[   84.433175][ T5217] 0ªX¹¦À: entered allmulticast mode
[   84.439586][ T5217] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[   84.468056][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[   84.621627][ T5241] loop3: detected capacity change from 0 to 512
[   84.643300][ T5241] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   84.669579][ T5241] EXT4-fs (loop3): 1 truncate cleaned up
[   84.676946][ T5235] loop1: detected capacity change from 0 to 4096
[   84.684462][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.708730][ T5252] netlink: 'syz.0.624': attribute type 32 has an invalid length.
[   84.717837][ T5252] FAULT_INJECTION: forcing a failure.
[   84.717837][ T5252] name failslab, interval 1, probability 0, space 0, times 0
[   84.730696][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: syz.0.624 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   84.730727][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   84.730740][ T5252] Call Trace:
[   84.730773][ T5252]  <TASK>
[   84.730781][ T5252]  __dump_stack+0x1d/0x30
[   84.730802][ T5252]  dump_stack_lvl+0xe8/0x140
[   84.730822][ T5252]  dump_stack+0x15/0x1b
[   84.730862][ T5252]  should_fail_ex+0x265/0x280
[   84.730898][ T5252]  should_failslab+0x8c/0xb0
[   84.730930][ T5252]  kmem_cache_alloc_noprof+0x50/0x310
[   84.730977][ T5252]  ? alloc_empty_file+0x76/0x200
[   84.731299][ T5252]  alloc_empty_file+0x76/0x200
[   84.731362][ T5252]  alloc_file_pseudo+0xc6/0x160
[   84.731406][ T5252]  anon_inode_getfile+0xa0/0x120
[   84.731446][ T5252]  bpf_link_prime+0xfc/0x1d0
[   84.731550][ T5252]  bpf_xdp_link_attach+0x204/0x5c0
[   84.731601][ T5252]  link_create+0x4fd/0x6c0
[   84.731637][ T5252]  __sys_bpf+0x4c7/0x790
[   84.731681][ T5252]  __x64_sys_bpf+0x41/0x50
[   84.731731][ T5252]  x64_sys_call+0x2478/0x2fb0
[   84.731770][ T5252]  do_syscall_64+0xd0/0x1a0
[   84.731801][ T5252]  ? clear_bhb_loop+0x25/0x80
[   84.731830][ T5252]  ? clear_bhb_loop+0x25/0x80
[   84.731870][ T5252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   84.731975][ T5252] RIP: 0033:0x7f713d77e969
[   84.731993][ T5252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   84.732023][ T5252] RSP: 002b:00007f713bde7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   84.732045][ T5252] RAX: ffffffffffffffda RBX: 00007f713d9a5fa0 RCX: 00007f713d77e969
[   84.732065][ T5252] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[   84.732076][ T5252] RBP: 00007f713bde7090 R08: 0000000000000000 R09: 0000000000000000
[   84.732101][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   84.732112][ T5252] R13: 0000000000000000 R14: 00007f713d9a5fa0 R15: 00007fff0e363eb8
[   84.732131][ T5252]  </TASK>
[   84.749935][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.950486][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.042656][ T5258] netlink: 'syz.3.627': attribute type 3 has an invalid length.
[   85.090584][ T5260] netlink: 'syz.5.629': attribute type 32 has an invalid length.
[   85.116165][ T5205] tipc: Node number set to 2886997007
[   85.141500][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.211604][ T5278] openvswitch: netlink: Message has 6 unknown bytes.
[   85.278734][ T5283] hub 9-0:1.0: USB hub found
[   85.286592][ T5288] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[   85.294982][ T5283] hub 9-0:1.0: 8 ports detected
[   85.349669][ T5293] netlink: 'syz.4.640': attribute type 3 has an invalid length.
[   85.427760][ T5297] loop4: detected capacity change from 0 to 1024
[   85.455915][ T5297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.465026][ T5297] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   85.511674][ T5300] loop1: detected capacity change from 0 to 1024
[   85.519043][ T5300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.539079][ T5300] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[   85.550115][ T5300] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   85.564195][ T5300] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   85.572353][ T5300] EXT4-fs (loop1): orphan cleanup on readonly fs
[   85.580524][ T5300] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.644: Inode bitmap for bg 0 marked uninitialized
[   85.594684][ T5300] EXT4-fs (loop1): Remounting filesystem read-only
[   85.601973][ T5300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.619723][ T5297] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   85.633054][ T5297] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   85.651934][ T5297] EXT4-fs (loop4): orphan cleanup on readonly fs
[   85.660298][ T5297] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.642: Inode bitmap for bg 0 marked uninitialized
[   85.702232][ T5297] EXT4-fs (loop4): Remounting filesystem read-only
[   85.709541][ T5297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   85.731888][ T5300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.759543][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.767998][ T5297] FAULT_INJECTION: forcing a failure.
[   85.767998][ T5297] name failslab, interval 1, probability 0, space 0, times 0
[   85.780719][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: syz.4.642 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   85.780808][ T5297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   85.780824][ T5297] Call Trace:
[   85.780833][ T5297]  <TASK>
[   85.780850][ T5297]  __dump_stack+0x1d/0x30
[   85.780998][ T5297]  dump_stack_lvl+0xe8/0x140
[   85.781079][ T5297]  dump_stack+0x15/0x1b
[   85.781102][ T5297]  should_fail_ex+0x265/0x280
[   85.781145][ T5297]  should_failslab+0x8c/0xb0
[   85.781190][ T5297]  kmem_cache_alloc_node_noprof+0x57/0x320
[   85.781333][ T5297]  ? __alloc_skb+0x101/0x320
[   85.781430][ T5297]  __alloc_skb+0x101/0x320
[   85.781471][ T5297]  netlink_alloc_large_skb+0xba/0xf0
[   85.781516][ T5297]  netlink_sendmsg+0x3cf/0x6b0
[   85.781703][ T5297]  ? __pfx_netlink_sendmsg+0x10/0x10
[   85.781757][ T5297]  __sock_sendmsg+0x142/0x180
[   85.781830][ T5297]  ____sys_sendmsg+0x31e/0x4e0
[   85.781871][ T5297]  ___sys_sendmsg+0x17b/0x1d0
[   85.781917][ T5297]  __x64_sys_sendmsg+0xd4/0x160
[   85.781949][ T5297]  x64_sys_call+0x2999/0x2fb0
[   85.781978][ T5297]  do_syscall_64+0xd0/0x1a0
[   85.782066][ T5297]  ? clear_bhb_loop+0x25/0x80
[   85.782093][ T5297]  ? clear_bhb_loop+0x25/0x80
[   85.782121][ T5297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.782148][ T5297] RIP: 0033:0x7f4b8bcae969
[   85.782247][ T5297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.782273][ T5297] RSP: 002b:00007f4b8a317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.782297][ T5297] RAX: ffffffffffffffda RBX: 00007f4b8bed5fa0 RCX: 00007f4b8bcae969
[   85.782367][ T5297] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008
[   85.782384][ T5297] RBP: 00007f4b8a317090 R08: 0000000000000000 R09: 0000000000000000
[   85.782399][ T5297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.782414][ T5297] R13: 0000000000000000 R14: 00007f4b8bed5fa0 R15: 00007ffe80f113e8
[   85.782439][ T5297]  </TASK>
[   86.026453][ T5297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.043350][ T5297] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.054848][ T5309] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.074921][ T5309] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.086062][   T29] kauditd_printk_skb: 99 callbacks suppressed
[   86.086077][   T29] audit: type=1326 audit(1746916637.116:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.123084][   T29] audit: type=1326 audit(1746916637.116:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.146848][   T29] audit: type=1326 audit(1746916637.116:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.170296][   T29] audit: type=1400 audit(1746916637.127:1066): avc:  denied  { sqpoll } for  pid=5314 comm="syz.3.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   86.189602][   T29] audit: type=1326 audit(1746916637.127:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.213252][   T29] audit: type=1326 audit(1746916637.127:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5314 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.240547][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.244143][   T29] audit: type=1326 audit(1746916637.295:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.287037][   T29] audit: type=1326 audit(1746916637.316:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.310473][   T29] audit: type=1326 audit(1746916637.316:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c219e969 code=0x7ffc0000
[   86.333923][   T29] audit: type=1326 audit(1746916637.316:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.3.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1c21a0887 code=0x7ffc0000
[   86.372537][ T5328] netlink: 'syz.1.653': attribute type 3 has an invalid length.
[   86.420489][ T5335] vxcan0: tx drop: invalid da for name 0x0000000000000004
[   86.431617][ T5336] 9pnet_fd: Insufficient options for proto=fd
[   86.477392][ T5207] IPVS: starting estimator thread 0...
[   86.489095][ T5331] Falling back ldisc for ttyS3.
[   86.564621][ T5340] IPVS: using max 2352 ests per chain, 117600 per kthread
[   87.361856][ T5363] openvswitch: netlink: Message has 6 unknown bytes.
[   87.397689][ T5347] rtc_cmos 00:00: Alarms can be up to one day in the future
[   87.429016][ T5366] __nla_validate_parse: 6 callbacks suppressed
[   87.429036][ T5366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'.
[   87.477125][ T5369] netlink: 'syz.5.666': attribute type 3 has an invalid length.
[   87.521368][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[   87.529108][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[   87.536863][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[   87.544628][ T3394] rtc_cmos 00:00: Alarms can be up to one day in the future
[   87.551975][ T3394] rtc rtc0: __rtc_set_alarm: err=-22
[   87.559938][ T5373] FAULT_INJECTION: forcing a failure.
[   87.559938][ T5373] name failslab, interval 1, probability 0, space 0, times 0
[   87.572817][ T5373] CPU: 1 UID: 0 PID: 5373 Comm: syz.3.669 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   87.572850][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   87.572865][ T5373] Call Trace:
[   87.572872][ T5373]  <TASK>
[   87.572880][ T5373]  __dump_stack+0x1d/0x30
[   87.572921][ T5373]  dump_stack_lvl+0xe8/0x140
[   87.572942][ T5373]  dump_stack+0x15/0x1b
[   87.572957][ T5373]  should_fail_ex+0x265/0x280
[   87.573060][ T5373]  should_failslab+0x8c/0xb0
[   87.573089][ T5373]  kmem_cache_alloc_noprof+0x50/0x310
[   87.573203][ T5373]  ? dup_fd+0x3a/0x540
[   87.573230][ T5373]  dup_fd+0x3a/0x540
[   87.573256][ T5373]  ? _raw_spin_unlock+0x26/0x50
[   87.573361][ T5373]  ksys_unshare+0x346/0x6d0
[   87.573403][ T5373]  ? ksys_write+0x16e/0x1a0
[   87.573472][ T5373]  __x64_sys_unshare+0x1f/0x30
[   87.573569][ T5373]  x64_sys_call+0x2d4b/0x2fb0
[   87.573596][ T5373]  do_syscall_64+0xd0/0x1a0
[   87.573618][ T5373]  ? clear_bhb_loop+0x25/0x80
[   87.573640][ T5373]  ? clear_bhb_loop+0x25/0x80
[   87.573669][ T5373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.573694][ T5373] RIP: 0033:0x7fd1c219e969
[   87.573712][ T5373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.573812][ T5373] RSP: 002b:00007fd1c0807038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   87.573835][ T5373] RAX: ffffffffffffffda RBX: 00007fd1c23c5fa0 RCX: 00007fd1c219e969
[   87.573849][ T5373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400
[   87.573864][ T5373] RBP: 00007fd1c0807090 R08: 0000000000000000 R09: 0000000000000000
[   87.573939][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   87.573951][ T5373] R13: 0000000000000000 R14: 00007fd1c23c5fa0 R15: 00007ffd6cc6fea8
[   87.573969][ T5373]  </TASK>
[   87.980655][ T5395] netlink: 'syz.4.675': attribute type 3 has an invalid length.
[   87.999560][ T5396] FAULT_INJECTION: forcing a failure.
[   87.999560][ T5396] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.012732][ T5396] CPU: 1 UID: 0 PID: 5396 Comm: syz.1.674 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   88.012781][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   88.012796][ T5396] Call Trace:
[   88.012804][ T5396]  <TASK>
[   88.012813][ T5396]  __dump_stack+0x1d/0x30
[   88.012835][ T5396]  dump_stack_lvl+0xe8/0x140
[   88.012854][ T5396]  dump_stack+0x15/0x1b
[   88.012870][ T5396]  should_fail_ex+0x265/0x280
[   88.012915][ T5396]  should_fail+0xb/0x20
[   88.012953][ T5396]  should_fail_usercopy+0x1a/0x20
[   88.012972][ T5396]  strncpy_from_user+0x25/0x230
[   88.012997][ T5396]  ? kmem_cache_alloc_noprof+0x186/0x310
[   88.013031][ T5396]  ? getname_flags+0x80/0x3b0
[   88.013086][ T5396]  getname_flags+0xae/0x3b0
[   88.013115][ T5396]  path_removexattrat+0xf5/0x570
[   88.013159][ T5396]  __x64_sys_removexattr+0x38/0x50
[   88.013243][ T5396]  x64_sys_call+0x2c7a/0x2fb0
[   88.013264][ T5396]  do_syscall_64+0xd0/0x1a0
[   88.013307][ T5396]  ? clear_bhb_loop+0x25/0x80
[   88.013328][ T5396]  ? clear_bhb_loop+0x25/0x80
[   88.013349][ T5396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.013370][ T5396] RIP: 0033:0x7fe34836e969
[   88.013403][ T5396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.013429][ T5396] RSP: 002b:00007fe346951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
[   88.013449][ T5396] RAX: ffffffffffffffda RBX: 00007fe348596080 RCX: 00007fe34836e969
[   88.013461][ T5396] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200
[   88.013538][ T5396] RBP: 00007fe346951090 R08: 0000000000000000 R09: 0000000000000000
[   88.013550][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.013561][ T5396] R13: 0000000000000000 R14: 00007fe348596080 R15: 00007ffec95ac078
[   88.013610][ T5396]  </TASK>
[   88.254100][ T5399] sch_fq: defrate 0 ignored.
[   88.309631][ T5401] random: crng reseeded on system resumption
[   88.416364][ T5401] loop4: detected capacity change from 0 to 1024
[   88.433386][ T5401] ext4: Bad value for 'debug_want_extra_isize'
[   88.467850][ T5411] loop1: detected capacity change from 0 to 1024
[   88.475099][ T5411] EXT4-fs: dax option not supported
[   88.486001][ T5411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.679'.
[   88.706348][ T5422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.682'.
[   88.716174][ T5424] loop5: detected capacity change from 0 to 512
[   88.728610][ T5424] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   88.740736][ T5424] EXT4-fs (loop5): 1 truncate cleaned up
[   88.795283][ T5430] openvswitch: netlink: Message has 6 unknown bytes.
[   88.825312][ T5432] netlink: 'syz.5.687': attribute type 3 has an invalid length.
[   88.875539][ T5438] capability: warning: `syz.5.690' uses deprecated v2 capabilities in a way that may be insecure
[   88.951345][ T5442] netlink: 'syz.5.692': attribute type 3 has an invalid length.
[   89.301733][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'.
[   89.509035][ T5462] loop3: detected capacity change from 0 to 512
[   89.518988][ T5462] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.701: bg 0: block 35: padding at end of block bitmap is not set
[   89.533742][ T5462] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   89.542910][ T5462] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.701: invalid indirect mapped block 4294967295 (level 1)
[   89.557262][ T5462] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.701: invalid indirect mapped block 4294967295 (level 2)
[   89.571661][ T5462] EXT4-fs (loop3): 1 truncate cleaned up
[   89.836735][ T5469] FAULT_INJECTION: forcing a failure.
[   89.836735][ T5469] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   89.850212][ T5469] CPU: 1 UID: 0 PID: 5469 Comm: syz.5.702 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   89.850245][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   89.850257][ T5469] Call Trace:
[   89.850263][ T5469]  <TASK>
[   89.850273][ T5469]  __dump_stack+0x1d/0x30
[   89.850297][ T5469]  dump_stack_lvl+0xe8/0x140
[   89.850320][ T5469]  dump_stack+0x15/0x1b
[   89.850340][ T5469]  should_fail_ex+0x265/0x280
[   89.850444][ T5469]  should_fail+0xb/0x20
[   89.850479][ T5469]  should_fail_usercopy+0x1a/0x20
[   89.850509][ T5469]  _copy_from_user+0x1c/0xb0
[   89.850532][ T5469]  get_itimerspec64+0xf9/0x1a0
[   89.850639][ T5469]  __x64_sys_timer_settime+0x9a/0x160
[   89.850671][ T5469]  x64_sys_call+0x29e6/0x2fb0
[   89.850697][ T5469]  do_syscall_64+0xd0/0x1a0
[   89.850724][ T5469]  ? clear_bhb_loop+0x25/0x80
[   89.850747][ T5469]  ? clear_bhb_loop+0x25/0x80
[   89.850795][ T5469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.850825][ T5469] RIP: 0033:0x7f2fc617e969
[   89.850918][ T5469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.850936][ T5469] RSP: 002b:00007f2fc47e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
[   89.850953][ T5469] RAX: ffffffffffffffda RBX: 00007f2fc63a5fa0 RCX: 00007f2fc617e969
[   89.850967][ T5469] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000
[   89.850982][ T5469] RBP: 00007f2fc47e7090 R08: 0000000000000000 R09: 0000000000000000
[   89.851020][ T5469] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[   89.851035][ T5469] R13: 0000000000000000 R14: 00007f2fc63a5fa0 R15: 00007ffce7682448
[   89.851057][ T5469]  </TASK>
[   90.435132][ T5477] FAULT_INJECTION: forcing a failure.
[   90.435132][ T5477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.448350][ T5477] CPU: 1 UID: 0 PID: 5477 Comm: syz.4.706 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   90.448379][ T5477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   90.448392][ T5477] Call Trace:
[   90.448466][ T5477]  <TASK>
[   90.448476][ T5477]  __dump_stack+0x1d/0x30
[   90.448501][ T5477]  dump_stack_lvl+0xe8/0x140
[   90.448553][ T5477]  dump_stack+0x15/0x1b
[   90.448648][ T5477]  should_fail_ex+0x265/0x280
[   90.448695][ T5477]  should_fail+0xb/0x20
[   90.448766][ T5477]  should_fail_usercopy+0x1a/0x20
[   90.448785][ T5477]  strncpy_from_user+0x25/0x230
[   90.448882][ T5477]  ? __kmalloc_cache_noprof+0x189/0x320
[   90.448929][ T5477]  __se_sys_memfd_create+0x1ff/0x590
[   90.448956][ T5477]  __x64_sys_memfd_create+0x31/0x40
[   90.449053][ T5477]  x64_sys_call+0x122f/0x2fb0
[   90.449080][ T5477]  do_syscall_64+0xd0/0x1a0
[   90.449128][ T5477]  ? clear_bhb_loop+0x25/0x80
[   90.449151][ T5477]  ? clear_bhb_loop+0x25/0x80
[   90.449172][ T5477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.449225][ T5477] RIP: 0033:0x7f4b8bcae969
[   90.449251][ T5477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.449269][ T5477] RSP: 002b:00007f4b8a316e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   90.449293][ T5477] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f4b8bcae969
[   90.449306][ T5477] RDX: 00007f4b8a316ef0 RSI: 0000000000000000 RDI: 00007f4b8bd31444
[   90.449382][ T5477] RBP: 0000200000000600 R08: 00007f4b8a316bb7 R09: 00007f4b8a316e40
[   90.449397][ T5477] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[   90.449412][ T5477] R13: 00007f4b8a316ef0 R14: 00007f4b8a316eb0 R15: 00002000000002c0
[   90.449437][ T5477]  </TASK>
[   91.087152][ T5490] netlink: 'syz.4.710': attribute type 10 has an invalid length.
[   91.106547][ T5489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'.
[   91.138148][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.210243][ T5490] team0: Port device bond0 added
[   91.327495][ T5494] loop4: detected capacity change from 0 to 512
[   91.357461][ T5494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   91.397054][ T5494] EXT4-fs (loop4): 1 truncate cleaned up
[   91.401587][ T5498] netlink: 'syz.1.714': attribute type 3 has an invalid length.
[   91.423602][ T5497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.713'.
[   91.438762][ T5501] loop5: detected capacity change from 0 to 2048
[   91.506506][   T29] kauditd_printk_skb: 424 callbacks suppressed
[   91.506524][   T29] audit: type=1400 audit(1746916642.806:1497): avc:  denied  { ioctl } for  pid=5507 comm="syz.4.718" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11701 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   91.543171][   T29] audit: type=1326 audit(1746916642.827:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.547277][ T5508] netlink: 'syz.4.718': attribute type 10 has an invalid length.
[   91.566848][   T29] audit: type=1326 audit(1746916642.827:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.598132][   T29] audit: type=1326 audit(1746916642.827:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.621629][   T29] audit: type=1326 audit(1746916642.827:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.645107][   T29] audit: type=1326 audit(1746916642.827:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.668534][   T29] audit: type=1326 audit(1746916642.827:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f713d77e9a3 code=0x7ffc0000
[   91.691783][   T29] audit: type=1326 audit(1746916642.827:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.715270][   T29] audit: type=1326 audit(1746916642.827:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.738744][   T29] audit: type=1326 audit(1746916642.827:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.0.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f713d77e969 code=0x7ffc0000
[   91.762698][ T5508] hsr_slave_0: left promiscuous mode
[   91.770751][ T5508] hsr_slave_1: left promiscuous mode
[   92.191837][ T5533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'.
[   92.271112][ T5533] bond0: (slave bond_slave_1): Releasing backup interface
[   92.368182][ T5538] loop1: detected capacity change from 0 to 1024
[   92.375163][ T5538] EXT4-fs: dax option not supported
[   92.419491][ T5538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.730'.
[   92.590609][ T5545] loop5: detected capacity change from 0 to 512
[   92.615715][ T5545] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   92.649359][ T5545] EXT4-fs (loop5): 1 truncate cleaned up
[   92.873369][ T5564] loop1: detected capacity change from 0 to 164
[   93.019988][ T5568] loop4: detected capacity change from 0 to 1024
[   93.060457][ T5576] netlink: 'syz.0.744': attribute type 3 has an invalid length.
[   93.126483][ T5584] loop4: detected capacity change from 0 to 256
[   93.136722][ T5584] netlink: 96 bytes leftover after parsing attributes in process `syz.4.748'.
[   93.218288][ T5592] loop4: detected capacity change from 0 to 2048
[   93.563283][ T5555] rtc_cmos 00:00: Alarms can be up to one day in the future
[   93.627727][ T5605] xt_hashlimit: max too large, truncated to 1048576
[   93.676103][ T5608] loop3: detected capacity change from 0 to 1024
[   93.772612][ T5619] netlink: 96 bytes leftover after parsing attributes in process `syz.1.761'.
[   93.778491][ T5621] FAULT_INJECTION: forcing a failure.
[   93.778491][ T5621] name failslab, interval 1, probability 0, space 0, times 0
[   93.794535][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz.3.762 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   93.794569][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   93.794646][ T5621] Call Trace:
[   93.794652][ T5621]  <TASK>
[   93.794680][ T5621]  __dump_stack+0x1d/0x30
[   93.794702][ T5621]  dump_stack_lvl+0xe8/0x140
[   93.794731][ T5621]  dump_stack+0x15/0x1b
[   93.794747][ T5621]  should_fail_ex+0x265/0x280
[   93.794828][ T5621]  should_failslab+0x8c/0xb0
[   93.794858][ T5621]  kmem_cache_alloc_noprof+0x50/0x310
[   93.794891][ T5621]  ? security_inode_alloc+0x37/0x100
[   93.795026][ T5621]  security_inode_alloc+0x37/0x100
[   93.795047][ T5621]  inode_init_always_gfp+0x4b7/0x500
[   93.795074][ T5621]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   93.795175][ T5621]  alloc_inode+0x58/0x170
[   93.795198][ T5621]  new_inode+0x1d/0xe0
[   93.795225][ T5621]  shmem_get_inode+0x244/0x750
[   93.795270][ T5621]  __shmem_file_setup+0x122/0x1f0
[   93.795301][ T5621]  shmem_file_setup+0x3b/0x50
[   93.795324][ T5621]  __se_sys_memfd_create+0x2c3/0x590
[   93.795350][ T5621]  __x64_sys_memfd_create+0x31/0x40
[   93.795425][ T5621]  x64_sys_call+0x122f/0x2fb0
[   93.795446][ T5621]  do_syscall_64+0xd0/0x1a0
[   93.795468][ T5621]  ? clear_bhb_loop+0x25/0x80
[   93.795489][ T5621]  ? clear_bhb_loop+0x25/0x80
[   93.795536][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.795556][ T5621] RIP: 0033:0x7fd1c219e969
[   93.795618][ T5621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.795636][ T5621] RSP: 002b:00007fd1c0806e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   93.795655][ T5621] RAX: ffffffffffffffda RBX: 000000000000056d RCX: 00007fd1c219e969
[   93.795667][ T5621] RDX: 00007fd1c0806ef0 RSI: 0000000000000000 RDI: 00007fd1c2221444
[   93.795679][ T5621] RBP: 0000200000000ec0 R08: 00007fd1c0806bb7 R09: 00007fd1c0806e40
[   93.795691][ T5621] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200
[   93.795703][ T5621] R13: 00007fd1c0806ef0 R14: 00007fd1c0806eb0 R15: 0000200000000a80
[   93.795721][ T5621]  </TASK>
[   94.304103][ T5629] netlink: 'syz.4.765': attribute type 3 has an invalid length.
[   94.438195][ T5635] loop1: detected capacity change from 0 to 512
[   94.470369][ T5635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   94.505966][ T5635] EXT4-fs (loop1): 1 truncate cleaned up
[   94.520835][ T5202] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.528541][ T5202] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.536264][ T5202] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.543921][ T5202] rtc_cmos 00:00: Alarms can be up to one day in the future
[   94.551264][ T5202] rtc rtc0: __rtc_set_alarm: err=-22
[   94.581685][ T5645] loop5: detected capacity change from 0 to 512
[   94.603239][ T5599] syz.0.754 (5599) used greatest stack depth: 5952 bytes left
[   94.625151][ T5645] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.631918][ T5651] netlink: 'syz.0.773': attribute type 3 has an invalid length.
[   94.638703][ T5645] EXT4-fs error (device loop5): ext4_readdir:264: inode #12: block 32: comm syz.5.772: path /69/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1
[   94.689877][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.774'.
[   94.715279][ T5659] ==================================================================
[   94.723442][ T5659] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode
[   94.732009][ T5659] 
[   94.734343][ T5659] read-write to 0xffff888106e44628 of 4 bytes by task 369 on cpu 1:
[   94.742336][ T5659]  __writeback_single_inode+0x1e3/0x7c0
[   94.747925][ T5659]  writeback_sb_inodes+0x480/0xa20
[   94.753063][ T5659]  __writeback_inodes_wb+0x94/0x1a0
[   94.758290][ T5659]  wb_writeback+0x266/0x5c0
[   94.762853][ T5659]  wb_workfn+0x4c9/0x910
[   94.767222][ T5659]  process_scheduled_works+0x4cb/0x9d0
[   94.772721][ T5659]  worker_thread+0x582/0x770
[   94.777339][ T5659]  kthread+0x486/0x510
[   94.781422][ T5659]  ret_from_fork+0x4b/0x60
[   94.785934][ T5659]  ret_from_fork_asm+0x1a/0x30
[   94.790828][ T5659] 
[   94.793170][ T5659] read to 0xffff888106e44628 of 4 bytes by task 5659 on cpu 0:
[   94.800810][ T5659]  __mark_inode_dirty+0x18e/0x760
[   94.805878][ T5659]  mark_buffer_dirty+0x133/0x210
[   94.810855][ T5659]  block_page_mkwrite+0x287/0x3d0
[   94.815920][ T5659]  ext4_page_mkwrite+0x76b/0xba0
[   94.820975][ T5659]  do_wp_page+0xe2a/0x23e0
[   94.825421][ T5659]  handle_mm_fault+0x6dc/0x2ae0
[   94.830389][ T5659]  do_user_addr_fault+0x636/0x1090
[   94.835539][ T5659]  exc_page_fault+0x54/0xc0
[   94.840081][ T5659]  asm_exc_page_fault+0x26/0x30
[   94.844946][ T5659] 
[   94.847276][ T5659] value changed: 0x0001002a -> 0x00000020
[   94.853023][ T5659] 
[   94.855351][ T5659] Reported by Kernel Concurrency Sanitizer on:
[   94.861519][ T5659] CPU: 0 UID: 0 PID: 5659 Comm: syz.0.775 Not tainted 6.15.0-rc5-syzkaller-00275-gbec6f00f120e #0 PREEMPT(voluntary) 
[   94.873858][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[   94.883926][ T5659] ==================================================================
[   95.025051][ T5668] loop1: detected capacity change from 0 to 8192