last executing test programs:

4m6.562398028s ago: executing program 4 (id=469):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00')
preadv(r0, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)

4m6.126234368s ago: executing program 4 (id=476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3)
syz_open_procfs(0xffffffffffffffff, 0x0)

4m6.125680608s ago: executing program 4 (id=477):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00020000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000280)=0x400, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$inet(r1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2710, @host}, 0x10)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0x536ac14bb44d4a07)
quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, r8, 0x0)
r9 = dup(r7)
write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x1}}, 0x20)
r10 = socket(0x10, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18ffffe100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c8)

4m5.969747648s ago: executing program 4 (id=481):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000700)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x8}}]}, 0x1, 0x646, &(0x7f0000000000)="$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")
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x80)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x4440c2, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x204010, &(0x7f0000000000), 0x1, 0x640, &(0x7f0000000b00)="$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")
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x7fffffffffffffff, 0x74780cf8, 0x9, 0x2, 0x8, 0x4}}, 0xe0643)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180"], 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x20060, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000200)="49b14f2a097fa67206ce04321b788b717a19021d5d1badf38f5699880d81a596cae6bbc2c8539f805108dbc34ab9619476c3a58cb7a7e98ca7ac7dcf05a6c21a4b88589b4c88f90f072aab5418febe14eb42d43cb89bbd", 0x57, 0x4000880, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0)
r4 = getpid()
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000140), 0x2205080, 0x0)
chroot(&(0x7f0000000280)='./file1\x00')
r5 = syz_pidfd_open(r4, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x6, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x171a, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0xd0}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0xff, &(0x7f0000000600)=""/255, 0x41100, 0x5, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[0x1, r0], &(0x7f0000000580)=[{0x1, 0x4, 0x10}], 0x10, 0x0, @void, @value}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000440)='./file0/file0\x00', r6}, 0x18)
setns(r5, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
accept4(r7, &(0x7f0000000300)=@un=@abs, &(0x7f0000000400)=0x80, 0x80000)

4m5.188229358s ago: executing program 4 (id=489):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x820)

4m4.618271658s ago: executing program 4 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42040000801000081400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000070000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r5, &(0x7f0000000780)={'#! ', '', [{0x20, '#\''}, {}, {0x20, 'kmem_cache_free\x00'}, {0x20, '#*^'}, {0x20, ']/&,/!&)]'}, {0x20, 'tunnel_key\x00'}, {0x20, '#! '}, {0x20, '-['}, {0x20, 'syzkaller\x00'}, {0x20, '\'#'}], 0xa, "0acb77b8735a650116039e8426dba95067b526b0d5d79e95e6386ce9ef1afdc5e5600ad71e22ff2e3d243d05790ce97c63fe3d4e3d6ecf9190fc7643e8312c6056f663197cc953"}, 0x8f)
close_range(r4, 0xffffffffffffffff, 0x0)

4m4.574380598s ago: executing program 32 (id=498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="42040000801000081400350077673200"/28], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000070000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r5, &(0x7f0000000780)={'#! ', '', [{0x20, '#\''}, {}, {0x20, 'kmem_cache_free\x00'}, {0x20, '#*^'}, {0x20, ']/&,/!&)]'}, {0x20, 'tunnel_key\x00'}, {0x20, '#! '}, {0x20, '-['}, {0x20, 'syzkaller\x00'}, {0x20, '\'#'}], 0xa, "0acb77b8735a650116039e8426dba95067b526b0d5d79e95e6386ce9ef1afdc5e5600ad71e22ff2e3d243d05790ce97c63fe3d4e3d6ecf9190fc7643e8312c6056f663197cc953"}, 0x8f)
close_range(r4, 0xffffffffffffffff, 0x0)

4.108853809s ago: executing program 5 (id=5146):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000200))
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80, 0xfffffff8, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, r0, 0x0, 0x1, 0x3, 0x2, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800002000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
pread64(r3, &(0x7f0000000600)=""/228, 0xe4, 0xffffffff00000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r5 = io_uring_setup(0x4e4e, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x8})
pause()
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0)
pause()

3.236638359s ago: executing program 5 (id=5155):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$eJzs0jFoW0cYAOD/vaKoHYJFCLjQpRCTSUmKOiRQiVKMIrzYIaQhQ+dCMhQSyODBSFUyp8nULSGJDcaL6dBOhi7GMhgb5MnIq+dCvWkwr8h6XmxTCsZ13XzfoNP999/9d/wvONfS+CPLsiQisuJB7Md8JeLxF3+/+9uF+u2Jz+98c/deRBKPImLy2qPfBitJnnFw6i/5fCqfTxQr3bdr47sLpfUrm52x92lEYRC/EBGtwf7W7MjRekl8dfIn8z+yWFsZefb8SePFdO3hVmNmp5DHX918V23eH60+SIfzpfS43dkx39jJ6u+N3prbyKb+fH3xeqHT7VdW87xyctJK/Bct7mUDn2aD/n89s/PmcrvX7k9enX96o3ypt9x8ud/338/6mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAdgsbYy8uz5k8aL6drDrcbMzpffX6t/9lP9h1c331Wb90erD9Jh3lL679Qf696a28g+jtcXrxc6F/qV1TyvnJxOfc7W4f6/udzutfuTV+ef3ihf6i03XyY/Pz7rOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA50v99nZE3L0XkcR3ETGelmYH8awYUdo+mj9VHI4TxUr37dr47kJp/cpmZ+z9nTy+lEa04pP9/7/u/04fOuGj4dCKiPT03sU/81cAAAD//xmKiIU=")

3.164979319s ago: executing program 5 (id=5157):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r0=>0x0, @local, @multicast1}, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=@bloom_filter={0x1e, 0x80, 0xfffffff8, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', r0, r1, 0x0, 0x1, 0x3, 0x2, @void, @value, @void, @value}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800002000181100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
pread64(r4, &(0x7f0000000600)=""/228, 0xe4, 0xffffffff00000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r6 = io_uring_setup(0x4e4e, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x8})
pause()
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0)
pause()

2.392978199s ago: executing program 1 (id=5173):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x78)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0062df645bb01977687957c4ce6a8066cfdd9d1cd0f908430afa34d8"], 0x48)
setregid(0x0, 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0)
unshare(0x40020000)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5ae, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==")
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0)
lsm_get_self_attr(0x68, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10)
setitimer(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000fd000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
clock_gettime(0x0, &(0x7f0000000140))

2.28660455s ago: executing program 5 (id=5174):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r1, r0, 0x0, 0x20000023893)

2.20687838s ago: executing program 1 (id=5176):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000001c0)=""/66}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffdca, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000500)={@multicast1, @local, <r6=>0x0}, &(0x7f0000000540)=0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)
syz_read_part_table(0x5c9, &(0x7f0000000880)="$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")
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r8 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r8, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x24}], 0x1, 0x0, 0x0, 0x1a)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280)
ioctl$TCSETA(r8, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"})

2.18390651s ago: executing program 5 (id=5177):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

2.133803009s ago: executing program 5 (id=5178):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="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", 0xfd}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000001c0)="e2f46bc7cf9931096c245b7bcb3fc1af9f514feecafb7aaabbc25aec0b92822c939cb08cca7b3d03bab6287963b741b07534e9302e91e1adf7331eb5d0cda695464bfe5086e2d85a3b7d6d95e4b6b8d153ce0c2e742defb511f32ce486256945a21d7144cd6acde9a77e277d68763c295c380990d30baf9d89e49df262a733f96adcfeadc3222c9b1c6c", 0x8a}, {}], 0x4, &(0x7f0000000280)=[@dstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x3}]}}}], 0x20}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0xe89a, @local, 0x3ff}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000013c0)="f8167acaa1595fececee7c500ace4be847ef5f48fee9cf2be5a085f428ad339dda5e9a8d7b2f6922233cd9c6062cf26a8a0d2ec940bc5b0c08567b7099375b3b8bfd3aff8cb88094f09dacbb54775e5ab4ad110001822fe5b614701fd3870fbc8bb883b6a69b792fe375ae79e83b413a5d3156c36c370810bf3b47973a57f201549a403d55fe6ce7359d920dd8ce067dfd2f4c260d83c407e24316f1293bf6d8c3badcd935d35bd2340de248c88ecbfbf4ffb508be4ccf25f4758671b4657f104ac7d8491419b5c3757034717e9eb07a453e508fc323a92cc8a5dd0714", 0xdd}, {&(0x7f00000014c0)="89194b3512136e29b73786eec1a46c409a86eb7722c613b6ecbfbb9fcd4ededb3e271b0e356a44b23e86277bdaff75782b52fc6fcd856cf96b122ea8025c7ef4e2426d39b73bbb649e862c4fddbbb9a5bdb7d3593e4b4030285c59e55a3b5221995a4f9876e9991051ac6c4192f0526ec0dba2bec03ea85e8db8a0184db787784d8cbba5d0978c8581a1287081", 0x8d}], 0x2, &(0x7f0000001740)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x67, 0x4, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0xe}, @loopback]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x32, 0x11, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xe, 0x3, [0x6, 0x7, 0x71479370]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x30, {0x0, 0xa, 0x1, 0x1672, [0x1, 0x1, 0xfffffffffffffffb, 0x8a3, 0xf]}}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x2c, 0x21, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xf8, "df552900bf91fa2088668d722eec03c2e369efc92c401893357aae94a4d769de702a71bedd635631540929adc19304cf6561a4bc5c571e133c9af2ed758cd6cd4b853aa544171f2a954c0a08aae799a0ce67acd5ba8f9fc371260696501eb56f6bd6644a9f797223df45cfc9a47024dda883905f7115a44913b775b7d6453e85e84949e1498268e36adb2c2a3588c9ef0e97846af89eef2443469c5d926940a6764eacca50424de0608d4307e1291d841890ee69f8b88c0c0fc522b429411bf76a8f86704c0547ddfc4a8aa0fed345a33126116a9b5a36a36028c02764fdb4a6776f386e7d93bed5fd8cff2ce49cdf26de0e14138906b115"}, @ra={0x5, 0x2, 0x101}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x73, 0xa, 0x1, 0x8a, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @dstopts={{0x80, 0x29, 0x37, {0xff, 0xd, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @ra={0x5, 0x2, 0x2}, @generic={0x0, 0x47, "cd0306fa3d73244fc20746b306ba5e5b6eab91a910611c974bd57be5f763fcb74371739f4ab0dee511769d7f4daa337b3573635fabfe4adb61237794d33bc4b8a1baed9f1545ab"}, @enc_lim={0x4, 0x1, 0xe}]}}}], 0x368}}, {{&(0x7f0000001ac0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x79}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="cdb0f61cc5c0ae11fa750e456f8c80b32adbf9a3db48688e2e372c929e0ef07ed1fc0303", 0x24}, {&(0x7f0000001b40)="ee02efcb02ef0289389307fc2ce8c11a3c5951aebba4a7f2eaa0e38d0b0c1896c93257a00e843f4a9e58cf1efe88f10ddbcf0c4b3418c1d51ac33fa5f88ea5111d79dbde065166920a7428ba20e8e3d48d34cdba5db89a1f8ff49ec9101298bd04450cbd8632e6566636bfe37538fd38f1c6bef7d001d6280e8e1522c0cad35f2e33a01cec50cac88c0392f1181b1e923f4b639d", 0x94}, {&(0x7f0000001c00)="94fcb12fd02cb6d6b883a2652c10fdfe41aacf51d3461a205e0f030753d02dad2caac707c0849765f3a4ca0bf580f08cf68a1f1f944a024603778f5f6572c390e6006b519180cb2d6c75591ce8fa69fb11fa909b87c6872deeeb5d8b4b7c2613ae1ef46749e3b05b", 0x68}, {&(0x7f0000001c80)}], 0x4, &(0x7f0000001d00)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x73, 0xa, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1e}, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x1, 0x0, [@remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0x28}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x118}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000001e40)="ec4dd0112dc150f547e7b713cbddbce3b60de53685fc0981625f9887cd50eb947b0bc9702c235b2f22ec79", 0x2b}, {&(0x7f0000001e80)="3e39114be9471ef52523ff897ecb25a6618851739e158090fe536292b8ea2dcc8a300c1a17e5a7f1c6047214e04b1072a7d9145d1e0d18f29f6ac446def63b72cd12f0bd63b0464d27654851bca45ee53bf10f8324ac7e4b40cc77782e2a24b9ca8f874519d9f70b0638071331606a20d0eeaa27255d8a7f18deddb6eb202523f2bae60a20401780c2cc896172dd7305269f55198810282cec4ed3545f0674670f5e821a996f9062", 0xa8}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="f483f7de3ca9da065c73df66eabc26f5b96a2e899527bcb64bcfd2c7a85d5783cbece6beee66ee3e8422cfd45d0c6e9257cc217eabbf9d9a2c1308794f601c0fe328e6dcbc907541054d67cff710ae4ac4c7a5a1829e072a7fb953cd075bb52a9f1d48a04c717f77dfb08ce93c8c6aa7e72db23d6572ad776f9fdbcf50954b59b8a16e5c206788bd1f9c89160551d087d8bd2f78e022e7d14056a100dec9d260aea9d6b9326c18af2ec08255c5e65458ede14fe34a5045761fd6ba68e093389228840af1af64d7f1ce521afddf00ea9a757f", 0xd2}, {&(0x7f0000003040)="a4c341becb9a34039dce687ddb4970cd0566d050b5e761521da186b83c92ca5cdc7e677b24c5a4ee2e94890fbe61a3ced29ed5de729846ab3442cabae2036decd886fe82bae076970f6bab6e82ea2b39f7c87d53", 0x54}, {&(0x7f00000030c0)="1419a4beab01c26fa68d91cf3f0e24bba69a5278119e76109c5d584eda", 0x1d}, {&(0x7f0000003100)="09be0f843f31be5eb2f659e756d6aeed83640f17ee3dd504fbcdc091ecb7050a332550e6acfd047f1b688ebb0534af4147ddaf859b3694a3af6d8e95b94fa4514e3d2e3aa8797614d3368625422dd6cfc6d449a111562855e511be5ecc9f7bc8086a7175cf39638a347c6cc2447dbe055374ce7b3f957cc56063316117e48eaa1eaf49f3e9efe60dfe0807cbeeb299702a604166cebc992d1c41e1970b3f00b0b6781237bdacc348cf5550fda49a11a54bf5dd667b083af1628929d21f47c667ca059cfe50b0f3b1430e141f7bd133dc48241180bebc5cb61a8515f9e1804e09aa8e511176d0fe23c4e5885c0837e6cd8c8b4ffc762d58008a75", 0xfa}, {&(0x7f0000003200)="f5141a43ecde432a516bedd2c24669d867a923c6239004083710fa088cfdb55a363d99aaa959c9821cc66a2cb8840b61bf7ead688ba81cd392bbf2e60aa613ddd4090d4eb56f0651bcb440624d08bba9c1c9f4b26a4d11638f5632a549778c72aafccee0751e0d68b6f8abf3ed3b3e17206c8323bd95109217d9affcb4f44b73d067fa", 0x83}, {&(0x7f00000032c0)="b6a8f1d2e2370ddaa100f2b4de4069090195574c077586c6266777c9", 0x1c}], 0x9, &(0x7f00000033c0)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}, @rthdr={{0x78, 0x29, 0x39, {0xcf, 0xc, 0x1, 0x34, 0x0, [@mcast1, @private0, @empty, @empty, @remote, @loopback]}}}], 0x98}}, {{&(0x7f0000003480)={0xa, 0x4e21, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8833}, 0x1c, &(0x7f00000035c0)=[{&(0x7f00000034c0)="292bb5d811ef9839ea2e11083808f7b5dc09dc7bcf499a0349d876ee018bf439bf709824dc71ad555809ed4be70ca5fcd38f8b7f703bacd4a81554c74c6c480062f535d712a8dc93c60c49541d9501627f77d9e5220290b0a8a02e81a5c8cd519dbb9be367eebcd2b2c1ee8d4321ee0928fe30ce6221988032f08d0c4b3ebbf379b37e28f61c2ba0a974a4410e9797f5178a70f9802312aed84142b7ec3d95814fc5a393f0a544021c6ea4b17a0b6c203dfbac09543e4790730b9cf86f4c531a8b0e61e0c169754849ebfd", 0xcb}], 0x1, &(0x7f0000003600)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @rthdr={{0x98, 0x29, 0x39, {0x32, 0x10, 0x2, 0xd, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x30}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @private1, @mcast1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x82, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0x31}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x956}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x37}, @jumbo={0xc2, 0x4, 0x9}]}}}], 0x180}}, {{&(0x7f0000003780)={0xa, 0x4e24, 0x0, @loopback, 0x7fffffff}, 0x1c, &(0x7f0000003c00)=[{&(0x7f00000037c0)="6348489474a07df8ce58804d55b99af66d6a800841d13d1169b5871eb3510d2805911905af68f74707c74c79002eec9806defb90c0d4f31c4f676d1e1b6377bd016710c47f32a6c759c2140a0ae115c4385f468cd80170de2671434e675faac7", 0x60}, {&(0x7f0000003840)="bc8c7714d499055e627e53a4a6f3a37b9048e1a7bdf827f7e78064f921847d92dd58fcf73c023e4f84d5743dad68a0ab59224097525348", 0x37}, {&(0x7f0000003880)="c4222c2838f08b0381f51c9d47bc4ee8b410ebcf59ca148ada16ba389bc3642da6316197301f41c87a2b7295b4fcf2a7753965ac1374e5e3c7497410ac0801e6f8676b8ce28eac03694ff08521a525c7b17562587f54057c72120adde1d4d288c40890a175a7ae0dd52c09f5d9a3c04f5f3ad90192c9ed5c42f21bb36a3ce83b118b4cb75cf7c32a2fda66109a84ea404cd13f18929e64436b5b70fa86f042962ccf960daa200927", 0xa8}, {&(0x7f0000003940)="a6bf61ed422d114ffe431e", 0xb}, {&(0x7f0000003980)="b4f68dfd5604b04ee43132dd11c1974521aed9d3", 0x14}, {&(0x7f00000039c0)="aeef1dd39052a708df92a0e3fbe520ccf39bee92f04b76d5687c1adfa371f464aca7447ca00af2a2e849e0b00c567cba594393f25e2160c28be042703a374d0daebd944ac0c633258717e7591219cf14141fdaa57e0d45c592ea383361f53787c28a60282cbd2fb4c3d46a7871b0bf8858da424b83d913da20ff9149a0bffe1034eee1d4178e95f0c5", 0x89}, {&(0x7f0000003a80)="0c08d85d7f4aec500c7ff8f52f1fe3caff2d27a7aa352924a262048918377ef66c33d75fe5ea9bfd11e106ffd8df86fa4e94808f7c53bc164626708cc525898afa8ffcccd2a2c877eb53076eba66d8b860c0fae89d22f4d4b1d6cac9450d2f76738e759747d8939d7e0d834f0e4aabbe4a44519bb2e55292d5578b6461f12ee99ad7f5afec95010f002699672f75e64fb98ca2cd8d810c4bc884cc814cc18d57db6aa8ac8c648a2449b0a2a3c516605ecf1d7bf338ebf962336907b3b4889facb776b1ee827d52ab3a5cb1edb8759723b8bb127d200f56276d50e3602b49759b80e30e", 0xe3}, {&(0x7f0000003b80)="162cacffd7a9c8f585", 0x9}, {&(0x7f0000003bc0)="42e3f7dcfb", 0x5}], 0x9, &(0x7f0000003cc0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6014}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003d40)="09c50bf9c32afa6b59ff0d477f1445433a8f6ce5d05c34d5906345989cdbbf63834afb943e0aa5581531d93d5400951d60a8e60d8e425e69e22a14a33d9665acc6a6d1ea7304eccccc320b9fd75bc9b19674bf8ab203d23449c0d551fe3bffe8e3a7b6a65952551d1bc093", 0x6b}], 0x1}}], 0x7, 0x200c8000)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1000, 0x6)

1.21072637s ago: executing program 1 (id=5193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)

1.19938724s ago: executing program 1 (id=5195):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0, @void, @value}, 0x94)
bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r2, &(0x7f0000000140)="26000000220047010500000700000000000000", 0x13)
connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r2, &(0x7f0000000000)='\"', 0xfdef)

1.159965599s ago: executing program 2 (id=5196):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[], 0x11d0)

1.10823415s ago: executing program 0 (id=5199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)

1.06517903s ago: executing program 0 (id=5200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[], 0x11d0)

1.06477381s ago: executing program 2 (id=5202):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
inotify_init()

1.04857146s ago: executing program 2 (id=5203):
syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0)
syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r4], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r5}, 0x38)
r6 = getpid()
setreuid(0xee00, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)

1.00590573s ago: executing program 0 (id=5204):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
rt_sigaction(0x15, &(0x7f0000000340)={&(0x7f00000002c0)="80f0018f29309706c462f9302fc4e32d0d5904000f01c1c4217e12a303000000460f01d4c422bbf5f56540d8dc41f9", 0x40000001, &(0x7f0000000300)="f02102643e260f1c420cc4a15973d80067653e0f5aa100000100460ff45803c481ea5f116767410f2b85808ea4b647dcd8f344c168ff01c4a181f6b018000000", {[0x5]}}, 0x0, 0x8, &(0x7f00000003c0))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
socket(0x2, 0x80805, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)

309.97074ms ago: executing program 1 (id=5209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000000)=0xe8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x24, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r1, &(0x7f0000000080)={0x0, 0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5)
write$binfmt_elf32(r6, &(0x7f00000029c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa, 0x8a, 0x0, 0x7, 0xb, 0x2, 0x3, 0x2, 0x128, 0x38, 0x3be, 0x3057, 0x4fa2, 0x20, 0x1, 0x0, 0x29bf, 0x2}, [{0x6474e551, 0x2, 0x9, 0x9, 0x400, 0x4, 0x9e81, 0xa6}]}, 0x58)

246.58494ms ago: executing program 3 (id=5211):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x20000023893)

207.14608ms ago: executing program 3 (id=5212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

199.95713ms ago: executing program 0 (id=5213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)

134.30963ms ago: executing program 3 (id=5214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[], 0x11d0)

134.10438ms ago: executing program 0 (id=5215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)

133.35752ms ago: executing program 2 (id=5216):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x7, 0x4, {{0x2f, 0x4, 0x2, 0x12, 0xbc, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0x13, 0x39, [@dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @empty, @rand_addr=0x64010100]}, @noop, @timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x5, [{@multicast2}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}]}, @lsrr={0x83, 0x7, 0x13, [@private=0xa010100]}, @cipso={0x86, 0x17, 0x2, [{0x2, 0xc, "645226b7938cfae49ab8"}, {0x6, 0x3, '('}, {0x1, 0x2}]}, @lsrr={0x83, 0x27, 0xef, [@remote, @loopback, @empty, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @broadcast, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0xe, [{@multicast1, 0x9}, {@empty, 0x83f}, {@local, 0xfffffff7}]}, @rr={0x7, 0x17, 0xc4, [@broadcast, @loopback, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001200010a000000000000000080020000c8b0b0733c894e0c33b5ef8abe4579f3ca2bae0a313860a3d08abeee84aa56295196fc6f7ae01b36254e28288e30088d58fe84520b48113d5c85fef8db59f1b1f7b7a347324aff741b6b908ce389120bb7cb71f28e4a074202f4f94a53e8f3062afd671fbef4413418b2386ff7752e1d35fcf1433fe91b7eb2c7af222927952186c0a08b28fa6779d56edc67b544cb00"/175], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x7}}, '\x00'})
pipe2$9p(&(0x7f0000000000), 0x800)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080))

82.67424ms ago: executing program 0 (id=5217):
syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01ce04000b0000000d671b44c708000000000000000000000000000000000000000000efa1398c6516b482531090c8f02016ade28c977e890af7a3b7331d4f90c962c47f84a3753d80f83dedc2a5c55442c8abbf4223481e31922bd87f8565d49470a6a6c6c62e194186f456d6c9c9ebb0a50af0d6c52915e1d6f577da3d38a4f46f30f3153139f0a15b06a481c56a64a3062d484865b3278a92adf20bf38a88a461e9d2d52be10f586c59cd5417494c730d898c36ff3018aac60db249591fcc6a21c265b6f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r2, 0x0, 0x1}, 0x18)
r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r3, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
readv(r5, &(0x7f0000000240)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2)
io_pgetevents(r4, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0)
syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES8=r5], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r6}, 0x38)
r7 = getpid()
setreuid(0xee00, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r7], 0x1}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)

82.31179ms ago: executing program 1 (id=5218):
syz_open_dev$evdev(&(0x7f00000001c0), 0x8000000000000000, 0x4000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01ce04000b0000000d671b44c708000000000000000000000000000000000000000000efa1398c6516b482531090c8f02016ade28c977e890af7a3b7331d4f90c962c47f84a3753d80f83dedc2a5c55442c8abbf4223481e31922bd87f8565d49470a6a6c6c62e194186f456d6c9c9ebb0a50af0d6c52915e1d6f577da3d38a4f46f30f3153139f0a15b06a481c56a64a3062d484865b3278a92adf20bf38a88a461e9d2d52be10f586c59cd5417494c730d898c36ff3018aac60db249591fcc6a21c265b6f2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r1, 0x0, 0x1}, 0x18)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000740)="aefdda9d240300005a99f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a82", 0x2b}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
io_pgetevents(r3, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], 0x0, 0x0)
syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0xe7ed, 0x2, 0x0, 0x2d9}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8=r4], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x5, r5}, 0x38)
r6 = getpid()
setreuid(0xee00, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x24020000)
syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6], 0x1}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='io_uring_link\x00', 0xffffffffffffffff, 0x0, 0x2ab}, 0x18)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)

75.7214ms ago: executing program 3 (id=5219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x498, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x4c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)

42.38812ms ago: executing program 3 (id=5220):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, 0x2c}}, 0x0)

27.62814ms ago: executing program 3 (id=5221):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x9, &(0x7f0000000180)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2933b7180a51fff0}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0xc8, &(0x7f0000000240)=""/200, 0x60780, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x10, 0x1ff, 0x81}, 0x10, 0x2b59, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delvlan={0x18, 0x70, 0x1, 0x0, 0x2, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000001cc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid}]}})

14.8063ms ago: executing program 2 (id=5222):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0x20000023893)

0s ago: executing program 2 (id=5223):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async)
r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r2, 0x400, 0x0) (async)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xe8, 0xffffffffffffffda, 0x2, 0x3, 0x7fffffff]}, &(0x7f0000000440)=0x78) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="a1ab0000000000000e0032"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x350, 0x1b0, 0x1b0, 0xd0, 0xd0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xffffffff], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @inet=@DSCP={0x28}}, {{@ipv6={@private0, @private1, [0xffffffff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], 'vlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x21, 0x80, 0x1, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x4}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0xffffffff, 0x0, 0xffffffff], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550)
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r10)
ioctl$SIOCSIFHWADDR(r10, 0x8b35, &(0x7f0000000000)={'veth0_macvtap\x00', @dev})
io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046, 0x1000000, 0x0, 0x0, r10})

kernel console output (not intermixed with test programs):

33575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14277 comm="syz.2.3851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  231.264052][T14293] netlink: 'syz.1.3856': attribute type 4 has an invalid length.
[  231.387451][T14303] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  231.387451][T14303]    program syz.2.3860 not setting count and/or reply_len properly
[  231.518673][T14309] selinux_netlink_send: 159 callbacks suppressed
[  231.518689][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.533947][T14311] xt_hashlimit: max too large, truncated to 1048576
[  231.539465][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.544950][T14311] Cannot find set identified by id 0 to match
[  231.558951][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.577183][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.590049][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.600576][T14311] lo speed is unknown, defaulting to 1000
[  231.605975][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.642026][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.675474][T14311] siw: device registration error -23
[  231.681037][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.722222][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.774105][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3864'.
[  231.793489][T14309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14309 comm=syz.3.3861
[  231.988672][T14330] vhci_hcd: invalid port number 15
[  231.994381][T14330] vhci_hcd: invalid port number 15
[  232.065176][T14333] 9pnet_fd: Insufficient options for proto=fd
[  232.345609][T14342] loop3: detected capacity change from 0 to 512
[  232.376346][T14342] EXT4-fs: Ignoring removed i_version option
[  232.382554][T14342] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.418161][T14342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  232.445855][T14342] EXT4-fs (loop3): 1 truncate cleaned up
[  232.478361][T14342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.479001][T14347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3877'.
[  232.526782][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3879'.
[  232.685439][T14361] vhci_hcd: invalid port number 15
[  232.690691][T14361] vhci_hcd: invalid port number 15
[  232.719693][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.731891][T14363] 9pnet_fd: Insufficient options for proto=fd
[  232.825581][T14371] lo speed is unknown, defaulting to 1000
[  232.931239][T14381] FAULT_INJECTION: forcing a failure.
[  232.931239][T14381] name failslab, interval 1, probability 0, space 0, times 0
[  232.944066][T14381] CPU: 1 UID: 0 PID: 14381 Comm: syz.5.3890 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  232.944096][T14381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  232.944108][T14381] Call Trace:
[  232.944115][T14381]  <TASK>
[  232.944122][T14381]  dump_stack_lvl+0xf2/0x150
[  232.944155][T14381]  dump_stack+0x15/0x1a
[  232.944181][T14381]  should_fail_ex+0x24a/0x260
[  232.944224][T14381]  ? __request_module+0x1ba/0x3e0
[  232.944247][T14381]  should_failslab+0x8f/0xb0
[  232.944280][T14381]  __kmalloc_cache_noprof+0x4e/0x320
[  232.944372][T14381]  ? crypto_alg_mod_lookup+0xa2/0x450
[  232.944482][T14381]  __request_module+0x1ba/0x3e0
[  232.944504][T14381]  ? strcmp+0x21/0x50
[  232.944540][T14381]  ? crypto_alg_mod_lookup+0x84/0x450
[  232.944580][T14381]  crypto_alg_mod_lookup+0xa2/0x450
[  232.944653][T14381]  crypto_alloc_tfm_node+0xaa/0x250
[  232.944693][T14381]  crypto_alloc_aead+0x2f/0x40
[  232.944719][T14381]  tls_set_sw_offload+0x579/0xa90
[  232.944743][T14381]  tls_setsockopt+0x9d2/0xf20
[  232.944807][T14381]  sock_common_setsockopt+0x64/0x80
[  232.944842][T14381]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  232.944892][T14381]  __sys_setsockopt+0x187/0x200
[  232.944922][T14381]  __x64_sys_setsockopt+0x66/0x80
[  232.944945][T14381]  x64_sys_call+0x282e/0x2dc0
[  232.945047][T14381]  do_syscall_64+0xc9/0x1c0
[  232.945085][T14381]  ? clear_bhb_loop+0x55/0xb0
[  232.945191][T14381]  ? clear_bhb_loop+0x55/0xb0
[  232.945224][T14381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.945262][T14381] RIP: 0033:0x7fe72e9ed169
[  232.945278][T14381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.945295][T14381] RSP: 002b:00007fe72d057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  232.945313][T14381] RAX: ffffffffffffffda RBX: 00007fe72ec05fa0 RCX: 00007fe72e9ed169
[  232.945328][T14381] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000004
[  232.945378][T14381] RBP: 00007fe72d057090 R08: 0000000000000028 R09: 0000000000000000
[  232.945390][T14381] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001
[  232.945410][T14381] R13: 0000000000000000 R14: 00007fe72ec05fa0 R15: 00007fff21cb1b68
[  232.945427][T14381]  </TASK>
[  233.210606][T14391] xt_hashlimit: max too large, truncated to 1048576
[  233.259780][T14391] Cannot find set identified by id 0 to match
[  233.276516][T14397] lo speed is unknown, defaulting to 1000
[  233.318933][T14391] siw: device registration error -23
[  233.507052][T14408] 9pnet_fd: Insufficient options for proto=fd
[  233.765601][T14422] vhci_hcd: invalid port number 15
[  233.770820][T14422] vhci_hcd: invalid port number 15
[  233.778100][T14423] loop3: detected capacity change from 0 to 512
[  233.803515][T14423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.803598][T14423] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.836297][T14429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3906'.
[  233.881402][T14432] lo speed is unknown, defaulting to 1000
[  233.905563][T14432] siw: device registration error -23
[  234.126231][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.247877][T14446] lo speed is unknown, defaulting to 1000
[  234.451495][T14444] 9pnet_fd: Insufficient options for proto=fd
[  234.595989][T14461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.612233][T14461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.625512][T14435] loop5: detected capacity change from 0 to 32768
[  234.672349][T14435]  loop5: p1 p3 < p5 p6 >
[  234.682786][T14435] loop5: p6 start 337920 is beyond EOD, truncated
[  234.840264][T14467] vhci_hcd: invalid port number 15
[  234.845492][T14467] vhci_hcd: invalid port number 15
[  234.992466][T14480] loop1: detected capacity change from 0 to 512
[  235.053254][T14480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.120260][T14480] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.136329][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3915'.
[  235.165413][T14488] 9pnet_fd: Insufficient options for proto=fd
[  235.231101][T14468] loop5: detected capacity change from 0 to 512
[  235.264473][T14468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.299955][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.335605][T14468] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.534277][T14505] loop1: detected capacity change from 0 to 512
[  235.541599][T14505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  235.552349][T14505] EXT4-fs (loop1): orphan cleanup on readonly fs
[  235.560212][T14505] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3928: bg 0: block 248: padding at end of block bitmap is not set
[  235.575335][T14505] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3928: Failed to acquire dquot type 1
[  235.587161][T14505] EXT4-fs (loop1): 1 truncate cleaned up
[  235.594540][T14505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  235.667132][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.923154][   T29] kauditd_printk_skb: 389 callbacks suppressed
[  235.923168][   T29] audit: type=1326 audit(1741436729.648:33963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  235.954662][   T29] audit: type=1400 audit(1741436729.648:33964): avc:  denied  { bind } for  pid=14517 comm="syz.5.3933" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  235.975190][   T29] audit: type=1326 audit(1741436729.678:33965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  235.998926][   T29] audit: type=1326 audit(1741436729.678:33966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.022763][   T29] audit: type=1326 audit(1741436729.678:33967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.046399][   T29] audit: type=1326 audit(1741436729.678:33968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.070054][   T29] audit: type=1326 audit(1741436729.678:33969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.093750][   T29] audit: type=1326 audit(1741436729.678:33970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.126295][T14521] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  236.126295][T14521]    program syz.0.3934 not setting count and/or reply_len properly
[  236.146465][T14525] 9pnet_fd: Insufficient options for proto=fd
[  236.155893][   T29] audit: type=1326 audit(1741436729.848:33971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.179541][   T29] audit: type=1326 audit(1741436729.848:33972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14518 comm="syz.0.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  236.316355][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.549972][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3940'.
[  236.566702][T14539] loop1: detected capacity change from 0 to 512
[  236.583702][T14539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.597708][T14539] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.624283][T14550] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3942'.
[  236.685946][T14554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3944'.
[  236.700286][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.780380][T14562] loop1: detected capacity change from 0 to 512
[  236.796112][T14564] loop5: detected capacity change from 0 to 512
[  236.803514][T14562] EXT4-fs: Ignoring removed i_version option
[  236.809648][T14562] EXT4-fs: Ignoring removed mblk_io_submit option
[  236.816606][T14562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  236.839322][T14564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.863867][T14562] EXT4-fs (loop1): 1 truncate cleaned up
[  236.869905][T14562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.888585][T14564] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.903312][T14570] xt_hashlimit: max too large, truncated to 1048576
[  236.911093][T14570] Cannot find set identified by id 0 to match
[  236.927642][T14570] lo speed is unknown, defaulting to 1000
[  237.011850][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.077144][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.176223][T14582] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3953'.
[  237.354507][T14588] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  237.354507][T14588]    program syz.0.3955 not setting count and/or reply_len properly
[  237.638229][T14602] 9pnet_fd: Insufficient options for proto=fd
[  237.664573][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3956'.
[  237.667721][T14605] loop3: detected capacity change from 0 to 512
[  237.680320][T14605] /dev/loop3: Can't open blockdev
[  237.897736][T14614] loop5: detected capacity change from 0 to 512
[  237.914236][T14614] EXT4-fs: Ignoring removed i_version option
[  237.920318][T14614] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.958586][T14614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  237.974019][T14616] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3964'.
[  238.034981][T14614] EXT4-fs (loop5): 1 truncate cleaned up
[  238.041078][T14614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.463317][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.526223][T14643] blktrace: Concurrent blktraces are not allowed on loop3
[  238.571982][T14645] netlink: 'syz.2.3974': attribute type 4 has an invalid length.
[  238.620484][T14648] loop3: detected capacity change from 0 to 512
[  238.639261][T14648] EXT4-fs: Ignoring removed i_version option
[  238.645405][T14648] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.665790][T14648] /dev/loop3: Can't open blockdev
[  238.673328][T14650] netlink: 'syz.2.3976': attribute type 4 has an invalid length.
[  239.047426][T14663] netlink: 'syz.2.3979': attribute type 1 has an invalid length.
[  239.083604][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.092227][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.156882][T14673] lo speed is unknown, defaulting to 1000
[  239.162854][T14674] loop1: detected capacity change from 0 to 512
[  239.183765][T14674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.197745][T14674] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.283051][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.306169][T14686] loop1: detected capacity change from 0 to 512
[  239.342872][T14686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.357263][T14686] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.447590][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.650036][T14704] loop1: detected capacity change from 0 to 512
[  239.656622][T14704] EXT4-fs: Ignoring removed i_version option
[  239.662691][T14704] EXT4-fs: Ignoring removed mblk_io_submit option
[  239.713821][T14704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  239.766119][T14704] EXT4-fs (loop1): 1 truncate cleaned up
[  239.773475][T14704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.937162][T14709] 9pnet_fd: Insufficient options for proto=fd
[  239.990655][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.031594][T14711] lo speed is unknown, defaulting to 1000
[  240.069870][T14711] loop1: detected capacity change from 0 to 1024
[  240.077559][T14711] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  240.088497][T14711] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  240.102780][T14711] JBD2: no valid journal superblock found
[  240.108591][T14711] EXT4-fs (loop1): Could not load journal inode
[  240.144141][T14715] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  240.144141][T14715]    program syz.5.3999 not setting count and/or reply_len properly
[  240.196440][T14720] xt_hashlimit: max too large, truncated to 1048576
[  240.212860][T14720] Cannot find set identified by id 0 to match
[  240.253556][T14720] lo speed is unknown, defaulting to 1000
[  240.318071][T14724] siw: device registration error -23
[  240.435438][T14729] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  240.435438][T14729]    program syz.1.4003 not setting count and/or reply_len properly
[  240.497461][T14733] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  240.497461][T14733]    program syz.3.4004 not setting count and/or reply_len properly
[  240.760493][T14744] loop3: detected capacity change from 0 to 512
[  240.767310][T14744] EXT4-fs: Ignoring removed i_version option
[  240.773464][T14744] EXT4-fs: Ignoring removed mblk_io_submit option
[  240.780419][T14744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  240.802452][T14744] EXT4-fs (loop3): 1 truncate cleaned up
[  240.808634][T14744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.854207][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.931838][   T29] kauditd_printk_skb: 1629 callbacks suppressed
[  240.931856][   T29] audit: type=1326 audit(1741436734.648:35602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  240.992532][   T29] audit: type=1326 audit(1741436734.658:35603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe72ea1fa25 code=0x7ffc0000
[  241.016211][   T29] audit: type=1326 audit(1741436734.658:35604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  241.040101][   T29] audit: type=1326 audit(1741436734.658:35605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe72ea1fa25 code=0x7ffc0000
[  241.063725][   T29] audit: type=1326 audit(1741436734.658:35606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  241.087413][   T29] audit: type=1326 audit(1741436734.658:35607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  241.111039][   T29] audit: type=1326 audit(1741436734.658:35608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe72ea1fa25 code=0x7ffc0000
[  241.134699][   T29] audit: type=1326 audit(1741436734.658:35609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  241.158373][   T29] audit: type=1326 audit(1741436734.658:35610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.5.3999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe72ea1fa25 code=0x7ffc0000
[  241.181972][   T29] audit: type=1326 audit(1741436734.658:35611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff20be0fa25 code=0x7ffc0000
[  241.309836][T14755] loop5: detected capacity change from 0 to 512
[  241.363286][T14755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.391993][T14755] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.408300][T14761] loop1: detected capacity change from 0 to 512
[  241.433572][T14761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.449467][T14761] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.517044][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.533589][T14766] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  241.533589][T14766]    program syz.2.4014 not setting count and/or reply_len properly
[  241.573164][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.587390][T14768] xt_hashlimit: max too large, truncated to 1048576
[  241.595009][T14768] Cannot find set identified by id 0 to match
[  241.612026][T14768] lo speed is unknown, defaulting to 1000
[  241.659409][T14774] siw: device registration error -23
[  241.670017][T14773] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  241.670017][T14773]    program syz.5.4016 not setting count and/or reply_len properly
[  241.739562][T14779] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  241.739562][T14779]    program syz.3.4019 not setting count and/or reply_len properly
[  241.778876][T14785] loop1: detected capacity change from 0 to 512
[  241.785594][T14785] EXT4-fs: Ignoring removed i_version option
[  241.791625][T14785] EXT4-fs: Ignoring removed mblk_io_submit option
[  241.798700][T14785] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  241.810314][T14785] EXT4-fs (loop1): 1 truncate cleaned up
[  241.816585][T14785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.876442][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.937580][T14794] loop5: detected capacity change from 0 to 512
[  241.964897][T14794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.978924][T14794] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.010217][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4023'.
[  242.025514][T14792] loop1: detected capacity change from 0 to 512
[  242.044084][T14792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.057390][T14792] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.071225][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.093344][T14801] loop5: detected capacity change from 0 to 512
[  242.103532][T14801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.118137][T14801] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.135888][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.177943][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.195778][T14807] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4027'.
[  242.230819][T14812] loop1: detected capacity change from 0 to 512
[  242.250819][T14815] netlink: 'syz.5.4030': attribute type 4 has an invalid length.
[  242.260110][T14812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.274286][T14812] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.293812][T14818] xt_hashlimit: max too large, truncated to 1048576
[  242.301461][T14818] Cannot find set identified by id 0 to match
[  242.327142][T14818] lo speed is unknown, defaulting to 1000
[  242.359817][T14818] siw: device registration error -23
[  242.371013][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.394187][T14823] loop1: detected capacity change from 0 to 512
[  242.401278][T14823] EXT4-fs: Ignoring removed i_version option
[  242.401709][T14824] netlink: 'syz.5.4034': attribute type 4 has an invalid length.
[  242.407348][T14823] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.423389][T14823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  242.440891][T14823] EXT4-fs (loop1): 1 truncate cleaned up
[  242.464428][T14823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.485151][T14834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4038'.
[  242.579691][T14845] loop5: detected capacity change from 0 to 512
[  242.591255][T14843] netlink: 'syz.0.4041': attribute type 4 has an invalid length.
[  242.599241][T14845] EXT4-fs: Ignoring removed i_version option
[  242.605433][T14845] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.631320][T14845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  242.648444][T14845] EXT4-fs (loop5): 1 truncate cleaned up
[  242.654681][T14845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.679230][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.693619][T14853] xt_hashlimit: max too large, truncated to 1048576
[  242.701240][T14853] Cannot find set identified by id 0 to match
[  242.727367][T14853] lo speed is unknown, defaulting to 1000
[  242.839716][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.947494][T14869] netlink: 'syz.0.4049': attribute type 4 has an invalid length.
[  243.607598][T14885] netlink: 'syz.2.4056': attribute type 4 has an invalid length.
[  243.690384][T14889] xt_hashlimit: max too large, truncated to 1048576
[  243.731081][T14889] Cannot find set identified by id 0 to match
[  243.755998][T14899] lo speed is unknown, defaulting to 1000
[  243.770790][T14902] vhci_hcd: invalid port number 15
[  243.776042][T14902] vhci_hcd: invalid port number 15
[  243.798708][T14889] siw: device registration error -23
[  243.842517][T14908] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  243.842517][T14908]    program syz.0.4066 not setting count and/or reply_len properly
[  244.077431][T14920] netlink: 'syz.3.4070': attribute type 4 has an invalid length.
[  244.814912][T14938] xt_hashlimit: max too large, truncated to 1048576
[  244.826939][T14938] Cannot find set identified by id 0 to match
[  244.857039][T14938] lo speed is unknown, defaulting to 1000
[  244.866716][T14942] netlink: 'syz.2.4079': attribute type 4 has an invalid length.
[  244.879417][T14946] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  244.879417][T14946]    program syz.0.4081 not setting count and/or reply_len properly
[  244.907462][T14947] siw: device registration error -23
[  244.928827][T14950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4082'.
[  244.981384][T14952] 9pnet_fd: Insufficient options for proto=fd
[  245.215667][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4089'.
[  245.312469][T14977] loop1: detected capacity change from 0 to 512
[  245.332577][T14977] EXT4-fs: Ignoring removed i_version option
[  245.338748][T14977] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.371794][T14977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  245.413086][T14977] EXT4-fs (loop1): 1 truncate cleaned up
[  245.419777][T14977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.587131][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.606281][T14986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4095'.
[  245.621016][T14988] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  245.621016][T14988]    program syz.0.4096 not setting count and/or reply_len properly
[  245.668152][T14992] 9pnet_fd: Insufficient options for proto=fd
[  245.800780][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4097'.
[  245.828036][T14990] loop1: detected capacity change from 0 to 512
[  245.855491][T14990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.872051][T15009] netlink: 'syz.0.4104': attribute type 4 has an invalid length.
[  245.891401][T14990] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.943094][   T29] kauditd_printk_skb: 2332 callbacks suppressed
[  245.943123][   T29] audit: type=1326 audit(1741436739.668:37944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  245.974006][   T29] audit: type=1326 audit(1741436739.668:37945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  245.997691][   T29] audit: type=1326 audit(1741436739.668:37946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.021402][   T29] audit: type=1326 audit(1741436739.668:37947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.045722][   T29] audit: type=1326 audit(1741436739.668:37948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.066766][T15017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4107'.
[  246.069624][   T29] audit: type=1326 audit(1741436739.668:37949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.102280][   T29] audit: type=1326 audit(1741436739.668:37950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.126232][   T29] audit: type=1326 audit(1741436739.668:37951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.150312][   T29] audit: type=1326 audit(1741436739.668:37952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.174318][   T29] audit: type=1326 audit(1741436739.668:37953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.3.4087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f44b26dfa25 code=0x7ffc0000
[  246.280645][T15021] 9pnet_fd: Insufficient options for proto=fd
[  246.289187][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.340743][T15028] netlink: 'syz.0.4115': attribute type 4 has an invalid length.
[  246.445221][T15045] 9pnet_fd: Insufficient options for proto=fd
[  246.514640][T15048] netlink: 'syz.1.4119': attribute type 4 has an invalid length.
[  246.586698][T15058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4124'.
[  246.612675][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[  246.717567][T15073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.726373][T15073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.830908][T15082] netlink: 'syz.3.4132': attribute type 4 has an invalid length.
[  246.839844][T15054] loop1: detected capacity change from 0 to 512
[  246.854971][T15054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.867617][T15054] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.990649][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.011443][T15090] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  247.011443][T15090]    program syz.1.4134 not setting count and/or reply_len properly
[  247.382907][T15099] __nla_validate_parse: 1 callbacks suppressed
[  247.382981][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'.
[  247.430934][T15101] xt_hashlimit: max too large, truncated to 1048576
[  247.438275][T15101] Cannot find set identified by id 0 to match
[  247.454755][T15101] lo speed is unknown, defaulting to 1000
[  247.496278][T15101] siw: device registration error -23
[  247.568783][T15112] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  247.568783][T15112]    program syz.5.4142 not setting count and/or reply_len properly
[  247.718600][T15118] netlink: 'syz.0.4143': attribute type 4 has an invalid length.
[  247.762029][T15120] lo speed is unknown, defaulting to 1000
[  247.834671][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'.
[  247.933036][T15136] netlink: 'syz.3.4151': attribute type 1 has an invalid length.
[  247.954586][T15139] xt_hashlimit: max too large, truncated to 1048576
[  247.962098][T15139] Cannot find set identified by id 0 to match
[  247.977586][T15139] lo speed is unknown, defaulting to 1000
[  248.004660][T15139] siw: device registration error -23
[  248.042055][T15144] netlink: 'syz.1.4154': attribute type 4 has an invalid length.
[  248.507869][T15149] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4156'.
[  248.525075][T15149] loop5: detected capacity change from 0 to 512
[  248.554135][T15149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.568324][T15149] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.642923][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.876201][T15167] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  248.876201][T15167]    program syz.3.4162 not setting count and/or reply_len properly
[  248.915082][T15161] selinux_netlink_send: 46 callbacks suppressed
[  248.915103][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.934015][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.946737][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.959388][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.972144][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.984979][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  248.998124][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  249.011452][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  249.024421][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  249.037706][T15161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15161 comm=syz.1.4160
[  249.144843][T15176] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  249.144843][T15176]    program syz.5.4164 not setting count and/or reply_len properly
[  249.826388][T15194] netlink: 'syz.1.4170': attribute type 4 has an invalid length.
[  249.860300][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'.
[  249.875513][T15198] netlink: 'syz.1.4172': attribute type 1 has an invalid length.
[  250.086167][T15205] IPv6: Can't replace route, no match found
[  250.207495][T15213] netlink: '+}[@': attribute type 10 has an invalid length.
[  250.214913][T15213] netlink: 40 bytes leftover after parsing attributes in process `+}[@'.
[  250.262299][T15213] team0: Port device geneve1 added
[  250.859753][T15240] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  250.859753][T15240]    program syz.0.4188 not setting count and/or reply_len properly
[  250.976486][   T29] kauditd_printk_skb: 1982 callbacks suppressed
[  250.976504][   T29] audit: type=1326 audit(1741436744.698:39936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.006764][   T29] audit: type=1326 audit(1741436744.698:39937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.030577][   T29] audit: type=1326 audit(1741436744.698:39938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.054297][   T29] audit: type=1326 audit(1741436744.698:39939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.077872][   T29] audit: type=1326 audit(1741436744.698:39940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.101629][   T29] audit: type=1326 audit(1741436744.698:39941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.125417][   T29] audit: type=1326 audit(1741436744.698:39942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff20bddbad0 code=0x7ffc0000
[  251.149059][   T29] audit: type=1326 audit(1741436744.698:39943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff20bdde997 code=0x7ffc0000
[  251.172799][   T29] audit: type=1326 audit(1741436744.698:39944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff20bddd169 code=0x7ffc0000
[  251.196389][   T29] audit: type=1326 audit(1741436744.698:39945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff20bdde997 code=0x7ffc0000
[  251.274629][T15250] loop1: detected capacity change from 0 to 512
[  251.304915][T15250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.318636][T15254] netlink: 'syz.5.4190': attribute type 4 has an invalid length.
[  251.327285][T15250] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.446952][T15262] netlink: 'syz.3.4196': attribute type 4 has an invalid length.
[  251.496277][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.602176][T15272] lo speed is unknown, defaulting to 1000
[  251.878291][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'.
[  251.896530][T15283] loop1: detected capacity change from 0 to 512
[  251.903208][T15283] EXT4-fs: Ignoring removed i_version option
[  251.909364][T15283] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.916579][T15283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  251.928269][T15283] EXT4-fs (loop1): 1 truncate cleaned up
[  251.935144][T15283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.014052][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'.
[  252.114819][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.133357][T15289] netlink: 'syz.1.4204': attribute type 4 has an invalid length.
[  252.174001][T15294] netlink: 'syz.3.4206': attribute type 4 has an invalid length.
[  252.192183][T15296] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  252.192183][T15296]    program syz.1.4207 not setting count and/or reply_len properly
[  252.218399][T15298] loop3: detected capacity change from 0 to 512
[  252.243986][T15298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.256667][T15298] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.296131][T15305] 9pnet_fd: Insufficient options for proto=fd
[  252.320598][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.352778][T15308] netlink: 'syz.3.4211': attribute type 4 has an invalid length.
[  252.367564][T15310] xt_hashlimit: max too large, truncated to 1048576
[  252.375625][T15310] Cannot find set identified by id 0 to match
[  252.394377][T15310] lo speed is unknown, defaulting to 1000
[  252.425621][T15310] siw: device registration error -23
[  252.504073][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'.
[  252.524521][T15312] loop3: detected capacity change from 0 to 512
[  252.555350][T15312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.569779][T15312] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.663425][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.010031][T15340] 9pnet_fd: Insufficient options for proto=fd
[  253.037510][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4218'.
[  253.053953][T15326] loop3: detected capacity change from 0 to 512
[  253.085700][T15326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.114455][T15326] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.180606][T15353] netlink: 'syz.0.4227': attribute type 4 has an invalid length.
[  253.226649][T15355] lo speed is unknown, defaulting to 1000
[  253.260568][T15355] loop1: detected capacity change from 0 to 1024
[  253.267766][T15355] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  253.278815][T15355] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  253.279896][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4226'.
[  253.291630][T15355] JBD2: no valid journal superblock found
[  253.304534][T15355] EXT4-fs (loop1): Could not load journal inode
[  253.320350][T15350] loop5: detected capacity change from 0 to 512
[  253.367574][T15350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.522030][T15350] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.613734][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.698816][T15364] loop1: detected capacity change from 0 to 512
[  253.705703][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.716036][T15364] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  253.725590][T15364] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  253.745598][T15364] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  253.755183][T15364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  253.763519][T15364] System zones: 0-2, 18-18, 34-34
[  253.769005][T15364] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  253.784687][T15364] EXT4-fs (loop1): 1 truncate cleaned up
[  253.951191][T15383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.960216][T15383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.024430][T15388] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  254.024430][T15388]    program syz.0.4238 not setting count and/or reply_len properly
[  254.170068][T15399] loop1: detected capacity change from 0 to 512
[  254.206650][T15399] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.234746][T15399] IPv6: NLM_F_CREATE should be specified when creating new route
[  254.423628][T15408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4243'.
[  254.475783][T15408] loop3: detected capacity change from 0 to 512
[  254.495905][T15408] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.568065][T15425] netlink: 'syz.5.4247': attribute type 4 has an invalid length.
[  254.634883][T15429] loop1: detected capacity change from 0 to 512
[  254.652862][T15429] EXT4-fs: Ignoring removed i_version option
[  254.658940][T15429] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.680487][T15429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  254.694235][T15429] EXT4-fs (loop1): 1 truncate cleaned up
[  255.039389][T15445] selinux_netlink_send: 48 callbacks suppressed
[  255.039476][T15445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15445 comm=syz.1.4255
[  255.104631][T15457] netlink: 'syz.0.4260': attribute type 4 has an invalid length.
[  255.127830][T15460] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  255.127830][T15460]    program syz.5.4262 not setting count and/or reply_len properly
[  255.445024][T15480] xt_hashlimit: max too large, truncated to 1048576
[  255.490307][T15480] lo speed is unknown, defaulting to 1000
[  255.930691][T15492] netlink: 'syz.1.4273': attribute type 4 has an invalid length.
[  256.063303][T15498] xt_hashlimit: max too large, truncated to 1048576
[  256.070701][T15498] Cannot find set identified by id 0 to match
[  256.103992][T15498] lo speed is unknown, defaulting to 1000
[  256.147520][T15504] siw: device registration error -23
[  256.158193][   T29] kauditd_printk_skb: 1511 callbacks suppressed
[  256.158209][   T29] audit: type=1326 audit(1741436749.878:41457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.188253][   T29] audit: type=1326 audit(1741436749.878:41458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.215597][   T29] audit: type=1326 audit(1741436749.878:41459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.239799][   T29] audit: type=1326 audit(1741436749.878:41460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.263483][   T29] audit: type=1326 audit(1741436749.878:41461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.287046][   T29] audit: type=1326 audit(1741436749.878:41462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.310703][   T29] audit: type=1326 audit(1741436749.878:41463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.334277][   T29] audit: type=1326 audit(1741436749.878:41464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.357957][   T29] audit: type=1326 audit(1741436749.878:41465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15501 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  256.416510][T15516] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  256.416510][T15516]    program syz.2.4281 not setting count and/or reply_len properly
[  256.440121][   T29] audit: type=1326 audit(1741436750.138:41466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.2.4281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  256.442709][T15515] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  256.442709][T15515]    program syz.0.4280 not setting count and/or reply_len properly
[  256.617292][T15519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15519 comm=syz.5.4282
[  256.704389][T15524] loop1: detected capacity change from 0 to 512
[  256.710968][T15524] EXT4-fs: Ignoring removed i_version option
[  256.717219][T15524] EXT4-fs: Ignoring removed mblk_io_submit option
[  256.739835][T15524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  256.755800][T15528] netlink: 'syz.2.4285': attribute type 4 has an invalid length.
[  256.767222][T15524] EXT4-fs (loop1): 1 truncate cleaned up
[  256.847126][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.859984][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.889728][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.905062][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.918502][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.933544][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.946914][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  256.971247][T15533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15533 comm=syz.2.4286
[  257.132983][T15541] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  257.132983][T15541]    program syz.3.4291 not setting count and/or reply_len properly
[  257.409055][T15569] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  257.409055][T15569]    program syz.1.4302 not setting count and/or reply_len properly
[  257.457275][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'.
[  257.505541][T15578] netlink: 'syz.5.4305': attribute type 4 has an invalid length.
[  257.777747][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4314'.
[  257.813421][T15600] netlink: 'syz.3.4315': attribute type 4 has an invalid length.
[  258.473471][T15622] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  258.473471][T15622]    program syz.0.4323 not setting count and/or reply_len properly
[  258.581205][T15629] netlink: 'syz.1.4326': attribute type 4 has an invalid length.
[  258.719906][T15639] sg_write: data in/out 1818846731/202 bytes for SCSI command 0xb7-- guessing data in;
[  258.719906][T15639]    program syz.5.4330 not setting count and/or reply_len properly
[  259.444243][T15701] netlink: 'syz.2.4354': attribute type 4 has an invalid length.
[  259.530335][T15710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4360'.
[  259.648525][T15724] 9pnet_fd: Insufficient options for proto=fd
[  259.674059][T15720] xt_hashlimit: max too large, truncated to 1048576
[  259.782026][T15720] lo speed is unknown, defaulting to 1000
[  259.897549][T15740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4373'.
[  259.962777][T15720] siw: device registration error -23
[  260.026344][T15751] 9pnet_fd: Insufficient options for proto=fd
[  260.078216][T15760] netlink: 'syz.2.4382': attribute type 4 has an invalid length.
[  260.127471][T15766] loop1: detected capacity change from 0 to 512
[  260.135783][T15766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  260.146784][T15766] EXT4-fs (loop1): orphan cleanup on readonly fs
[  260.156844][T15766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4381: bg 0: block 248: padding at end of block bitmap is not set
[  260.174652][T15766] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.4381: Failed to acquire dquot type 1
[  260.186832][T15766] EXT4-fs (loop1): 1 truncate cleaned up
[  260.196840][T15774] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  260.196840][T15774]    program syz.2.4386 not setting count and/or reply_len properly
[  260.330620][T15789] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  260.330620][T15789]    program syz.3.4388 not setting count and/or reply_len properly
[  260.417370][T15794] lo speed is unknown, defaulting to 1000
[  260.478188][T15797] 9pnet_fd: Insufficient options for proto=fd
[  260.525536][T15799] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  260.525536][T15799]    program syz.0.4394 not setting count and/or reply_len properly
[  260.776485][T15806] netlink: 'syz.5.4396': attribute type 4 has an invalid length.
[  261.040685][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.049394][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.081253][T15826] netlink: 'syz.2.4403': attribute type 1 has an invalid length.
[  261.162862][   T29] kauditd_printk_skb: 2780 callbacks suppressed
[  261.162876][   T29] audit: type=1326 audit(1741436754.888:44245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.193354][   T29] audit: type=1326 audit(1741436754.908:44246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.3.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  261.216982][   T29] audit: type=1326 audit(1741436754.918:44247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.241219][   T29] audit: type=1326 audit(1741436754.958:44248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.253023][T15833] loop1: detected capacity change from 0 to 8192
[  261.265562][   T29] audit: type=1326 audit(1741436754.968:44249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15788 comm="syz.3.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  261.295436][   T29] audit: type=1326 audit(1741436754.988:44250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.319390][   T29] audit: type=1326 audit(1741436754.988:44251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.343111][   T29] audit: type=1326 audit(1741436754.998:44252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.344918][T15833]  loop1: p2 p3 p4
[  261.366729][   T29] audit: type=1326 audit(1741436754.998:44253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.366771][   T29] audit: type=1326 audit(1741436754.998:44254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.0.4394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fefd163fa25 code=0x7ffc0000
[  261.396897][T15833] loop1: p3 size 100663552 extends beyond EOD, truncated
[  261.425814][T15833] loop1: p4 size 81920 extends beyond EOD, truncated
[  261.471425][T15836] netlink: 'syz.3.4407': attribute type 4 has an invalid length.
[  261.573254][T15843] FAULT_INJECTION: forcing a failure.
[  261.573254][T15843] name failslab, interval 1, probability 0, space 0, times 0
[  261.586280][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.3.4410 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  261.586307][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  261.586362][T15843] Call Trace:
[  261.586370][T15843]  <TASK>
[  261.586387][T15843]  dump_stack_lvl+0xf2/0x150
[  261.586477][T15843]  dump_stack+0x15/0x1a
[  261.586502][T15843]  should_fail_ex+0x24a/0x260
[  261.586603][T15843]  should_failslab+0x8f/0xb0
[  261.586640][T15843]  kmem_cache_alloc_noprof+0x52/0x320
[  261.586699][T15843]  ? dst_alloc+0xc0/0x100
[  261.586719][T15843]  ? __pfx_ip6_dst_gc+0x10/0x10
[  261.586746][T15843]  dst_alloc+0xc0/0x100
[  261.586769][T15843]  ip6_pol_route+0x6ff/0xb90
[  261.586832][T15843]  ? ip6_pol_route+0x385/0xb90
[  261.586867][T15843]  ip6_pol_route_output+0x3f/0x50
[  261.586961][T15843]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  261.587053][T15843]  fib6_rule_lookup+0x137/0x4e0
[  261.587090][T15843]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  261.587126][T15843]  ? __rcu_read_unlock+0x4e/0x70
[  261.587211][T15843]  ? avc_has_perm_noaudit+0x1cc/0x210
[  261.587298][T15843]  ip6_route_output_flags+0x1f1/0x2e0
[  261.587342][T15843]  ip6_dst_lookup_tail+0xae/0xa60
[  261.587397][T15843]  ? _copy_from_iter+0x169/0xd00
[  261.587472][T15843]  ? __rcu_read_unlock+0x4e/0x70
[  261.587499][T15843]  ? __rcu_read_unlock+0x4e/0x70
[  261.587526][T15843]  ip6_sk_dst_lookup_flow+0x49f/0x5b0
[  261.587551][T15843]  ping_v6_sendmsg+0x74f/0xa20
[  261.587642][T15843]  ? avc_has_perm+0xd4/0x160
[  261.587672][T15843]  ? __pfx_ping_v6_sendmsg+0x10/0x10
[  261.587774][T15843]  inet_sendmsg+0xc5/0xd0
[  261.587833][T15843]  __sock_sendmsg+0x102/0x180
[  261.587872][T15843]  __sys_sendto+0x1a8/0x230
[  261.587909][T15843]  __x64_sys_sendto+0x78/0x90
[  261.587934][T15843]  x64_sys_call+0x29fa/0x2dc0
[  261.587973][T15843]  do_syscall_64+0xc9/0x1c0
[  261.588006][T15843]  ? clear_bhb_loop+0x55/0xb0
[  261.588081][T15843]  ? clear_bhb_loop+0x55/0xb0
[  261.588112][T15843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.588168][T15843] RIP: 0033:0x7f44b26ad169
[  261.588249][T15843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.588270][T15843] RSP: 002b:00007f44b0d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  261.588291][T15843] RAX: ffffffffffffffda RBX: 00007f44b28c5fa0 RCX: 00007f44b26ad169
[  261.588306][T15843] RDX: 000000000000fdef RSI: 0000400000000080 RDI: 0000000000000005
[  261.588392][T15843] RBP: 00007f44b0d17090 R08: 0000400000000040 R09: 000000000000001c
[  261.588407][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  261.588422][T15843] R13: 0000000000000000 R14: 00007f44b28c5fa0 R15: 00007fffb3bc48c8
[  261.588474][T15843]  </TASK>
[  261.952421][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4413'.
[  261.992707][T15853] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  261.992707][T15853]    program syz.0.4414 not setting count and/or reply_len properly
[  262.162852][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4418'.
[  262.196450][T15864] netlink: 'syz.5.4417': attribute type 4 has an invalid length.
[  262.210794][T15862] loop3: detected capacity change from 0 to 2048
[  262.356759][T15872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.384918][T15872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.806109][T15889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4427'.
[  263.064165][T15916] netlink: 'syz.1.4434': attribute type 4 has an invalid length.
[  263.073531][T15908] netlink: 'syz.0.4436': attribute type 4 has an invalid length.
[  263.087246][ T3381] lo speed is unknown, defaulting to 1000
[  263.095343][T15918] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4438'.
[  263.133468][T15924] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  263.133468][T15924]    program syz.5.4441 not setting count and/or reply_len properly
[  263.170639][T15922] netlink: 'syz.1.4440': attribute type 4 has an invalid length.
[  263.416311][T15942] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  263.416311][T15942]    program syz.1.4447 not setting count and/or reply_len properly
[  263.726455][T15954] 9pnet_fd: Insufficient options for proto=fd
[  263.807797][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4451'.
[  263.843793][T15960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4453'.
[  264.554073][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4464'.
[  264.607301][T16009] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  264.607301][T16009]    program syz.1.4470 not setting count and/or reply_len properly
[  265.412552][T16039] netlink: 'syz.3.4482': attribute type 1 has an invalid length.
[  265.472498][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4483'.
[  265.819531][T16056] netlink: 'syz.2.4487': attribute type 4 has an invalid length.
[  266.286228][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4490'.
[  266.442177][T16073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'.
[  266.529461][T16039] syz.3.4482 (16039) used greatest stack depth: 6368 bytes left
[  266.582244][   T29] kauditd_printk_skb: 2128 callbacks suppressed
[  266.582260][   T29] audit: type=1326 audit(1741436760.308:46383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.637179][   T29] audit: type=1326 audit(1741436760.338:46384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.660833][   T29] audit: type=1326 audit(1741436760.338:46385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.684517][   T29] audit: type=1326 audit(1741436760.338:46386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.708081][   T29] audit: type=1326 audit(1741436760.338:46387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.731814][   T29] audit: type=1326 audit(1741436760.338:46388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.755370][   T29] audit: type=1326 audit(1741436760.338:46389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.779107][   T29] audit: type=1326 audit(1741436760.338:46390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.808306][T16090] blktrace: Concurrent blktraces are not allowed on loop5
[  266.816203][   T29] audit: type=1326 audit(1741436760.538:46391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.839969][   T29] audit: type=1326 audit(1741436760.538:46392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16083 comm="syz.2.4499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  266.955012][T16095] lo speed is unknown, defaulting to 1000
[  266.987254][T16095] loop1: detected capacity change from 0 to 1024
[  266.994251][T16095] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  267.005198][T16095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  267.015980][T16095] JBD2: no valid journal superblock found
[  267.021791][T16095] EXT4-fs (loop1): Could not load journal inode
[  267.063881][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'.
[  267.208184][T16110] xt_hashlimit: max too large, truncated to 1048576
[  267.229446][T16110] lo speed is unknown, defaulting to 1000
[  267.282356][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4504'.
[  267.304206][T16101] loop1: detected capacity change from 0 to 512
[  267.354256][T16117] selinux_netlink_send: 64 callbacks suppressed
[  267.354276][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.401895][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.463559][T16101] EXT4-fs mount: 12 callbacks suppressed
[  267.463576][T16101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.499119][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.546418][T16101] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.567937][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.623054][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.637532][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.650184][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.673386][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.754527][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.798016][T16117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16117 comm=syz.5.4509
[  267.831907][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.867954][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4514'.
[  268.123924][T16147] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  268.123924][T16147]    program syz.0.4521 not setting count and/or reply_len properly
[  268.124151][T16151] loop5: detected capacity change from 0 to 512
[  268.171992][T16151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.193324][T16151] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.374375][T16162] loop1: detected capacity change from 0 to 512
[  268.391695][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.401103][T16162] EXT4-fs: Ignoring removed i_version option
[  268.407282][T16162] EXT4-fs: Ignoring removed mblk_io_submit option
[  268.433310][T16162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  268.449924][T16162] EXT4-fs (loop1): 1 truncate cleaned up
[  268.462626][T16162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.617403][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.932319][T16185] lo speed is unknown, defaulting to 1000
[  269.010670][T16194] netlink: 'syz.2.4537': attribute type 4 has an invalid length.
[  269.223886][T16211] netlink: 'syz.2.4544': attribute type 4 has an invalid length.
[  269.328620][T16222] loop5: detected capacity change from 0 to 512
[  269.355249][T16225] netlink: 'syz.0.4550': attribute type 4 has an invalid length.
[  269.369625][T16222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.407387][T16222] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  269.614218][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.669753][T16244] netlink: 'syz.5.4556': attribute type 4 has an invalid length.
[  269.810372][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4562'.
[  269.864728][T16255] loop5: detected capacity change from 0 to 2048
[  269.883646][T16261] x_tables: duplicate underflow at hook 2
[  269.917961][T16265] lo speed is unknown, defaulting to 1000
[  269.952166][T16265] loop3: detected capacity change from 0 to 1024
[  269.959198][T16265] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  269.970125][T16265] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  269.982364][T16265] JBD2: no valid journal superblock found
[  269.988117][T16265] EXT4-fs (loop3): Could not load journal inode
[  270.006204][T16267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4565'.
[  270.067968][T16272] netlink: 'syz.3.4569': attribute type 4 has an invalid length.
[  270.084716][T16275] loop1: detected capacity change from 0 to 512
[  270.102114][T16275] EXT4-fs: Ignoring removed i_version option
[  270.108301][T16275] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.126156][T16275] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  270.173746][T16275] EXT4-fs (loop1): 1 truncate cleaned up
[  270.180889][T16275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.313927][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.341013][T16298] xt_hashlimit: max too large, truncated to 1048576
[  270.346119][T16296] lo speed is unknown, defaulting to 1000
[  270.349039][T16298] Cannot find set identified by id 0 to match
[  270.383081][T16296] loop1: detected capacity change from 0 to 1024
[  270.383884][T16298] lo speed is unknown, defaulting to 1000
[  270.390158][T16296] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  270.406475][T16296] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  270.417147][T16296] JBD2: no valid journal superblock found
[  270.417901][T16300] siw: device registration error -23
[  270.423008][T16296] EXT4-fs (loop1): Could not load journal inode
[  270.446875][T16302] netlink: 'syz.0.4582': attribute type 4 has an invalid length.
[  270.492815][T16304] netlink: 'syz.1.4584': attribute type 4 has an invalid length.
[  270.537705][T16312] netlink: 'syz.0.4587': attribute type 4 has an invalid length.
[  270.563524][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'.
[  270.584932][T16318] loop1: detected capacity change from 0 to 2048
[  270.615878][T16324] siw: device registration error -23
[  270.648053][T16326] lo speed is unknown, defaulting to 1000
[  270.673341][T16329] xt_hashlimit: max too large, truncated to 1048576
[  270.680848][T16329] Cannot find set identified by id 0 to match
[  270.696007][T16326] loop5: detected capacity change from 0 to 1024
[  270.703051][T16326] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  270.714087][T16326] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  270.724968][T16326] JBD2: no valid journal superblock found
[  270.730806][T16326] EXT4-fs (loop5): Could not load journal inode
[  270.763666][T16329] lo speed is unknown, defaulting to 1000
[  270.777789][T16337] siw: device registration error -23
[  270.797920][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4599'.
[  270.920518][T16350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4604'.
[  270.929716][T16350] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4604'.
[  271.061567][T16362] loop5: detected capacity change from 0 to 2048
[  271.156136][T16364] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  271.156136][T16364]    program syz.2.4610 not setting count and/or reply_len properly
[  271.317309][T16375] xt_hashlimit: max too large, truncated to 1048576
[  271.325033][T16375] Cannot find set identified by id 0 to match
[  271.344398][T16375] lo speed is unknown, defaulting to 1000
[  271.400233][T16381] siw: device registration error -23
[  271.464080][T16385] netlink: 'syz.3.4618': attribute type 4 has an invalid length.
[  271.487394][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'.
[  271.533887][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4620'.
[  271.595442][   T29] kauditd_printk_skb: 494 callbacks suppressed
[  271.595458][   T29] audit: type=1326 audit(1741436765.318:46887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.648972][   T29] audit: type=1326 audit(1741436765.348:46888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.672723][   T29] audit: type=1326 audit(1741436765.358:46889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.696514][   T29] audit: type=1326 audit(1741436765.358:46890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.720319][   T29] audit: type=1326 audit(1741436765.368:46891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.743959][   T29] audit: type=1326 audit(1741436765.368:46892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.767898][   T29] audit: type=1326 audit(1741436765.368:46893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.791580][   T29] audit: type=1326 audit(1741436765.368:46894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.815189][   T29] audit: type=1326 audit(1741436765.368:46895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.838863][   T29] audit: type=1326 audit(1741436765.368:46896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16363 comm="syz.2.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff14a15fa25 code=0x7ffc0000
[  271.873571][T16395] xt_hashlimit: max too large, truncated to 1048576
[  271.916671][T16395] lo speed is unknown, defaulting to 1000
[  271.997210][T16404] netlink: 'syz.0.4625': attribute type 1 has an invalid length.
[  272.182057][T16413] netlink: 'syz.2.4628': attribute type 4 has an invalid length.
[  272.208537][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'.
[  272.270333][T16419] xt_hashlimit: max too large, truncated to 1048576
[  272.278613][T16419] Cannot find set identified by id 0 to match
[  272.296710][T16419] lo speed is unknown, defaulting to 1000
[  272.342817][T16419] siw: device registration error -23
[  272.390532][T16433] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  272.390532][T16433]    program syz.5.4637 not setting count and/or reply_len properly
[  272.478641][T16440] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  272.478641][T16440]    program syz.2.4638 not setting count and/or reply_len properly
[  272.922122][T16475] netlink: 'syz.1.4651': attribute type 4 has an invalid length.
[  272.955032][T16481] __nla_validate_parse: 3 callbacks suppressed
[  272.955050][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4654'.
[  272.958351][T16480] loop3: detected capacity change from 0 to 512
[  272.979254][T16483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4655'.
[  273.003947][T16480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.018340][T16480] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.039340][T16492] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4656'.
[  273.122353][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.181113][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4666'.
[  273.195652][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4667'.
[  273.290161][T16523] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4671'.
[  273.325578][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4672'.
[  273.350202][T16526] loop5: detected capacity change from 0 to 2048
[  273.399090][T16530] lo speed is unknown, defaulting to 1000
[  273.445181][T16534] loop3: detected capacity change from 0 to 512
[  273.456216][T16530] loop1: detected capacity change from 0 to 1024
[  273.463960][T16530] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  273.475160][T16530] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  273.484822][T16534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  273.497072][T16534] EXT4-fs (loop3): orphan cleanup on readonly fs
[  273.497503][T16530] JBD2: no valid journal superblock found
[  273.509342][T16530] EXT4-fs (loop1): Could not load journal inode
[  273.512355][T16534] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4675: bg 0: block 248: padding at end of block bitmap is not set
[  273.532492][T16534] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4675: Failed to acquire dquot type 1
[  273.552053][T16534] EXT4-fs (loop3): 1 truncate cleaned up
[  273.561059][T16534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  273.590035][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4679'.
[  273.727530][T16555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4683'.
[  273.832335][T16566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.841048][T16566] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.901900][T16568] netlink: 'syz.2.4689': attribute type 4 has an invalid length.
[  273.931594][T16570] netlink: 'syz.2.4690': attribute type 4 has an invalid length.
[  274.141629][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4692'.
[  274.231349][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.366960][T16597] netlink: 'syz.0.4701': attribute type 4 has an invalid length.
[  274.500759][T16604] loop3: detected capacity change from 0 to 2048
[  274.517541][T16608] xt_hashlimit: max too large, truncated to 1048576
[  274.525145][T16608] Cannot find set identified by id 0 to match
[  274.534674][T16610] loop5: detected capacity change from 0 to 512
[  274.541582][T16608] lo speed is unknown, defaulting to 1000
[  274.567018][T16608] siw: device registration error -23
[  274.587050][T16610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.599992][T16610] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.644130][T16619] xt_hashlimit: max too large, truncated to 1048576
[  274.651542][T16619] Cannot find set identified by id 0 to match
[  274.668618][T16619] lo speed is unknown, defaulting to 1000
[  274.686346][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.702045][T16619] siw: device registration error -23
[  274.923869][T16644] netlink: 'syz.2.4719': attribute type 4 has an invalid length.
[  275.418495][T16661] selinux_netlink_send: 25 callbacks suppressed
[  275.418515][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.482957][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.524944][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.567065][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.609716][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.668765][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.713096][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.756398][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.803227][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.834395][T16667] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  275.834395][T16667]    program syz.0.4727 not setting count and/or reply_len properly
[  275.848250][T16661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz.3.4724
[  275.975203][T16674] xt_hashlimit: max too large, truncated to 1048576
[  276.004036][T16674] lo speed is unknown, defaulting to 1000
[  276.037371][T16678] netlink: 'syz.2.4732': attribute type 4 has an invalid length.
[  276.136302][T16687] netlink: 'syz.2.4736': attribute type 4 has an invalid length.
[  276.372689][T16696] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  276.372689][T16696]    program syz.3.4739 not setting count and/or reply_len properly
[  276.478699][T16702] loop3: detected capacity change from 0 to 2048
[  276.871624][T16718] loop3: detected capacity change from 0 to 256
[  276.887797][T16718] FAT-fs (loop3): Directory bread(block 64) failed
[  276.895936][T16718] FAT-fs (loop3): Directory bread(block 65) failed
[  276.905407][T16720] netlink: 'syz.1.4747': attribute type 4 has an invalid length.
[  276.973505][T16718] FAT-fs (loop3): Directory bread(block 66) failed
[  276.981198][T16718] FAT-fs (loop3): Directory bread(block 67) failed
[  277.027082][T16718] FAT-fs (loop3): Directory bread(block 68) failed
[  277.038036][T16718] FAT-fs (loop3): Directory bread(block 69) failed
[  277.051298][T16718] FAT-fs (loop3): Directory bread(block 70) failed
[  277.072136][T16718] FAT-fs (loop3): Directory bread(block 71) failed
[  277.078707][T16718] FAT-fs (loop3): Directory bread(block 72) failed
[  277.085625][T16718] FAT-fs (loop3): Directory bread(block 73) failed
[  277.168641][T16740] xt_hashlimit: max too large, truncated to 1048576
[  277.176227][T16740] Cannot find set identified by id 0 to match
[  277.191334][T16740] lo speed is unknown, defaulting to 1000
[  277.233899][   T29] kauditd_printk_skb: 1027 callbacks suppressed
[  277.233917][   T29] audit: type=1326 audit(1741436770.958:47922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.266093][T16740] siw: device registration error -23
[  277.268326][T16748] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  277.268326][T16748]    program syz.3.4759 not setting count and/or reply_len properly
[  277.289330][   T29] audit: type=1326 audit(1741436770.958:47923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.313095][   T29] audit: type=1326 audit(1741436770.958:47924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.336819][   T29] audit: type=1326 audit(1741436770.958:47925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.360868][   T29] audit: type=1326 audit(1741436770.958:47926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.384900][   T29] audit: type=1326 audit(1741436770.958:47927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.408602][   T29] audit: type=1326 audit(1741436770.958:47928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.432382][   T29] audit: type=1326 audit(1741436770.958:47929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.456808][   T29] audit: type=1326 audit(1741436770.958:47930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  277.480797][   T29] audit: type=1326 audit(1741436770.958:47931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16745 comm="syz.3.4759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  278.135275][T16781] __nla_validate_parse: 15 callbacks suppressed
[  278.135292][T16781] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4771'.
[  278.190741][T16785] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  278.190741][T16785]    program syz.2.4773 not setting count and/or reply_len properly
[  278.252654][T16789] netlink: 'syz.3.4775': attribute type 4 has an invalid length.
[  278.372495][T16799] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  278.372495][T16799]    program syz.5.4779 not setting count and/or reply_len properly
[  278.468366][T16805] netlink: 'syz.3.4782': attribute type 4 has an invalid length.
[  278.501514][T16809] xt_hashlimit: max too large, truncated to 1048576
[  278.531128][T16809] Cannot find set identified by id 0 to match
[  278.550815][T16809] lo speed is unknown, defaulting to 1000
[  278.592831][T16809] siw: device registration error -23
[  278.616911][T16813] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  278.616911][T16813]    program syz.3.4784 not setting count and/or reply_len properly
[  278.810192][T16819] netlink: 'syz.0.4786': attribute type 4 has an invalid length.
[  278.856612][T16823] xt_hashlimit: max too large, truncated to 1048576
[  278.875251][T16823] lo speed is unknown, defaulting to 1000
[  278.909443][T16823] siw: device registration error -23
[  279.325420][T16839] netlink: 'syz.5.4794': attribute type 1 has an invalid length.
[  280.037781][T16866] FAULT_INJECTION: forcing a failure.
[  280.037781][T16866] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  280.051170][T16866] CPU: 0 UID: 0 PID: 16866 Comm: syz.3.4805 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  280.051198][T16866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  280.051210][T16866] Call Trace:
[  280.051217][T16866]  <TASK>
[  280.051225][T16866]  dump_stack_lvl+0xf2/0x150
[  280.051254][T16866]  dump_stack+0x15/0x1a
[  280.051345][T16866]  should_fail_ex+0x24a/0x260
[  280.051381][T16866]  should_fail+0xb/0x10
[  280.051411][T16866]  should_fail_usercopy+0x1a/0x20
[  280.051490][T16866]  strncpy_from_user+0x25/0x210
[  280.051514][T16866]  ? __kmalloc_cache_noprof+0x186/0x320
[  280.051540][T16866]  __se_sys_memfd_create+0x218/0x5a0
[  280.051601][T16866]  __x64_sys_memfd_create+0x31/0x40
[  280.051666][T16866]  x64_sys_call+0x2d4c/0x2dc0
[  280.051693][T16866]  do_syscall_64+0xc9/0x1c0
[  280.051723][T16866]  ? clear_bhb_loop+0x55/0xb0
[  280.051765][T16866]  ? clear_bhb_loop+0x55/0xb0
[  280.051806][T16866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.051834][T16866] RIP: 0033:0x7f44b26ad169
[  280.051849][T16866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.051934][T16866] RSP: 002b:00007f44b0d16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  280.051953][T16866] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007f44b26ad169
[  280.051965][T16866] RDX: 00007f44b0d16ef0 RSI: 0000000000000000 RDI: 00007f44b272ec3c
[  280.051977][T16866] RBP: 0000400000000400 R08: 00007f44b0d16bb7 R09: 00007f44b0d16e40
[  280.051989][T16866] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000001c0
[  280.052000][T16866] R13: 00007f44b0d16ef0 R14: 00007f44b0d16eb0 R15: 0000400000000880
[  280.052018][T16866]  </TASK>
[  280.245416][T16870] loop1: detected capacity change from 0 to 512
[  280.252352][T16870] /dev/loop1: Can't open blockdev
[  280.331694][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4810'.
[  280.367093][T16877] loop3: detected capacity change from 0 to 2048
[  280.438231][T16884] loop5: detected capacity change from 0 to 512
[  280.474428][T16884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.492070][T16884] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.575272][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.719034][T16898] loop5: detected capacity change from 0 to 2048
[  280.728682][T16900] netlink: 'syz.0.4818': attribute type 1 has an invalid length.
[  280.993337][T16909] FAULT_INJECTION: forcing a failure.
[  280.993337][T16909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.006524][T16909] CPU: 1 UID: 0 PID: 16909 Comm: syz.5.4821 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  281.006555][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  281.006571][T16909] Call Trace:
[  281.006580][T16909]  <TASK>
[  281.006639][T16909]  dump_stack_lvl+0xf2/0x150
[  281.006676][T16909]  dump_stack+0x15/0x1a
[  281.006702][T16909]  should_fail_ex+0x24a/0x260
[  281.006739][T16909]  should_fail+0xb/0x10
[  281.006770][T16909]  should_fail_usercopy+0x1a/0x20
[  281.006817][T16909]  _copy_from_iter+0xd5/0xd00
[  281.006850][T16909]  ? alloc_pages_mpol+0x208/0x260
[  281.007012][T16909]  copy_page_from_iter+0x14f/0x280
[  281.007052][T16909]  tun_get_user+0x68b/0x25c0
[  281.007144][T16909]  ? _parse_integer+0x27/0x30
[  281.007176][T16909]  ? ref_tracker_alloc+0x1f5/0x2f0
[  281.007211][T16909]  tun_chr_write_iter+0x188/0x240
[  281.007300][T16909]  vfs_write+0x77b/0x920
[  281.007350][T16909]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  281.007461][T16909]  ksys_write+0xe8/0x1b0
[  281.007507][T16909]  __x64_sys_write+0x42/0x50
[  281.007535][T16909]  x64_sys_call+0x287e/0x2dc0
[  281.007564][T16909]  do_syscall_64+0xc9/0x1c0
[  281.007602][T16909]  ? clear_bhb_loop+0x55/0xb0
[  281.007651][T16909]  ? clear_bhb_loop+0x55/0xb0
[  281.007732][T16909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.007765][T16909] RIP: 0033:0x7fe72e9ebc1f
[  281.007788][T16909] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  281.007810][T16909] RSP: 002b:00007fe72d057000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  281.007843][T16909] RAX: ffffffffffffffda RBX: 00007fe72ec05fa0 RCX: 00007fe72e9ebc1f
[  281.007857][T16909] RDX: 000000000000003e RSI: 0000400000000080 RDI: 00000000000000c8
[  281.007868][T16909] RBP: 00007fe72d057090 R08: 0000000000000000 R09: 0000000000000000
[  281.007880][T16909] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[  281.007891][T16909] R13: 0000000000000000 R14: 00007fe72ec05fa0 R15: 00007fff21cb1b68
[  281.007976][T16909]  </TASK>
[  281.298979][T16919] loop1: detected capacity change from 0 to 512
[  281.326658][T16919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.339574][T16919] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.416902][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.460524][T16932] loop1: detected capacity change from 0 to 2048
[  281.515965][T16941] loop5: detected capacity change from 0 to 512
[  281.550194][T16941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.565700][T16941] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.657441][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.174036][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4849'.
[  282.323261][T16983] netlink: 'syz.0.4850': attribute type 4 has an invalid length.
[  282.425877][T16996] lo speed is unknown, defaulting to 1000
[  282.489260][   T29] kauditd_printk_skb: 1586 callbacks suppressed
[  282.489278][   T29] audit: type=1326 audit(1741436776.208:49518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.540886][   T29] audit: type=1326 audit(1741436776.208:49519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.564934][   T29] audit: type=1326 audit(1741436776.208:49520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.588953][   T29] audit: type=1326 audit(1741436776.208:49521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.612613][   T29] audit: type=1326 audit(1741436776.208:49522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.636537][   T29] audit: type=1326 audit(1741436776.208:49523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.660146][   T29] audit: type=1326 audit(1741436776.208:49524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.683890][   T29] audit: type=1326 audit(1741436776.208:49525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.707590][   T29] audit: type=1326 audit(1741436776.208:49526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.731825][   T29] audit: type=1326 audit(1741436776.208:49527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.0.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  282.763083][T17011] xt_hashlimit: max too large, truncated to 1048576
[  282.770640][T17007] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  282.770640][T17007]    program syz.1.4860 not setting count and/or reply_len properly
[  282.789472][T17011] Cannot find set identified by id 0 to match
[  282.818949][T17011] lo speed is unknown, defaulting to 1000
[  282.867527][T17017] siw: device registration error -23
[  282.930090][T17013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4862'.
[  282.946195][T17021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4865'.
[  283.017708][T17013] loop5: detected capacity change from 0 to 512
[  283.046196][T17013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.082139][T17013] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.286180][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.465670][T17054] xt_hashlimit: max too large, truncated to 1048576
[  283.486436][T17054] Cannot find set identified by id 0 to match
[  283.520808][T17054] lo speed is unknown, defaulting to 1000
[  283.557838][T17054] siw: device registration error -23
[  283.834917][T17076] netlink: 'syz.1.4882': attribute type 4 has an invalid length.
[  283.892231][T17074] netlink: 'syz.0.4881': attribute type 1 has an invalid length.
[  283.941262][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'.
[  283.958770][T17081] netlink: 'syz.3.4883': attribute type 1 has an invalid length.
[  283.977814][T17081] IPv6: NLM_F_CREATE should be specified when creating new route
[  284.054584][T17097] netlink: 'syz.1.4890': attribute type 4 has an invalid length.
[  284.959982][T17132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4902'.
[  284.982945][T17132] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4902'.
[  284.994092][T17132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4902'.
[  285.149288][T17134] loop1: detected capacity change from 0 to 512
[  285.174648][T17134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.187469][T17134] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.282321][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.286712][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.300668][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.318719][T17150] netlink: 'syz.1.4909': attribute type 4 has an invalid length.
[  285.363345][T17155] netlink: 'syz.1.4912': attribute type 4 has an invalid length.
[  285.409397][T17159] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  285.409397][T17159]    program syz.1.4914 not setting count and/or reply_len properly
[  286.196951][T17197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.206613][T17197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.287907][T17201] loop3: detected capacity change from 0 to 2048
[  286.334597][T17203] loop1: detected capacity change from 0 to 512
[  286.355206][T17203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.369396][T17203] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.503659][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.577801][T17230] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  286.577801][T17230]    program syz.1.4943 not setting count and/or reply_len properly
[  286.820536][T17252] siw: device registration error -23
[  286.877508][T17260] netlink: 'syz.0.4954': attribute type 4 has an invalid length.
[  287.188901][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4958'.
[  287.206396][T17271] loop5: detected capacity change from 0 to 512
[  287.215431][T17271] /dev/loop5: Can't open blockdev
[  287.515600][T17291] siw: device registration error -23
[  287.563418][T17295] netlink: 'syz.5.4967': attribute type 4 has an invalid length.
[  287.600126][T17300] xt_hashlimit: max too large, truncated to 1048576
[  287.620087][T17300] Cannot find set identified by id 0 to match
[  287.648261][T17300] lo speed is unknown, defaulting to 1000
[  287.689324][T17300] siw: device registration error -23
[  287.841029][   T29] kauditd_printk_skb: 778 callbacks suppressed
[  287.841044][   T29] audit: type=1326 audit(1741437037.572:50306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  287.881855][   T29] audit: type=1326 audit(1741437037.602:50307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  287.905627][   T29] audit: type=1326 audit(1741437037.602:50308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  287.929442][   T29] audit: type=1326 audit(1741437037.602:50309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  287.953205][   T29] audit: type=1326 audit(1741437037.602:50310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  287.976825][   T29] audit: type=1326 audit(1741437037.602:50311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  288.000617][   T29] audit: type=1326 audit(1741437037.602:50312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  288.024630][   T29] audit: type=1326 audit(1741437037.602:50313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  288.050649][   T29] audit: type=1326 audit(1741437037.602:50314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  288.074393][   T29] audit: type=1326 audit(1741437037.602:50315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.2.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff14a12d169 code=0x7ffc0000
[  288.123186][T17320] lo speed is unknown, defaulting to 1000
[  288.156398][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4971'.
[  288.193122][T17316] loop1: detected capacity change from 0 to 512
[  288.215404][T17316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.228284][T17316] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.360454][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.914248][T17356] siw: device registration error -23
[  288.926226][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4985'.
[  288.946552][T17349] loop5: detected capacity change from 0 to 512
[  288.968502][T17358] netlink: 'syz.2.4989': attribute type 1 has an invalid length.
[  288.978942][T17349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.993526][T17349] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.075343][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.242579][T17387] xt_hashlimit: max too large, truncated to 1048576
[  289.260956][T17387] lo speed is unknown, defaulting to 1000
[  289.292615][T17387] siw: device registration error -23
[  289.379330][T17393] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  289.379330][T17393]    program syz.0.5003 not setting count and/or reply_len properly
[  289.813240][T17412] netlink: 'syz.5.5010': attribute type 1 has an invalid length.
[  290.038426][T17430] lo speed is unknown, defaulting to 1000
[  290.352834][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5025'.
[  290.387393][T17459] loop1: detected capacity change from 0 to 2048
[  290.433460][T17463] lo speed is unknown, defaulting to 1000
[  290.523255][T17470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.534045][T17470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.537296][T17472] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  290.537296][T17472]    program syz.0.5031 not setting count and/or reply_len properly
[  290.657189][T17476] netlink: 'syz.5.5032': attribute type 4 has an invalid length.
[  290.785761][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5036'.
[  291.084335][T17493] lo speed is unknown, defaulting to 1000
[  291.240022][T17506] siw: device registration error -23
[  291.288480][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5041'.
[  291.780016][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5055'.
[  291.797512][T17536] loop5: detected capacity change from 0 to 512
[  291.824274][T17536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.827655][T17545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.837057][T17536] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.847833][T17545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.921841][T13201] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.086463][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5063'.
[  292.410235][T17585] selinux_netlink_send: 23 callbacks suppressed
[  292.410269][T17585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17585 comm=syz.5.5071
[  292.772498][T17597] xt_hashlimit: max too large, truncated to 1048576
[  292.798423][T17597] Cannot find set identified by id 0 to match
[  293.000807][T17597] lo speed is unknown, defaulting to 1000
[  293.024058][T17598] siw: device registration error -23
[  293.151313][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5081'.
[  293.239778][T17606] lo speed is unknown, defaulting to 1000
[  293.332618][T17606] loop3: detected capacity change from 0 to 1024
[  293.339945][T17606] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  293.350902][T17606] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  293.361568][T17606] JBD2: no valid journal superblock found
[  293.367406][T17606] EXT4-fs (loop3): Could not load journal inode
[  293.444586][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5086'.
[  293.640081][T17628] 9pnet_fd: Insufficient options for proto=fd
[  293.738409][   T29] kauditd_printk_skb: 1009 callbacks suppressed
[  293.738428][   T29] audit: type=1326 audit(1741437043.472:51325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.769718][   T29] audit: type=1326 audit(1741437043.472:51326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.793415][   T29] audit: type=1326 audit(1741437043.472:51327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.817014][   T29] audit: type=1326 audit(1741437043.472:51328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.840685][   T29] audit: type=1326 audit(1741437043.472:51329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.864314][   T29] audit: type=1326 audit(1741437043.472:51330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.888063][   T29] audit: type=1326 audit(1741437043.472:51331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.912086][   T29] audit: type=1326 audit(1741437043.472:51332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.935901][   T29] audit: type=1326 audit(1741437043.472:51333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  293.959444][   T29] audit: type=1326 audit(1741437043.472:51334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17632 comm="syz.0.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefd160d169 code=0x7ffc0000
[  294.037347][T17650] loop5: detected capacity change from 0 to 2048
[  294.444131][T17675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17675 comm=syz.5.5107
[  294.468772][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5105'.
[  294.516124][T17657] loop1: detected capacity change from 0 to 512
[  294.623847][T17657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.638065][T17657] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.743333][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.807102][T17683] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  294.807102][T17683]    program syz.2.5114 not setting count and/or reply_len properly
[  294.941187][T17691] netlink: 'syz.1.5116': attribute type 4 has an invalid length.
[  295.163850][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5122'.
[  295.180732][T17703] loop1: detected capacity change from 0 to 512
[  295.208372][T17703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.221298][T17703] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.338850][T12002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.409481][T17719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5127'.
[  295.450428][T17721] netlink: 'syz.1.5128': attribute type 1 has an invalid length.
[  295.935363][T17739] netlink: 'syz.3.5136': attribute type 4 has an invalid length.
[  295.960080][T17741] siw: device registration error -23
[  296.020576][T17747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17747 comm=syz.2.5134
[  296.038329][T17748] xt_hashlimit: max too large, truncated to 1048576
[  296.046196][T17748] Cannot find set identified by id 0 to match
[  296.063470][T17748] lo speed is unknown, defaulting to 1000
[  296.097723][T17748] siw: device registration error -23
[  296.136890][T17754] loop3: detected capacity change from 0 to 2048
[  296.197083][T17758] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  296.197083][T17758]    program syz.3.5145 not setting count and/or reply_len properly
[  296.221124][T17760] netlink: 'syz.5.5146': attribute type 1 has an invalid length.
[  296.614705][T17769] siw: device registration error -23
[  296.638457][T17771] IPv6: NLM_F_CREATE should be specified when creating new route
[  296.841346][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5154'.
[  297.078258][T17785] loop5: detected capacity change from 0 to 2048
[  297.145272][T17791] netlink: 'syz.5.5157': attribute type 1 has an invalid length.
[  297.175653][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.184392][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.563176][T17804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17804 comm=syz.0.5163
[  297.750115][T17812] sd 0:0:1:0: device reset
[  297.810964][T17820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5170'.
[  297.952689][T17824] lo speed is unknown, defaulting to 1000
[  298.029621][T17824] loop1: detected capacity change from 0 to 1024
[  298.036664][T17824] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  298.047599][T17824] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  298.059359][T17824] JBD2: no valid journal superblock found
[  298.065228][T17824] EXT4-fs (loop1): Could not load journal inode
[  298.124157][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'.
[  298.147819][T17832] loop1: detected capacity change from 0 to 2048
[  298.246873][T17845] netlink: 'syz.3.5182': attribute type 4 has an invalid length.
[  298.256289][T17844] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  298.735165][T17874] loop3: detected capacity change from 0 to 1024
[  298.742023][T17874] EXT4-fs: Ignoring removed bh option
[  298.747447][T17874] EXT4-fs: Ignoring removed bh option
[  298.753103][T17874] EXT4-fs: Ignoring removed mblk_io_submit option
[  298.763294][T17874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.780945][   T29] kauditd_printk_skb: 731 callbacks suppressed
[  298.780960][   T29] audit: type=1326 audit(1741437048.512:52066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.811058][   T29] audit: type=1326 audit(1741437048.512:52067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.834711][   T29] audit: type=1326 audit(1741437048.512:52068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.858442][   T29] audit: type=1326 audit(1741437048.522:52069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.870043][T17874] tipc: Started in network mode
[  298.882098][   T29] audit: type=1326 audit(1741437048.522:52070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.887051][T17874] tipc: Node identity ac14140f, cluster identity 4711
[  298.910695][   T29] audit: type=1326 audit(1741437048.572:52071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.926406][T17874] tipc: New replicast peer: 255.255.255.255
[  298.940973][   T29] audit: type=1326 audit(1741437048.572:52072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.947125][T17874] tipc: Enabled bearer <udp:syz2>, priority 10
[  298.970484][   T29] audit: type=1326 audit(1741437048.582:52073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  298.978713][T17876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=17876 comm=syz.3.5192
[  299.000148][   T29] audit: type=1326 audit(1741437048.582:52074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  299.000191][   T29] audit: type=1326 audit(1741437048.582:52075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.3.5192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f44b26ad169 code=0x7ffc0000
[  299.079790][T17878] siw: device registration error -23
[  299.159209][T12572] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.261585][T17899] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  299.261585][T17899]    program syz.2.5203 not setting count and/or reply_len properly
[  299.326672][T17902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17902 comm=syz.1.5195
[  299.479168][T17909] loop3: detected capacity change from 0 to 2048
[  299.655194][T17912] loop3: detected capacity change from 0 to 8192
[  299.893316][T17912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5207'.
[  300.061802][ T4132] tipc: Node number set to 2886997007
[  300.190884][T17937] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  300.190884][T17937]    program syz.0.5217 not setting count and/or reply_len properly
[  300.237806][T17942] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in;
[  300.237806][T17942]    program syz.1.5218 not setting count and/or reply_len properly
[  300.303535][T17951] ==================================================================
[  300.311670][T17951] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk
[  300.319427][T17951] 
[  300.321759][T17951] write to 0xffff888103432310 of 8 bytes by task 17950 on cpu 0:
[  300.329673][T17951]  mas_wr_store_entry+0x1222/0x23f0
[  300.335050][T17951]  mas_store_prealloc+0x6bf/0x960
[  300.340105][T17951]  commit_merge+0x441/0x740
[  300.344670][T17951]  vma_expand+0x211/0x360
[  300.349019][T17951]  vma_merge_new_range+0x2da/0x340
[  300.354158][T17951]  mmap_region+0x7e0/0x1620
[  300.358675][T17951]  do_mmap+0x98a/0xc30
[  300.362764][T17951]  vm_mmap_pgoff+0x16d/0x2d0
[  300.367369][T17951]  ksys_mmap_pgoff+0xd0/0x330
[  300.372063][T17951]  x64_sys_call+0x1940/0x2dc0
[  300.376757][T17951]  do_syscall_64+0xc9/0x1c0
[  300.381275][T17951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.387181][T17951] 
[  300.389737][T17951] read to 0xffff888103432310 of 8 bytes by task 17951 on cpu 1:
[  300.397369][T17951]  mtree_range_walk+0x1b4/0x460
[  300.402237][T17951]  mas_walk+0x16e/0x320
[  300.406406][T17951]  lock_vma_under_rcu+0x95/0x270
[  300.411347][T17951]  exc_page_fault+0x150/0x650
[  300.416124][T17951]  asm_exc_page_fault+0x26/0x30
[  300.420985][T17951] 
[  300.423308][T17951] value changed: 0x00007ff148776fff -> 0xffffffff855330f0
[  300.430414][T17951] 
[  300.432735][T17951] Reported by Kernel Concurrency Sanitizer on:
[  300.438886][T17951] CPU: 1 UID: 0 PID: 17951 Comm: syz.2.5223 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0
[  300.449654][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  300.459805][T17951] ==================================================================
[  300.475014][T17952] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5223'.
[  300.485030][T17952] Cannot find map_set index 0 as target