last executing test programs:

2.056597808s ago: executing program 3 (id=348):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080d0}, 0x14)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20004811)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000a00))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32], 0x44}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10a, 0x10a, 0x6, [@struct={0x1, 0x3, 0x0, 0x4, 0x1, 0xfffffffe, [{0x6, 0x1, 0xfffffff8}, {0x3, 0x2, 0xfffffffb}, {0x4, 0x0, 0x4}]}, @fwd={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x3}}, @union={0xd, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xe, 0x1, 0x8}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @datasec={0x2, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x9, 0x5}, {0x2, 0x2}, {0x3, 0x8, 0x6}, {0x4, 0x1, 0x89}], 'zz'}, @enum64={0x8, 0x6, 0x0, 0x13, 0x0, 0x17, [{0x6, 0x0, 0xfffffffd}, {0xb, 0x3, 0xa}, {0x7, 0x7ff, 0x48c}, {0xb, 0x2, 0xfffffffd}, {0x7, 0x7, 0x400}, {0x6, 0x1, 0x400}]}]}, {0x0, [0x0, 0x30, 0x61, 0x2e]}}, &(0x7f0000000700)=""/71, 0x12a, 0x47, 0x1, 0x6, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={&(0x7f00000007c0)=""/61, 0x3d, <r6=>0x0, &(0x7f0000000800)=""/129, 0x81}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xe, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000ffffffff00000000ff0f000018310000020000000000000000000000182b0000", @ANYRES32=r2, @ANYBLOB="000000000231b0006e3d05c4a2a9464e2358f50a5e5500faffffff9500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x2f, 0x0, 0x0, 0x41100, 0x9, '\x00', r4, @sk_skb=0x4, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.96117917s ago: executing program 3 (id=349):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203, 0x0, r1}, &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101})
io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0)
r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
ioctl$TIOCMIWAIT(r9, 0x545c, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8)

1.466197288s ago: executing program 1 (id=357):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400250}, &(0x7f0000000340), &(0x7f0000000040))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000007000000020000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000062200d5f0a47b32d000000000000007ee3d21cb103558e98a5b218db7d9b639e5678861da39273ff761db3a0008df26e8bc2d6d3c1a41f4ef72df68750e3f0b10338e8c590d9d855e6ce56b4090a995082a523ac2c3a885d5a7827403bd621a92200622263e2a8c5e4c5e476f45241f18f2ba5b21cb3f159ed4978e01f6806832de362eab11394c96e4f8576c55057d22d91b64e228956f3aac61dcb46b1ae49726fb037c5bf08000ec9ed995c815582d8bd7879ee28ab94c30a2eb2fb1ee7bf23cdafe2528a8398477d547ada21331d0b967855d0616f176e1b88befec3129e63795ed5de8bda7c367f82b431"], 0x50)
semget$private(0x0, 0x4000000009, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)

1.31972086s ago: executing program 4 (id=358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x4ab}, 0x18)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}}}, 0x24}}, 0x10)

1.31875568s ago: executing program 4 (id=359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00bd449f8849a2040000000500000000000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r7 = socket$inet6(0xa, 0x3, 0x3c)
writev(r7, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r10=>0x0})
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r11, 0x89f0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0x0, "5dee000000594000"})
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0xfff1, 0xe}, {0x0, 0xfff6}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x0, 0x3, r10, 0x800}, 0xffffffffffffff90)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, 0xfffffffffffffffc, &(0x7f0000000140))
socket(0x400000000010, 0x3, 0x0)

1.114746623s ago: executing program 4 (id=366):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)

1.113721583s ago: executing program 3 (id=367):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32=<r11=>0xffffffffffffffff, @ANYRES16, @ANYRES32=r3, @ANYRES32], 0x50, 0x24040084}, 0x24004000)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r9)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r7, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r8, @ANYRESDEC=r11, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001100)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@discard}, {@lazytime}, {@noload}], [{@fowner_lt={'fowner<', r8}}, {@dont_hash}, {@hash}]}, 0x3, 0x45d, &(0x7f0000002400)="$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")
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20a0000, &(0x7f0000000500)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}, {@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34, 0x78, 0x51, 0x37, 0x67, 0x74, 0x34]}}, {@uid={'uid', 0x3d, r1}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x33, 0x37, 0x30]}}, {@gid={'gid', 0x3d, r2}}], [{@smackfshat={'smackfshat', 0x3d, 'veth0_to_team\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@flag='rw'}]})
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r13=>0x0})
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x88}, 0x40001)

938.899766ms ago: executing program 3 (id=369):
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000010000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10)
fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0)

926.383126ms ago: executing program 4 (id=370):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='io_uring_file_get\x00', r0, 0x0, 0x26a0b27b}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x8031, 0xffffffffffffffff, 0xabfc7000)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000400)="b101b48e382b36f0d7e762cc124e0bf6e60dc1450c6565031c9847ac3cd6e32164e82161dc177c35a1ee0a14490dd143cd08bdb0fb996a5c85f34031e154a4837e1599b22f78e94fe7e2ceb01025ec0f501a901c42843f851783644e8725846f0cf62e20")
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000008180100002020702500000000002020207b1af8ff00000000bfa100000000000007210000f8ffffffb702000000000000b703000000000000850000002d00000095662841a892a759"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(0x0, 0x0)
ptrace(0x10, r3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_set$pid(0x1, r3, 0x4007)
socket(0x15, 0x5, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0)
pwritev(r6, &(0x7f00000000c0), 0x0, 0x0, 0x2)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})

914.620616ms ago: executing program 3 (id=371):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1}, 0x18)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='afs_get_tree\x00'}, 0x18)
openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000001640)=ANY=[], 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400250}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)

731.552739ms ago: executing program 0 (id=374):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)
preadv(r2, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/136, 0x88}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000640)=""/206, 0xce}], 0x6, 0x40, 0x400)
socket(0x18, 0x3, 0x3)

703.720089ms ago: executing program 4 (id=375):
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200"], 0x1c}}, 0x0)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="8cff7cf9080000005745204c696e7578"], 0x2000)

656.02271ms ago: executing program 2 (id=376):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000040000fffe0a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001e00000020000000000000000000000000a0100ff000000000000000000000000fe8000000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0)

655.68283ms ago: executing program 0 (id=377):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (fail_nth: 7)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4a00)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})

637.96308ms ago: executing program 4 (id=378):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

620.62144ms ago: executing program 2 (id=379):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f0000000000))
r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt(0xffffffffffffffff, 0xff, 0x80000006, 0x0, &(0x7f0000000000))
ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000080)={0x1, 0xf, 0xf})
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r8}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x4a00)
setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})

581.885221ms ago: executing program 1 (id=380):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r3}, 0x18)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r6, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES16=0x0, @ANYRES32, @ANYRES32=<r11=>0xffffffffffffffff, @ANYRES16, @ANYRES32=r3, @ANYRES32], 0x50, 0x24040084}, 0x24004000)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r9)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r7, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r8, @ANYRESDEC=r11, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001100)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@discard}, {@lazytime}, {@noload}], [{@fowner_lt={'fowner<', r8}}, {@dont_hash}, {@hash}]}, 0x3, 0x45d, &(0x7f0000002400)="$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")
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20a0000, &(0x7f0000000500)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}, {@quota}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34, 0x78, 0x51, 0x37, 0x67, 0x74, 0x34]}}, {@uid={'uid', 0x3d, r1}}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x33, 0x37, 0x30]}}, {@gid={'gid', 0x3d, r2}}], [{@smackfshat={'smackfshat', 0x3d, 'veth0_to_team\x00'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@flag='rw'}]})
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r13=>0x0})
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x88}, 0x40001)

325.048985ms ago: executing program 0 (id=381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)='%pS    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)

118.208968ms ago: executing program 2 (id=382):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xe3b9}, 0x18)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd8}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000)

117.702348ms ago: executing program 1 (id=383):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
fchdir(r0)
acct(&(0x7f00000005c0)='./cgroup\x00')

117.155698ms ago: executing program 1 (id=384):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0xf80}], 0x1)

115.583258ms ago: executing program 1 (id=385):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000600), 0x2, 0x56a, &(0x7f00000015c0)="$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")
socket(0x2c, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000000)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@mcast2, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4000002, 0x1001, 0x2, 0x900, 0xfffffffffffffffa, 0x802a0, r4})
socket$inet(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0)

115.039168ms ago: executing program 2 (id=386):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0xf00}], 0x1)

103.764278ms ago: executing program 0 (id=387):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xf43b000) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x3, 0x4}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0x7, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}]}]}, 0x54}}, 0x4048000) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', <r6=>0x0, 0x4, 0x0, 0x11, 0xfffffff9, 0x40, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x700, 0x8000, 0x4bc, 0x6}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r7=>0x0, 0x4, 0x1, 0x4f, 0xd, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x10, 0x200, 0xffff}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000b40)={'sit0\x00', <r8=>0x0, 0x700, 0x700, 0x2, 0x0, {{0x48, 0x4, 0x1, 0x1f, 0x120, 0x64, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x6d, 0x1, 0x7, [{@remote, 0x9}, {@broadcast, 0x401}, {@local, 0x8000}, {@private=0xa010100, 0x2}, {@local, 0xfffffc00}, {@private=0xa010100, 0x5}]}, @lsrr={0x83, 0x23, 0xd9, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0x2b, 0xa4, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @multicast1, @private=0xa010101, @remote, @multicast1, @empty, @local]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0xc, [{@multicast1, 0x2}]}, @cipso={0x86, 0x6, 0x3}, @noop, @ssrr={0x89, 0x7, 0x6b, [@dev={0xac, 0x14, 0x14, 0x2f}]}, @lsrr={0x83, 0x1f, 0xf0, [@remote, @private=0xa010100, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @timestamp_addr={0x44, 0x14, 0xe9, 0x1, 0x1, [{@multicast1, 0x7f}, {@local, 0x1967}]}, @ssrr={0x89, 0xf, 0x9d, [@remote, @private=0xa010102, @private=0xa010102]}, @timestamp_addr={0x44, 0x2c, 0x69, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@multicast2, 0x61}, {@loopback, 0x6}, {@rand_addr=0x64010101}, {@empty, 0x6}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)={0xd4, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80d4}, 0x8001) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x7ff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x18) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

103.370108ms ago: executing program 2 (id=388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x2000000, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x5c}}, 0x0)

103.107198ms ago: executing program 0 (id=389):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000210001000000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000040000fffe0a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001e00000020000000000000000000000000a0100ff000000000000000000000000fe8000000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0)

102.924178ms ago: executing program 2 (id=390):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200000e00000000000000", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x50)
syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x3, 0x400250}, &(0x7f0000000340), &(0x7f0000000040))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000007000000020000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000062200d5f0a47b32d000000000000007ee3d21cb103558e98a5b218db7d9b639e5678861da39273ff761db3a0008df26e8bc2d6d3c1a41f4ef72df68750e3f0b10338e8c590d9d855e6ce56b4090a995082a523ac2c3a885d5a7827403bd621a92200622263e2a8c5e4c5e476f45241f18f2ba5b21cb3f159ed4978e01f6806832de362eab11394c96e4f8576c55057d22d91b64e228956f3aac61dcb46b1ae49726fb037c5bf08000ec9ed995c815582d8bd7879ee28ab94c30a2eb2fb1ee7bf23cdafe2528a8398477d547ada21331d0b967855d0616f176e1b88befec3129e63795ed5de8bda7c367f82b431"], 0x50)
semget$private(0x0, 0x4000000009, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1)

102.119558ms ago: executing program 0 (id=391):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', <r1=>0x0, 0x10, 0x0, 0x9, 0x4, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @broadcast, {[@noop, @lsrr={0x83, 0xb, 0x75, [@multicast1, @multicast1]}, @lsrr={0x83, 0xb, 0x7c, [@private=0xa010100, @private=0xa010102]}, @ssrr={0x89, 0xf, 0xb1, [@local, @private=0xa010102, @remote]}, @ssrr={0x89, 0x1b, 0xbc, [@private=0xa010100, @multicast2, @multicast1, @empty, @loopback, @empty]}, @noop, @timestamp_prespec={0x44, 0x24, 0x80, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010101, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x4}]}}]}, 0x38}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x14, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x68040200)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
setgroups(0xefff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000740)="$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")
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x4, 0x1ff, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54)

81.836358ms ago: executing program 1 (id=392):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x8000000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x40)

0s ago: executing program 3 (id=393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}}, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10)
getpriority(0x1, 0x0)
ftruncate(r4, 0x2000009)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1)
statfs(&(0x7f0000000200)='.\x00', 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="008000001cbcf71a1c0012800800010067726500100002800400"/36], 0x3c}, 0x1, 0x0, 0x0, 0x4844}, 0x8050)
write$cgroup_type(r3, &(0x7f0000000280), 0xfffffeed)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r10, 0x0, 0x178}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.10.54' (ED25519) to the list of known hosts.
[   27.898597][   T29] audit: type=1400 audit(1752612634.153:62): avc:  denied  { mounton } for  pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.899775][ T3294] cgroup: Unknown subsys name 'net'
[   27.921429][   T29] audit: type=1400 audit(1752612634.153:63): avc:  denied  { mount } for  pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.949049][   T29] audit: type=1400 audit(1752612634.173:64): avc:  denied  { unmount } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   28.089495][ T3294] cgroup: Unknown subsys name 'cpuset'
[   28.095830][ T3294] cgroup: Unknown subsys name 'rlimit'
[   28.286504][   T29] audit: type=1400 audit(1752612634.533:65): avc:  denied  { setattr } for  pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   28.309930][   T29] audit: type=1400 audit(1752612634.533:66): avc:  denied  { create } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.328966][ T3297] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   28.330371][   T29] audit: type=1400 audit(1752612634.533:67): avc:  denied  { write } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   28.359379][   T29] audit: type=1400 audit(1752612634.533:68): avc:  denied  { read } for  pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   28.380160][   T29] audit: type=1400 audit(1752612634.543:69): avc:  denied  { mounton } for  pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   28.404997][   T29] audit: type=1400 audit(1752612634.543:70): avc:  denied  { mount } for  pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   28.411427][ T3294] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   28.428601][   T29] audit: type=1400 audit(1752612634.593:71): avc:  denied  { relabelto } for  pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   30.431494][ T3310] chnl_net:caif_netlink_parms(): no params data found
[   30.440631][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   30.458885][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   30.483412][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   30.492580][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   30.575649][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.582853][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.590088][ T3305] bridge_slave_0: entered allmulticast mode
[   30.596597][ T3305] bridge_slave_0: entered promiscuous mode
[   30.622201][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.629319][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.636459][ T3305] bridge_slave_1: entered allmulticast mode
[   30.642921][ T3305] bridge_slave_1: entered promiscuous mode
[   30.654005][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.661185][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.668448][ T3310] bridge_slave_0: entered allmulticast mode
[   30.674890][ T3310] bridge_slave_0: entered promiscuous mode
[   30.701131][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.708462][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.715616][ T3310] bridge_slave_1: entered allmulticast mode
[   30.722090][ T3310] bridge_slave_1: entered promiscuous mode
[   30.728429][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.735565][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.742789][ T3304] bridge_slave_0: entered allmulticast mode
[   30.749501][ T3304] bridge_slave_0: entered promiscuous mode
[   30.760354][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.767430][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.774596][ T3313] bridge_slave_0: entered allmulticast mode
[   30.780951][ T3313] bridge_slave_0: entered promiscuous mode
[   30.788289][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.797461][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.804680][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.811830][ T3313] bridge_slave_1: entered allmulticast mode
[   30.818188][ T3313] bridge_slave_1: entered promiscuous mode
[   30.834792][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.841905][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.849127][ T3304] bridge_slave_1: entered allmulticast mode
[   30.855511][ T3304] bridge_slave_1: entered promiscuous mode
[   30.866763][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.873863][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.881144][ T3306] bridge_slave_0: entered allmulticast mode
[   30.887572][ T3306] bridge_slave_0: entered promiscuous mode
[   30.894993][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.911149][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.925289][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.932394][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.939537][ T3306] bridge_slave_1: entered allmulticast mode
[   30.945944][ T3306] bridge_slave_1: entered promiscuous mode
[   30.963003][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.973303][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.983611][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.993631][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.023358][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.043083][ T3305] team0: Port device team_slave_0 added
[   31.063199][ T3313] team0: Port device team_slave_0 added
[   31.069955][ T3313] team0: Port device team_slave_1 added
[   31.076788][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.086502][ T3305] team0: Port device team_slave_1 added
[   31.092956][ T3310] team0: Port device team_slave_0 added
[   31.099706][ T3310] team0: Port device team_slave_1 added
[   31.106197][ T3304] team0: Port device team_slave_0 added
[   31.121723][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.140222][ T3304] team0: Port device team_slave_1 added
[   31.146158][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.153143][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.179228][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.214158][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.221250][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.247303][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.263519][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.270546][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.296594][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.307747][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.314813][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.340804][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.351750][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.358756][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.384723][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.395711][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.402696][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.428813][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.442396][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.449397][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.475835][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.487186][ T3306] team0: Port device team_slave_0 added
[   31.493995][ T3306] team0: Port device team_slave_1 added
[   31.507221][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.514302][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.540342][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.585275][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.592405][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.618454][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.630201][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.637222][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.663234][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.690739][ T3305] hsr_slave_0: entered promiscuous mode
[   31.696855][ T3305] hsr_slave_1: entered promiscuous mode
[   31.711578][ T3313] hsr_slave_0: entered promiscuous mode
[   31.718188][ T3313] hsr_slave_1: entered promiscuous mode
[   31.724167][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.731765][ T3313] Cannot create hsr debugfs directory
[   31.739380][ T3310] hsr_slave_0: entered promiscuous mode
[   31.745360][ T3310] hsr_slave_1: entered promiscuous mode
[   31.751365][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.758984][ T3310] Cannot create hsr debugfs directory
[   31.771918][ T3304] hsr_slave_0: entered promiscuous mode
[   31.777978][ T3304] hsr_slave_1: entered promiscuous mode
[   31.784071][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.791844][ T3304] Cannot create hsr debugfs directory
[   31.863477][ T3306] hsr_slave_0: entered promiscuous mode
[   31.869474][ T3306] hsr_slave_1: entered promiscuous mode
[   31.875366][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   31.882984][ T3306] Cannot create hsr debugfs directory
[   32.047637][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.056370][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   32.065430][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   32.076319][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   32.101456][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   32.110408][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   32.121895][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   32.131387][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   32.164101][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.175210][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.184028][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.196416][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.227605][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   32.238829][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   32.247691][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   32.257228][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   32.270320][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.309193][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   32.324612][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   32.335648][ T1784] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.342780][ T1784] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.359398][ T1784] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.366521][ T1784] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.374728][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   32.383973][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   32.393690][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   32.428697][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.442420][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.461149][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.476574][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   32.494138][ T3310] 8021q: adding VLAN 0 to HW filter on device team0
[   32.504898][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.520982][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   32.530808][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.538095][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.556783][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.564113][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.573068][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.580146][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.592597][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.599757][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.608337][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.615516][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.654116][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.661234][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.673633][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   32.690404][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   32.736787][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.759278][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   32.779688][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   32.786806][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   32.795786][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   32.802999][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   32.824504][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.865689][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.907815][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   32.947027][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.020957][ T3313] veth0_vlan: entered promiscuous mode
[   33.030954][ T3313] veth1_vlan: entered promiscuous mode
[   33.077304][ T3304] veth0_vlan: entered promiscuous mode
[   33.097038][ T3313] veth0_macvtap: entered promiscuous mode
[   33.109928][ T3305] veth0_vlan: entered promiscuous mode
[   33.115867][ T3313] veth1_macvtap: entered promiscuous mode
[   33.134308][ T3304] veth1_vlan: entered promiscuous mode
[   33.146360][ T3306] veth0_vlan: entered promiscuous mode
[   33.159693][ T3305] veth1_vlan: entered promiscuous mode
[   33.168523][ T3306] veth1_vlan: entered promiscuous mode
[   33.177131][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.201851][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.212258][ T3310] veth0_vlan: entered promiscuous mode
[   33.223525][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.232346][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.241148][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.250218][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.262919][ T3304] veth0_macvtap: entered promiscuous mode
[   33.272987][ T3304] veth1_macvtap: entered promiscuous mode
[   33.284925][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.293281][ T3310] veth1_vlan: entered promiscuous mode
[   33.308318][ T3305] veth0_macvtap: entered promiscuous mode
[   33.316295][ T3306] veth0_macvtap: entered promiscuous mode
[   33.326391][   T29] kauditd_printk_skb: 9 callbacks suppressed
[   33.326404][   T29] audit: type=1400 audit(1752612639.573:81): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.hIWudW/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   33.339384][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.368042][   T29] audit: type=1400 audit(1752612639.573:82): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   33.380886][ T3305] veth1_macvtap: entered promiscuous mode
[   33.390040][   T29] audit: type=1400 audit(1752612639.573:83): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.hIWudW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   33.406557][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.420883][   T29] audit: type=1400 audit(1752612639.573:84): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   33.420915][   T29] audit: type=1400 audit(1752612639.573:85): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.hIWudW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   33.429590][ T3306] veth1_macvtap: entered promiscuous mode
[   33.449878][   T29] audit: type=1400 audit(1752612639.573:86): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/root/syzkaller.hIWudW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   33.480372][ T3310] veth0_macvtap: entered promiscuous mode
[   33.482099][   T29] audit: type=1400 audit(1752612639.573:87): avc:  denied  { unmount } for  pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   33.511857][ T3310] veth1_macvtap: entered promiscuous mode
[   33.543089][   T29] audit: type=1400 audit(1752612639.613:88): avc:  denied  { mounton } for  pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   33.545776][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.566000][   T29] audit: type=1400 audit(1752612639.613:89): avc:  denied  { mount } for  pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   33.597401][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.606213][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.614955][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.624634][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   33.640968][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.663739][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.672603][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.681371][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.690114][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.699232][   T29] audit: type=1400 audit(1752612639.943:90): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   33.721544][ T3473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   33.740728][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.753273][ T3473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3473 comm=syz.2.3
[   33.759335][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0
[   33.786159][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.800116][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1
[   33.808865][ T3473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   33.827329][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.836195][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.844965][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.853987][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.868249][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   33.877049][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   33.885910][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   33.894846][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   33.928615][ T3479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   33.957533][ T3481] loop1: detected capacity change from 0 to 1024
[   33.975439][ T3481] =======================================================
[   33.975439][ T3481] WARNING: The mand mount option has been deprecated and
[   33.975439][ T3481]          and is ignored by this kernel. Remove the mand
[   33.975439][ T3481]          option from the mount to silence this warning.
[   33.975439][ T3481] =======================================================
[   34.045629][ T3481] EXT4-fs: Ignoring removed bh option
[   34.072519][ T3481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.118103][    C0] hrtimer: interrupt took 26261 ns
[   34.214848][ T3501] netlink: 'syz.4.10': attribute type 1 has an invalid length.
[   34.222620][ T3501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10'.
[   34.235624][ T3481] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[   34.254405][ T3481] EXT4-fs (loop1): Remounting filesystem read-only
[   34.279507][ T3481] syz.1.2 (3481) used greatest stack depth: 10392 bytes left
[   34.287867][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.318691][ T3504] loop3: detected capacity change from 0 to 512
[   34.325469][ T3504] ext4: Unknown parameter 'nouser_xattr'
[   34.445553][ T3514] lo speed is unknown, defaulting to 1000
[   34.452113][ T3514] lo speed is unknown, defaulting to 1000
[   34.468261][ T3514] lo speed is unknown, defaulting to 1000
[   34.492997][ T3514] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   34.514623][ T3514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   34.528804][ T3517] loop1: detected capacity change from 0 to 512
[   34.537547][ T3517] journal_path: Non-blockdev passed as './bus'
[   34.543804][ T3517] EXT4-fs: error: could not find journal device path
[   34.547522][ T3514] lo speed is unknown, defaulting to 1000
[   34.562335][ T3514] lo speed is unknown, defaulting to 1000
[   34.570972][ T3514] lo speed is unknown, defaulting to 1000
[   34.574430][ T3517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3517 comm=syz.1.14
[   34.583551][ T3514] lo speed is unknown, defaulting to 1000
[   34.595572][ T3514] lo speed is unknown, defaulting to 1000
[   34.725028][ T3522] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16'.
[   34.730388][ T3530] loop4: detected capacity change from 0 to 1024
[   34.741126][ T3530] EXT4-fs: Ignoring removed bh option
[   34.749102][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.815898][ T3522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'.
[   34.824974][ T3522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'.
[   34.828305][ T3530] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[   34.858864][ T3530] EXT4-fs (loop4): Remounting filesystem read-only
[   34.890536][ T3534] Zero length message leads to an empty skb
[   34.897790][ T3537] loop2: detected capacity change from 0 to 2048
[   34.931143][ T3537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.987753][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.027966][ T3547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'.
[   35.049861][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   35.112857][ T3552] lo speed is unknown, defaulting to 1000
[   35.125801][ T3551] loop4: detected capacity change from 0 to 512
[   35.150898][ T3551] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   35.215896][ T3551] EXT4-fs (loop4): mount failed
[   35.286127][ T3560] loop0: detected capacity change from 0 to 512
[   35.312614][ T3560] EXT4-fs error (device loop0): ext4_quota_enable:7124: comm syz.0.25: inode #32768: comm syz.0.25: iget: illegal inode #
[   35.333140][ T3560] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.25: Bad quota inode: 32768, type: 2
[   35.333398][ T3560] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   35.333808][ T3560] EXT4-fs (loop0): mount failed
[   35.427853][ T3567] siw: device registration error -23
[   35.438133][ T3567] loop4: detected capacity change from 0 to 512
[   35.445212][ T3567] journal_path: Non-blockdev passed as './bus'
[   35.451498][ T3567] EXT4-fs: error: could not find journal device path
[   35.462655][ T3567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3567 comm=syz.4.27
[   35.670959][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.697442][ T3571] loop0: detected capacity change from 0 to 512
[   35.711186][ T3573] loop2: detected capacity change from 0 to 512
[   35.711921][ T3571] EXT4-fs error (device loop0): ext4_quota_enable:7124: comm syz.0.29: inode #32768: comm syz.0.29: iget: illegal inode #
[   35.730490][ T3573] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   35.733080][ T3571] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.29: Bad quota inode: 32768, type: 2
[   35.756908][ T3573] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #4: comm syz.2.30: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 9, max 4(4), depth 0(0)
[   35.760379][ T3571] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   35.790031][ T3571] EXT4-fs (loop0): mount failed
[   35.792374][ T3573] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.30: Bad quota inode: 4, type: 1
[   35.806268][ T3573] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   35.822351][ T3573] EXT4-fs (loop2): mount failed
[   35.863935][ T3510] syz.3.13 (3510) used greatest stack depth: 9888 bytes left
[   35.932924][ T3587] sctp: [Deprecated]: syz.0.34 (pid 3587) Use of struct sctp_assoc_value in delayed_ack socket option.
[   35.932924][ T3587] Use struct sctp_sack_info instead
[   35.964327][ T3589] mmap: syz.3.35 (3589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   35.995056][ T3594] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.38'.
[   36.010394][ T3589] loop3: detected capacity change from 0 to 1024
[   36.025527][ T3589] EXT4-fs: Ignoring removed orlov option
[   36.029134][ T3599] siw: device registration error -23
[   36.032037][ T3589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   36.041227][ T3599] loop0: detected capacity change from 0 to 512
[   36.046805][ T3589] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   36.051735][ T3599] journal_path: Non-blockdev passed as './bus'
[   36.064584][ T3589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000]
[   36.067765][ T3599] EXT4-fs: error: could not find journal device path
[   36.084384][ T3599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3599 comm=syz.0.40
[   36.084549][ T3589] System zones: 0-1, 3-12
[   36.103930][ T3589] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.35: lblock 1 mapped to illegal pblock 1 (length 1)
[   36.117913][ T3589] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.35: Failed to acquire dquot type 0
[   36.129713][ T3589] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.35: Freeing blocks not in datazone - block = 0, count = 4096
[   36.146167][ T3589] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.35: Invalid inode bitmap blk 0 in block_group 0
[   36.159118][ T3589] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[   36.168013][   T12] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   36.168139][ T3589] EXT4-fs (loop3): 1 orphan inode deleted
[   36.188685][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.201568][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[   36.216514][ T3589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.248860][ T3589] loop3: detected capacity change from 0 to 2048
[   36.289545][ T3589] Alternate GPT is invalid, using primary GPT.
[   36.296414][ T3589]  loop3: p1 p2 p3
[   36.316343][ T3612] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   36.357747][ T3616] FAULT_INJECTION: forcing a failure.
[   36.357747][ T3616] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   36.370968][ T3616] CPU: 1 UID: 0 PID: 3616 Comm: syz.0.46 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   36.371028][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   36.371047][ T3616] Call Trace:
[   36.371054][ T3616]  <TASK>
[   36.371062][ T3616]  __dump_stack+0x1d/0x30
[   36.371094][ T3616]  dump_stack_lvl+0xe8/0x140
[   36.371147][ T3616]  dump_stack+0x15/0x1b
[   36.371166][ T3616]  should_fail_ex+0x265/0x280
[   36.371239][ T3616]  should_fail+0xb/0x20
[   36.371270][ T3616]  should_fail_usercopy+0x1a/0x20
[   36.371303][ T3616]  _copy_from_user+0x1c/0xb0
[   36.371324][ T3616]  memdup_user+0x5e/0xd0
[   36.371351][ T3616]  strndup_user+0x68/0xb0
[   36.371420][ T3616]  perf_uprobe_init+0x48/0x150
[   36.371455][ T3616]  perf_uprobe_event_init+0xc4/0x140
[   36.371476][ T3616]  perf_try_init_event+0xd9/0x540
[   36.371540][ T3616]  ? perf_event_alloc+0xb1c/0x1680
[   36.371574][ T3616]  perf_event_alloc+0xb27/0x1680
[   36.371608][ T3616]  __se_sys_perf_event_open+0x615/0x11c0
[   36.371682][ T3616]  ? __rcu_read_unlock+0x4f/0x70
[   36.371730][ T3616]  __x64_sys_perf_event_open+0x67/0x80
[   36.371766][ T3616]  x64_sys_call+0x27ec/0x2fb0
[   36.371854][ T3616]  do_syscall_64+0xd2/0x200
[   36.371870][ T3616]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   36.371900][ T3616]  ? clear_bhb_loop+0x40/0x90
[   36.371926][ T3616]  ? clear_bhb_loop+0x40/0x90
[   36.371953][ T3616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.372011][ T3616] RIP: 0033:0x7f8e2720e929
[   36.372032][ T3616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.372054][ T3616] RSP: 002b:00007f8e25877038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[   36.372086][ T3616] RAX: ffffffffffffffda RBX: 00007f8e27435fa0 RCX: 00007f8e2720e929
[   36.372101][ T3616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   36.372155][ T3616] RBP: 00007f8e25877090 R08: 0000000000000000 R09: 0000000000000000
[   36.372167][ T3616] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001
[   36.372178][ T3616] R13: 0000000000000000 R14: 00007f8e27435fa0 R15: 00007ffd91112a08
[   36.372246][ T3616]  </TASK>
[   36.657307][ T3628] loop0: detected capacity change from 0 to 1024
[   36.665639][ T3628] EXT4-fs: Ignoring removed orlov option
[   36.671383][ T3628] EXT4-fs: Ignoring removed nomblk_io_submit option
[   36.695008][ T3628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.729829][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.853834][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.861490][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.871493][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.879114][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1
[   36.893227][ T3645] loop1: detected capacity change from 0 to 512
[   36.902551][ T3645] journal_path: Non-blockdev passed as './bus'
[   36.908863][ T3645] EXT4-fs: error: could not find journal device path
[   36.918283][ T3640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3640 comm=syz.1.56
[   36.973689][ T3652] proc: Bad value for 'gid'
[   37.188315][ T3677] siw: device registration error -23
[   37.197014][ T3678] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3678 comm=syz.1.71
[   37.212530][ T3677] loop2: detected capacity change from 0 to 512
[   37.219166][ T3677] journal_path: Non-blockdev passed as './bus'
[   37.225375][ T3677] EXT4-fs: error: could not find journal device path
[   37.235261][ T3677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3677 comm=syz.2.70
[   37.292911][ T3680] loop2: detected capacity change from 0 to 256
[   37.341740][ T3680] vfat: Unknown parameter 'iocharsep'
[   37.417645][ T3664] SELinux:  Context Ü is not valid (left unmapped).
[   37.473788][ T3695] loop2: detected capacity change from 0 to 2048
[   37.537004][ T3704] siw: device registration error -23
[   37.546368][ T3704] loop2: detected capacity change from 0 to 512
[   37.553632][ T3704] journal_path: Non-blockdev passed as './bus'
[   37.559928][ T3704] EXT4-fs: error: could not find journal device path
[   37.571840][ T3704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3704 comm=syz.2.82
[   37.592594][ T3705] loop1: detected capacity change from 0 to 512
[   37.604184][ T3705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   37.626221][ T3705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   37.666142][ T3705] System zones: 1-12
[   37.671688][ T3705] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   37.689959][ T3705] EXT4-fs (loop1): 1 truncate cleaned up
[   37.696578][ T3705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.728705][ T3705] wireguard0: entered promiscuous mode
[   37.752706][ T3711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   37.807739][ T3715] loop0: detected capacity change from 0 to 8192
[   37.828935][ T3715] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   37.845088][ T3715] process 'syz.0.85' launched '/dev/fd/4' with NULL argv: empty string added
[   37.881579][ T3724] loop2: detected capacity change from 0 to 164
[   37.891563][ T3724] ISOFS: unable to read i-node block
[   37.896966][ T3724] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   37.963024][ T3726] loop0: detected capacity change from 0 to 1024
[   37.980962][ T3726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.029247][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.077973][ T3730] lo speed is unknown, defaulting to 1000
[   38.108323][ T3730] loop0: detected capacity change from 0 to 256
[   38.115180][ T3730] FAT-fs (loop0): bogus number of FAT sectors
[   38.121347][ T3730] FAT-fs (loop0): Can't find a valid FAT filesystem
[   38.291422][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.312343][ T3696] syz.4.79 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   38.323175][ T3696] CPU: 0 UID: 0 PID: 3696 Comm: syz.4.79 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   38.323199][ T3696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   38.323252][ T3696] Call Trace:
[   38.323260][ T3696]  <TASK>
[   38.323268][ T3696]  __dump_stack+0x1d/0x30
[   38.323288][ T3696]  dump_stack_lvl+0xe8/0x140
[   38.323362][ T3696]  dump_stack+0x15/0x1b
[   38.323375][ T3696]  dump_header+0x81/0x220
[   38.323404][ T3696]  oom_kill_process+0x334/0x3f0
[   38.323438][ T3696]  out_of_memory+0x979/0xb80
[   38.323523][ T3696]  try_charge_memcg+0x5e6/0x9e0
[   38.323566][ T3696]  charge_memcg+0x51/0xc0
[   38.323650][ T3696]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   38.323716][ T3696]  __read_swap_cache_async+0x1df/0x350
[   38.323798][ T3696]  swap_cluster_readahead+0x277/0x3e0
[   38.323836][ T3696]  swapin_readahead+0xde/0x6f0
[   38.323861][ T3696]  ? __filemap_get_folio+0x4f7/0x6b0
[   38.323903][ T3696]  ? swap_cache_get_folio+0x77/0x200
[   38.323970][ T3696]  do_swap_page+0x301/0x2430
[   38.323988][ T3696]  ? css_rstat_updated+0xcd/0x5b0
[   38.324059][ T3696]  ? __pfx_default_wake_function+0x10/0x10
[   38.324089][ T3696]  handle_mm_fault+0x9a5/0x2be0
[   38.324114][ T3696]  ? mas_walk+0xf2/0x120
[   38.324176][ T3696]  do_user_addr_fault+0x636/0x1090
[   38.324236][ T3696]  ? fpregs_assert_state_consistent+0xb4/0xe0
[   38.324273][ T3696]  exc_page_fault+0x62/0xa0
[   38.324306][ T3696]  asm_exc_page_fault+0x26/0x30
[   38.324394][ T3696] RIP: 0033:0x7f0aa7751193
[   38.324408][ T3696] Code: e2 08 00 48 8d 3d f6 e2 08 00 e8 f8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 53 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f
[   38.324490][ T3696] RSP: 002b:00007fff0a5186c8 EFLAGS: 00010293
[   38.324507][ T3696] RAX: 00000000fffffffa RBX: 00007f0aa7945fa0 RCX: 0000000000000000
[   38.324535][ T3696] RDX: 00007fff0a5186e0 RSI: 0000000000000000 RDI: 0000000000000000
[   38.324549][ T3696] RBP: 00007f0aa7947ba0 R08: 000000000c576038 R09: 7fffffffffffffff
[   38.324563][ T3696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000009582
[   38.324577][ T3696] R13: 00007fff0a518800 R14: ffffffffffffffff R15: 00007fff0a518820
[   38.324599][ T3696]  </TASK>
[   38.324607][ T3696] memory: usage 307200kB, limit 307200kB, failcnt 280
[   38.450265][ T3741] siw: device registration error -23
[   38.452742][ T3696] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[   38.464251][ T3741] loop3: detected capacity change from 0 to 512
[   38.468036][ T3696] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[   38.472883][ T3741] journal_path: Non-blockdev passed as './bus'
[   38.492541][ T3696] Memory cgroup stats for 
[   38.498498][ T3741] EXT4-fs: error: could not find journal device path
[   38.505313][ T3741] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3741 comm=syz.3.94
[   38.506548][ T3696] /syz4:
[   38.605470][ T3696] cache 0
[   38.611410][ T3696] rss 0
[   38.614162][ T3696] shmem 0
[   38.617178][ T3696] mapped_file 0
[   38.621188][ T3696] dirty 0
[   38.624225][ T3696] writeback 0
[   38.627510][ T3696] workingset_refault_anon 24
[   38.632510][ T3696] workingset_refault_file 49
[   38.637098][ T3696] swap 188416
[   38.640445][ T3696] swapcached 4096
[   38.644091][ T3696] pgpgin 10953
[   38.647458][ T3696] pgpgout 10952
[   38.650953][ T3696] pgfault 11799
[   38.654404][ T3696] pgmajfault 22
[   38.657941][ T3696] inactive_anon 0
[   38.661627][ T3696] active_anon 4096
[   38.665365][ T3696] inactive_file 0
[   38.669077][ T3696] active_file 0
[   38.672542][ T3696] unevictable 0
[   38.676029][ T3696] hierarchical_memory_limit 314572800
[   38.681416][ T3696] hierarchical_memsw_limit 9223372036854771712
[   38.687559][ T3696] total_cache 0
[   38.691032][ T3696] total_rss 0
[   38.694311][ T3696] total_shmem 0
[   38.697759][ T3696] total_mapped_file 0
[   38.702036][ T3696] total_dirty 0
[   38.705528][ T3696] total_writeback 0
[   38.709690][ T3696] total_workingset_refault_anon 24
[   38.714818][ T3696] total_workingset_refault_file 49
[   38.720567][ T3696] total_swap 188416
[   38.724383][ T3696] total_swapcached 4096
[   38.728592][ T3696] total_pgpgin 10953
[   38.732506][ T3696] total_pgpgout 10952
[   38.736584][ T3696] total_pgfault 11799
[   38.740629][ T3696] total_pgmajfault 22
[   38.744623][ T3696] total_inactive_anon 0
[   38.748918][ T3696] total_active_anon 4096
[   38.753185][ T3696] total_inactive_file 0
[   38.757342][ T3696] total_active_file 0
[   38.761352][ T3696] total_unevictable 0
[   38.765336][ T3696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.79,pid=3696,uid=0
[   38.779965][ T3696] Memory cgroup out of memory: Killed process 3696 (syz.4.79) total-vm:93624kB, anon-rss:940kB, file-rss:22112kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   38.814204][   T29] kauditd_printk_skb: 980 callbacks suppressed
[   38.814221][   T29] audit: type=1400 audit(1752612645.063:1065): avc:  denied  { prog_load } for  pid=3742 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   38.845723][ T3743] __nla_validate_parse: 9 callbacks suppressed
[   38.845738][ T3743] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.95'.
[   38.861973][ T3696] syz.4.79 (3696) used greatest stack depth: 9688 bytes left
[   38.878798][   T29] audit: type=1400 audit(1752612645.063:1066): avc:  denied  { bpf } for  pid=3742 comm="syz.0.95" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   38.880315][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'.
[   38.899201][   T29] audit: type=1400 audit(1752612645.073:1067): avc:  denied  { read write } for  pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.932141][   T29] audit: type=1400 audit(1752612645.073:1068): avc:  denied  { open } for  pid=3304 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.957065][   T29] audit: type=1400 audit(1752612645.073:1069): avc:  denied  { ioctl } for  pid=3304 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   38.983024][   T29] audit: type=1400 audit(1752612645.093:1070): avc:  denied  { perfmon } for  pid=3742 comm="syz.0.95" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   39.003831][   T29] audit: type=1400 audit(1752612645.093:1071): avc:  denied  { open } for  pid=3742 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.023517][   T29] audit: type=1400 audit(1752612645.093:1072): avc:  denied  { kernel } for  pid=3742 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   39.032823][ T3752] 9pnet_fd: p9_fd_create_tcp (3752): problem connecting socket to 127.0.0.1
[   39.043305][   T29] audit: type=1400 audit(1752612645.123:1073): avc:  denied  { create } for  pid=3744 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.071766][   T29] audit: type=1400 audit(1752612645.123:1074): avc:  denied  { write } for  pid=3742 comm="syz.0.95" name="kcm" dev="proc" ino=4026532846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   39.148148][ T3756] loop1: detected capacity change from 0 to 512
[   39.161087][ T3697] syz.4.79 (3697) used greatest stack depth: 7160 bytes left
[   39.169422][ T3756] EXT4-fs: Ignoring removed nomblk_io_submit option
[   39.185346][ T3758] FAULT_INJECTION: forcing a failure.
[   39.185346][ T3758] name failslab, interval 1, probability 0, space 0, times 0
[   39.198223][ T3758] CPU: 1 UID: 0 PID: 3758 Comm: syz.0.102 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   39.198252][ T3758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   39.198264][ T3758] Call Trace:
[   39.198270][ T3758]  <TASK>
[   39.198314][ T3758]  __dump_stack+0x1d/0x30
[   39.198334][ T3758]  dump_stack_lvl+0xe8/0x140
[   39.198352][ T3758]  dump_stack+0x15/0x1b
[   39.198367][ T3758]  should_fail_ex+0x265/0x280
[   39.198486][ T3758]  should_failslab+0x8c/0xb0
[   39.198508][ T3758]  __kmalloc_noprof+0xa5/0x3e0
[   39.198532][ T3758]  ? process_vm_rw+0x27c/0x950
[   39.198554][ T3758]  ? iovec_from_user+0x179/0x210
[   39.198596][ T3758]  process_vm_rw+0x27c/0x950
[   39.198647][ T3758]  ? _parse_integer+0x27/0x40
[   39.198672][ T3758]  ? kstrtoull+0x111/0x140
[   39.198739][ T3758]  __x64_sys_process_vm_readv+0x78/0x90
[   39.198765][ T3758]  x64_sys_call+0x2978/0x2fb0
[   39.198792][ T3758]  do_syscall_64+0xd2/0x200
[   39.198808][ T3758]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   39.198833][ T3758]  ? clear_bhb_loop+0x40/0x90
[   39.198915][ T3758]  ? clear_bhb_loop+0x40/0x90
[   39.198936][ T3758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   39.198955][ T3758] RIP: 0033:0x7f8e2720e929
[   39.198969][ T3758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   39.199005][ T3758] RSP: 002b:00007f8e25877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   39.199023][ T3758] RAX: ffffffffffffffda RBX: 00007f8e27435fa0 RCX: 00007f8e2720e929
[   39.199053][ T3758] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000003e
[   39.199065][ T3758] RBP: 00007f8e25877090 R08: 0000000000000286 R09: 0000000000000000
[   39.199085][ T3758] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[   39.199104][ T3758] R13: 0000000000000000 R14: 00007f8e27435fa0 R15: 00007ffd91112a08
[   39.199122][ T3758]  </TASK>
[   39.425983][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.439830][ T3756] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   39.463249][ T3776] SELinux:  Context u:object_r:app_data_file:s0:c512,c768 is not valid (left unmapped).
[   39.488962][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.525876][ T3790] loop2: detected capacity change from 0 to 512
[   39.535000][ T3790] EXT4-fs: Ignoring removed i_version option
[   39.555083][ T3790] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   39.583707][ T3800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.595868][ T3800] team0: Port device batadv0 added
[   39.608120][ T3800] syz.3.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   39.608374][ T3790] EXT4-fs (loop2): 1 truncate cleaned up
[   39.649003][ T3790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.759671][ T3814] netlink: 'syz.1.121': attribute type 1 has an invalid length.
[   39.770049][ T3814] netlink: 43 bytes leftover after parsing attributes in process `syz.1.121'.
[   39.779087][ T3814] tipc: Enabling of bearer <eth:vla> rejected, failed to enable media
[   39.816365][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   40.029058][ T3823] usb usb8: usbfs: process 3823 (syz.1.124) did not claim interface 0 before use
[   40.064041][ T3827] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   40.065257][ T3826] IPVS: stopping master sync thread 3827 ...
[   40.355742][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.396892][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.129'.
[   40.617043][ T3851] FAULT_INJECTION: forcing a failure.
[   40.617043][ T3851] name failslab, interval 1, probability 0, space 0, times 0
[   40.629805][ T3851] CPU: 0 UID: 0 PID: 3851 Comm: syz.0.135 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   40.629840][ T3851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.629855][ T3851] Call Trace:
[   40.629862][ T3851]  <TASK>
[   40.629871][ T3851]  __dump_stack+0x1d/0x30
[   40.629891][ T3851]  dump_stack_lvl+0xe8/0x140
[   40.629909][ T3851]  dump_stack+0x15/0x1b
[   40.629924][ T3851]  should_fail_ex+0x265/0x280
[   40.629960][ T3851]  should_failslab+0x8c/0xb0
[   40.629985][ T3851]  kmem_cache_alloc_noprof+0x50/0x310
[   40.630014][ T3851]  ? vm_area_dup+0x33/0x2c0
[   40.630040][ T3851]  vm_area_dup+0x33/0x2c0
[   40.630064][ T3851]  dup_mmap+0x501/0xf20
[   40.630091][ T3851]  copy_mm+0x11a/0x370
[   40.630123][ T3851]  copy_process+0xcf1/0x1f90
[   40.630173][ T3851]  kernel_clone+0x16c/0x5b0
[   40.630197][ T3851]  ? vfs_write+0x75e/0x8e0
[   40.630226][ T3851]  __x64_sys_clone+0xe6/0x120
[   40.630258][ T3851]  x64_sys_call+0x2c59/0x2fb0
[   40.630284][ T3851]  do_syscall_64+0xd2/0x200
[   40.630305][ T3851]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.630332][ T3851]  ? clear_bhb_loop+0x40/0x90
[   40.630351][ T3851]  ? clear_bhb_loop+0x40/0x90
[   40.630383][ T3851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.630409][ T3851] RIP: 0033:0x7f8e2720e929
[   40.630424][ T3851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.630440][ T3851] RSP: 002b:00007f8e25876fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   40.630461][ T3851] RAX: ffffffffffffffda RBX: 00007f8e27435fa0 RCX: 00007f8e2720e929
[   40.630476][ T3851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200
[   40.630490][ T3851] RBP: 00007f8e25877090 R08: 0000000000000000 R09: 0000000000000000
[   40.630504][ T3851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002
[   40.630515][ T3851] R13: 0000000000000000 R14: 00007f8e27435fa0 R15: 00007ffd91112a08
[   40.630532][ T3851]  </TASK>
[   40.839681][ T3854] loop3: detected capacity change from 0 to 512
[   40.846324][ T3854] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   40.856859][ T3854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'.
[   40.992000][ T3864] rdma_op ffff8881009cbd80 conn xmit_rdma 0000000000000000
[   41.013570][ T3864] loop3: detected capacity change from 0 to 736
[   41.267591][ T3868] loop3: detected capacity change from 0 to 512
[   41.274370][ T3868] EXT4-fs: Ignoring removed i_version option
[   41.282212][ T3868] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.323726][ T3874] netlink: 332 bytes leftover after parsing attributes in process `syz.0.141'.
[   41.351440][ T3868] EXT4-fs (loop3): 1 truncate cleaned up
[   41.368270][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.383448][ T3876] 9pnet_fd: Insufficient options for proto=fd
[   41.671674][ T3892] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.706517][ T3896] siw: device registration error -23
[   41.718790][ T3896] loop0: detected capacity change from 0 to 512
[   41.737950][ T3896] journal_path: Non-blockdev passed as './bus'
[   41.744247][ T3896] EXT4-fs: error: could not find journal device path
[   41.757618][ T3892] bridge_slave_0: left allmulticast mode
[   41.763380][ T3892] bridge_slave_0: left promiscuous mode
[   41.769135][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.785416][ T3892] bridge_slave_1: left allmulticast mode
[   41.791144][ T3892] bridge_slave_1: left promiscuous mode
[   41.796896][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.808208][ T3892] bond0: (slave bond_slave_0): Releasing backup interface
[   41.856536][ T3892] bond0: (slave bond_slave_1): Releasing backup interface
[   41.869181][ T3899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3899 comm=syz.0.151
[   41.913952][ T3892] team0: Port device team_slave_0 removed
[   41.931410][ T3892] team0: Port device team_slave_1 removed
[   41.938716][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   41.946161][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_0
[   41.955310][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   41.962834][ T3892] batman_adv: batadv0: Removing interface: batadv_slave_1
[   41.995315][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.050456][ T3904] siw: device registration error -23
[   42.055761][ T3906] syz.0.154 uses obsolete (PF_INET,SOCK_PACKET)
[   42.067784][ T3906] loop0: detected capacity change from 0 to 1024
[   42.074816][ T3904] loop3: detected capacity change from 0 to 512
[   42.074971][ T3906] EXT4-fs: Ignoring removed orlov option
[   42.087320][ T3904] journal_path: Non-blockdev passed as './bus'
[   42.093687][ T3904] EXT4-fs: error: could not find journal device path
[   42.103789][ T3906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.114930][ T3904] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=3904 comm=syz.3.153
[   42.167975][ T3917] netlink: 192 bytes leftover after parsing attributes in process `syz.4.156'.
[   42.280228][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.318048][ T3934] netlink: 332 bytes leftover after parsing attributes in process `syz.4.163'.
[   42.329112][ T3933] loop0: detected capacity change from 0 to 512
[   42.343728][ T3933] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.173: bad orphan inode 15
[   42.365183][ T3933] ext4_test_bit(bit=14, block=5) = 0
[   42.376262][ T3933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.399675][ T3943] rdma_op ffff88811a623d80 conn xmit_rdma 0000000000000000
[   42.412033][ T3943] loop2: detected capacity change from 0 to 736
[   42.430863][ T3944] loop4: detected capacity change from 0 to 512
[   42.450569][ T3944] EXT4-fs (loop4): too many log groups per flexible block group
[   42.458330][ T3944] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   42.465698][ T3944] EXT4-fs (loop4): mount failed
[   42.485808][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.502960][ T3951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   42.520445][ T3954] loop0: detected capacity change from 0 to 764
[   42.527663][ T3954] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   42.542396][ T3955] Symlink component flag not implemented
[   42.551964][ T3955] Symlink component flag not implemented (7)
[   42.608361][ T3963] loop2: detected capacity change from 0 to 1024
[   42.615423][ T3963] EXT4-fs: Ignoring removed orlov option
[   42.625870][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.682768][ T3971] loop0: detected capacity change from 0 to 512
[   42.702812][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.717700][ T3971] EXT4-fs error (device loop0): ext4_quota_enable:7124: comm syz.0.177: inode #32768: comm syz.0.177: iget: illegal inode #
[   42.732696][ T3971] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.177: Bad quota inode: 32768, type: 2
[   42.749038][ T3971] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   42.766285][ T3971] EXT4-fs (loop0): mount failed
[   42.854063][ T3981] loop1: detected capacity change from 0 to 512
[   42.892504][ T3981] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.180: inode #32768: comm syz.1.180: iget: illegal inode #
[   42.908360][ T3981] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.180: Bad quota inode: 32768, type: 2
[   42.919821][ T3997] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   42.928017][ T3998] xt_hashlimit: size too large, truncated to 1048576
[   42.942697][ T3981] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   42.960060][ T3981] EXT4-fs (loop1): mount failed
[   43.015628][ T4000] siw: device registration error -23
[   43.034169][ T4000] loop0: detected capacity change from 0 to 512
[   43.042292][ T4000] journal_path: Non-blockdev passed as './bus'
[   43.048616][ T4000] EXT4-fs: error: could not find journal device path
[   43.058142][ T4000] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4000 comm=syz.0.189
[   43.123463][ T4006] loop0: detected capacity change from 0 to 512
[   43.131648][ T4006] EXT4-fs: Ignoring removed i_version option
[   43.138192][ T4006] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   43.156577][ T4006] EXT4-fs (loop0): 1 truncate cleaned up
[   43.163661][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.277824][ T4018] capability: warning: `syz.3.196' uses deprecated v2 capabilities in a way that may be insecure
[   43.322992][ T4021] loop1: detected capacity change from 0 to 512
[   43.341523][ T4021] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.197: inode #32768: comm syz.1.197: iget: illegal inode #
[   43.354900][ T4021] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.197: Bad quota inode: 32768, type: 2
[   43.366903][ T4021] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   43.383397][ T4021] EXT4-fs (loop1): mount failed
[   43.446520][ T4029] loop1: detected capacity change from 0 to 512
[   43.453943][ T4029] journal_path: Non-blockdev passed as './bus'
[   43.460217][ T4029] EXT4-fs: error: could not find journal device path
[   43.470722][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.1.199
[   43.504643][ T4033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.513395][ T4033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.827985][   T29] kauditd_printk_skb: 1180 callbacks suppressed
[   43.828000][   T29] audit: type=1326 audit(1752612650.073:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2df2a58e7 code=0x7ffc0000
[   43.841703][   T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   43.859821][   T29] audit: type=1326 audit(1752612650.073:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2df24ab19 code=0x7ffc0000
[   43.865308][   T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   43.888510][   T29] audit: type=1326 audit(1752612650.073:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2df2ae929 code=0x7ffc0000
[   43.888560][   T29] audit: type=1326 audit(1752612650.083:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2df2a58e7 code=0x7ffc0000
[   43.888592][   T29] audit: type=1326 audit(1752612650.083:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2df24ab19 code=0x7ffc0000
[   43.896019][   T36] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0
[   43.919628][   T29] audit: type=1326 audit(1752612650.083:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2df2ae929 code=0x7ffc0000
[   43.946984][   T36] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1
[   43.966030][   T29] audit: type=1400 audit(1752612650.093:2261): avc:  denied  { read write } for  pid=4042 comm="syz.4.205" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   43.966075][   T29] audit: type=1400 audit(1752612650.093:2262): avc:  denied  { open } for  pid=4042 comm="syz.4.205" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   43.984373][   T29] audit: type=1326 audit(1752612650.203:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2df2a58e7 code=0x7ffc0000
[   44.076438][   T29] audit: type=1326 audit(1752612650.203:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2df24ab19 code=0x7ffc0000
[   44.108893][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.152193][ T4055] loop2: detected capacity change from 0 to 164
[   44.167559][ T4055] rock: directory entry would overflow storage
[   44.173970][ T4055] rock: sig=0x4f50, size=4, remaining=3
[   44.180236][ T4055] iso9660: Corrupted directory entry in block 4 of inode 1792
[   44.201405][ T4058] loop4: detected capacity change from 0 to 512
[   44.234722][ T4058] EXT4-fs error (device loop4): ext4_quota_enable:7124: comm syz.4.210: inode #32768: comm syz.4.210: iget: illegal inode #
[   44.234941][ T4058] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.210: Bad quota inode: 32768, type: 2
[   44.235130][ T4058] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   44.235698][ T4058] EXT4-fs (loop4): mount failed
[   44.486842][ T4080] 8021q: adding VLAN 0 to HW filter on device batadv1
[   44.504079][ T4080] team0: Port device batadv1 added
[   44.510118][ T4083] rdma_op ffff888119fc7980 conn xmit_rdma 0000000000000000
[   44.520622][ T4086] loop0: detected capacity change from 0 to 512
[   44.527227][ T4083] loop1: detected capacity change from 0 to 736
[   44.543503][ T4086] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[   44.594423][ T4086] __nla_validate_parse: 4 callbacks suppressed
[   44.594501][ T4086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'.
[   44.608259][ T4090] loop3: detected capacity change from 0 to 8192
[   44.630691][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.638720][ T4090] FAT-fs (loop3): Filesystem has been set read-only
[   44.645358][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.653273][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.661232][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.669119][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.680110][ T4090] syz.3.222: attempt to access beyond end of device
[   44.680110][ T4090] loop3: rw=0, sector=65368, nr_sectors = 1 limit=8192
[   44.693534][ T4090] Buffer I/O error on dev loop3, logical block 65368, async page read
[   44.701844][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.733966][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.742538][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.767527][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.775581][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.783655][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.791532][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.799444][ T4090] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000ff12)
[   44.820501][ T4094] can0: slcan on ttyS3.
[   44.825829][ T4090] syz.3.222: attempt to access beyond end of device
[   44.825829][ T4090] loop3: rw=0, sector=65368, nr_sectors = 1 limit=8192
[   44.839316][ T4090] Buffer I/O error on dev loop3, logical block 65368, async page read
[   44.875651][ T4095] capability: warning: `syz.1.223' uses 32-bit capabilities (legacy support in use)
[   44.890638][ T4094] can0 (unregistered): slcan off ttyS3.
[   45.103978][ T4113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'.
[   45.155280][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[   45.205194][ T4122] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   45.235806][ T4122] loop0: detected capacity change from 0 to 1024
[   45.302023][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.332576][ T4122] pim6reg: entered allmulticast mode
[   45.378376][ T4122] pim6reg: left allmulticast mode
[   45.418170][ T4127] siw: device registration error -23
[   45.467014][ T4127] loop3: detected capacity change from 0 to 512
[   45.478963][ T4127] journal_path: Non-blockdev passed as './bus'
[   45.485805][ T4127] EXT4-fs: error: could not find journal device path
[   45.494960][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.514087][ T4127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4127 comm=syz.3.236
[   45.609741][ T4133] vhci_hcd: invalid port number 23
[   45.697402][ T4139] loop3: detected capacity change from 0 to 512
[   45.716971][ T4139] EXT4-fs: Ignoring removed i_version option
[   45.747026][ T4139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   45.796516][ T4139] EXT4-fs (loop3): 1 truncate cleaned up
[   45.803016][ T4139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.857347][ T4147] netlink: 124 bytes leftover after parsing attributes in process `syz.0.241'.
[   46.146527][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'.
[   46.384367][ T4160] netlink: 'syz.0.245': attribute type 4 has an invalid length.
[   46.392352][ T4160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.245'.
[   46.420728][ T4160] : renamed from bond0 (while UP)
[   46.473581][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.528152][ T4166] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   46.555971][ T4166] loop3: detected capacity change from 0 to 1024
[   46.601430][ T4166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.661968][ T4166] pim6reg: entered allmulticast mode
[   46.704616][ T4166] pim6reg: left allmulticast mode
[   46.819412][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.883513][ T4174] siw: device registration error -23
[   46.899372][ T4174] loop3: detected capacity change from 0 to 512
[   46.914357][ T4174] journal_path: Non-blockdev passed as './bus'
[   46.920635][ T4174] EXT4-fs: error: could not find journal device path
[   46.948370][ T4174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4174 comm=syz.3.250
[   47.086536][ T4178] loop3: detected capacity change from 0 to 1024
[   47.104441][ T4178] EXT4-fs: inline encryption not supported
[   47.110408][ T4178] EXT4-fs: Ignoring removed i_version option
[   47.129850][ T4178] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   47.154643][ T4178] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.252: lblock 2 mapped to illegal pblock 2 (length 1)
[   47.176690][ T4178] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.252: lblock 0 mapped to illegal pblock 48 (length 1)
[   47.203135][ T4178] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.252: Failed to acquire dquot type 0
[   47.226324][ T4178] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   47.249860][ T4178] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.252: mark_inode_dirty error
[   47.297709][ T4178] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   47.322615][ T4183] netlink: 124 bytes leftover after parsing attributes in process `syz.4.253'.
[   47.344523][ T4178] EXT4-fs (loop3): 1 orphan inode deleted
[   47.358489][   T12] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   47.379576][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.407652][   T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[   47.434347][ T4178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.451171][ T4178] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.252: Invalid inode table block 1 in block_group 0
[   47.516449][ T4178] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   47.554565][ T4178] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.252: mark_inode_dirty error
[   47.597231][ T4179] netlink: 68 bytes leftover after parsing attributes in process `syz.3.252'.
[   47.618596][ T4178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.252'.
[   47.660644][ T4179] loop3: detected capacity change from 0 to 512
[   47.685312][ T4179] EXT4-fs: Ignoring removed orlov option
[   47.702143][ T4179] EXT4-fs (loop3): bad block size 65536
[   47.704029][ T4194] pim6reg: entered allmulticast mode
[   47.736856][ T4194] pim6reg: left allmulticast mode
[   47.791815][ T4197] loop4: detected capacity change from 0 to 512
[   47.813437][ T4197] EXT4-fs: Ignoring removed bh option
[   47.838549][ T4197] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   47.857378][ T4200] loop3: detected capacity change from 0 to 512
[   47.864338][ T4200] EXT4-fs: Ignoring removed i_version option
[   47.870954][ T4200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.886923][ T4200] EXT4-fs (loop3): 1 truncate cleaned up
[   47.903383][ T4200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.100674][ T4215] netlink: 124 bytes leftover after parsing attributes in process `syz.0.265'.
[   48.151020][ T4220] loop1: detected capacity change from 0 to 512
[   48.157923][ T4220] journal_path: Non-blockdev passed as './bus'
[   48.164149][ T4220] EXT4-fs: error: could not find journal device path
[   48.173629][ T4220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4220 comm=syz.1.267
[   48.201578][ T4221] FAULT_INJECTION: forcing a failure.
[   48.201578][ T4221] name failslab, interval 1, probability 0, space 0, times 0
[   48.214322][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.0.266 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   48.214411][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   48.214426][ T4221] Call Trace:
[   48.214433][ T4221]  <TASK>
[   48.214442][ T4221]  __dump_stack+0x1d/0x30
[   48.214467][ T4221]  dump_stack_lvl+0xe8/0x140
[   48.214492][ T4221]  dump_stack+0x15/0x1b
[   48.214512][ T4221]  should_fail_ex+0x265/0x280
[   48.214649][ T4221]  should_failslab+0x8c/0xb0
[   48.214676][ T4221]  __kmalloc_noprof+0xa5/0x3e0
[   48.214705][ T4221]  ? security_sk_alloc+0x52/0x120
[   48.214748][ T4221]  ? should_failslab+0x8c/0xb0
[   48.214775][ T4221]  security_sk_alloc+0x52/0x120
[   48.214836][ T4221]  sk_prot_alloc+0xc2/0x190
[   48.214913][ T4221]  sk_alloc+0x34/0x360
[   48.214944][ T4221]  ? __pfx_genl_release+0x10/0x10
[   48.214971][ T4221]  ? __pfx_genl_release+0x10/0x10
[   48.214996][ T4221]  netlink_create+0x32a/0x460
[   48.215027][ T4221]  ? __pfx_genl_unbind+0x10/0x10
[   48.215054][ T4221]  ? __pfx_genl_bind+0x10/0x10
[   48.215136][ T4221]  __sock_create+0x2ec/0x5b0
[   48.215167][ T4221]  __sys_socket+0xb0/0x180
[   48.215220][ T4221]  __x64_sys_socket+0x3f/0x50
[   48.215251][ T4221]  x64_sys_call+0x285a/0x2fb0
[   48.215277][ T4221]  do_syscall_64+0xd2/0x200
[   48.215335][ T4221]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   48.215433][ T4221]  ? clear_bhb_loop+0x40/0x90
[   48.215455][ T4221]  ? clear_bhb_loop+0x40/0x90
[   48.215475][ T4221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.215497][ T4221] RIP: 0033:0x7f8e27210847
[   48.215513][ T4221] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.215530][ T4221] RSP: 002b:00007f8e25854fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[   48.215581][ T4221] RAX: ffffffffffffffda RBX: 00007f8e27436080 RCX: 00007f8e27210847
[   48.215596][ T4221] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[   48.215608][ T4221] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[   48.215619][ T4221] R10: 00002000000004c0 R11: 0000000000000286 R12: 0000000000000001
[   48.215630][ T4221] R13: 0000000000000000 R14: 00007f8e27436080 R15: 00007ffd91112a08
[   48.215648][ T4221]  </TASK>
[   48.498317][ T4224] loop2: detected capacity change from 0 to 512
[   48.541099][ T4224] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.269: inode #32768: comm syz.2.269: iget: illegal inode #
[   48.555539][ T4224] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.269: Bad quota inode: 32768, type: 2
[   48.567303][ T4224] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   48.584305][ T4224] EXT4-fs (loop2): mount failed
[   48.704766][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.733860][ T4247] siw: device registration error -23
[   48.747969][ T4247] loop2: detected capacity change from 0 to 512
[   48.756209][ T4247] journal_path: Non-blockdev passed as './bus'
[   48.762510][ T4247] EXT4-fs: error: could not find journal device path
[   48.765712][ T4251] loop3: detected capacity change from 0 to 1024
[   48.783631][ T4247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46968 sclass=netlink_tcpdiag_socket pid=4247 comm=syz.2.279
[   48.830727][ T4251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.838498][   T29] kauditd_printk_skb: 7361 callbacks suppressed
[   48.838519][   T29] audit: type=1400 audit(1752612655.083:9623): avc:  denied  { ioctl } for  pid=4253 comm="syz.2.281" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   48.873957][   T29] audit: type=1400 audit(1752612655.093:9624): avc:  denied  { create } for  pid=4250 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   48.893728][   T29] audit: type=1400 audit(1752612655.103:9625): avc:  denied  { create } for  pid=4250 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.915241][   T29] audit: type=1400 audit(1752612655.103:9626): avc:  denied  { ioctl } for  pid=4250 comm="syz.3.280" path="socket:[7105]" dev="sockfs" ino=7105 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.959914][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.977126][   T29] audit: type=1326 audit(1752612655.223:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.004190][   T29] audit: type=1326 audit(1752612655.223:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.027761][   T29] audit: type=1326 audit(1752612655.223:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.051458][   T29] audit: type=1326 audit(1752612655.223:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.074915][   T29] audit: type=1326 audit(1752612655.233:9631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.098622][   T29] audit: type=1326 audit(1752612655.233:9632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4261 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   49.170272][ T4269] rdma_op ffff88811da9e980 conn xmit_rdma 0000000000000000
[   49.185210][ T4269] loop4: detected capacity change from 0 to 736
[   49.192812][ T4270] loop3: detected capacity change from 0 to 512
[   49.212698][ T4270] EXT4-fs error (device loop3): ext4_quota_enable:7124: comm syz.3.285: inode #32768: comm syz.3.285: iget: illegal inode #
[   49.226117][ T4270] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.285: Bad quota inode: 32768, type: 2
[   49.241163][ T4270] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   49.266301][ T4270] EXT4-fs (loop3): mount failed
[   49.369562][ T4276] loop4: detected capacity change from 0 to 512
[   49.376442][ T4276] EXT4-fs: Ignoring removed i_version option
[   49.411212][ T4276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   49.423752][ T4276] EXT4-fs (loop4): 1 truncate cleaned up
[   49.445362][ T4276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.599971][ T4297] siw: device registration error -23
[   49.608412][ T4297] loop0: detected capacity change from 0 to 512
[   49.615207][ T4297] journal_path: Non-blockdev passed as './bus'
[   49.621429][ T4297] EXT4-fs: error: could not find journal device path
[   49.635919][ T4299] rdma_op ffff88811b84e580 conn xmit_rdma 0000000000000000
[   49.659298][ T4301] siw: device registration error -23
[   49.671031][ T4301] loop0: detected capacity change from 0 to 512
[   49.677782][ T4301] journal_path: Non-blockdev passed as './bus'
[   49.679687][ T4299] loop1: detected capacity change from 0 to 736
[   49.684029][ T4301] EXT4-fs: error: could not find journal device path
[   49.760304][ T4309] loop1: detected capacity change from 0 to 512
[   49.770209][ T4302] FAULT_INJECTION: forcing a failure.
[   49.770209][ T4302] name failslab, interval 1, probability 0, space 0, times 0
[   49.782932][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.2.294 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   49.782963][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   49.782974][ T4302] Call Trace:
[   49.782979][ T4302]  <TASK>
[   49.782986][ T4302]  __dump_stack+0x1d/0x30
[   49.783089][ T4302]  dump_stack_lvl+0xe8/0x140
[   49.783113][ T4302]  dump_stack+0x15/0x1b
[   49.783160][ T4302]  should_fail_ex+0x265/0x280
[   49.783190][ T4302]  should_failslab+0x8c/0xb0
[   49.783217][ T4302]  __kmalloc_cache_node_noprof+0x54/0x320
[   49.783262][ T4302]  ? __get_vm_area_node+0x106/0x1d0
[   49.783289][ T4302]  __get_vm_area_node+0x106/0x1d0
[   49.783315][ T4302]  __vmalloc_node_range_noprof+0x273/0xe00
[   49.783409][ T4302]  ? copy_process+0x399/0x1f90
[   49.783466][ T4302]  ? __rcu_read_unlock+0x4f/0x70
[   49.783537][ T4302]  __vmalloc_node_noprof+0x89/0xc0
[   49.783721][ T4302]  ? copy_process+0x399/0x1f90
[   49.783770][ T4302]  ? copy_process+0x399/0x1f90
[   49.783800][ T4302]  dup_task_struct+0x449/0x6a0
[   49.783929][ T4302]  ? _parse_integer+0x27/0x40
[   49.784023][ T4302]  copy_process+0x399/0x1f90
[   49.784053][ T4302]  ? kstrtouint+0x76/0xc0
[   49.784086][ T4302]  ? kstrtouint_from_user+0x9f/0xf0
[   49.784196][ T4302]  ? __rcu_read_unlock+0x4f/0x70
[   49.784267][ T4302]  kernel_clone+0x16c/0x5b0
[   49.784299][ T4302]  ? vfs_write+0x75e/0x8e0
[   49.784337][ T4302]  __x64_sys_clone+0xe6/0x120
[   49.784417][ T4302]  x64_sys_call+0x2c59/0x2fb0
[   49.784444][ T4302]  do_syscall_64+0xd2/0x200
[   49.784466][ T4302]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   49.784498][ T4302]  ? clear_bhb_loop+0x40/0x90
[   49.784527][ T4302]  ? clear_bhb_loop+0x40/0x90
[   49.784555][ T4302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.784581][ T4302] RIP: 0033:0x7fd2df2ae929
[   49.784599][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   49.784621][ T4302] RSP: 002b:00007fd2dd8f5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   49.784644][ T4302] RAX: ffffffffffffffda RBX: 00007fd2df4d6080 RCX: 00007fd2df2ae929
[   49.784740][ T4302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000160480
[   49.784761][ T4302] RBP: 00007fd2dd8f6090 R08: 0000000000000000 R09: 0000000000000000
[   49.784774][ T4302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   49.784785][ T4302] R13: 0000000000000000 R14: 00007fd2df4d6080 R15: 00007ffcfc114a18
[   49.784807][ T4302]  </TASK>
[   49.784815][ T4302] syz.2.294: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[   49.882556][ T4315] netlink: 'syz.0.304': attribute type 46 has an invalid length.
[   49.882810][ T4302] ,cpuset=
[   49.887426][ T4315] __nla_validate_parse: 4 callbacks suppressed
[   49.887442][ T4315] netlink: 55 bytes leftover after parsing attributes in process `syz.0.304'.
[   50.064102][ T4309] EXT4-fs error (device loop1): ext4_quota_enable:7124: comm syz.1.301: inode #32768: comm syz.1.301: iget: illegal inode #
[   50.070181][ T4302] /,mems_allowed=0
[   50.086958][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.2.294 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   50.086987][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.086999][ T4302] Call Trace:
[   50.087005][ T4302]  <TASK>
[   50.087012][ T4302]  __dump_stack+0x1d/0x30
[   50.087032][ T4302]  dump_stack_lvl+0xe8/0x140
[   50.087052][ T4302]  dump_stack+0x15/0x1b
[   50.087145][ T4302]  warn_alloc+0x12b/0x1a0
[   50.087181][ T4302]  __vmalloc_node_range_noprof+0x297/0xe00
[   50.087218][ T4302]  ? __rcu_read_unlock+0x4f/0x70
[   50.087246][ T4302]  __vmalloc_node_noprof+0x89/0xc0
[   50.087342][ T4302]  ? copy_process+0x399/0x1f90
[   50.087423][ T4302]  ? copy_process+0x399/0x1f90
[   50.087447][ T4302]  dup_task_struct+0x449/0x6a0
[   50.087471][ T4302]  ? _parse_integer+0x27/0x40
[   50.087515][ T4302]  copy_process+0x399/0x1f90
[   50.087538][ T4302]  ? kstrtouint+0x76/0xc0
[   50.087569][ T4302]  ? kstrtouint_from_user+0x9f/0xf0
[   50.087668][ T4302]  ? __rcu_read_unlock+0x4f/0x70
[   50.087693][ T4302]  kernel_clone+0x16c/0x5b0
[   50.087718][ T4302]  ? vfs_write+0x75e/0x8e0
[   50.087782][ T4302]  __x64_sys_clone+0xe6/0x120
[   50.087821][ T4302]  x64_sys_call+0x2c59/0x2fb0
[   50.087842][ T4302]  do_syscall_64+0xd2/0x200
[   50.087859][ T4302]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.087989][ T4302]  ? clear_bhb_loop+0x40/0x90
[   50.088010][ T4302]  ? clear_bhb_loop+0x40/0x90
[   50.088032][ T4302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.088053][ T4302] RIP: 0033:0x7fd2df2ae929
[   50.088068][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.088085][ T4302] RSP: 002b:00007fd2dd8f5fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[   50.088165][ T4302] RAX: ffffffffffffffda RBX: 00007fd2df4d6080 RCX: 00007fd2df2ae929
[   50.088177][ T4302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000160480
[   50.088189][ T4302] RBP: 00007fd2dd8f6090 R08: 0000000000000000 R09: 0000000000000000
[   50.088200][ T4302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[   50.088215][ T4302] R13: 0000000000000000 R14: 00007fd2df4d6080 R15: 00007ffcfc114a18
[   50.088236][ T4302]  </TASK>
[   50.088243][ T4302] Mem-Info:
[   50.132539][ T4309] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.301: Bad quota inode: 32768, type: 2
[   50.134875][ T4302] active_anon:6905 inactive_anon:0 isolated_anon:0
[   50.134875][ T4302]  active_file:5864 inactive_file:12964 isolated_file:0
[   50.134875][ T4302]  unevictable:4 dirty:406 writeback:0
[   50.134875][ T4302]  slab_reclaimable:2953 slab_unreclaimable:13737
[   50.134875][ T4302]  mapped:31809 shmem:3150 pagetables:1205
[   50.134875][ T4302]  sec_pagetables:0 bounce:0
[   50.134875][ T4302]  kernel_misc_reclaimable:0
[   50.134875][ T4302]  free:1864626 free_pcp:32054 free_cma:0
[   50.144051][ T4309] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=32768). Please run e2fsck to fix.
[   50.145702][ T4302] Node 0 active_anon:27620kB inactive_anon:0kB active_file:23456kB inactive_file:51856kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:127236kB dirty:1624kB writeback:0kB shmem:12600kB writeback_tmp:0kB kernel_stack:3344kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   50.151624][ T4309] EXT4-fs (loop1): mount failed
[   50.155654][ T4302] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   50.281243][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv1
[   50.283295][ T4302] lowmem_reserve[]:
[   50.293258][ T4325] team0: Port device batadv1 added
[   50.299300][ T4302]  0 2882 7860 7860
[   50.299335][ T4302] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB
[   50.499502][ T4302] lowmem_reserve[]: 0 0 4978 4978
[   50.504792][ T4302] Node 0 Normal free:4495416kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26460kB inactive_anon:0kB active_file:23456kB inactive_file:32252kB unevictable:20780kB writepending:1624kB present:5242880kB managed:5098240kB mlocked:20764kB bounce:0kB free_pcp:124048kB local_pcp:39240kB free_cma:0kB
[   50.537786][ T4302] lowmem_reserve[]: 0 0 0 0
[   50.542369][ T4302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   50.555194][ T4302] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB
[   50.571438][ T4302] Node 0 Normal: 365*4kB (UME) 162*8kB (U) 70*16kB (U) 54*32kB (UE) 52*64kB (UE) 42*128kB (UME) 36*256kB (UE) 38*512kB (UM) 36*1024kB (UME) 24*2048kB (UME) 1066*4096kB (UM) = 4495332kB
[   50.589997][ T4302] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   50.599332][ T4302] 21974 total pagecache pages
[   50.604025][ T4302] 0 pages in swap cache
[   50.608191][ T4302] Free swap  = 124996kB
[   50.612548][ T4302] Total swap = 124996kB
[   50.616807][ T4302] 2097051 pages RAM
[   50.620696][ T4302] 0 pages HighMem/MovableOnly
[   50.625449][ T4302] 80812 pages reserved
[   50.635895][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.830068][ T4334] FAULT_INJECTION: forcing a failure.
[   50.830068][ T4334] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   50.843204][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.2.311 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   50.843265][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.843279][ T4334] Call Trace:
[   50.843286][ T4334]  <TASK>
[   50.843295][ T4334]  __dump_stack+0x1d/0x30
[   50.843319][ T4334]  dump_stack_lvl+0xe8/0x140
[   50.843337][ T4334]  dump_stack+0x15/0x1b
[   50.843357][ T4334]  should_fail_ex+0x265/0x280
[   50.843422][ T4334]  should_fail+0xb/0x20
[   50.843454][ T4334]  should_fail_usercopy+0x1a/0x20
[   50.843493][ T4334]  _copy_to_user+0x20/0xa0
[   50.843515][ T4334]  simple_read_from_buffer+0xb5/0x130
[   50.843627][ T4334]  proc_fail_nth_read+0x100/0x140
[   50.843676][ T4334]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   50.843728][ T4334]  vfs_read+0x19d/0x6f0
[   50.843756][ T4334]  ? __rcu_read_unlock+0x4f/0x70
[   50.843852][ T4334]  ? __fget_files+0x184/0x1c0
[   50.843877][ T4334]  ksys_read+0xda/0x1a0
[   50.844035][ T4334]  __x64_sys_read+0x40/0x50
[   50.844071][ T4334]  x64_sys_call+0x2d77/0x2fb0
[   50.844097][ T4334]  do_syscall_64+0xd2/0x200
[   50.844119][ T4334]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.844152][ T4334]  ? clear_bhb_loop+0x40/0x90
[   50.844251][ T4334]  ? clear_bhb_loop+0x40/0x90
[   50.844276][ T4334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.844298][ T4334] RIP: 0033:0x7fd2df2ad33c
[   50.844312][ T4334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   50.844328][ T4334] RSP: 002b:00007fd2dd917030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   50.844391][ T4334] RAX: ffffffffffffffda RBX: 00007fd2df4d5fa0 RCX: 00007fd2df2ad33c
[   50.844404][ T4334] RDX: 000000000000000f RSI: 00007fd2dd9170a0 RDI: 0000000000000007
[   50.844416][ T4334] RBP: 00007fd2dd917090 R08: 0000000000000000 R09: 0000000000000000
[   50.844430][ T4334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   50.844445][ T4334] R13: 0000000000000000 R14: 00007fd2df4d5fa0 R15: 00007ffcfc114a18
[   50.844469][ T4334]  </TASK>
[   51.214661][ T4353] loop4: detected capacity change from 0 to 512
[   51.289400][ T4353] ext4: Unknown parameter 'usrquota"data'
[   51.322851][ T4353] loop4: detected capacity change from 0 to 512
[   51.348668][ T4353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.380077][ T4353] EXT4-fs (loop4): 1 truncate cleaned up
[   51.386391][ T4353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.556950][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.573918][ T4362] loop0: detected capacity change from 0 to 512
[   51.580784][ T4362] EXT4-fs: Ignoring removed i_version option
[   51.595941][ T4362] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   51.645127][ T4362] EXT4-fs (loop0): 1 truncate cleaned up
[   51.655688][ T4362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.671256][ T4373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.324'.
[   51.785410][ T4377] loop3: detected capacity change from 0 to 512
[   51.807707][ T4380] loop1: detected capacity change from 0 to 1024
[   51.815310][ T4377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.833903][ T4377] EXT4-fs (loop3): 1 truncate cleaned up
[   51.842648][ T4380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.859509][ T4377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.891927][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv2
[   51.927977][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.949413][ T4387] team0: Port device batadv2 added
[   51.974015][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.008793][ T4394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.331'.
[   52.022610][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'.
[   52.055813][ T4396] loop3: detected capacity change from 0 to 512
[   52.073271][ T4396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.098562][ T4396] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.100727][ T4396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4396 comm=syz.3.333
[   52.234974][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.323375][ T4403] loop3: detected capacity change from 0 to 1024
[   52.342305][ T4403] EXT4-fs: Ignoring removed nobh option
[   52.380420][ T4405] rdma_op ffff88811967dd80 conn xmit_rdma 0000000000000000
[   52.383254][ T4403] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.402225][ T4405] loop1: detected capacity change from 0 to 736
[   52.447708][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.496184][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.643255][ T4409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[   52.674084][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'.
[   52.754212][ T4419] netlink: 820 bytes leftover after parsing attributes in process `syz.1.340'.
[   52.784037][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.859561][ T4421] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   52.869025][ T4427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.343'.
[   52.879992][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'.
[   52.934371][ T4433] lo speed is unknown, defaulting to 1000
[   52.970604][ T4433] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   52.995342][ T4437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4437 comm=syz.0.345
[   53.016905][ T4433] loop4: detected capacity change from 0 to 8192
[   53.023775][ T4433] vfat: Unknown parameter 'filter'
[   53.025564][ T4439] loop3: detected capacity change from 0 to 512
[   53.036667][ T4439] EXT4-fs: Ignoring removed i_version option
[   53.045314][ T4439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   53.059140][ T4439] EXT4-fs (loop3): 1 truncate cleaned up
[   53.067160][ T4439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.071871][ T4442] FAULT_INJECTION: forcing a failure.
[   53.071871][ T4442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.093024][ T4442] CPU: 1 UID: 0 PID: 4442 Comm: syz.4.350 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   53.093051][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   53.093062][ T4442] Call Trace:
[   53.093069][ T4442]  <TASK>
[   53.093078][ T4442]  __dump_stack+0x1d/0x30
[   53.093116][ T4442]  dump_stack_lvl+0xe8/0x140
[   53.093166][ T4442]  dump_stack+0x15/0x1b
[   53.093180][ T4442]  should_fail_ex+0x265/0x280
[   53.093225][ T4442]  should_fail+0xb/0x20
[   53.093249][ T4442]  should_fail_usercopy+0x1a/0x20
[   53.093356][ T4442]  _copy_to_user+0x20/0xa0
[   53.093373][ T4442]  simple_read_from_buffer+0xb5/0x130
[   53.093478][ T4442]  proc_fail_nth_read+0x100/0x140
[   53.093509][ T4442]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   53.093548][ T4442]  vfs_read+0x19d/0x6f0
[   53.093652][ T4442]  ? __rcu_read_unlock+0x4f/0x70
[   53.093671][ T4442]  ? __rcu_read_unlock+0x4f/0x70
[   53.093689][ T4442]  ? __fget_files+0x184/0x1c0
[   53.093776][ T4442]  ksys_read+0xda/0x1a0
[   53.093805][ T4442]  __x64_sys_read+0x40/0x50
[   53.093849][ T4442]  x64_sys_call+0x2d77/0x2fb0
[   53.093868][ T4442]  do_syscall_64+0xd2/0x200
[   53.093883][ T4442]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   53.093906][ T4442]  ? clear_bhb_loop+0x40/0x90
[   53.093960][ T4442]  ? clear_bhb_loop+0x40/0x90
[   53.093989][ T4442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   53.094009][ T4442] RIP: 0033:0x7f0aa771d33c
[   53.094102][ T4442] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   53.094124][ T4442] RSP: 002b:00007f0aa5d87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   53.094327][ T4442] RAX: ffffffffffffffda RBX: 00007f0aa7945fa0 RCX: 00007f0aa771d33c
[   53.094347][ T4442] RDX: 000000000000000f RSI: 00007f0aa5d870a0 RDI: 0000000000000005
[   53.094364][ T4442] RBP: 00007f0aa5d87090 R08: 0000000000000000 R09: 0000000000000000
[   53.094380][ T4442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   53.094392][ T4442] R13: 0000000000000000 R14: 00007f0aa7945fa0 R15: 00007fff0a5185a8
[   53.094454][ T4442]  </TASK>
[   53.326066][ T4446] xt_hashlimit: max too large, truncated to 1048576
[   53.381820][ T4450] netlink: 44 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.415015][ T4452] siw: device registration error -23
[   53.424674][ T4452] loop4: detected capacity change from 0 to 512
[   53.431607][ T4452] journal_path: Non-blockdev passed as './bus'
[   53.437794][ T4452] EXT4-fs: error: could not find journal device path
[   53.559886][ T4457] loop4: detected capacity change from 0 to 8192
[   53.746343][ T4466] loop2: detected capacity change from 0 to 1024
[   53.764607][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.784124][ T4473] x_tables: duplicate underflow at hook 1
[   53.800886][ T4472] loop0: detected capacity change from 0 to 2048
[   53.807978][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.878941][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.889731][   T29] kauditd_printk_skb: 720 callbacks suppressed
[   53.889748][   T29] audit: type=1400 audit(1752612660.133:10353): avc:  denied  { create } for  pid=4477 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   53.932850][ T4478] loop2: detected capacity change from 0 to 8192
[   53.955443][   T29] audit: type=1400 audit(1752612660.203:10354): avc:  denied  { write } for  pid=4481 comm="syz.0.368" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   53.967074][ T4484] siw: device registration error -23
[   53.993310][   T29] audit: type=1400 audit(1752612660.243:10355): avc:  denied  { write } for  pid=4481 comm="syz.0.368" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   54.001320][ T4484] loop3: detected capacity change from 0 to 512
[   54.023274][ T4484] journal_path: Non-blockdev passed as './bus'
[   54.029582][ T4484] EXT4-fs: error: could not find journal device path
[   54.084917][   T29] audit: type=1326 audit(1752612660.333:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.108937][   T29] audit: type=1326 audit(1752612660.333:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.132690][   T29] audit: type=1326 audit(1752612660.333:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.156551][   T29] audit: type=1326 audit(1752612660.333:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.179957][   T29] audit: type=1326 audit(1752612660.333:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.203508][   T29] audit: type=1326 audit(1752612660.333:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.226784][ T4492] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[   54.227329][   T29] audit: type=1326 audit(1752612660.333:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4488 comm="syz.4.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa771e929 code=0x7ffc0000
[   54.299824][ T4504] SELinux:  policydb string WE Linux does not match my string SE Linux
[   54.309244][ T4504] SELinux: failed to load policy
[   54.355208][ T4508] FAULT_INJECTION: forcing a failure.
[   54.355208][ T4508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   54.368638][ T4508] CPU: 0 UID: 0 PID: 4508 Comm: syz.0.377 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   54.368719][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   54.368731][ T4508] Call Trace:
[   54.368737][ T4508]  <TASK>
[   54.368745][ T4508]  __dump_stack+0x1d/0x30
[   54.368810][ T4508]  dump_stack_lvl+0xe8/0x140
[   54.368832][ T4508]  dump_stack+0x15/0x1b
[   54.368850][ T4508]  should_fail_ex+0x265/0x280
[   54.368879][ T4508]  should_fail+0xb/0x20
[   54.368967][ T4508]  should_fail_usercopy+0x1a/0x20
[   54.369002][ T4508]  _copy_to_iter+0x24b/0xe30
[   54.369037][ T4508]  ? should_fail_ex+0xdb/0x280
[   54.369070][ T4508]  copy_page_to_iter+0x18f/0x2d0
[   54.369161][ T4508]  process_vm_rw+0x672/0x950
[   54.369274][ T4508]  __x64_sys_process_vm_readv+0x78/0x90
[   54.369323][ T4508]  x64_sys_call+0x2978/0x2fb0
[   54.369347][ T4508]  do_syscall_64+0xd2/0x200
[   54.369367][ T4508]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   54.369391][ T4508]  ? clear_bhb_loop+0x40/0x90
[   54.369420][ T4508]  ? clear_bhb_loop+0x40/0x90
[   54.369445][ T4508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.369511][ T4508] RIP: 0033:0x7f8e2720e929
[   54.369524][ T4508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.369539][ T4508] RSP: 002b:00007f8e25877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[   54.369559][ T4508] RAX: ffffffffffffffda RBX: 00007f8e27435fa0 RCX: 00007f8e2720e929
[   54.369572][ T4508] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000000ed
[   54.369626][ T4508] RBP: 00007f8e25877090 R08: 0000000000000286 R09: 0000000000000000
[   54.369639][ T4508] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001
[   54.369652][ T4508] R13: 0000000000000000 R14: 00007f8e27435fa0 R15: 00007ffd91112a08
[   54.369718][ T4508]  </TASK>
[   54.620616][ T4516] loop1: detected capacity change from 0 to 512
[   54.659138][ T4516] journal_path: Non-blockdev passed as './bus'
[   54.665630][ T4516] EXT4-fs: error: could not find journal device path
[   54.778438][ T4529] loop1: detected capacity change from 0 to 1024
[   54.821950][ T4529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.882374][ T4544] netlink: 'syz.0.391': attribute type 6 has an invalid length.
[   54.913486][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.967631][ T4544] lo speed is unknown, defaulting to 1000
[   55.005512][ T4548] __nla_validate_parse: 7 callbacks suppressed
[   55.005529][ T4548] netlink: 128 bytes leftover after parsing attributes in process `syz.3.393'.
[   55.020774][ T4548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'.
[   55.056633][ T4547] loop0: detected capacity change from 0 to 4096
[   55.075129][ T4547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.091617][ T4548] loop3: detected capacity change from 0 to 8192
[   55.231094][ T4562] ==================================================================
[   55.239323][ T4562] BUG: KCSAN: data-race in fat_alloc_clusters / fat_statfs
[   55.246566][ T4562] 
[   55.248906][ T4562] write to 0xffff888119c5a0ac of 4 bytes by task 4548 on cpu 1:
[   55.256552][ T4562]  fat_alloc_clusters+0x662/0xa80
[   55.261611][ T4562]  fat_get_block+0x258/0x5e0
[   55.266232][ T4562]  __block_write_begin_int+0x3fd/0xf90
[   55.271743][ T4562]  cont_write_begin+0x5fc/0x970
[   55.276648][ T4562]  fat_write_begin+0x4f/0xe0
[   55.281287][ T4562]  cont_write_begin+0x1ad/0x970
[   55.286184][ T4562]  fat_write_begin+0x4f/0xe0
[   55.290799][ T4562]  generic_cont_expand_simple+0xb0/0x150
[   55.296486][ T4562]  fat_cont_expand+0x3e/0x170
[   55.301206][ T4562]  fat_setattr+0x2a5/0x8a0
[   55.305682][ T4562]  notify_change+0x806/0x890
[   55.310323][ T4562]  do_ftruncate+0x34b/0x450
[   55.314860][ T4562]  __x64_sys_ftruncate+0x68/0xc0
[   55.319819][ T4562]  x64_sys_call+0xd65/0x2fb0
[   55.324430][ T4562]  do_syscall_64+0xd2/0x200
[   55.328959][ T4562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.334886][ T4562] 
[   55.337229][ T4562] read to 0xffff888119c5a0ac of 4 bytes by task 4562 on cpu 0:
[   55.344795][ T4562]  fat_statfs+0x182/0x200
[   55.349165][ T4562]  vfs_statfs+0xc5/0x1c0
[   55.353543][ T4562]  user_statfs+0x71/0x110
[   55.357908][ T4562]  __x64_sys_statfs+0x65/0xf0
[   55.362606][ T4562]  x64_sys_call+0x1edd/0x2fb0
[   55.367322][ T4562]  do_syscall_64+0xd2/0x200
[   55.371844][ T4562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.377867][ T4562] 
[   55.380213][ T4562] value changed: 0x00001ee8 -> 0x00001ee7
[   55.385954][ T4562] 
[   55.388287][ T4562] Reported by Kernel Concurrency Sanitizer on:
[   55.394464][ T4562] CPU: 0 UID: 0 PID: 4562 Comm: syz.3.393 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) 
[   55.406831][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.416916][ T4562] ==================================================================
[   55.441270][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[   55.666606][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.