last executing test programs:

3.460539556s ago: executing program 1 (id=316):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0)
syz_clone(0x40000000, &(0x7f0000000280)="2a30053e1c3176348270ca8b9180188fc835645c38b5c342fa86e88edfa65351a46a96741fb8b27eb7a0bbf51c48d5e453c0f1988ab9e8ce16", 0x39, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, 0x0, 0x25, 0x9, @val=@target_btf_id=0xffffffffffffffff}, 0x14)
write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)

3.303863498s ago: executing program 4 (id=319):
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000005c0)=""/63, 0x3f)
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x2000}, 0x18)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x74)
sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)=""/206, 0xce}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000340)=""/136, 0x88}], 0x4, &(0x7f00000004c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x2, 0x14d}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x2}, &(0x7f0000000440)=0x8, &(0x7f0000000480)=0x9, 0xfff, 0x0, 0x8, 0xef, 0x42, 0x7f}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x6}}], 0x88, 0x20000000}, 0x800)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)
lseek(r4, 0x1, 0x0)
getdents(r4, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)

3.18949089s ago: executing program 4 (id=320):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, @rc={0x1f, @any, 0xab}, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xfc01, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='batadv_slave_0\x00', 0x1, 0x3, 0x6})
write$tun(0xffffffffffffffff, 0x0, 0xfce)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000872ab0a700000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680))
r3 = gettid()
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @tid=r3}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
ftruncate(r4, 0x81ff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000}, 0x28)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r6 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0)

2.818802846s ago: executing program 3 (id=323):
fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
timer_create(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004002c0001800b0001006e716d67c44655b2a7d34ff10800024000000101080001400000000c08000340000000000900010073797a3000000004000000000000003200000000140000001100010000000000000000000000000a"], 0x84}}, 0x40054)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r3 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
readv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0d03000000000300000000000000"], 0x14}}, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xb0, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x40000000, @rand_addr=' \x01\x00'}, 0xff01)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)

2.59307633s ago: executing program 3 (id=325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x13f, 0x5}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
clock_gettime(0xa, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4008010)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

2.424416832s ago: executing program 1 (id=326):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2(&(0x7f0000000000)={<r3=>0x0, <r4=>0x0}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
r6 = socket(0x2c, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)
write$selinux_load(r3, &(0x7f0000001600)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010)

2.329625543s ago: executing program 3 (id=328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0xfffffffffffffe02, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_INDEV={0x0, 0x3, 'macvtap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
socket$inet_sctp(0x2, 0x5, 0x84)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r11, 0x0, 0x8000000000000}, 0x18)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0xfffffedf, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @broadcast}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x34}}, 0x0)

2.017270898s ago: executing program 1 (id=332):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000050d200a86bed972668829e28b97800008998e3000000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
memfd_secret(0x0)
open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
close(0xffffffffffffffff)
r3 = socket(0x18, 0x3, 0x0)
r4 = accept$unix(r3, &(0x7f0000000140), &(0x7f0000000040)=0x1fa)
ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000080))
close(r3)
socket(0x18, 0xc003, 0x3a)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7})
r5 = socket(0x18, 0x3, 0x0)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r5, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r6)
socket(0x10, 0x3, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbb8ebbbbbb0180c200000e81000b00886411703067c7"], 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r9 = gettid()
tkill(r9, 0x12)

1.876967031s ago: executing program 2 (id=333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="44f0ff00", @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)

1.832212901s ago: executing program 2 (id=334):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
openat(r0, &(0x7f0000000180)='./file1\x00', 0xe7c1, 0x120)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
unshare(0x2040400)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
unshare(0x2020200)
msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x401, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000)
msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="571b6b8a230000002ce45d2e7534cb2c9b82689342dc680e000078ae4eab6b4d1f05bb8e96136b80508691145bbe264faf3937a68648e74a1e6fe8fb8c36afaf96939436e99c578c431423fac2c5b3aa"], 0x8, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xea63c73a5e83cfac, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDSETLED(r5, 0x4b32, 0x8e3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
gettid()
timer_create(0x0, 0x0, 0x0)

1.828908662s ago: executing program 3 (id=335):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

1.759516373s ago: executing program 1 (id=336):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
syslog(0x4, &(0x7f0000000440)=""/223, 0xdf)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
getpriority(0x0, 0x0)

1.523376126s ago: executing program 4 (id=338):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
get_mempolicy(&(0x7f0000000000), 0x0, 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x2)

1.388461748s ago: executing program 4 (id=339):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="3d000000020008ec0000000000000000"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x2)
pwritev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00!G', 0x3}], 0x1, 0x7, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0x2}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x30)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

1.091588463s ago: executing program 0 (id=341):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600"], 0x20}}, 0x40816)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000180)=r3, 0x4)
listen(0xffffffffffffffff, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000600)=[{&(0x7f0000000640)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000979bbeea1464507c0000", 0x58}], 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r6, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0xc4, 0x0, 0x1, 0x405, 0x0, 0x0, {0xa}, [@CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xc4}}, 0x0)

960.169195ms ago: executing program 3 (id=342):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x3, 0xc24, 0x9, 0xfffffffb}}, 0x44)
socket(0x200000000000011, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r8, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000000))
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2)
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x400730)
ioctl$SIOCSIFHWADDR(r7, 0x8924, 0x0)

945.452305ms ago: executing program 0 (id=343):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x13f, 0x5}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0x401}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

944.722925ms ago: executing program 1 (id=344):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd85}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = syz_io_uring_setup(0x80, &(0x7f00000004c0)={0x0, 0xae68, 0x0, 0x40000000, 0x2a0}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0)
pause()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
io_setup(0x8, &(0x7f0000000600))
r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x0, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 0x3, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xdc, 0x2, 0x3, 0xfff2, 0x6, 0x9, 'veth1_to_batadv\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x0, 0xa30d8a844ba5e902}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, {{@arp={@local, @local, 0xff000000, 0xffffff00, 0x5, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x8, 0xd, 0x2, 0xfff3, 0x9, 'veth0_to_bond\x00', '\x00', {0xff}, {0xff}, 0x0, 0x204}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518)
ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f00000000c0)={@private0, 0x2e})
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20)
r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000040), 0xfe, 0x45d, &(0x7f0000001480)="$eJzs3MtvG0UYAPBvnTjpg5JQyqMvCBRExSNp0gc9cCkCiQNISHAo4hTStCp1G9QEiVYVFA7hiCpxRxyR+Au4UC4IOCFxhTtCqlAvFE5Gu95NXcd27MaNof79pFVndiee+XZ36vGM1wEMrImI2B0R90TErxExFhFJY4GJ2j83rl+a+/v6pbkkqtU3/kyycn9dvzRXFC3+bmstUx1qU+/y2xGzlcr8+Tw/tXT2vanFCxefO3129tT8qflzM0ePHjq4d+TIzOGexLktbeuuDxf27HzlrSuvzR2/8s6PXyd53NEQR69MZGctM7bccOzJXlfWZ9vq0slwHxtCV8YjIr1c5az/j8VQbF45NhYvf9LXxgF3VLVaqo7euqtcl75cBe5i6WgeGETFG336+bfYNnD40XfXjsXKPMaNfKsdGY5SXqZ8B+ufiIjjl//5It3iDs1DAADUu3osIp5tNv4rxYN15e7N14bGI+K+iNgeEfdHxI6IeCAiK/tQRDzcZf0TDfnV45/q2G0F1qF0/PdCvrZ16/ivGP3F+FCe25bFX05Onq7MH8jPyf4oj6b56TZ1fPfSL5+1OlY//ku3tP5iLJi344/hhgm6E7Pl2fXEXO/ax7UFgNXxJ1Es46Tj450RsauL1y1nc4s1p5/+ak+rcmvH30YP1pmqX0Y8Vbv+l6Mh/kLScn1y+vkjM4enNkVl/sBUcVes9tPPy6+3qn9d8ffAtavV2NL0/l+JfzzZFLF44eKZbL12sfs6ln/7tOVnmtu7/5dmR5I3s/RIvu+D2aWl89MRI8mrq/fP3PzbIl+UT+///fua9//tcfNM7I6I9CbeGxGPRMSjedsfi4jHI2Jfm/h/ePGJd1ca1HH8o21esXfS+E+sdf2j/vp3nxg68/03rerv7PofylL78z3p9V8rrk4buJ5zBwAAAP8Xpew78ElpciVdKk1O1r7DvyO2lCoLi0vPnFx4/9yJ2nflx6NcKma6xurmQ6fzueEiP9OQP5jPG38+tDnLT84tVLqZTwR6b2uL/p/6vd0DPMDdwfNaMLj0fxhc+j8MLv0fBpf+D4OrWf//qA/tADbeGu//mzeqHcDGM/6HwaX/w+DS/2EgtXw2vrSuR/4l+pT4dmR9v9XQeSJK/5GQ75pEOZoeGu74xyxuI5FExGjTQ/3+nwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA3/g0AAP//wMnoQw==")
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000008000000000000090033bc370000bc9a", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

926.607856ms ago: executing program 0 (id=345):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu>\t\t')

886.915156ms ago: executing program 0 (id=346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xcc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6020000009333f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x2, 0x3, 0xff)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x402200, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0x12)
r7 = fcntl$getown(r2, 0x9)
r8 = getpid()
syz_pidfd_open(0x0, 0x0)
syz_open_procfs$namespace(r8, &(0x7f00000001c0)='ns/time_for_children\x00')
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000005800000225bd7000fddbdf250008000300", @ANYRES32=r6, @ANYBLOB="080001000000000008000200", @ANYRES32=r7, @ANYBLOB="0800010004000000080001000400000008000200", @ANYRES32=r8, @ANYBLOB="00000010"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

800.421167ms ago: executing program 0 (id=347):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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")
mmap(&(0x7f0000702000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x1)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800800010076657468000000000400028208000a00", @ANYRES32=r6, @ANYBLOB="6190335ea959a1c6f748b22ec26f76b53d82f817d0375365b6bd1e93aaa5195fe22f7842b07658b5aaf0eefd9677b3386835000000c18b2926158ffc9f676dc361dd6f8c6664ed232b76ce658095bbee0a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000220005ff00000000000000000000014a65c3a0629384df9522c6fd60426c45b27a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB="0500270000000000"], 0x44}}, 0x0)
memfd_create(&(0x7f0000000780)='&$*-:\',@\x00\xf2zM\xc6B\"\xc2:\xf1\xe6;cp%\\\\\x8b]\xee\rL&z\x1d\xddk\x83\'\x979l\x82tl\x97\xb1\xee\xc6\x1b\x90>\xf5~\xb6\x9fP#\xe5M\x82\xcf(c\xe0\xfc7\xb9MsQAw\x92\xd9\x10AP:\x9f7\xc8\xac\x16\x84n\xf25\xa4\xa3x\x96\x1a\xe3\xa8\x93\xd1h&2\x81\'\xe2\xec\xe2-p\xa5Z\x9e\xa6<\xdb6\xf5gM\x87\xe2X\xaf\xed!\xea\xecP\xf87\f\x99B\xedV\x19\x92\xbd\x87\x98F\x1e\xa1p\x04Ip&\x81\x87C\xd4\x1d\xf4;4K\xa6\xa4\xdc\xa1\\O\xaf\xd3\xfb~\x1d\xba\xd8\xd1`\xe8zM\xd3o\xfcWdB\x936?\xdb\xdcP\xaa}\x03\xed\xd17:\x0f\xef7\x1aU\xa5', 0x1)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

792.827538ms ago: executing program 2 (id=348):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_DISALLOCATE(r3, 0x5608)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/218, 0xda}], 0x1}, 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
listen(r4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2931b90f}, 0x38)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup2(r7, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

674.87271ms ago: executing program 2 (id=349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="3d000000020008ec0000000000000000"], 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
request_key(&(0x7f0000000980)='asymmetric\x00', &(0x7f0000001180)={'syz', 0x0}, &(0x7f00000011c0)=')[\xce(*\x00', 0xfffffffffffffffc)

653.45374ms ago: executing program 0 (id=350):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="000000000000000e007b8af8ff00000000bfa200000000010007020000f8ffffff0003000008000000b704000000000020850000000100000095b23dbbfb534bb26f3439d7577a51616c417d57b86b6a5d57243fcc03a058c47292badae1961aa190f60af7d80ea277e0f5dcf51d6f4bc67320d4b7f3bc0c447051f875799474d0e456f17d700bc86f1c945705645caa689bda26943a312754cabdd4322cd1f6646717"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @const={0x0, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x38e869a5bbd4abba, 0x2e, 0x5f]}}, 0x0, 0x66}, 0x28)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0xffff, 0x2000}, {@in6=@mcast1, 0x14, 0x2b}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000380)={[{@nogrpid}, {@lazytime}, {@discard}, {@nobh}, {@journal_async_commit}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@errors_continue}, {@jqfmt_vfsold}]}, 0x1, 0x503, &(0x7f0000000880)="$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")
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0)
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)

469.024533ms ago: executing program 4 (id=351):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, 0x0, 0x13f, 0x5}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10)
clock_gettime(0xa, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4008010)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})

437.040784ms ago: executing program 2 (id=352):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0)
get_robust_list(0x0, &(0x7f0000000300)=0x0, 0x0)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (fail_nth: 1)

145.803818ms ago: executing program 4 (id=353):
io_setup(0x8f0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c0019800800010005"], 0x40}}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3}}}, 0x24}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xf, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9c2c89b6f5becfd", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000800)={{r1}, "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"})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4010)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(r8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000008000000b2e4000000000000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000000640)=@file={0x1, './cgroup\x00'}, 0x6e)

40.525899ms ago: executing program 2 (id=354):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1)
syslog(0x4, &(0x7f0000000440)=""/223, 0xdf)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r3, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10)
getpriority(0x0, 0x0)

37.37799ms ago: executing program 3 (id=355):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000000c0), 0x0, 0x4f7, &(0x7f0000000540)="$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")

0s ago: executing program 1 (id=356):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = creat(0x0, 0x0)
ftruncate(r0, 0x201f)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f00000001c0)={'full', 0x20, 0xab04, 0x20, 0x3}, 0x2f)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
syz_clone(0x6e2e5000, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]})
prlimit64(r1, 0xe, &(0x7f00000000c0)={0x7f, 0x8000000000000001}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020501ff0c00000000000000000000000300060033000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002004e23e00000010000000000000000020013"], 0x60}}, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_open_procfs(r6, &(0x7f0000000000)='maps\x00')
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
r9 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf71, 0x0, 0x1, 0x10000000}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&\"\"\nt\x00')
r10 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e2b9e15b1e55af3e36e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',\x00'])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x3, 0x81, 0x81, 0x6}, {0x0, 0x4, 0xfd, 0x7ff}, {0x9, 0x4, 0x5, 0x1000}, {0xc, 0x6, 0x7f, 0x4}]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts.
[   27.432852][   T29] audit: type=1400 audit(1753058415.305:62): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   27.434017][ T3293] cgroup: Unknown subsys name 'net'
[   27.455686][   T29] audit: type=1400 audit(1753058415.305:63): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.483467][   T29] audit: type=1400 audit(1753058415.325:64): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   27.662593][ T3293] cgroup: Unknown subsys name 'cpuset'
[   27.668846][ T3293] cgroup: Unknown subsys name 'rlimit'
[   27.800222][   T29] audit: type=1400 audit(1753058415.665:65): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   27.826095][   T29] audit: type=1400 audit(1753058415.665:66): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.846643][   T29] audit: type=1400 audit(1753058415.665:67): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.856134][ T3299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   27.867067][   T29] audit: type=1400 audit(1753058415.675:68): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   27.896033][   T29] audit: type=1400 audit(1753058415.675:69): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   27.921078][   T29] audit: type=1400 audit(1753058415.675:70): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   27.944465][   T29] audit: type=1400 audit(1753058415.745:71): avc:  denied  { relabelto } for  pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   27.982671][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   29.163742][ T3308] chnl_net:caif_netlink_parms(): no params data found
[   29.215032][ T3307] chnl_net:caif_netlink_parms(): no params data found
[   29.255667][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.262819][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.270022][ T3308] bridge_slave_0: entered allmulticast mode
[   29.276774][ T3308] bridge_slave_0: entered promiscuous mode
[   29.285582][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.292763][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.299990][ T3308] bridge_slave_1: entered allmulticast mode
[   29.306532][ T3308] bridge_slave_1: entered promiscuous mode
[   29.351718][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.370522][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.388974][ T3306] chnl_net:caif_netlink_parms(): no params data found
[   29.424105][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.431300][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.445336][ T3307] bridge_slave_0: entered allmulticast mode
[   29.451772][ T3307] bridge_slave_0: entered promiscuous mode
[   29.460755][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.468221][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.475888][ T3307] bridge_slave_1: entered allmulticast mode
[   29.483011][ T3307] bridge_slave_1: entered promiscuous mode
[   29.496780][ T3308] team0: Port device team_slave_0 added
[   29.520177][ T3308] team0: Port device team_slave_1 added
[   29.550290][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.563155][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.583975][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.590951][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.617437][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.628394][ T3314] chnl_net:caif_netlink_parms(): no params data found
[   29.652104][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.659101][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.685834][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.706437][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.713675][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.721074][ T3306] bridge_slave_0: entered allmulticast mode
[   29.727975][ T3306] bridge_slave_0: entered promiscuous mode
[   29.736996][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.744250][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.752524][ T3306] bridge_slave_1: entered allmulticast mode
[   29.759356][ T3306] bridge_slave_1: entered promiscuous mode
[   29.768507][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   29.781041][ T3307] team0: Port device team_slave_0 added
[   29.788343][ T3307] team0: Port device team_slave_1 added
[   29.845956][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.864902][ T3308] hsr_slave_0: entered promiscuous mode
[   29.871234][ T3308] hsr_slave_1: entered promiscuous mode
[   29.882360][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.889635][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.897146][ T3314] bridge_slave_0: entered allmulticast mode
[   29.903946][ T3314] bridge_slave_0: entered promiscuous mode
[   29.910974][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.917996][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   29.944527][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.960588][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.970111][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.000350][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.012982][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.027125][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.034363][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.041620][ T3314] bridge_slave_1: entered allmulticast mode
[   30.048355][ T3314] bridge_slave_1: entered promiscuous mode
[   30.081619][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.088791][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.096040][ T3312] bridge_slave_0: entered allmulticast mode
[   30.103066][ T3312] bridge_slave_0: entered promiscuous mode
[   30.130568][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.138184][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.146412][ T3312] bridge_slave_1: entered allmulticast mode
[   30.153673][ T3312] bridge_slave_1: entered promiscuous mode
[   30.162367][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.173591][ T3306] team0: Port device team_slave_0 added
[   30.198017][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.209203][ T3306] team0: Port device team_slave_1 added
[   30.223119][ T3307] hsr_slave_0: entered promiscuous mode
[   30.233140][ T3307] hsr_slave_1: entered promiscuous mode
[   30.239068][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.247539][ T3307] Cannot create hsr debugfs directory
[   30.285915][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   30.314898][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   30.328239][ T3314] team0: Port device team_slave_0 added
[   30.335571][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.344457][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.371397][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.382988][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.391938][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.418364][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.444215][ T3314] team0: Port device team_slave_1 added
[   30.459129][ T3312] team0: Port device team_slave_0 added
[   30.466232][ T3312] team0: Port device team_slave_1 added
[   30.500443][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.507703][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.534319][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.561884][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.568924][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.595119][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.613098][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   30.620084][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.646681][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   30.658290][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   30.665558][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   30.691742][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   30.704804][ T3306] hsr_slave_0: entered promiscuous mode
[   30.711053][ T3306] hsr_slave_1: entered promiscuous mode
[   30.717177][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.724945][ T3306] Cannot create hsr debugfs directory
[   30.769526][ T3314] hsr_slave_0: entered promiscuous mode
[   30.775641][ T3314] hsr_slave_1: entered promiscuous mode
[   30.781528][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.789510][ T3314] Cannot create hsr debugfs directory
[   30.809296][ T3312] hsr_slave_0: entered promiscuous mode
[   30.815550][ T3312] hsr_slave_1: entered promiscuous mode
[   30.821428][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   30.829317][ T3312] Cannot create hsr debugfs directory
[   30.927609][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   30.938512][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   30.958398][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   30.978282][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.017855][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   31.029153][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   31.039896][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   31.049210][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   31.070433][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   31.080273][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   31.105560][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   31.115464][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   31.160555][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.171191][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.189593][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.206670][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.216136][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.233372][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   31.243082][ T3308] 8021q: adding VLAN 0 to HW filter on device team0
[   31.255106][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.267043][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.274187][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.282779][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   31.304331][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.311729][ T1739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.319698][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   31.329060][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   31.360288][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.378390][ T3307] 8021q: adding VLAN 0 to HW filter on device team0
[   31.400712][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.407968][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.419413][ T3306] 8021q: adding VLAN 0 to HW filter on device team0
[   31.432010][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.439201][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.458845][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.466202][ T1739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.477797][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.485129][ T1739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.520931][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.551828][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   31.567507][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.577209][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.584368][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.605896][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.613105][ T1739] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.630161][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.670618][ T3314] 8021q: adding VLAN 0 to HW filter on device team0
[   31.687570][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.707570][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.714697][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.731874][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.739017][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.751911][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.768587][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.849141][ T3308] veth0_vlan: entered promiscuous mode
[   31.888412][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.901288][ T3308] veth1_vlan: entered promiscuous mode
[   31.945121][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.965327][ T3307] veth0_vlan: entered promiscuous mode
[   31.981005][ T3308] veth0_macvtap: entered promiscuous mode
[   31.992899][ T3308] veth1_macvtap: entered promiscuous mode
[   32.012797][ T3307] veth1_vlan: entered promiscuous mode
[   32.029928][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.041632][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.060034][ T3307] veth0_macvtap: entered promiscuous mode
[   32.069010][ T3307] veth1_macvtap: entered promiscuous mode
[   32.079683][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.088634][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.097930][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.106707][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.138004][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.150967][ T3306] veth0_vlan: entered promiscuous mode
[   32.166583][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.176369][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.185216][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.194105][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.202874][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.216605][ T3312] veth0_vlan: entered promiscuous mode
[   32.227961][ T3306] veth1_vlan: entered promiscuous mode
[   32.236666][ T3312] veth1_vlan: entered promiscuous mode
[   32.260234][ T3314] veth0_vlan: entered promiscuous mode
[   32.276006][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   32.290277][ T3306] veth0_macvtap: entered promiscuous mode
[   32.304396][ T3306] veth1_macvtap: entered promiscuous mode
[   32.313129][ T3314] veth1_vlan: entered promiscuous mode
[   32.329017][ T3312] veth0_macvtap: entered promiscuous mode
[   32.352906][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.376016][ T3475] loop1: detected capacity change from 0 to 1024
[   32.384299][ T3314] veth0_macvtap: entered promiscuous mode
[   32.403262][ T3312] veth1_macvtap: entered promiscuous mode
[   32.411399][ T3475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.432973][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.448233][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.455713][   T29] kauditd_printk_skb: 38 callbacks suppressed
[   32.455728][   T29] audit: type=1400 audit(1753058420.315:110): avc:  denied  { create } for  pid=3481 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   32.484876][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.492958][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.501901][   T29] audit: type=1400 audit(1753058420.335:111): avc:  denied  { create } for  pid=3481 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   32.502247][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.531208][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.539952][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.556672][ T3314] veth1_macvtap: entered promiscuous mode
[   32.569493][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.587916][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.596761][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.605585][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.614598][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.653509][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.687225][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.696237][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.705191][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.714617][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.861185][   T29] audit: type=1400 audit(1753058420.685:112): avc:  denied  { create } for  pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.880689][   T29] audit: type=1400 audit(1753058420.695:113): avc:  denied  { ioctl } for  pid=3498 comm="syz.4.5" path="socket:[4623]" dev="sockfs" ino=4623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   32.929186][ T3506] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   32.947138][    C1] hrtimer: interrupt took 43169 ns
[   32.949349][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   32.996289][   T29] audit: type=1400 audit(1753058420.795:114): avc:  denied  { read } for  pid=3505 comm="syz.2.3" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.021170][   T29] audit: type=1400 audit(1753058420.795:115): avc:  denied  { open } for  pid=3505 comm="syz.2.3" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.044699][   T29] audit: type=1400 audit(1753058420.795:116): avc:  denied  { read write } for  pid=3505 comm="syz.2.3" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   33.068623][   T29] audit: type=1400 audit(1753058420.795:117): avc:  denied  { open } for  pid=3505 comm="syz.2.3" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   33.093782][   T29] audit: type=1400 audit(1753058420.795:118): avc:  denied  { read } for  pid=3505 comm="syz.2.3" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   33.117091][   T29] audit: type=1400 audit(1753058420.795:119): avc:  denied  { open } for  pid=3505 comm="syz.2.3" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   33.119595][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.193680][ T3512] loop3: detected capacity change from 0 to 2048
[   33.206490][ T3515] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'.
[   33.235326][ T3512] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure
[   33.306498][ T3518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   33.461740][ T3545] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET)
[   33.483978][ T3551] FAULT_INJECTION: forcing a failure.
[   33.483978][ T3551] name failslab, interval 1, probability 0, space 0, times 0
[   33.499305][ T3551] CPU: 0 UID: 0 PID: 3551 Comm: syz.0.16 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   33.499415][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   33.499434][ T3551] Call Trace:
[   33.499441][ T3551]  <TASK>
[   33.499451][ T3551]  __dump_stack+0x1d/0x30
[   33.499474][ T3551]  dump_stack_lvl+0xe8/0x140
[   33.499496][ T3551]  dump_stack+0x15/0x1b
[   33.499516][ T3551]  should_fail_ex+0x265/0x280
[   33.499560][ T3551]  should_failslab+0x8c/0xb0
[   33.499584][ T3551]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   33.499619][ T3551]  ? gnet_stats_copy_app+0x43/0x160
[   33.499703][ T3551]  kmemdup_noprof+0x2b/0x70
[   33.499724][ T3551]  gnet_stats_copy_app+0x43/0x160
[   33.499755][ T3551]  sfb_dump_stats+0x192/0x1c0
[   33.499790][ T3551]  tc_fill_qdisc+0x678/0x990
[   33.499833][ T3551]  qdisc_notify+0x1e5/0x280
[   33.499863][ T3551]  qdisc_graft+0xafb/0xcc0
[   33.499949][ T3551]  tc_modify_qdisc+0xf84/0x1420
[   33.500032][ T3551]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   33.500056][ T3551]  rtnetlink_rcv_msg+0x65a/0x6d0
[   33.500089][ T3551]  netlink_rcv_skb+0x120/0x220
[   33.500144][ T3551]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   33.500239][ T3551]  rtnetlink_rcv+0x1c/0x30
[   33.500260][ T3551]  netlink_unicast+0x5a5/0x680
[   33.500292][ T3551]  netlink_sendmsg+0x58b/0x6b0
[   33.500343][ T3551]  ? __pfx_netlink_sendmsg+0x10/0x10
[   33.500361][ T3551]  __sock_sendmsg+0x142/0x180
[   33.500387][ T3551]  ____sys_sendmsg+0x345/0x4e0
[   33.500459][ T3551]  ___sys_sendmsg+0x17b/0x1d0
[   33.500506][ T3551]  __sys_sendmmsg+0x178/0x300
[   33.500537][ T3551]  __x64_sys_sendmmsg+0x57/0x70
[   33.500585][ T3551]  x64_sys_call+0x2f2f/0x2fb0
[   33.500612][ T3551]  do_syscall_64+0xd2/0x200
[   33.500687][ T3551]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   33.500715][ T3551]  ? clear_bhb_loop+0x40/0x90
[   33.500742][ T3551]  ? clear_bhb_loop+0x40/0x90
[   33.500804][ T3551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.500826][ T3551] RIP: 0033:0x7f8ef3c5e9a9
[   33.500846][ T3551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.500868][ T3551] RSP: 002b:00007f8ef22bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   33.500895][ T3551] RAX: ffffffffffffffda RBX: 00007f8ef3e85fa0 RCX: 00007f8ef3c5e9a9
[   33.500911][ T3551] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[   33.500989][ T3551] RBP: 00007f8ef22bf090 R08: 0000000000000000 R09: 0000000000000000
[   33.501000][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   33.501015][ T3551] R13: 0000000000000000 R14: 00007f8ef3e85fa0 R15: 00007ffdacc7d2d8
[   33.501054][ T3551]  </TASK>
[   33.776098][ T3551] Zero length message leads to an empty skb
[   33.779365][ T3552] loop3: detected capacity change from 0 to 8192
[   33.790966][ T3552] vfat: Unknown parameter '¿¤'
[   33.875811][ T3551] syz.0.16 (3551) used greatest stack depth: 10584 bytes left
[   33.944402][ T3562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   33.964671][ T3562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.573237][ T3588] loop0: detected capacity change from 0 to 1024
[   34.586193][ T3588] =======================================================
[   34.586193][ T3588] WARNING: The mand mount option has been deprecated and
[   34.586193][ T3588]          and is ignored by this kernel. Remove the mand
[   34.586193][ T3588]          option from the mount to silence this warning.
[   34.586193][ T3588] =======================================================
[   34.622289][ T3590] loop3: detected capacity change from 0 to 1024
[   34.632452][ T3590] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   34.643562][ T3590] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   34.656753][ T3518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   34.660772][ T3590] JBD2: no valid journal superblock found
[   34.667766][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.673227][ T3590] EXT4-fs (loop3): Could not load journal inode
[   34.705993][ T3588] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   34.715216][ T3590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3590 comm=syz.3.24
[   34.721587][ T3588] 8021q: adding VLAN 0 to HW filter on device bond1
[   34.728037][ T3590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3590 comm=syz.3.24
[   34.763007][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   34.833691][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.917658][ T3603] loop3: detected capacity change from 0 to 8192
[   34.928511][ T3603] vfat: Unknown parameter '¿¤'
[   34.953877][ T3609] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[   35.025625][ T3615] loop4: detected capacity change from 0 to 1024
[   35.067351][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.192242][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.277079][ T3625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.336259][ T3518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.422230][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   35.481027][ T3518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.506301][ T3518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.520923][ T3518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.533015][ T3518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.722660][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'.
[   35.739857][ T3647] netlink: 108 bytes leftover after parsing attributes in process `syz.2.38'.
[   36.489001][ T3655] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.598571][ T3657] netlink: 'syz.2.45': attribute type 21 has an invalid length.
[   36.616032][ T3660] FAULT_INJECTION: forcing a failure.
[   36.616032][ T3660] name failslab, interval 1, probability 0, space 0, times 0
[   36.629068][ T3660] CPU: 1 UID: 0 PID: 3660 Comm: syz.4.44 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   36.629100][ T3660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   36.629112][ T3660] Call Trace:
[   36.629129][ T3660]  <TASK>
[   36.629136][ T3660]  __dump_stack+0x1d/0x30
[   36.629157][ T3660]  dump_stack_lvl+0xe8/0x140
[   36.629175][ T3660]  dump_stack+0x15/0x1b
[   36.629195][ T3660]  should_fail_ex+0x265/0x280
[   36.629303][ T3660]  should_failslab+0x8c/0xb0
[   36.629328][ T3660]  kmem_cache_alloc_noprof+0x50/0x310
[   36.629361][ T3660]  ? security_inode_alloc+0x37/0x100
[   36.629390][ T3660]  security_inode_alloc+0x37/0x100
[   36.629427][ T3660]  inode_init_always_gfp+0x4b7/0x500
[   36.629469][ T3660]  ? __pfx_proc_alloc_inode+0x10/0x10
[   36.629496][ T3660]  alloc_inode+0x58/0x170
[   36.629533][ T3660]  new_inode+0x1d/0xe0
[   36.629608][ T3660]  proc_pid_make_inode+0x1f/0xd0
[   36.629638][ T3660]  proc_fd_instantiate+0x36/0x1a0
[   36.629669][ T3660]  proc_fill_cache+0x1c1/0x240
[   36.629700][ T3660]  ? __pfx_proc_fd_instantiate+0x10/0x10
[   36.629778][ T3660]  proc_readfd_common+0x28b/0x3b0
[   36.629804][ T3660]  ? __pfx_proc_fd_instantiate+0x10/0x10
[   36.629839][ T3660]  proc_fd_iterate+0x24/0x30
[   36.629894][ T3660]  iterate_dir+0x114/0x330
[   36.629918][ T3660]  ? mutex_lock+0xd/0x30
[   36.629974][ T3660]  __se_sys_getdents64+0x88/0x1b0
[   36.630001][ T3660]  ? __pfx_filldir64+0x10/0x10
[   36.630029][ T3660]  __x64_sys_getdents64+0x43/0x50
[   36.630112][ T3660]  x64_sys_call+0x1302/0x2fb0
[   36.630139][ T3660]  do_syscall_64+0xd2/0x200
[   36.630158][ T3660]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   36.630182][ T3660]  ? clear_bhb_loop+0x40/0x90
[   36.630208][ T3660]  ? clear_bhb_loop+0x40/0x90
[   36.630304][ T3660]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.630405][ T3660] RIP: 0033:0x7f2de580e9a9
[   36.630423][ T3660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.630508][ T3660] RSP: 002b:00007f2de3e6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   36.630527][ T3660] RAX: ffffffffffffffda RBX: 00007f2de5a35fa0 RCX: 00007f2de580e9a9
[   36.630538][ T3660] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000003
[   36.630554][ T3660] RBP: 00007f2de3e6f090 R08: 0000000000000000 R09: 0000000000000000
[   36.630569][ T3660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   36.630585][ T3660] R13: 0000000000000000 R14: 00007f2de5a35fa0 R15: 00007fffca240458
[   36.630609][ T3660]  </TASK>
[   36.930740][ T3664] loop2: detected capacity change from 0 to 512
[   36.941215][ T3625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.958843][ T3655] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   36.976459][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.979742][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'.
[   36.996010][ T3664] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   36.998988][ T3666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'.
[   37.018549][ T3666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.48'.
[   37.038250][ T3625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.066154][ T3655] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.076864][ T3666] loop4: detected capacity change from 0 to 8192
[   37.125309][ T3666]  loop4: p2 p3 p4
[   37.132630][ T3666] loop4: p2 start 2936012800 is beyond EOD, truncated
[   37.140839][ T3666] loop4: p3 start 1912602624 is beyond EOD, truncated
[   37.148178][ T3666] loop4: p4 size 656640 extends beyond EOD, truncated
[   37.199916][ T3655] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.261304][ T3625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   37.274401][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.300223][ T3655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.317164][ T3655] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.331912][ T3655] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.333732][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/50.tmp-b7:2' failed: Read-only file system
[   37.349953][ T3655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.369690][ T3625] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.386641][ T3625] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.393486][ T3693] loop3: detected capacity change from 0 to 764
[   37.401163][ T3625] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.417737][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/51.tmp-b7:3' failed: Read-only file system
[   37.439881][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-label/CDROM.tmp-b7:3' failed: Read-only file system
[   37.442284][ T3625] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.458561][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:3' failed: Read-only file system
[   37.489468][   T29] kauditd_printk_skb: 216 callbacks suppressed
[   37.489487][   T29] audit: type=1400 audit(1753058425.355:334): avc:  denied  { create } for  pid=3696 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.515416][   T29] audit: type=1400 audit(1753058425.355:335): avc:  denied  { bind } for  pid=3696 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.535014][   T29] audit: type=1400 audit(1753058425.355:336): avc:  denied  { write } for  pid=3696 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.561220][   T29] audit: type=1400 audit(1753058425.425:337): avc:  denied  { unmount } for  pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   37.585334][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/51.tmp-b7:3' failed: Read-only file system
[   37.600354][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/51.tmp-b7:3' failed: Read-only file system
[   37.632692][ T3697] loop3: detected capacity change from 0 to 512
[   37.640562][ T3697] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   37.653494][ T3697] EXT4-fs (loop3): group descriptors corrupted!
[   37.664075][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/51.tmp-b7:3' failed: Read-only file system
[   37.678822][ T3695] loop2: detected capacity change from 0 to 8192
[   37.687911][   T29] audit: type=1326 audit(1753058425.485:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.692597][ T3695] vfat: Unknown parameter '¿¤'
[   37.717391][   T29] audit: type=1326 audit(1753058425.485:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.739977][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/54.tmp-b7:2' failed: Read-only file system
[   37.748815][   T29] audit: type=1326 audit(1753058425.485:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.784032][   T29] audit: type=1326 audit(1753058425.485:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.808639][   T29] audit: type=1326 audit(1753058425.485:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.832949][   T29] audit: type=1326 audit(1753058425.485:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   37.846892][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[   37.860720][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:2' failed: Read-only file system
[   37.996902][ T3710] netlink: 84 bytes leftover after parsing attributes in process `syz.0.58'.
[   38.144304][ T3719] loop1: detected capacity change from 0 to 2048
[   38.205703][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   38.220203][ T3722] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.241809][ T3719] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   38.257189][ T3719] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   38.269625][ T3719] EXT4-fs (loop1): This should not happen!! Data will be lost
[   38.269625][ T3719] 
[   38.279634][ T3719] EXT4-fs (loop1): Total free blocks count 0
[   38.285699][ T3719] EXT4-fs (loop1): Free/Dirty block details
[   38.292218][ T3719] EXT4-fs (loop1): free_blocks=2415919104
[   38.298308][ T3719] EXT4-fs (loop1): dirty_blocks=16
[   38.303536][ T3719] EXT4-fs (loop1): Block reservation details
[   38.309711][ T3719] EXT4-fs (loop1): i_reserved_data_blocks=1
[   38.327095][ T3716] loop3: detected capacity change from 0 to 256
[   38.337423][ T3716] FAT-fs (loop3): bogus number of FAT sectors
[   38.343714][ T3716] FAT-fs (loop3): Can't find a valid FAT filesystem
[   38.361086][ T3719] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   38.418858][ T3719] syz.1.61 (3719) used greatest stack depth: 9880 bytes left
[   38.499814][ T3733] loop1: detected capacity change from 0 to 764
[   38.530878][ T3731] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.589745][ T3739] netlink: 14 bytes leftover after parsing attributes in process `syz.3.66'.
[   38.601435][ T3731] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.684121][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   38.697890][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   38.708609][ T3739] bond0 (unregistering): Released all slaves
[   38.719742][ T3731] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.758505][ T3750] loop1: detected capacity change from 0 to 1024
[   38.768186][ T3750] EXT4-fs: Ignoring removed orlov option
[   38.784619][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.784663][ T3731] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   38.848128][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.109442][ T3761] loop1: detected capacity change from 0 to 512
[   39.120584][ T3761] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   39.133056][ T3761] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.73: invalid indirect mapped block 2683928664 (level 1)
[   39.148804][ T3761] EXT4-fs (loop1): Remounting filesystem read-only
[   39.157530][ T3761] EXT4-fs (loop1): 1 truncate cleaned up
[   39.163983][ T3761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.973745][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.048651][ T3773] loop4: detected capacity change from 0 to 1024
[   40.059089][ T3775] FAULT_INJECTION: forcing a failure.
[   40.059089][ T3775] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   40.072799][ T3775] CPU: 1 UID: 0 PID: 3775 Comm: syz.2.77 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   40.072834][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.072846][ T3775] Call Trace:
[   40.072854][ T3775]  <TASK>
[   40.072861][ T3775]  __dump_stack+0x1d/0x30
[   40.072883][ T3775]  dump_stack_lvl+0xe8/0x140
[   40.072944][ T3775]  dump_stack+0x15/0x1b
[   40.072965][ T3775]  should_fail_ex+0x265/0x280
[   40.072999][ T3775]  should_fail+0xb/0x20
[   40.073092][ T3775]  should_fail_usercopy+0x1a/0x20
[   40.073126][ T3773] EXT4-fs: Ignoring removed orlov option
[   40.073124][ T3775]  _copy_from_user+0x1c/0xb0
[   40.073229][ T3775]  sctp_setsockopt+0x154/0xe30
[   40.073271][ T3775]  sock_common_setsockopt+0x69/0x80
[   40.073321][ T3775]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   40.073357][ T3775]  __sys_setsockopt+0x184/0x200
[   40.073402][ T3775]  __x64_sys_setsockopt+0x64/0x80
[   40.073444][ T3775]  x64_sys_call+0x2bd5/0x2fb0
[   40.073515][ T3775]  do_syscall_64+0xd2/0x200
[   40.073541][ T3775]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.073631][ T3775]  ? clear_bhb_loop+0x40/0x90
[   40.073660][ T3775]  ? clear_bhb_loop+0x40/0x90
[   40.073690][ T3775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.073719][ T3775] RIP: 0033:0x7f88faa6e9a9
[   40.073740][ T3775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.073784][ T3775] RSP: 002b:00007f88f90cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   40.073809][ T3775] RAX: ffffffffffffffda RBX: 00007f88fac95fa0 RCX: 00007f88faa6e9a9
[   40.073825][ T3775] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003
[   40.073842][ T3775] RBP: 00007f88f90cf090 R08: 0000000000000008 R09: 0000000000000000
[   40.073859][ T3775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.073875][ T3775] R13: 0000000000000000 R14: 00007f88fac95fa0 R15: 00007ffe87f39f28
[   40.073933][ T3775]  </TASK>
[   40.277812][ T3773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.570219][ T3790] xt_CT: You must specify a L4 protocol and not use inversions on it
[   40.672289][ T3792] FAULT_INJECTION: forcing a failure.
[   40.672289][ T3792] name failslab, interval 1, probability 0, space 0, times 0
[   40.685067][ T3792] CPU: 1 UID: 0 PID: 3792 Comm: syz.1.83 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   40.685110][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.685124][ T3792] Call Trace:
[   40.685129][ T3792]  <TASK>
[   40.685136][ T3792]  __dump_stack+0x1d/0x30
[   40.685221][ T3792]  dump_stack_lvl+0xe8/0x140
[   40.685246][ T3792]  dump_stack+0x15/0x1b
[   40.685264][ T3792]  should_fail_ex+0x265/0x280
[   40.685293][ T3792]  ? legacy_init_fs_context+0x31/0x80
[   40.685377][ T3792]  should_failslab+0x8c/0xb0
[   40.685403][ T3792]  __kmalloc_cache_noprof+0x4c/0x320
[   40.685437][ T3792]  legacy_init_fs_context+0x31/0x80
[   40.685544][ T3792]  alloc_fs_context+0x3ef/0x4e0
[   40.685590][ T3792]  fs_context_for_mount+0x22/0x30
[   40.685626][ T3792]  do_new_mount+0xe9/0x680
[   40.685729][ T3792]  path_mount+0x4a4/0xb20
[   40.685765][ T3792]  ? user_path_at+0x109/0x130
[   40.685915][ T3792]  __se_sys_mount+0x28f/0x2e0
[   40.685948][ T3792]  ? fput+0x8f/0xc0
[   40.686037][ T3792]  __x64_sys_mount+0x67/0x80
[   40.686077][ T3792]  x64_sys_call+0xd36/0x2fb0
[   40.686108][ T3792]  do_syscall_64+0xd2/0x200
[   40.686184][ T3792]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.686218][ T3792]  ? clear_bhb_loop+0x40/0x90
[   40.686298][ T3792]  ? clear_bhb_loop+0x40/0x90
[   40.686319][ T3792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.686433][ T3792] RIP: 0033:0x7f052ad8e9a9
[   40.686453][ T3792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.686476][ T3792] RSP: 002b:00007f05293ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   40.686499][ T3792] RAX: ffffffffffffffda RBX: 00007f052afb5fa0 RCX: 00007f052ad8e9a9
[   40.686515][ T3792] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[   40.686526][ T3792] RBP: 00007f05293ef090 R08: 0000200000000340 R09: 0000000000000000
[   40.686540][ T3792] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[   40.686619][ T3792] R13: 0000000000000001 R14: 00007f052afb5fa0 R15: 00007fff54ef0fa8
[   40.686637][ T3792]  </TASK>
[   40.932850][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.013209][ T3796] loop1: detected capacity change from 0 to 128
[   41.037277][ T3796] syz.1.85: attempt to access beyond end of device
[   41.037277][ T3796] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128
[   41.051819][ T3796] syz.1.85: attempt to access beyond end of device
[   41.051819][ T3796] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128
[   41.070283][ T3796] syz.1.85: attempt to access beyond end of device
[   41.070283][ T3796] loop1: rw=2049, sector=153, nr_sectors = 1 limit=128
[   41.206565][ T3799] loop1: detected capacity change from 0 to 512
[   41.218721][ T3799] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   41.240239][ T3799] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.86: invalid indirect mapped block 2683928664 (level 1)
[   41.254579][ T3799] EXT4-fs (loop1): Remounting filesystem read-only
[   41.261416][ T3799] EXT4-fs (loop1): 1 truncate cleaned up
[   41.270374][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.370147][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.556587][ T3830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'.
[   41.565530][ T3830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'.
[   41.574498][ T3830] netlink: 15 bytes leftover after parsing attributes in process `syz.2.95'.
[   41.614125][ T3731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.627571][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   41.639496][ T3731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.653671][ T3731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.663841][ T3835] loop2: detected capacity change from 0 to 128
[   41.668690][ T3731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.699296][ T3835] syz.2.97: attempt to access beyond end of device
[   41.699296][ T3835] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128
[   41.900419][ T3859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'.
[   41.958803][ T3859] team1: entered promiscuous mode
[   41.979253][ T3859] team1: entered allmulticast mode
[   42.050375][ T3879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.109'.
[   42.086744][ T3881] Driver unsupported XDP return value 0 on prog  (id 95) dev N/A, expect packet loss!
[   42.207977][ T3879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   42.221433][ T3879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   42.247012][ T3879] bond0 (unregistering): Released all slaves
[   42.294092][ T3886] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.377595][ T3886] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.462135][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system
[   42.481306][ T3300] udevd[3300]: symlink '../../loop4' '/dev/disk/by-diskseq/69.tmp-b7:4' failed: Read-only file system
[   42.500226][ T3886] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.512011][ T3910] FAULT_INJECTION: forcing a failure.
[   42.512011][ T3910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   42.525357][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.1.116 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   42.525394][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   42.525465][ T3910] Call Trace:
[   42.525473][ T3910]  <TASK>
[   42.525483][ T3910]  __dump_stack+0x1d/0x30
[   42.525509][ T3910]  dump_stack_lvl+0xe8/0x140
[   42.525534][ T3910]  dump_stack+0x15/0x1b
[   42.525585][ T3910]  should_fail_ex+0x265/0x280
[   42.525656][ T3910]  should_fail+0xb/0x20
[   42.525694][ T3910]  should_fail_usercopy+0x1a/0x20
[   42.525733][ T3910]  _copy_from_user+0x1c/0xb0
[   42.525759][ T3910]  ucma_write+0xd9/0x250
[   42.525781][ T3910]  ? __pfx_ucma_write+0x10/0x10
[   42.525861][ T3910]  vfs_write+0x266/0x8e0
[   42.525897][ T3910]  ? __rcu_read_unlock+0x4f/0x70
[   42.525923][ T3910]  ? __fget_files+0x184/0x1c0
[   42.525949][ T3910]  ksys_write+0xda/0x1a0
[   42.526066][ T3910]  __x64_sys_write+0x40/0x50
[   42.526096][ T3910]  x64_sys_call+0x2cdd/0x2fb0
[   42.526122][ T3910]  do_syscall_64+0xd2/0x200
[   42.526145][ T3910]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.526199][ T3910]  ? clear_bhb_loop+0x40/0x90
[   42.526266][ T3910]  ? clear_bhb_loop+0x40/0x90
[   42.526288][ T3910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.526352][ T3910] RIP: 0033:0x7f052ad8e9a9
[   42.526370][ T3910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.526393][ T3910] RSP: 002b:00007f05293ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   42.526416][ T3910] RAX: ffffffffffffffda RBX: 00007f052afb5fa0 RCX: 00007f052ad8e9a9
[   42.526429][ T3910] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000006
[   42.526443][ T3910] RBP: 00007f05293ef090 R08: 0000000000000000 R09: 0000000000000000
[   42.526534][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.526548][ T3910] R13: 0000000000000000 R14: 00007f052afb5fa0 R15: 00007fff54ef0fa8
[   42.526635][ T3910]  </TASK>
[   42.733892][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/69.tmp-b7:4' failed: Read-only file system
[   42.745493][ T3912] FAULT_INJECTION: forcing a failure.
[   42.745493][ T3912] name failslab, interval 1, probability 0, space 0, times 0
[   42.758423][ T3912] CPU: 1 UID: 0 PID: 3912 Comm: syz.4.119 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   42.758458][ T3912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   42.758474][ T3912] Call Trace:
[   42.758481][ T3912]  <TASK>
[   42.758490][ T3912]  __dump_stack+0x1d/0x30
[   42.758516][ T3912]  dump_stack_lvl+0xe8/0x140
[   42.758553][ T3912]  dump_stack+0x15/0x1b
[   42.758572][ T3912]  should_fail_ex+0x265/0x280
[   42.758602][ T3912]  should_failslab+0x8c/0xb0
[   42.758652][ T3912]  kmem_cache_alloc_node_noprof+0x57/0x320
[   42.758679][ T3912]  ? __alloc_skb+0x101/0x320
[   42.758750][ T3912]  __alloc_skb+0x101/0x320
[   42.758784][ T3912]  netlink_alloc_large_skb+0xba/0xf0
[   42.758865][ T3912]  netlink_sendmsg+0x3cf/0x6b0
[   42.758891][ T3912]  ? __pfx_netlink_sendmsg+0x10/0x10
[   42.758914][ T3912]  __sock_sendmsg+0x142/0x180
[   42.758966][ T3912]  ____sys_sendmsg+0x31e/0x4e0
[   42.759049][ T3912]  ___sys_sendmsg+0x17b/0x1d0
[   42.759169][ T3912]  __x64_sys_sendmsg+0xd4/0x160
[   42.759216][ T3912]  x64_sys_call+0x2999/0x2fb0
[   42.759244][ T3912]  do_syscall_64+0xd2/0x200
[   42.759348][ T3912]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.759446][ T3912]  ? clear_bhb_loop+0x40/0x90
[   42.759474][ T3912]  ? clear_bhb_loop+0x40/0x90
[   42.759502][ T3912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.759599][ T3912] RIP: 0033:0x7f2de580e9a9
[   42.759618][ T3912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.759648][ T3912] RSP: 002b:00007f2de3e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   42.759673][ T3912] RAX: ffffffffffffffda RBX: 00007f2de5a35fa0 RCX: 00007f2de580e9a9
[   42.759751][ T3912] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000006
[   42.759767][ T3912] RBP: 00007f2de3e6f090 R08: 0000000000000000 R09: 0000000000000000
[   42.759783][ T3912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   42.759798][ T3912] R13: 0000000000000000 R14: 00007f2de5a35fa0 R15: 00007fffca240458
[   42.759817][ T3912]  </TASK>
[   42.983283][ T3300] udevd[3300]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system
[   43.018995][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/69.tmp-b7:4' failed: Read-only file system
[   43.043632][ T3914] loop4: detected capacity change from 0 to 164
[   43.072660][   T29] kauditd_printk_skb: 477 callbacks suppressed
[   43.072680][   T29] audit: type=1400 audit(1753058430.935:821): avc:  denied  { compute_member } for  pid=3915 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   43.105356][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system
[   43.116947][ T3914] iso9660: Unknown parameter 'À'
[   43.132191][ T3298] udevd[3298]: symlink '../../loop4' '/dev/disk/by-diskseq/76.tmp-b7:4' failed: Read-only file system
[   43.132701][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/59.tmp-b7:3' failed: Read-only file system
[   43.158357][ T3298] udevd[3298]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system
[   43.162341][ T3886] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   43.185272][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/73.tmp-b7:1' failed: Read-only file system
[   43.210605][   T29] audit: type=1326 audit(1753058431.025:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2de580e9a9 code=0x0
[   43.233164][   T29] audit: type=1400 audit(1753058431.065:823): avc:  denied  { ioctl } for  pid=3921 comm="syz.3.124" path="socket:[6441]" dev="sockfs" ino=6441 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   43.241038][ T3926] loop3: detected capacity change from 0 to 1024
[   43.284160][ T3929] @: renamed from vlan0 (while UP)
[   43.297156][   T29] audit: type=1400 audit(1753058431.155:824): avc:  denied  { ioctl } for  pid=3917 comm="syz.2.122" path="socket:[5709]" dev="sockfs" ino=5709 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   43.323696][   T29] audit: type=1400 audit(1753058431.155:825): avc:  denied  { map } for  pid=3917 comm="syz.2.122" path="/proc/72/net/vlan/vlan0" dev="proc" ino=4026533283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   43.408620][ T3926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.444516][ T3926] netlink: 'syz.3.126': attribute type 1 has an invalid length.
[   43.464832][ T3926] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.476201][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'.
[   43.522294][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.554562][   T29] audit: type=1400 audit(1753058431.415:826): avc:  denied  { mount } for  pid=3946 comm="syz.3.131" name="/" dev="configfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   43.577411][   T29] audit: type=1400 audit(1753058431.415:827): avc:  denied  { search } for  pid=3946 comm="syz.3.131" name="/" dev="configfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   43.599578][   T29] audit: type=1400 audit(1753058431.415:828): avc:  denied  { search } for  pid=3946 comm="syz.3.131" name="/" dev="configfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   43.622246][   T29] audit: type=1400 audit(1753058431.415:829): avc:  denied  { read open } for  pid=3946 comm="syz.3.131" path="/" dev="configfs" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   43.644512][ T3949] loop3: detected capacity change from 0 to 512
[   43.698144][ T3949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   43.724104][ T3949] EXT4-fs (loop3): 1 orphan inode deleted
[   43.730450][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.743390][   T56] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   43.743485][ T3949] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   43.753322][   T56] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   43.764401][ T3959] FAULT_INJECTION: forcing a failure.
[   43.764401][ T3959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   43.788454][ T3959] CPU: 0 UID: 0 PID: 3959 Comm: syz.1.135 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   43.788487][ T3959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   43.788501][ T3959] Call Trace:
[   43.788510][ T3959]  <TASK>
[   43.788519][ T3959]  __dump_stack+0x1d/0x30
[   43.788544][ T3959]  dump_stack_lvl+0xe8/0x140
[   43.788568][ T3959]  dump_stack+0x15/0x1b
[   43.788631][ T3959]  should_fail_ex+0x265/0x280
[   43.788670][ T3959]  should_fail+0xb/0x20
[   43.788786][ T3959]  should_fail_usercopy+0x1a/0x20
[   43.788819][ T3959]  _copy_to_iter+0xcf/0xe30
[   43.788861][ T3959]  ? xas_load+0x413/0x430
[   43.788919][ T3959]  ? __rcu_read_unlock+0x4f/0x70
[   43.788943][ T3959]  ? xa_load+0xb1/0xe0
[   43.788964][ T3959]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   43.788989][ T3959]  __skb_datagram_iter+0xc6/0x690
[   43.789048][ T3959]  ? __pfx_simple_copy_to_iter+0x10/0x10
[   43.789073][ T3959]  skb_copy_datagram_iter+0x3d/0x110
[   43.789097][ T3959]  unix_stream_read_actor+0x43/0x70
[   43.789126][ T3959]  unix_stream_read_generic+0x65b/0x13a0
[   43.789184][ T3959]  unix_stream_recvmsg+0xc3/0xf0
[   43.789210][ T3959]  ? __pfx_unix_stream_read_actor+0x10/0x10
[   43.789241][ T3959]  ? __pfx_unix_stream_recvmsg+0x10/0x10
[   43.789350][ T3959]  sock_recvmsg+0x139/0x170
[   43.789376][ T3959]  ____sys_recvmsg+0xf5/0x280
[   43.789409][ T3959]  ___sys_recvmsg+0x11f/0x370
[   43.789446][ T3959]  __x64_sys_recvmsg+0xd1/0x160
[   43.789474][ T3959]  x64_sys_call+0xf19/0x2fb0
[   43.789546][ T3959]  do_syscall_64+0xd2/0x200
[   43.789568][ T3959]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.789601][ T3959]  ? clear_bhb_loop+0x40/0x90
[   43.789685][ T3959]  ? clear_bhb_loop+0x40/0x90
[   43.789718][ T3959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.789744][ T3959] RIP: 0033:0x7f052ad8e9a9
[   43.789762][ T3959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.789826][ T3959] RSP: 002b:00007f05293ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[   43.789845][ T3959] RAX: ffffffffffffffda RBX: 00007f052afb6080 RCX: 00007f052ad8e9a9
[   43.789860][ T3959] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004
[   43.789875][ T3959] RBP: 00007f05293ce090 R08: 0000000000000000 R09: 0000000000000000
[   43.789890][ T3959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.789903][ T3959] R13: 0000000000000001 R14: 00007f052afb6080 R15: 00007fff54ef0fa8
[   43.789924][ T3959]  </TASK>
[   43.790644][ T3949] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   43.916072][ T3961] syz_tun: entered allmulticast mode
[   44.070571][ T3948] syz_tun: left allmulticast mode
[   44.084049][ T3963] loop4: detected capacity change from 0 to 1024
[   44.096080][ T3963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.118852][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.146130][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.220556][ T3975] loop3: detected capacity change from 0 to 512
[   44.236202][ T3975] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   44.247076][ T3975] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.140: invalid indirect mapped block 2683928664 (level 1)
[   44.264648][ T3975] EXT4-fs (loop3): Remounting filesystem read-only
[   44.271560][ T3975] EXT4-fs (loop3): 1 truncate cleaned up
[   44.279269][ T3975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.284985][ T3979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.142'.
[   44.368013][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.374268][ T3991] pim6reg1: entered promiscuous mode
[   44.382475][ T3991] pim6reg1: entered allmulticast mode
[   44.430809][ T3995] netlink: 'syz.3.147': attribute type 10 has an invalid length.
[   44.438848][ T3995] ipvlan0: entered allmulticast mode
[   44.444376][ T3995] veth0_vlan: entered allmulticast mode
[   44.451567][ T3995] team0: Device ipvlan0 failed to register rx_handler
[   44.492332][ T3999] loop3: detected capacity change from 0 to 512
[   44.499608][ T3999] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   44.510617][ T3999] EXT4-fs (loop3): group descriptors corrupted!
[   44.530079][ T3997] loop4: detected capacity change from 0 to 256
[   44.542149][ T3997] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   44.591146][ T4003] loop2: detected capacity change from 0 to 1024
[   44.612334][ T4005] loop1: detected capacity change from 0 to 2048
[   44.635073][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.667984][ T4005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   44.687036][ T4008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.689182][ T4003] netlink: 'syz.2.150': attribute type 1 has an invalid length.
[   44.707928][ T4005] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   44.724960][ T4005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   44.737403][ T4005] EXT4-fs (loop1): This should not happen!! Data will be lost
[   44.737403][ T4005] 
[   44.747502][ T4005] EXT4-fs (loop1): Total free blocks count 0
[   44.753682][ T4005] EXT4-fs (loop1): Free/Dirty block details
[   44.759785][ T4005] EXT4-fs (loop1): free_blocks=2415919104
[   44.765621][ T4005] EXT4-fs (loop1): dirty_blocks=16
[   44.770787][ T4005] EXT4-fs (loop1): Block reservation details
[   44.776984][ T4005] EXT4-fs (loop1): i_reserved_data_blocks=1
[   44.784663][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'.
[   44.806179][ T4005] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   44.838613][ T4008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.842646][ T4020] loop3: detected capacity change from 0 to 512
[   44.870060][ T4020] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   44.880477][ T4020] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.156: invalid indirect mapped block 2683928664 (level 1)
[   44.897144][ T4020] EXT4-fs (loop3): Remounting filesystem read-only
[   44.910014][ T4008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.911783][ T4020] EXT4-fs (loop3): 1 truncate cleaned up
[   44.926562][ T4020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.947375][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.997843][ T4008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.111618][ T4008] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.124755][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.129872][ T4008] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.154320][ T4036] FAULT_INJECTION: forcing a failure.
[   45.154320][ T4036] name failslab, interval 1, probability 0, space 0, times 0
[   45.166165][ T4008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.167098][ T4036] CPU: 1 UID: 0 PID: 4036 Comm: syz.1.162 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   45.167136][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   45.167196][ T4036] Call Trace:
[   45.167204][ T4036]  <TASK>
[   45.167214][ T4036]  __dump_stack+0x1d/0x30
[   45.167244][ T4036]  dump_stack_lvl+0xe8/0x140
[   45.167271][ T4036]  dump_stack+0x15/0x1b
[   45.167348][ T4036]  should_fail_ex+0x265/0x280
[   45.167391][ T4036]  ? audit_log_d_path+0x8d/0x150
[   45.167480][ T4036]  should_failslab+0x8c/0xb0
[   45.167510][ T4036]  __kmalloc_cache_noprof+0x4c/0x320
[   45.167555][ T4036]  audit_log_d_path+0x8d/0x150
[   45.167653][ T4036]  audit_log_d_path_exe+0x42/0x70
[   45.167696][ T4036]  audit_log_task+0x1e9/0x250
[   45.167815][ T4036]  audit_seccomp+0x61/0x100
[   45.167849][ T4036]  ? __seccomp_filter+0x68c/0x10d0
[   45.167879][ T4036]  __seccomp_filter+0x69d/0x10d0
[   45.167913][ T4036]  ? _copy_from_user+0x3b/0xb0
[   45.168022][ T4036]  ? __x64_sys_clock_adjtime+0x7e/0x1d0
[   45.168117][ T4036]  __secure_computing+0x82/0x150
[   45.168146][ T4036]  syscall_trace_enter+0xcf/0x1e0
[   45.168180][ T4036]  do_syscall_64+0xac/0x200
[   45.168240][ T4036]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.168275][ T4036]  ? clear_bhb_loop+0x40/0x90
[   45.168403][ T4036]  ? clear_bhb_loop+0x40/0x90
[   45.168432][ T4036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.168460][ T4036] RIP: 0033:0x7f052ad8d3bc
[   45.168551][ T4036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   45.168576][ T4036] RSP: 002b:00007f05293ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   45.168602][ T4036] RAX: ffffffffffffffda RBX: 00007f052afb5fa0 RCX: 00007f052ad8d3bc
[   45.168676][ T4036] RDX: 000000000000000f RSI: 00007f05293ef0a0 RDI: 0000000000000006
[   45.168694][ T4036] RBP: 00007f05293ef090 R08: 0000000000000000 R09: 0000000000000000
[   45.168722][ T4036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   45.168787][ T4036] R13: 0000000000000000 R14: 00007f052afb5fa0 R15: 00007fff54ef0fa8
[   45.168835][ T4036]  </TASK>
[   45.397864][ T4008] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.475363][ T4052] loop3: detected capacity change from 0 to 1024
[   45.507124][ T4052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.534465][ T4052] netlink: 'syz.3.167': attribute type 1 has an invalid length.
[   45.542763][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'.
[   45.628955][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.689427][ T4064] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.702526][ T4062] loop4: detected capacity change from 0 to 8192
[   45.710044][ T4062] vfat: Unknown parameter '¿¤'
[   45.734493][ T4064] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.823673][ T4064] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.854637][ T4064] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   45.934435][ T4064] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.959066][ T4064] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.972020][ T4064] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.984735][ T4064] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.218699][ T3886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.329099][ T3886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.378413][ T3886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.389720][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.398737][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.411782][ T3886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.420403][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.467849][ T4077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'.
[   46.496134][ T4077] hsr_slave_0 (unregistering): left promiscuous mode
[   46.559358][ T4088] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.585581][ T4090] loop0: detected capacity change from 0 to 512
[   46.592777][ T4090] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   46.604089][ T4090] EXT4-fs (loop0): group descriptors corrupted!
[   46.627954][ T4083] loop2: detected capacity change from 0 to 8192
[   46.654109][ T4088] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.715711][ T4095] loop0: detected capacity change from 0 to 512
[   46.737332][ T4095] EXT4-fs (loop0): 1 orphan inode deleted
[   46.750135][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.765344][ T4088] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.775248][   T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   46.805146][ T4095] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.817315][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.826633][ T4099] FAT-fs (loop2): Filesystem has been set read-only
[   46.835576][ T4088] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   46.865973][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.892691][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.914166][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.924246][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.933944][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.946659][ T4104] netlink: 'syz.0.182': attribute type 2 has an invalid length.
[   46.955120][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.976024][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.985066][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   46.994906][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.005568][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.015535][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.025122][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.034389][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.044964][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.055909][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.065411][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.074697][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.083484][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.092667][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.101618][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.110529][ T4108] loop3: detected capacity change from 0 to 512
[   47.122545][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.132818][ T4108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.145245][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.154232][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.164888][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.174696][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.178523][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.185268][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.208607][ T4099] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   47.221504][ T4108] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.364551][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.877470][ T3932] udevd[3932]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system
[   47.927848][ T3932] udevd[3932]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system
[   48.003604][ T3932] udevd[3932]: symlink '../../loop0' '/dev/disk/by-diskseq/104.tmp-b7:0' failed: Read-only file system
[   48.023985][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system
[   48.067131][ T3932] udevd[3932]: symlink '../../loop0' '/dev/disk/by-diskseq/104.tmp-b7:0' failed: Read-only file system
[   48.091057][   T29] kauditd_printk_skb: 243 callbacks suppressed
[   48.091074][   T29] audit: type=1400 audit(1753058436.955:1072): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   48.119653][   T29] audit: type=1400 audit(1753058436.995:1073): avc:  denied  { accept } for  pid=4134 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   48.142910][   T29] audit: type=1400 audit(1753058436.995:1074): avc:  denied  { bind } for  pid=4134 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   48.162918][   T29] audit: type=1400 audit(1753058437.015:1075): avc:  denied  { name_bind } for  pid=4134 comm="syz.0.193" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[   48.184770][   T29] audit: type=1400 audit(1753058437.015:1076): avc:  denied  { node_bind } for  pid=4134 comm="syz.0.193" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[   48.209687][ T3932] udevd[3932]: symlink '../../loop2' '/dev/disk/by-diskseq/106.tmp-b7:2' failed: Read-only file system
[   48.257258][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/109.tmp-b7:3' failed: Read-only file system
[   48.271224][ T4137] loop2: detected capacity change from 0 to 2048
[   48.286631][ T3503] udevd[3503]: symlink '../../loop0' '/dev/disk/by-diskseq/104.tmp-b7:0' failed: Read-only file system
[   48.312689][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'.
[   48.321595][ T4143] netlink: 'syz.3.197': attribute type 2 has an invalid length.
[   48.327958][   T29] audit: type=1400 audit(1753058437.195:1077): avc:  denied  { mounton } for  pid=4136 comm="syz.2.194" path="/40/file1" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   48.355594][   T29] audit: type=1326 audit(1753058437.225:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6200fe9a9 code=0x7ffc0000
[   48.379141][   T29] audit: type=1326 audit(1753058437.225:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6200fe9a9 code=0x7ffc0000
[   48.402723][   T29] audit: type=1326 audit(1753058437.225:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff6200fe9a9 code=0x7ffc0000
[   48.417888][ T3932] udevd[3932]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system
[   48.466365][ T4144] loop0: detected capacity change from 0 to 8192
[   48.473673][ T3932] udevd[3932]: symlink '../../loop2' '/dev/disk/by-diskseq/110.tmp-b7:2' failed: Read-only file system
[   48.483982][   T29] audit: type=1326 audit(1753058437.225:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6200fe9a9 code=0x7ffc0000
[   48.534073][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.588146][ T4137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.609037][ T4150] loop3: detected capacity change from 0 to 2048
[   48.634067][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.642872][ T4152] FAT-fs (loop0): Filesystem has been set read-only
[   48.699279][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   48.715506][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.724629][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.727760][ T4150] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   48.733565][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.757131][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.765986][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.774715][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.784184][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.786202][ T4150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   48.795466][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.809402][ T4150] EXT4-fs (loop3): This should not happen!! Data will be lost
[   48.809402][ T4150] 
[   48.818450][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.828278][ T4150] EXT4-fs (loop3): Total free blocks count 0
[   48.837121][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.843117][ T4150] EXT4-fs (loop3): Free/Dirty block details
[   48.843134][ T4150] EXT4-fs (loop3): free_blocks=2415919104
[   48.843151][ T4150] EXT4-fs (loop3): dirty_blocks=16
[   48.843166][ T4150] EXT4-fs (loop3): Block reservation details
[   48.874834][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.874866][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.883997][ T4150] EXT4-fs (loop3): i_reserved_data_blocks=1
[   48.899380][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.908106][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.917169][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.926416][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.935332][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.944252][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.953110][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   48.960263][ T4150] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   48.979644][ T4088] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.988056][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.000172][ T4088] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.008578][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.017530][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.030296][ T4088] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.038854][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.060719][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.078116][ T4088] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.087492][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.137189][ T4152] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   49.218206][ T4171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.203'.
[   49.261095][ T4175] loop2: detected capacity change from 0 to 2048
[   49.298426][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.410669][ T4191] loop3: detected capacity change from 0 to 512
[   49.419077][ T4191] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   49.430357][ T4191] EXT4-fs (loop3): group descriptors corrupted!
[   49.467161][ T4185] loop4: detected capacity change from 0 to 512
[   49.523365][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.535318][ T4185] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   49.586460][ T4190] loop0: detected capacity change from 0 to 8192
[   49.594394][ T4185] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.209: invalid indirect mapped block 2683928664 (level 1)
[   49.628946][ T4190] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   49.642235][ T4185] EXT4-fs (loop4): Remounting filesystem read-only
[   49.708204][ T4185] EXT4-fs (loop4): 1 truncate cleaned up
[   49.714650][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.828587][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.081550][ T4216] FAULT_INJECTION: forcing a failure.
[   50.081550][ T4216] name failslab, interval 1, probability 0, space 0, times 0
[   50.094449][ T4216] CPU: 1 UID: 0 PID: 4216 Comm: syz.0.216 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   50.094483][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.094498][ T4216] Call Trace:
[   50.094507][ T4216]  <TASK>
[   50.094516][ T4216]  __dump_stack+0x1d/0x30
[   50.094555][ T4216]  dump_stack_lvl+0xe8/0x140
[   50.094578][ T4216]  dump_stack+0x15/0x1b
[   50.094599][ T4216]  should_fail_ex+0x265/0x280
[   50.094684][ T4216]  ? llc_sap_open+0x99/0x230
[   50.094709][ T4216]  should_failslab+0x8c/0xb0
[   50.094745][ T4216]  __kmalloc_cache_noprof+0x4c/0x320
[   50.094857][ T4216]  llc_sap_open+0x99/0x230
[   50.094893][ T4216]  llc_ui_autobind+0x17a/0x380
[   50.094919][ T4216]  llc_ui_connect+0x103/0x6c0
[   50.094960][ T4216]  ? selinux_socket_connect+0x57/0x70
[   50.095031][ T4216]  ? __pfx_llc_ui_connect+0x10/0x10
[   50.095103][ T4216]  __sys_connect+0x1ef/0x2b0
[   50.095146][ T4216]  __x64_sys_connect+0x3f/0x50
[   50.095249][ T4216]  x64_sys_call+0x1daa/0x2fb0
[   50.095357][ T4216]  do_syscall_64+0xd2/0x200
[   50.095381][ T4216]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.095412][ T4216]  ? clear_bhb_loop+0x40/0x90
[   50.095448][ T4216]  ? clear_bhb_loop+0x40/0x90
[   50.095479][ T4216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.095505][ T4216] RIP: 0033:0x7f8ef3c5e9a9
[   50.095523][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.095540][ T4216] RSP: 002b:00007f8ef22bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   50.095558][ T4216] RAX: ffffffffffffffda RBX: 00007f8ef3e85fa0 RCX: 00007f8ef3c5e9a9
[   50.095647][ T4216] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000007
[   50.095659][ T4216] RBP: 00007f8ef22bf090 R08: 0000000000000000 R09: 0000000000000000
[   50.095670][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.095681][ T4216] R13: 0000000000000000 R14: 00007f8ef3e85fa0 R15: 00007ffdacc7d2d8
[   50.095704][ T4216]  </TASK>
[   50.471737][ T4232] loop3: detected capacity change from 0 to 128
[   50.492840][ T4232] ext4: Unknown parameter 'hash'
[   50.522944][ T4237] syz.1.221 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   50.609322][ T4232] loop3: detected capacity change from 0 to 2048
[   50.626613][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'.
[   50.654285][ T4232] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.224: iget: bad extended attribute block 281474976710655
[   50.694267][ T4232] EXT4-fs (loop3): get root inode failed
[   50.700115][ T4232] EXT4-fs (loop3): mount failed
[   50.826424][ T4254] loop3: detected capacity change from 0 to 128
[   50.863739][ T4254] /dev/loop3: Can't open blockdev
[   51.022066][ T4264] netlink: 'syz.4.234': attribute type 16 has an invalid length.
[   51.029838][ T4264] netlink: 'syz.4.234': attribute type 17 has an invalid length.
[   51.120712][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.233'.
[   51.232070][ T4264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.270161][ T4267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'.
[   51.975432][ T4283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.241'.
[   51.993754][ T4283] 9pnet_fd: Insufficient options for proto=fd
[   52.052506][ T4289] netlink: 14 bytes leftover after parsing attributes in process `syz.3.242'.
[   52.087929][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   52.174390][ T4296] netlink: 84 bytes leftover after parsing attributes in process `syz.1.246'.
[   52.203893][ T4297] netlink: 14 bytes leftover after parsing attributes in process `syz.2.243'.
[   52.274789][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.335108][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.388773][ T4297] bond0 (unregistering): Released all slaves
[   52.464638][ T4301] loop3: detected capacity change from 0 to 164
[   52.495843][ T4301] ISOFS: unable to read i-node block
[   52.501241][ T4301] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[   52.636959][ T4311] loop2: detected capacity change from 0 to 512
[   52.730721][ T4321] netlink: 48 bytes leftover after parsing attributes in process `syz.1.251'.
[   52.746411][ T4311] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   52.755716][ T4311] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.248: invalid indirect mapped block 2683928664 (level 1)
[   52.771399][ T4311] EXT4-fs (loop2): Remounting filesystem read-only
[   52.779940][ T4311] EXT4-fs (loop2): 1 truncate cleaned up
[   52.786475][ T4311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.907907][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/130.tmp-b7:3' failed: Read-only file system
[   52.953295][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/130.tmp-b7:3' failed: Read-only file system
[   52.968631][ T4327] loop3: detected capacity change from 0 to 2048
[   52.994252][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/132.tmp-b7:3' failed: Read-only file system
[   53.013099][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   53.031678][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.045501][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000900.tmp-b7:3' failed: Read-only file system
[   53.070523][ T3503] udevd[3503]: symlink '../../loop0' '/dev/disk/by-diskseq/123.tmp-b7:0' failed: Read-only file system
[   53.071397][ T4327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   53.120364][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/131.tmp-b7:2' failed: Read-only file system
[   53.125965][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system
[   53.148952][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/131.tmp-b7:2' failed: Read-only file system
[   53.161227][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000900.tmp-b7:3' failed: Read-only file system
[   53.178270][ T4327] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   53.190922][ T4327] EXT4-fs (loop3): This should not happen!! Data will be lost
[   53.190922][ T4327] 
[   53.199287][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/133.tmp-b7:3' failed: Read-only file system
[   53.200646][ T4327] EXT4-fs (loop3): Total free blocks count 0
[   53.217918][ T4327] EXT4-fs (loop3): Free/Dirty block details
[   53.223871][ T4327] EXT4-fs (loop3): free_blocks=2415919104
[   53.229612][ T4327] EXT4-fs (loop3): dirty_blocks=16
[   53.234874][ T4327] EXT4-fs (loop3): Block reservation details
[   53.240984][ T4327] EXT4-fs (loop3): i_reserved_data_blocks=1
[   53.277867][ T4339] netlink: 'syz.2.254': attribute type 30 has an invalid length.
[   53.339314][   T29] kauditd_printk_skb: 759 callbacks suppressed
[   53.339331][   T29] audit: type=1400 audit(1753058442.205:1841): avc:  denied  { ioctl } for  pid=4335 comm="syz.2.254" path="socket:[8461]" dev="sockfs" ino=8461 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   53.358172][ T4341] loop0: detected capacity change from 0 to 1024
[   53.379021][ T4341] ext4: Unknown parameter 'fowner<18446744073709551615'
[   53.409041][   T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   53.427451][ T4341] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.450093][   T29] audit: type=1400 audit(1753058442.215:1842): avc:  denied  { mount } for  pid=4340 comm="syz.0.256" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   53.495305][ T4341] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.544728][ T4341] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.614732][ T4341] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.663056][ T4341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.675006][ T4341] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.695956][ T4341] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.708239][ T4341] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.850785][   T29] audit: type=1326 audit(1753058442.715:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.875884][   T29] audit: type=1326 audit(1753058442.715:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.899259][   T29] audit: type=1326 audit(1753058442.715:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.922831][   T29] audit: type=1326 audit(1753058442.715:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.946436][   T29] audit: type=1326 audit(1753058442.715:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.969925][   T29] audit: type=1326 audit(1753058442.715:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   53.994073][   T29] audit: type=1326 audit(1753058442.715:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   54.017468][   T29] audit: type=1326 audit(1753058442.715:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.1.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   54.070549][ T4356] Invalid ELF header magic: != ELF
[   54.152006][ T4359] loop3: detected capacity change from 0 to 512
[   54.173851][ T4359] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   54.217392][ T4359] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.262: invalid indirect mapped block 2683928664 (level 1)
[   54.236887][ T4359] EXT4-fs (loop3): Remounting filesystem read-only
[   54.253553][ T4359] EXT4-fs (loop3): 1 truncate cleaned up
[   54.259751][ T4359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.381193][ T4370] loop1: detected capacity change from 0 to 512
[   54.385034][ T4372] __nla_validate_parse: 3 callbacks suppressed
[   54.385053][ T4372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.264'.
[   54.408048][ T4370] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   54.423678][ T4370] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.265: invalid indirect mapped block 2683928664 (level 1)
[   54.440033][ T4370] EXT4-fs (loop1): Remounting filesystem read-only
[   54.448687][ T4370] EXT4-fs (loop1): 1 truncate cleaned up
[   54.455357][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.544059][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.578642][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'.
[   54.598439][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.608868][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.859806][ T4392] random: crng reseeded on system resumption
[   54.869278][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.994814][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.017884][ T4395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.057404][ T4395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'.
[   55.066353][ T4395] netlink: 108 bytes leftover after parsing attributes in process `syz.4.271'.
[   55.077384][ T4395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.271'.
[   55.112077][ T4398] netlink: 14 bytes leftover after parsing attributes in process `syz.3.272'.
[   55.183649][ T4402] tap0: tun_chr_ioctl cmd 1074025681
[   55.323014][ T4405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=4405 comm=syz.2.275
[   55.420770][ T4417] loop1: detected capacity change from 0 to 512
[   55.471426][ T4417] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   55.503323][ T4417] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.277: invalid indirect mapped block 2683928664 (level 1)
[   55.521921][ T4417] EXT4-fs (loop1): Remounting filesystem read-only
[   55.534033][ T4417] EXT4-fs (loop1): 1 truncate cleaned up
[   55.540361][ T4417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.573327][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.686001][ T4430] netlink: 'syz.3.284': attribute type 21 has an invalid length.
[   55.708480][ T4434] loop1: detected capacity change from 0 to 512
[   55.715673][ T4430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.284'.
[   55.738250][ T4435] loop4: detected capacity change from 0 to 512
[   55.745547][ T4435] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   55.799498][ T4435] EXT4-fs (loop4): 1 truncate cleaned up
[   55.815492][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.839532][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.913728][ T4447] sg_write: process 171 (syz.3.288) changed security contexts after opening file descriptor, this is not allowed.
[   55.926173][ T4435] FAULT_INJECTION: forcing a failure.
[   55.926173][ T4435] name failslab, interval 1, probability 0, space 0, times 0
[   55.939365][ T4435] CPU: 1 UID: 0 PID: 4435 Comm: syz.4.282 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   55.939462][ T4435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.939477][ T4435] Call Trace:
[   55.939485][ T4435]  <TASK>
[   55.939493][ T4435]  __dump_stack+0x1d/0x30
[   55.939540][ T4435]  dump_stack_lvl+0xe8/0x140
[   55.939563][ T4435]  dump_stack+0x15/0x1b
[   55.939584][ T4435]  should_fail_ex+0x265/0x280
[   55.939622][ T4435]  should_failslab+0x8c/0xb0
[   55.939660][ T4435]  kmem_cache_alloc_node_noprof+0x57/0x320
[   55.939714][ T4435]  ? __alloc_skb+0x101/0x320
[   55.939751][ T4435]  __alloc_skb+0x101/0x320
[   55.939840][ T4435]  netlink_alloc_large_skb+0xba/0xf0
[   55.939881][ T4435]  netlink_sendmsg+0x3cf/0x6b0
[   55.939955][ T4435]  ? __pfx_netlink_sendmsg+0x10/0x10
[   55.940027][ T4435]  __sock_sendmsg+0x142/0x180
[   55.940058][ T4435]  ____sys_sendmsg+0x31e/0x4e0
[   55.940095][ T4435]  ___sys_sendmsg+0x17b/0x1d0
[   55.940192][ T4435]  __x64_sys_sendmsg+0xd4/0x160
[   55.940298][ T4435]  x64_sys_call+0x2999/0x2fb0
[   55.940325][ T4435]  do_syscall_64+0xd2/0x200
[   55.940349][ T4435]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   55.940375][ T4435]  ? clear_bhb_loop+0x40/0x90
[   55.940452][ T4435]  ? clear_bhb_loop+0x40/0x90
[   55.940474][ T4435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.940551][ T4435] RIP: 0033:0x7f2de580e9a9
[   55.940575][ T4435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.940597][ T4435] RSP: 002b:00007f2de3e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   55.940638][ T4435] RAX: ffffffffffffffda RBX: 00007f2de5a35fa0 RCX: 00007f2de580e9a9
[   55.940650][ T4435] RDX: 0000000024040084 RSI: 0000200000000280 RDI: 0000000000000007
[   55.940661][ T4435] RBP: 00007f2de3e6f090 R08: 0000000000000000 R09: 0000000000000000
[   55.940672][ T4435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.940722][ T4435] R13: 0000000000000000 R14: 00007f2de5a35fa0 R15: 00007fffca240458
[   55.940746][ T4435]  </TASK>
[   56.240146][ T4455] loop3: detected capacity change from 0 to 512
[   56.248364][ T4455] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   56.259657][ T4455] EXT4-fs (loop3): group descriptors corrupted!
[   56.276296][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.351941][ T4457] loop2: detected capacity change from 0 to 512
[   56.385383][ T4457] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   56.419556][ T4457] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.291: invalid indirect mapped block 2683928664 (level 1)
[   56.444601][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.504185][ T4457] EXT4-fs (loop2): Remounting filesystem read-only
[   56.515109][ T4466] netlink: 56 bytes leftover after parsing attributes in process `syz.3.292'.
[   56.542067][ T4457] EXT4-fs (loop2): 1 truncate cleaned up
[   56.548338][ T4457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.624936][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.745811][ T4476] loop1: detected capacity change from 0 to 128
[   56.793695][ T4478] loop2: detected capacity change from 0 to 128
[   57.518211][ T4505] loop3: detected capacity change from 0 to 2048
[   57.542616][ T4503] SELinux:  Context Ü is not valid (left unmapped).
[   57.558406][ T4511] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   57.568544][ T4505] Alternate GPT is invalid, using primary GPT.
[   57.574878][ T4505]  loop3: p1 p2 p3
[   57.604046][ T4511] loop2: detected capacity change from 0 to 512
[   57.633407][ T2997] Alternate GPT is invalid, using primary GPT.
[   57.639804][ T2997]  loop3: p1 p2 p3
[   57.659855][ T4513] ipip0: entered promiscuous mode
[   57.666599][ T4513] Cannot find add_set index 0 as target
[   57.676086][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.712038][ T4511] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.796318][ T4525] netlink: 240 bytes leftover after parsing attributes in process `syz.3.310'.
[   57.838922][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.310'.
[   57.920320][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system
[   57.956034][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system
[   58.004487][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/150.tmp-b7:4' failed: Read-only file system
[   58.007606][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/158.tmp-b7:3' failed: Read-only file system
[   58.119545][ T3932] udevd[3932]: symlink '../../loop4' '/dev/disk/by-diskseq/150.tmp-b7:4' failed: Read-only file system
[   58.374572][ T3932] udevd[3932]: symlink '../../loop3' '/dev/disk/by-diskseq/158.tmp-b7:3' failed: Read-only file system
[   58.408590][ T4542] loop4: detected capacity change from 0 to 8192
[   58.440747][ T3932] udevd[3932]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system
[   58.495482][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/158.tmp-b7:3' failed: Read-only file system
[   58.510902][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/159.tmp-b7:4' failed: Read-only file system
[   58.546393][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-uuid/1DE1-D756.tmp-b7:4' failed: Read-only file system
[   58.651101][ T4555] loop0: detected capacity change from 0 to 2048
[   58.705044][   T29] kauditd_printk_skb: 385 callbacks suppressed
[   58.705073][   T29] audit: type=1326 audit(1753058447.575:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.706714][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   58.711409][   T29] audit: type=1326 audit(1753058447.575:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.734916][ T4557] FAT-fs (loop4): Filesystem has been set read-only
[   58.799055][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.817115][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   58.833194][   T29] audit: type=1326 audit(1753058447.575:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.833328][ T4555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   58.856755][   T29] audit: type=1326 audit(1753058447.575:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.892860][   T29] audit: type=1326 audit(1753058447.575:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.916487][   T29] audit: type=1326 audit(1753058447.575:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.940174][   T29] audit: type=1326 audit(1753058447.575:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.4.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2de580e9a9 code=0x7ffc0000
[   58.940635][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.016553][ T4563] pim6reg1: entered promiscuous mode
[   59.022113][ T4563] pim6reg1: entered allmulticast mode
[   59.052793][ T4565] SELinux: ebitmap: truncated map
[   59.058311][   T29] audit: type=1400 audit(1753058447.915:2243): avc:  denied  { load_policy } for  pid=4564 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   59.110749][ T4555] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   59.116050][ T4565] SELinux: failed to load policy
[   59.131327][ T4555] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   59.143835][ T4555] EXT4-fs (loop0): This should not happen!! Data will be lost
[   59.143835][ T4555] 
[   59.153529][ T4555] EXT4-fs (loop0): Total free blocks count 0
[   59.159897][ T4555] EXT4-fs (loop0): Free/Dirty block details
[   59.165932][ T4555] EXT4-fs (loop0): free_blocks=2415919104
[   59.171711][ T4555] EXT4-fs (loop0): dirty_blocks=16
[   59.176882][ T4555] EXT4-fs (loop0): Block reservation details
[   59.182928][ T4555] EXT4-fs (loop0): i_reserved_data_blocks=1
[   59.217877][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.226682][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.235886][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.257148][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.267017][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.276898][   T56] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   59.297113][   T29] audit: type=1400 audit(1753058448.165:2244): avc:  denied  { accept } for  pid=4575 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   59.310584][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.330008][ T4577] loop2: detected capacity change from 0 to 512
[   59.334784][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.347104][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.347719][ T4577] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   59.356767][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.373900][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.383666][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.392689][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.427331][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.464972][ T4582] loop0: detected capacity change from 0 to 1024
[   59.480573][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.511721][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.513868][ T4582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.531357][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.558314][   T29] audit: type=1326 audit(1753058448.405:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.1.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052ad8e9a9 code=0x7ffc0000
[   59.567367][ T4582] __nla_validate_parse: 6 callbacks suppressed
[   59.567389][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'.
[   59.588310][ T4590] loop2: detected capacity change from 0 to 1024
[   59.604330][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.615253][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.626523][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.638746][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.649277][ T4590] EXT4-fs: Ignoring removed nobh option
[   59.655358][ T4590] EXT4-fs: Ignoring removed bh option
[   59.664512][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.673370][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.686470][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.695872][ T4557] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070)
[   59.732524][ T4590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.751460][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.809922][ T4598] $Hÿ: renamed from bond0 (while UP)
[   59.817854][ T4598] $Hÿ: entered promiscuous mode
[   59.823138][ T4598] bond_slave_0: entered promiscuous mode
[   59.829011][ T4598] bond_slave_1: entered promiscuous mode
[   59.906114][ T4604] loop0: detected capacity change from 0 to 2048
[   59.958977][ T4602] loop4: detected capacity change from 0 to 512
[   59.996342][ T4604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   60.030315][ T4604] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   60.071464][ T4602] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   60.090908][ T4604] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[   60.103746][ T4604] EXT4-fs (loop0): This should not happen!! Data will be lost
[   60.103746][ T4604] 
[   60.115234][ T4604] EXT4-fs (loop0): Total free blocks count 0
[   60.121564][ T4604] EXT4-fs (loop0): Free/Dirty block details
[   60.127896][ T4604] EXT4-fs (loop0): free_blocks=2415919104
[   60.134558][ T4604] EXT4-fs (loop0): dirty_blocks=16
[   60.140067][ T4604] EXT4-fs (loop0): Block reservation details
[   60.146363][ T4604] EXT4-fs (loop0): i_reserved_data_blocks=1
[   60.146423][ T4602] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.339: invalid indirect mapped block 2683928664 (level 1)
[   60.172320][ T4602] EXT4-fs (loop4): Remounting filesystem read-only
[   60.202053][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   60.217079][ T4602] EXT4-fs (loop4): 1 truncate cleaned up
[   60.223797][ T4602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.354644][ T3381] IPVS: starting estimator thread 0...
[   60.451978][ T4616] IPVS: using max 2352 ests per chain, 117600 per kthread
[   60.466209][ T4625] loop0: detected capacity change from 0 to 1024
[   60.503614][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.525661][ T4625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.555569][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'.
[   60.586531][ T4633] loop1: detected capacity change from 0 to 512
[   60.642826][ T4633] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.344: bg 0: block 16: invalid block bitmap
[   60.656108][ T4633] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   60.678872][ T4633] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.344: invalid indirect mapped block 5 (level 0)
[   60.680556][ T4638] loop2: detected capacity change from 0 to 512
[   60.697978][ T4633] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.344: invalid indirect mapped block 4294967295 (level 1)
[   60.719910][ T4638] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   60.729506][ T4638] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.349: invalid indirect mapped block 2683928664 (level 1)
[   60.745631][ T4633] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.344: invalid indirect mapped block 4294967295 (level 2)
[   60.757933][ T4638] EXT4-fs (loop2): Remounting filesystem read-only
[   60.766595][ T4638] EXT4-fs (loop2): 1 truncate cleaned up
[   60.773799][ T4641] loop0: detected capacity change from 0 to 512
[   60.781170][ T4641] EXT4-fs: Ignoring removed nobh option
[   60.795340][ T4633] EXT4-fs (loop1): 1 truncate cleaned up
[   60.805245][ T4641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   60.825937][ T4641] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[   60.889088][ T4647] FAULT_INJECTION: forcing a failure.
[   60.889088][ T4647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.902552][ T4647] CPU: 1 UID: 0 PID: 4647 Comm: syz.2.352 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   60.902595][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   60.902610][ T4647] Call Trace:
[   60.902617][ T4647]  <TASK>
[   60.902627][ T4647]  __dump_stack+0x1d/0x30
[   60.902653][ T4647]  dump_stack_lvl+0xe8/0x140
[   60.902701][ T4647]  dump_stack+0x15/0x1b
[   60.902788][ T4647]  should_fail_ex+0x265/0x280
[   60.902819][ T4647]  should_fail+0xb/0x20
[   60.902853][ T4647]  should_fail_usercopy+0x1a/0x20
[   60.902892][ T4647]  _copy_from_user+0x1c/0xb0
[   60.902951][ T4647]  do_ipv6_setsockopt+0x220/0x22e0
[   60.902977][ T4647]  ? kstrtoull+0x111/0x140
[   60.903022][ T4647]  ? __rcu_read_unlock+0x4f/0x70
[   60.903043][ T4647]  ? avc_has_perm_noaudit+0x1b1/0x200
[   60.903166][ T4647]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   60.903286][ T4647]  ipv6_setsockopt+0x59/0x130
[   60.903313][ T4647]  tcp_setsockopt+0x95/0xb0
[   60.903362][ T4647]  sock_common_setsockopt+0x69/0x80
[   60.903391][ T4647]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   60.903460][ T4647]  __sys_setsockopt+0x184/0x200
[   60.903509][ T4647]  __x64_sys_setsockopt+0x64/0x80
[   60.903597][ T4647]  x64_sys_call+0x2bd5/0x2fb0
[   60.903685][ T4647]  do_syscall_64+0xd2/0x200
[   60.903704][ T4647]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   60.903729][ T4647]  ? clear_bhb_loop+0x40/0x90
[   60.903767][ T4647]  ? clear_bhb_loop+0x40/0x90
[   60.903789][ T4647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.903888][ T4647] RIP: 0033:0x7f88faa6e9a9
[   60.903907][ T4647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.903929][ T4647] RSP: 002b:00007f88f90cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.903951][ T4647] RAX: ffffffffffffffda RBX: 00007f88fac95fa0 RCX: 00007f88faa6e9a9
[   60.903962][ T4647] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[   60.904036][ T4647] RBP: 00007f88f90cf090 R08: 0000000000000510 R09: 0000000000000000
[   60.904048][ T4647] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001
[   60.904061][ T4647] R13: 0000000000000000 R14: 00007f88fac95fa0 R15: 00007ffe87f39f28
[   60.904085][ T4647]  </TASK>
[   61.153145][ T4651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.353'.
[   61.172992][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   61.188848][ T4651] team0: Port device team_slave_0 removed
[   61.268329][ T4656] loop3: detected capacity change from 0 to 512
[   61.275766][ T4656] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   61.286710][ T4656] EXT4-fs (loop3): group descriptors corrupted!
[   61.314169][ T3932] ==================================================================
[   61.323160][ T3932] BUG: KCSAN: data-race in __dentry_kill / fast_dput
[   61.331276][ T3932] 
[   61.334481][ T3932] write to 0xffff8881205070d0 of 8 bytes by task 2997 on cpu 1:
[   61.344058][ T3932]  __dentry_kill+0x142/0x4b0
[   61.349039][ T3932]  dput+0x5e/0xd0
[   61.353849][ T3932]  step_into+0x5b2/0x820
[   61.358668][ T3932]  walk_component+0x162/0x220
[   61.363661][ T3932]  path_lookupat+0xfe/0x2a0
[   61.369774][ T3932]  filename_lookup+0x2d7/0x340
[   61.376250][ T3932]  do_readlinkat+0x7d/0x320
[   61.381260][ T3932]  __x64_sys_readlink+0x47/0x60
[   61.386382][ T3932]  x64_sys_call+0x2cf3/0x2fb0
[   61.391436][ T3932]  do_syscall_64+0xd2/0x200
[   61.396619][ T3932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.402756][ T3932] 
[   61.405292][ T3932] read to 0xffff8881205070d0 of 8 bytes by task 3932 on cpu 0:
[   61.413475][ T3932]  fast_dput+0x5f/0x2c0
[   61.417675][ T3932]  dput+0x24/0xd0
[   61.421917][ T3932]  do_unlinkat+0x299/0x4c0
[   61.427426][ T3932]  __x64_sys_unlink+0x2e/0x40
[   61.432369][ T3932]  x64_sys_call+0x22a6/0x2fb0
[   61.437446][ T3932]  do_syscall_64+0xd2/0x200
[   61.442856][ T3932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.452311][ T3932] 
[   61.454974][ T3932] value changed: 0xffff888237b10b48 -> 0x0000000000000000
[   61.463290][ T3932] 
[   61.465819][ T3932] Reported by Kernel Concurrency Sanitizer on:
[   61.472343][ T3932] CPU: 0 UID: 0 PID: 3932 Comm: udevd Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) 
[   61.485352][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   61.496394][ T3932] ==================================================================