last executing test programs:

3.31669745s ago: executing program 0 (id=334):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

3.211539852s ago: executing program 0 (id=336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r0)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000027c0)={0x18, r1, 0x4238d4eaf0085c81, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x800)

3.143899693s ago: executing program 0 (id=338):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f0000000980)='$', 0x4b9ab3bf308af5f7, 0x0, 0xfffffffe, 0xffffffff, 0x5, 0x71a8, 0x0})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {}, {0x9, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000805000001000000000000006ae6cf7fe1bbbf137fe5b4c38430e1895dbda5978316866420e9b9bd81a8e17c7c971d8f0c3a494155700388c4abe86cfb82445b07aec19bfd03803198e4a094ce7427fcc245941b4c331cc006940245c0ba2fd397634dee66693c321e9e55ea3abb0b23ffd093159a9b87686d7c1d5da602247c90cd67fcbeb539ae6028e4b1facdb44b69c8f3ac72acae465a4454b36c902a8032fbc414f7d253e93dcc95ada2fa13542a", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
sync()
syz_read_part_table(0x618, &(0x7f0000002200)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x44f0)
r10 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r10, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0)

2.461026573s ago: executing program 0 (id=347):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffc, {0x0, 0x0, 0x0, r5, {}, {0xffe2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mount(&(0x7f0000000840)=@sg0, &(0x7f0000000880)='.\x00', &(0x7f00000008c0)='ramfs\x00', 0x808000, 0x0)
socket(0x5, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x2, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a6d, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x20000, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x8, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0)

1.952856141s ago: executing program 0 (id=352):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x40081)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000800)='./file0\x00', 0x10)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xfffffff9, 0x4}]}, 0xc, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81}, 0x0, 0x0, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x200, 0x4})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)

1.940495651s ago: executing program 4 (id=353):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$notify(r0, 0x402, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0xc, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0)

1.598112376s ago: executing program 4 (id=357):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e6400000008000900000000"], 0x4c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

1.597587706s ago: executing program 2 (id=358):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x80, 0x557628edb0862c00, 0x6, 0x9, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x68, 0x0, 0x5, 0x29, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0x4, 0xaf}, @lsrr={0x83, 0x3, 0xb4}, @timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x9, [{@private=0xa010100, 0x4fa1}, {@broadcast, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
clock_settime(0x1ed5d7403, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5}, {0x5, 0xfffffffe}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x40}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xd, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffc, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2000, 0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xd, 0x0, 0x0, 0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440))
r4 = socket$tipc(0x1e, 0x5, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = open(0x0, 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x80000000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={<r6=>0x0}, &(0x7f0000000040)=0xc)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x28, 0x4, @tid=r6}, &(0x7f0000000100))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0)

1.537199757s ago: executing program 2 (id=360):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
syz_clone(0x8005400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0)

1.259679611s ago: executing program 1 (id=362):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280)={[{@mb_optimize_scan}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn")
io_setup(0xa62, &(0x7f0000000180))
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x4, 0x8, 0x2}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r2, 0x6}, 0x8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

899.303707ms ago: executing program 3 (id=364):
r0 = socket(0x2, 0x80805, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xc00, &(0x7f0000000340)=ANY=[], 0x1, 0x388, &(0x7f0000000a40)="$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")
r1 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xff, 0xc2, 0x6, 0x9, 0x0, 0x6, 0x10000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x2004, 0x9, 0x8, 0x2, 0x9b, 0x8000, 0x8fe, 0x0, 0xffffb28c, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x12)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x8, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x401, 0x0, 0xffffffffffffff7f}, 0x0, 0xfffffffffffffffc, r1, 0x2)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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")
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000ffff0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x7fffffffffffffff}, 0x18)
ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0)
ftruncate(r2, 0x2007ffc)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000440)={0x9, 0x8, 0x6})
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)='5', 0x1}, {&(0x7f0000000340)="9f90fad21accec439a9482ecc335d7d28cc6c536edf50095e253d65b8dee4a67b7ed146bdb551b0b6857f694af61500f1e96b29f021153b82875924cbf40c9e04e9af660778c60c6c630ca0a3a4a70fcaae8925e25311fd18f8b3f46bae7e85596f7bd515a8cbc3d96b62d330faaacfb513e14f5a897b6bf79787c56d2b3ce703d2b64ebd160ec1dbd8a5bbaf0febac5cdd986ac95d770a862661afb0c5b2b075bbcfbe74de6593a411f87bae9563e2dee0fa9b1db217b498a5be26646c35dc3a2559e6a0bd34b59", 0xc8}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b000000000000000000"], 0x30}], 0x1, 0x0)

851.580367ms ago: executing program 1 (id=365):
r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc08c5334, &(0x7f0000000500))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13)
getpgid(0x0)
r3 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x19, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
keyctl$set_reqkey_keyring(0xe, 0x4)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2000000, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x40000)
readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=""/205, 0xcd)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

753.781459ms ago: executing program 1 (id=366):
r0 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

705.29193ms ago: executing program 3 (id=367):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x2}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000f59ffc)=0x20024, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x4000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10)
r5 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})

645.251471ms ago: executing program 2 (id=368):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)

613.723941ms ago: executing program 4 (id=369):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setresuid(r5, r5, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000200))
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
syz_clone3(&(0x7f0000001f40)={0x804800, &(0x7f0000000500), &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000e80), {0x2}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0), &(0x7f0000001f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
setresuid(0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r11)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000340)=0xc)
setregid(r11, r12)
r13 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x400400, 0x0)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r14, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r14, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0xbc, 0x27, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x23, 0xd5, 0x0, 0x1, [@generic="b79edbff43f77303773ff53c8612b2ac1bdcfe5b08490a", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @generic="0de5f771ad4e2814a320f9448020a71120e257baa1c11ca9269d673c85759e18d6f980cdc70d6c52db2ada3f4adae614a041490aeeb5952275a34dc83a195e9399f1c93637af5fd109ebeb69eb26932ef136908abf6baedf8117b39c5c498e35bbc2528781fe34d125692b5385e8c0b79dfe6bd9007d442c962fe9e7ae4bbd53eb281c158fd10043"]}, 0xbc}, {&(0x7f0000000380)={0xe0, 0x1b, 0x8, 0xffff, 0x25dfdbff, "", [@nested={0xcd, 0x87, 0x0, 0x1, [@generic="e8b6c9eeaae9276f6aad8bd3cd1379e7c0267abb7df83a6656f569061029b02c1b85fcba117c86713c498be646da8983805c25ba3ff9a62c267ed3154318a2588fa86e35ce878c0ef82e1b4cc131658ba0aaf5c094105174926d86ec5efab964182bb7277b971b2410f02b26f29c351ba16d993623c03ed89e27fcd7816691cc8cb6c7bb0bda77cdaffa830595ae0aace639cea3ac9ddbbf01d0d55d7e0b64edd93351237a38fc915a1bd9ffc17ccdc3f6cdb4582d50b916e0", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfddf}, @generic, @typed={0x6, 0x142, 0x0, 0x0, @str='.\x00'}]}]}, 0xe0}, {&(0x7f0000000680)={0x44c, 0x1d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @generic="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", @nested={0x4, 0xe2}]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @nested={0x92, 0xfb, 0x0, 0x1, [@generic="b4a35f0a5a20b5b1edbdbaf46deae84e5c83f79de4ae90397dac420eedf1f82526be20c15586b05ab3b64de57f778d94b0533c64b8da2572e5c220b2e99192e1793c62721c43c24dcbda38f33d3b33946019f8b95d05f2f52a3327c3c41db9fe59e065dc1e8fdf684107b24d683058c46493ad4394f76fb2b44d78586c1e9c14560b0bf0934734eb2e0a40c41c40"]}, @nested={0x15a, 0x25, 0x0, 0x1, [@generic="6bb97e82bfc66dc2f95918f1eb971e1601c194e1f0674435851686eb12088e7d0c3f0c3fef4a9ea45c3cec18318d58f3e38f22530d11f32929e5179ba6c8716526b31fcbb2ce71a7ed2857f426b4618787f8fb0b87c2d53671f7458f1aa6cdae5536bb3a5f830e7c210ca0f9b5c8df839aaec4bd5e8a801c02", @generic="ff0bc0abeb78733f7e486c88b650265ce017479f33817fd9a84c7688f0ea6ae2b4e9651e5f372c16b111fcf5c3d674e4a5566931c387184133a649936a242c54062b5833a2ebab675a04a6889b08c057250465b4da29", @generic, @generic="4b8dc6fe4458e1e74973164082ff6ea3043fb337c218b4036513f55dda00e8ac2a4145ae7b7061bb0b8c3a57b1c42caead900460d50dda003f119e584d94f75c7ffedbe0bdcb4a190db447d322b8087518b9c007af9b343a80dafe8d62c19788790cda1e5584a358c096b3cc94632cadf7879dcfcd9abd", @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x143}, @nested={0x4, 0x1f}]}, @nested={0x123, 0xfc, 0x0, 0x1, [@typed={0xcb, 0x7a, 0x0, 0x0, @binary="13f5dd4b446a9023c4ab7801c154abb0202a3fc082568ec832cef332514030c83715f3ea80b6af839f25b0a1e63806deefcc25c7ca84ca8cdbb356fe11bc4c6a6ff1d0edaa52f052513878732d8651155b98fc74805465c73e3d140c25d583358902cbaac9c3b0aee0f20a1f01b9f53fedeb71c76987e974951badb328de5ada91f9a1ca3599e55216a470ab9a8fdddaddbfa985c8374af28056a84262e066d52b02c8914604e920514565e7eabfce1f637abf425b0f70f35a3ee58fd8b7ef2a8347772d96c9c3"}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}, @generic="94ee35381f79d574b0b2d7869c3da0657213f0fc53d4df9f31bab956f831b4fa12d5f7c13045ab3f4d8cbbcfc4583b", @nested={0x4, 0x66}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r6}]}]}, 0x44c}, {&(0x7f0000000c00)={0xec, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xba, 0x11a, 0x0, 0x1, [@generic="8f0613f6f2f30dc7cc3a003ce7690ca5710487c689d44732fd75f8cf77fddc7cc141768bf2c8d51ff14a96c0c02609e1d002d90bde20b9c9c7d69ee6d06ac45ba56ae92d7124a22df60473c474586e33436ad9a09b54c58c26a8072b7eb73d57e2638cd2b55a95dc92bfd2c1ac67f5b4f9d800642325d469909cad936cedee1ef14844a5ae5f21da0103c4396f15c933c5823b6dfd29bfb1a4f2c144be32aaa3c8e8380b4c28425626c5cc7103eef54872fd", @nested={0x4, 0x5e}]}, @typed={0xb, 0x135, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xfd, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x87}, @nested={0x4, 0xf6}]}]}, 0xec}, {&(0x7f0000000d00)={0x164, 0x3a, 0x100, 0x7, 0x25dfdbfb, "", [@generic="0ab62d50f1367ba535dc50654b21af764faa47938be68ac4499f45af5dfffd3b1606a6860f95e0ec63928b874dc7c374e45c5e5f291a5d956a977eeee85a8f06215b22c4b33195f68fc2bf8e5a422327e9f2714167af75041ba4ca09c54103103816d93ed68f26ee66af9586cde4b152d608b0176408281e63351174b794adfa590c7d7165f044a0ed486eb56cf5dabd5c6c6eeee510245b2d1b0d72f456198f80b5dfc48577c390da80ef88ff3882e2ffe7838f197fb550eb8cf3fb435439", @typed={0x26, 0x124, 0x0, 0x0, @binary="b9623fc8441f73967aac26db02aa899adac000e61d5a210bdc932cba907c4eec3aae"}, @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0x4, 0xfe}, @nested={0x4, 0x5d}]}, @generic="48db5fcf9b55c07caa0030a0a60e44df3a89a54347953be57603ea7054521c282562a497bad55166347825e3e94e8879c7f304ba8f05581ea0e92b68fd332f8494f5653b8bc9ec4ae4e03af0e51df648f0b63c4e7c5737a80cf840f2de"]}, 0x164}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r7, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r1, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xd8, 0x20000080}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

611.846871ms ago: executing program 1 (id=370):
socket(0x2, 0x80805, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xc00, &(0x7f0000000340)=ANY=[], 0x1, 0x388, &(0x7f0000000a40)="$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")
r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xff, 0xc2, 0x6, 0x9, 0x0, 0x6, 0x10000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x2004, 0x9, 0x8, 0x2, 0x9b, 0x8000, 0x8fe, 0x0, 0xffffb28c, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x12)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x8, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x401, 0x0, 0xffffffffffffff7f}, 0x0, 0xfffffffffffffffc, r0, 0x2)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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")
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000ffff0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18)
ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0)
ftruncate(r1, 0x2007ffc)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000440)={0x9, 0x8, 0x6})
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

604.936061ms ago: executing program 0 (id=371):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x0)
setresuid(r5, r5, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000200))
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
syz_clone3(&(0x7f0000001f40)={0x804800, &(0x7f0000000500), &(0x7f00000005c0)=<r8=>0x0, &(0x7f0000000e80), {0x2}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0), &(0x7f0000001f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58)
setresuid(0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r10)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r11=>0x0}, &(0x7f0000000340)=0xc)
setregid(r10, r11)
r12 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001fc0), 0x400400, 0x0)
r13 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r13, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r13, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r13, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
sendmsg$netlink(r0, &(0x7f0000002140)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000480)=[{&(0x7f00000002c0)={0xbc, 0x27, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x23, 0xd5, 0x0, 0x1, [@generic="b79edbff43f77303773ff53c8612b2ac1bdcfe5b08490a", @typed={0x8, 0x143, 0x0, 0x0, @pid=r4}]}, @generic="0de5f771ad4e2814a320f9448020a71120e257baa1c11ca9269d673c85759e18d6f980cdc70d6c52db2ada3f4adae614a041490aeeb5952275a34dc83a195e9399f1c93637af5fd109ebeb69eb26932ef136908abf6baedf8117b39c5c498e35bbc2528781fe34d125692b5385e8c0b79dfe6bd9007d442c962fe9e7ae4bbd53eb281c158fd10043"]}, 0xbc}, {&(0x7f0000000380)={0xe0, 0x1b, 0x8, 0xffff, 0x25dfdbff, "", [@nested={0xcd, 0x87, 0x0, 0x1, [@generic="e8b6c9eeaae9276f6aad8bd3cd1379e7c0267abb7df83a6656f569061029b02c1b85fcba117c86713c498be646da8983805c25ba3ff9a62c267ed3154318a2588fa86e35ce878c0ef82e1b4cc131658ba0aaf5c094105174926d86ec5efab964182bb7277b971b2410f02b26f29c351ba16d993623c03ed89e27fcd7816691cc8cb6c7bb0bda77cdaffa830595ae0aace639cea3ac9ddbbf01d0d55d7e0b64edd93351237a38fc915a1bd9ffc17ccdc3f6cdb4582d50b916e0", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0xfddf}, @generic, @typed={0x6, 0x142, 0x0, 0x0, @str='.\x00'}]}]}, 0xe0}, {&(0x7f0000000680)={0x44c, 0x1d, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x11e, 0x13b, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xa0, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r5}, @generic="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", @nested={0x4, 0xe2}]}, @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@empty}, @nested={0x92, 0xfb, 0x0, 0x1, [@generic="b4a35f0a5a20b5b1edbdbaf46deae84e5c83f79de4ae90397dac420eedf1f82526be20c15586b05ab3b64de57f778d94b0533c64b8da2572e5c220b2e99192e1793c62721c43c24dcbda38f33d3b33946019f8b95d05f2f52a3327c3c41db9fe59e065dc1e8fdf684107b24d683058c46493ad4394f76fb2b44d78586c1e9c14560b0bf0934734eb2e0a40c41c40"]}, @nested={0x15a, 0x25, 0x0, 0x1, [@generic="6bb97e82bfc66dc2f95918f1eb971e1601c194e1f0674435851686eb12088e7d0c3f0c3fef4a9ea45c3cec18318d58f3e38f22530d11f32929e5179ba6c8716526b31fcbb2ce71a7ed2857f426b4618787f8fb0b87c2d53671f7458f1aa6cdae5536bb3a5f830e7c210ca0f9b5c8df839aaec4bd5e8a801c02", @generic="ff0bc0abeb78733f7e486c88b650265ce017479f33817fd9a84c7688f0ea6ae2b4e9651e5f372c16b111fcf5c3d674e4a5566931c387184133a649936a242c54062b5833a2ebab675a04a6889b08c057250465b4da29", @generic, @generic="4b8dc6fe4458e1e74973164082ff6ea3043fb337c218b4036513f55dda00e8ac2a4145ae7b7061bb0b8c3a57b1c42caead900460d50dda003f119e584d94f75c7ffedbe0bdcb4a190db447d322b8087518b9c007af9b343a80dafe8d62c19788790cda1e5584a358c096b3cc94632cadf7879dcfcd9abd", @typed={0x8, 0x93, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x143}, @nested={0x4, 0x1f}]}, @nested={0x123, 0xfc, 0x0, 0x1, [@typed={0xcb, 0x7a, 0x0, 0x0, @binary="13f5dd4b446a9023c4ab7801c154abb0202a3fc082568ec832cef332514030c83715f3ea80b6af839f25b0a1e63806deefcc25c7ca84ca8cdbb356fe11bc4c6a6ff1d0edaa52f052513878732d8651155b98fc74805465c73e3d140c25d583358902cbaac9c3b0aee0f20a1f01b9f53fedeb71c76987e974951badb328de5ada91f9a1ca3599e55216a470ab9a8fdddaddbfa985c8374af28056a84262e066d52b02c8914604e920514565e7eabfce1f637abf425b0f70f35a3ee58fd8b7ef2a8347772d96c9c3"}, @typed={0xc, 0x125, 0x0, 0x0, @u64=0x6}, @typed={0xb, 0x128, 0x0, 0x0, @str='batadv\x00'}, @generic="94ee35381f79d574b0b2d7869c3da0657213f0fc53d4df9f31bab956f831b4fa12d5f7c13045ab3f4d8cbbcfc4583b", @nested={0x4, 0x66}, @typed={0x8, 0x74, 0x0, 0x0, @uid=r6}]}]}, 0x44c}, {&(0x7f0000000c00)={0xec, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@nested={0xba, 0x11a, 0x0, 0x1, [@generic="8f0613f6f2f30dc7cc3a003ce7690ca5710487c689d44732fd75f8cf77fddc7cc141768bf2c8d51ff14a96c0c02609e1d002d90bde20b9c9c7d69ee6d06ac45ba56ae92d7124a22df60473c474586e33436ad9a09b54c58c26a8072b7eb73d57e2638cd2b55a95dc92bfd2c1ac67f5b4f9d800642325d469909cad936cedee1ef14844a5ae5f21da0103c4396f15c933c5823b6dfd29bfb1a4f2c144be32aaa3c8e8380b4c28425626c5cc7103eef54872fd", @nested={0x4, 0x5e}]}, @typed={0xb, 0x135, 0x0, 0x0, @str='batadv\x00'}, @nested={0x14, 0xfd, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x87}, @nested={0x4, 0xf6}]}]}, 0xec}, {&(0x7f0000000d00)={0x164, 0x3a, 0x100, 0x7, 0x25dfdbfb, "", [@generic="0ab62d50f1367ba535dc50654b21af764faa47938be68ac4499f45af5dfffd3b1606a6860f95e0ec63928b874dc7c374e45c5e5f291a5d956a977eeee85a8f06215b22c4b33195f68fc2bf8e5a422327e9f2714167af75041ba4ca09c54103103816d93ed68f26ee66af9586cde4b152d608b0176408281e63351174b794adfa590c7d7165f044a0ed486eb56cf5dabd5c6c6eeee510245b2d1b0d72f456198f80b5dfc48577c390da80ef88ff3882e2ffe7838f197fb550eb8cf3fb435439", @typed={0x26, 0x124, 0x0, 0x0, @binary="b9623fc8441f73967aac26db02aa899adac000e61d5a210bdc932cba907c4eec3aae"}, @nested={0x10, 0x2f, 0x0, 0x1, [@typed={0x4, 0x109}, @nested={0x4, 0xfe}, @nested={0x4, 0x5d}]}, @generic="48db5fcf9b55c07caa0030a0a60e44df3a89a54347953be57603ea7054521c282562a497bad55166347825e3e94e8879c7f304ba8f05581ea0e92b68fd332f8494f5653b8bc9ec4ae4e03af0e51df648f0b63c4e7c5737a80cf840f2de"]}, 0x164}], 0x5, &(0x7f0000002040)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r0, r7, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r11}}}, @rights={{0x20, 0x1, 0x1, [r12, r1, r0, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xd8, 0x20000080}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

604.551831ms ago: executing program 2 (id=372):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]})
socket$packet(0x11, 0xa, 0x300)
socket$kcm(0x2, 0xa, 0x73)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000680001", @ANYBLOB="4208f902b2a70d5ab6ffea287aa9abeab9452c506322efd6a5fb3bb65644a10e07d165bcc52666b637aefe8970662eb1965b7e8bfa1a9d1717ff0c17b6c1821dab3da2dc7d1328c93143980f49165dd44575d2b9fe5e612d484a6197479cd2b268ad1328e4c530c7ed72"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

563.623992ms ago: executing program 3 (id=373):
r0 = socket(0x1, 0x3, 0x0)
bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

506.812112ms ago: executing program 3 (id=374):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)

450.594153ms ago: executing program 4 (id=375):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280)={[{@mb_optimize_scan}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0x45, 0x786, &(0x7f00000007c0)="$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")
io_setup(0xa62, &(0x7f0000000180))
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x4, 0x8, 0x2}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r2, 0x6}, 0x8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

449.761223ms ago: executing program 3 (id=376):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setitimer(0x2, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x822b01)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x1e, 0x80, 0x20, r0, 0x3, '\x00', 0x0, r2, 0x0, 0x1, 0x2, 0x9}, 0x50)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

320.996066ms ago: executing program 2 (id=377):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1d00000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="00000000000000001a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x1)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xffffffffdffffff7}, 0x18)
flock(r0, 0x2)
flock(r0, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000ffffffffff7f0000cc00000000000100", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
clock_adjtime(0xa, &(0x7f0000000500)={0x9, 0x13, 0x1ff, 0x7, 0x9, 0x6, 0x8, 0x100000001, 0x31d8b54d, 0x5, 0xfffffffffffffff9, 0x32, 0x7, 0xfba0, 0xd, 0x54b5, 0x7, 0xc821, 0x9, 0x7, 0x1, 0x3de4, 0xff, 0x5, 0x9, 0x2})
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x4}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000ff7f0000080000000600000000000000", @ANYRES32, @ANYBLOB="d800b91de0987e0d75a2fe994c00"/30, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000000300"/28], 0x50)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)

265.095246ms ago: executing program 4 (id=378):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000001480)={[{@data_journal}]}, 0x1, 0x5ad, &(0x7f0000000180)="$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")

243.505996ms ago: executing program 1 (id=379):
r0 = socket(0x2, 0x80805, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xc00, &(0x7f0000000340)=ANY=[], 0x1, 0x388, &(0x7f0000000a40)="$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")
r1 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xff, 0xc2, 0x6, 0x9, 0x0, 0x6, 0x10000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xfffffffffffffffe}, 0x2004, 0x9, 0x8, 0x2, 0x9b, 0x8000, 0x8fe, 0x0, 0xffffb28c, 0x0, 0x100}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x12)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x8, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x401, 0x0, 0xffffffffffffff7f}, 0x0, 0xfffffffffffffffc, r1, 0x2)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$eJzs3c9vHFcdAPDvTPwraVon0ANUQAIUAoqyG2/aqOqlzQWEqkqIigPikBp7Y5nsZo13XWpjqe7fABJInID/gAMSB6SeOHDjiMQBIZUDUgALFCOBtGhmx87GWeONvd5tvJ+PNJl57+3M9z074/f2rT0vgLF1OSK2ImIqIt6OiNkiPym2eL2zZa97sL25sLO9uZBEu/3W35O8PMuLrnMyzxTXnImIb3w14jvJ43Gb6xt352u16mqRLrfqK+Xm+sa15fr8UnWpeq9SuTl38/orN16uDKytl+q/vP+V5Te++Ztff/rD3299+QdZtc4XZd3tGKRO0yf34mQmIuKNkwg2AmeK/dSI68HRpBHxsYj4XH7/z8aZ/H8nAHCatduz0Z7tTgMAp12az4ElaSki0rQYBJQ6c3jPx7m01mi2rt5prN1b7MyVXYjJ9M5yrXr94vQfv5e/eDLJ0nN5WV6epyv70jci4mJE/Gj6bJ4uLTRqi3uzRwDAMD3T3f9HxL+m07RU6uvUHp/qAQBPjZlRVwAAGDr9PwCMH/0/AIyfPvr/4sP+rROvCwAwHN7/A8D40f8DwPjR/wPAWPn6m29mW3uneP714jvra3cb71xbrDbvluprC6WFxupKaanRWMqf2VM/7Hq1RmNl7qVYe7fcqjZb5eb6xu16Y+1e63b+XO/b1cmhtAoA+H8uXvrgD0lEbL16Nt+iay0HfTWcbumoKwCMzLGewGuAAE+1Xqt9/WIE9QCGr68uPB8k/O7E6wKMRs+Hec/0PHzUT54giN8zgo+UK5/sf/7fGs9wupj/h/F1tPn/1wZeD2D4es3/A+Oh3U72r/k/tVcEAJxKx/gVvvZ7gxqEACN12GLeA/n8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6Z8xHx3UjSUr4WeJr9m5ZKEc9GxIWYTO4s16rXI+K5uBQRk9NZem7UlQYAjin9a1Ks/3Vl9sXz+0unkn9P5/uI+P5P3/rxu/Ot1upclv+Pvfzp3eXDKg/PO8a6ggDAgOX9d6XYd72Rf7C9ubC7DbM+92/Ff4uliBd2tjfzLcsv8t6LmMnHEuf+mcREcc5MRLwQEWcGEH/r/YizPduf5HMjF4qVT7vjRxH72QHFj0/0Ez99JH6al3X22eDr408a+OwAKg9PuQ9uRcTrve6/NC7n+973f5Y7MYD49291Lrb7s2+nK/5EEelMj/jZPX+53xgv/fZrj2W2Zztl70e8MNErfrIXPzkg/ot9xv/Tpz7zw9cOKGv/LOJK9I7fHavcqq+Um+sb15br80vVpeq9SuXm3M3rr9x4uVLO56jLuzPVj/vbq1efO6huWfvPdcXfXRc/izrTs/1Te+d+oc/2//w/b3/7sw+T0/vjf+nzvb//z/eM35H1iV/sM/78uV8duHx3Fn/xgK//Yd//q90XOjBCxId/2Vjss6oAwBA01zfuztdq1dUnOsh6/+6c7F3oUa5z6EFWxf5evDtcPF7QP8dJtOKIB5Mn9VU98YOJvbHiYK/8reyKQ25OOvBWHOvgwbBije5nEjAcD2/6UdcEAAAAAAAAAAAAAAA4yDD+dGnUbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD0+l8AAAD//2zB1Gk=")
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df250100"], 0x18}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000ffff0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r8, 0x0, 0x7fffffffffffffff}, 0x18)
ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0)
ftruncate(r2, 0x2007ffc)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000440)={0x9, 0x8, 0x6})
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)='5', 0x1}, {&(0x7f0000000340)="9f90fad21accec439a9482ecc335d7d28cc6c536edf50095e253d65b8dee4a67b7ed146bdb551b0b6857f694af61500f1e96b29f021153b82875924cbf40c9e04e9af660778c60c6c630ca0a3a4a70fcaae8925e25311fd18f8b3f46bae7e85596f7bd515a8cbc3d96b62d330faaacfb513e14f5a897b6bf79787c56d2b3ce703d2b64ebd160ec1dbd8a5bbaf0febac5cdd986ac95d770a862661afb0c5b2b075bbcfbe74de6593a411f87bae9563e2dee0fa9b1db217b498a5be26646c35dc3a2559e6a0bd34b59", 0xc8}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b000000000000000000"], 0x30}], 0x1, 0x0)

223.723417ms ago: executing program 3 (id=380):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e64000000080009000000000008"], 0x4c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

135.111498ms ago: executing program 4 (id=381):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x40081)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000800)='./file0\x00', 0x10)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xfffffff9, 0x4}]}, 0xc, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81}, 0x0, 0x0, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x200, 0x4})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0)
preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1)

82.663649ms ago: executing program 2 (id=382):
r0 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r1 = getpid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)

0s ago: executing program 1 (id=383):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$rds(0x15, 0x5, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x1000000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='!pu>\t0\t\t\t')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240))

kernel console output (not intermixed with test programs):

tclass=process permissive=1
[   16.822553][   T29] audit: type=1400 audit(1751049517.265:61): avc:  denied  { siginh } for  pid=3182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts.
[   24.191772][   T29] audit: type=1400 audit(1751049524.635:62): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   24.192680][ T3293] cgroup: Unknown subsys name 'net'
[   24.214485][   T29] audit: type=1400 audit(1751049524.635:63): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.241851][   T29] audit: type=1400 audit(1751049524.675:64): avc:  denied  { unmount } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   24.360281][ T3293] cgroup: Unknown subsys name 'cpuset'
[   24.366415][ T3293] cgroup: Unknown subsys name 'rlimit'
[   24.516604][   T29] audit: type=1400 audit(1751049524.965:65): avc:  denied  { setattr } for  pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   24.539976][   T29] audit: type=1400 audit(1751049524.965:66): avc:  denied  { create } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.560435][   T29] audit: type=1400 audit(1751049524.965:67): avc:  denied  { write } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.580828][   T29] audit: type=1400 audit(1751049524.965:68): avc:  denied  { read } for  pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   24.601180][   T29] audit: type=1400 audit(1751049524.995:69): avc:  denied  { mounton } for  pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   24.607843][ T3298] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   24.626003][   T29] audit: type=1400 audit(1751049524.995:70): avc:  denied  { mount } for  pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   24.657770][   T29] audit: type=1400 audit(1751049525.085:71): avc:  denied  { relabelto } for  pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   24.724538][ T3293] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   25.746271][ T3305] chnl_net:caif_netlink_parms(): no params data found
[   25.833310][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.840479][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.847615][ T3305] bridge_slave_0: entered allmulticast mode
[   25.854182][ T3305] bridge_slave_0: entered promiscuous mode
[   25.860812][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.867918][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.875143][ T3305] bridge_slave_1: entered allmulticast mode
[   25.881646][ T3305] bridge_slave_1: entered promiscuous mode
[   25.933774][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.957769][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.969154][ T3304] chnl_net:caif_netlink_parms(): no params data found
[   26.008058][ T3311] chnl_net:caif_netlink_parms(): no params data found
[   26.021667][ T3305] team0: Port device team_slave_0 added
[   26.036437][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   26.045422][ T3305] team0: Port device team_slave_1 added
[   26.076035][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.083087][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.109103][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.131013][ T3309] chnl_net:caif_netlink_parms(): no params data found
[   26.140012][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.146958][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.172956][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.185960][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.193112][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.200310][ T3304] bridge_slave_0: entered allmulticast mode
[   26.206529][ T3304] bridge_slave_0: entered promiscuous mode
[   26.227049][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.234215][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.241411][ T3304] bridge_slave_1: entered allmulticast mode
[   26.247727][ T3304] bridge_slave_1: entered promiscuous mode
[   26.292506][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.299611][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.306761][ T3311] bridge_slave_0: entered allmulticast mode
[   26.313171][ T3311] bridge_slave_0: entered promiscuous mode
[   26.320010][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.327062][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.334319][ T3311] bridge_slave_1: entered allmulticast mode
[   26.340938][ T3311] bridge_slave_1: entered promiscuous mode
[   26.348160][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.377745][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.397459][ T3305] hsr_slave_0: entered promiscuous mode
[   26.403467][ T3305] hsr_slave_1: entered promiscuous mode
[   26.422462][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.429697][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.436821][ T3312] bridge_slave_0: entered allmulticast mode
[   26.444068][ T3312] bridge_slave_0: entered promiscuous mode
[   26.450671][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.457724][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.464987][ T3312] bridge_slave_1: entered allmulticast mode
[   26.471628][ T3312] bridge_slave_1: entered promiscuous mode
[   26.477848][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.484932][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.492055][ T3309] bridge_slave_0: entered allmulticast mode
[   26.498425][ T3309] bridge_slave_0: entered promiscuous mode
[   26.505827][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.516195][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.525915][ T3304] team0: Port device team_slave_0 added
[   26.532323][ T3304] team0: Port device team_slave_1 added
[   26.546455][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.553538][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.560721][ T3309] bridge_slave_1: entered allmulticast mode
[   26.567040][ T3309] bridge_slave_1: entered promiscuous mode
[   26.592695][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.610446][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.617415][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.643462][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.659773][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.673434][ T3311] team0: Port device team_slave_0 added
[   26.680319][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.690115][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.697108][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.723086][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.741707][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.755789][ T3311] team0: Port device team_slave_1 added
[   26.775555][ T3312] team0: Port device team_slave_0 added
[   26.798654][ T3312] team0: Port device team_slave_1 added
[   26.815352][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.822365][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.848364][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.859680][ T3309] team0: Port device team_slave_0 added
[   26.870453][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.877499][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.903467][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.921152][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.928103][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   26.954115][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.965407][ T3309] team0: Port device team_slave_1 added
[   26.976251][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.983214][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.009134][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.022046][ T3304] hsr_slave_0: entered promiscuous mode
[   27.028202][ T3304] hsr_slave_1: entered promiscuous mode
[   27.034104][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.041681][ T3304] Cannot create hsr debugfs directory
[   27.063876][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0
[   27.070932][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.096867][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   27.123315][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1
[   27.130319][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   27.156301][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   27.198435][ T3311] hsr_slave_0: entered promiscuous mode
[   27.204458][ T3311] hsr_slave_1: entered promiscuous mode
[   27.210418][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.217963][ T3311] Cannot create hsr debugfs directory
[   27.230260][ T3312] hsr_slave_0: entered promiscuous mode
[   27.236304][ T3312] hsr_slave_1: entered promiscuous mode
[   27.242164][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.249808][ T3312] Cannot create hsr debugfs directory
[   27.305079][ T3309] hsr_slave_0: entered promiscuous mode
[   27.311037][ T3309] hsr_slave_1: entered promiscuous mode
[   27.316746][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   27.324344][ T3309] Cannot create hsr debugfs directory
[   27.382636][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   27.395847][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   27.415000][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   27.425371][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   27.474830][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   27.486856][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   27.495650][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   27.507522][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   27.527424][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   27.536351][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   27.546874][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   27.564671][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   27.592729][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   27.602784][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   27.618028][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   27.639798][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   27.661437][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   27.674256][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   27.688201][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   27.696944][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   27.716345][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.746331][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.760928][ T3305] 8021q: adding VLAN 0 to HW filter on device team0
[   27.769884][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.787874][ T3304] 8021q: adding VLAN 0 to HW filter on device team0
[   27.797274][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   27.805613][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.812666][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.828627][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.835723][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.844692][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.851835][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.861003][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.868042][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.878383][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.885571][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.910582][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.924335][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.931438][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.955054][ T3309] 8021q: adding VLAN 0 to HW filter on device team0
[   27.979880][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.986987][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.998645][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0
[   28.015619][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.022769][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.061933][ T3311] 8021q: adding VLAN 0 to HW filter on device team0
[   28.085002][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.092105][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.102704][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.122822][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.129922][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.155052][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.191766][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.218347][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.276736][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0
[   28.357471][ T3312] veth0_vlan: entered promiscuous mode
[   28.376997][ T3312] veth1_vlan: entered promiscuous mode
[   28.394490][ T3304] veth0_vlan: entered promiscuous mode
[   28.406369][ T3312] veth0_macvtap: entered promiscuous mode
[   28.418394][ T3312] veth1_macvtap: entered promiscuous mode
[   28.427924][ T3304] veth1_vlan: entered promiscuous mode
[   28.441357][ T3305] veth0_vlan: entered promiscuous mode
[   28.456014][ T3309] veth0_vlan: entered promiscuous mode
[   28.464608][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.475991][ T3311] veth0_vlan: entered promiscuous mode
[   28.483266][ T3309] veth1_vlan: entered promiscuous mode
[   28.495923][ T3305] veth1_vlan: entered promiscuous mode
[   28.505864][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.518727][ T3304] veth0_macvtap: entered promiscuous mode
[   28.525747][ T3311] veth1_vlan: entered promiscuous mode
[   28.535942][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.544703][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.553496][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.562395][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.573463][ T3304] veth1_macvtap: entered promiscuous mode
[   28.594269][ T3305] veth0_macvtap: entered promiscuous mode
[   28.602519][ T3305] veth1_macvtap: entered promiscuous mode
[   28.609346][ T3311] veth0_macvtap: entered promiscuous mode
[   28.621743][ T3309] veth0_macvtap: entered promiscuous mode
[   28.632444][ T3311] veth1_macvtap: entered promiscuous mode
[   28.639265][ T3309] veth1_macvtap: entered promiscuous mode
[   28.651293][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.664033][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.676864][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.688199][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.688478][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   28.698665][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.718610][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0
[   28.729786][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.738501][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.747397][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.756210][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.769520][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.777097][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.785836][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.794672][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.803617][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.823449][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1
[   28.837026][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.845861][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.854622][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.863351][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   28.881311][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   28.890234][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   28.898973][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   28.907753][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   29.029218][ T3486] loop2: detected capacity change from 0 to 1024
[   29.041990][ T3477] loop0: detected capacity change from 0 to 8192
[   29.049587][ T3486] EXT4-fs: Ignoring removed nomblk_io_submit option
[   29.069068][ T3489] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   29.078350][ T3489] FAULT_INJECTION: forcing a failure.
[   29.078350][ T3489] name failslab, interval 1, probability 0, space 0, times 1
[   29.086017][ T3477] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   29.091162][ T3489] CPU: 1 UID: 0 PID: 3489 Comm: syz.1.6 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   29.091190][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   29.091217][ T3489] Call Trace:
[   29.091222][ T3489]  <TASK>
[   29.091230][ T3489]  __dump_stack+0x1d/0x30
[   29.091322][ T3489]  dump_stack_lvl+0xe8/0x140
[   29.091396][ T3489]  dump_stack+0x15/0x1b
[   29.091412][ T3489]  should_fail_ex+0x265/0x280
[   29.091442][ T3489]  should_failslab+0x8c/0xb0
[   29.091472][ T3489]  kmem_cache_alloc_node_noprof+0x57/0x320
[   29.091512][ T3489]  ? preload_this_cpu_lock+0x5b/0xd0
[   29.091530][ T3489]  preload_this_cpu_lock+0x5b/0xd0
[   29.091546][ T3489]  alloc_vmap_area+0x31f/0xe50
[   29.091573][ T3489]  ? __kmalloc_cache_node_noprof+0x18a/0x320
[   29.091605][ T3489]  __get_vm_area_node+0x173/0x1d0
[   29.091643][ T3489]  __vmalloc_node_range_noprof+0x273/0xe00
[   29.091672][ T3489]  ? copy_process+0x399/0x1fe0
[   29.091731][ T3489]  ? __rcu_read_unlock+0x4f/0x70
[   29.091756][ T3489]  __vmalloc_node_noprof+0x89/0xc0
[   29.091784][ T3489]  ? copy_process+0x399/0x1fe0
[   29.091843][ T3489]  ? copy_process+0x399/0x1fe0
[   29.091942][ T3489]  dup_task_struct+0x449/0x6a0
[   29.092031][ T3489]  ? _parse_integer+0x27/0x40
[   29.092058][ T3489]  copy_process+0x399/0x1fe0
[   29.092079][ T3489]  ? kstrtouint+0x76/0xc0
[   29.092104][ T3489]  ? kstrtouint_from_user+0x9f/0xf0
[   29.092154][ T3489]  ? __rcu_read_unlock+0x4f/0x70
[   29.092176][ T3489]  kernel_clone+0x16c/0x5b0
[   29.092278][ T3489]  ? vfs_write+0x75e/0x8e0
[   29.092308][ T3489]  __x64_sys_clone+0xe6/0x120
[   29.092339][ T3489]  x64_sys_call+0x2c59/0x2fb0
[   29.092378][ T3489]  do_syscall_64+0xd2/0x200
[   29.092396][ T3489]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   29.092420][ T3489]  ? clear_bhb_loop+0x40/0x90
[   29.092440][ T3489]  ? clear_bhb_loop+0x40/0x90
[   29.092519][ T3489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   29.092540][ T3489] RIP: 0033:0x7f6cba97e929
[   29.092559][ T3489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   29.092606][ T3489] RSP: 002b:00007f6cb8fe6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[   29.092629][ T3489] RAX: ffffffffffffffda RBX: 00007f6cbaba5fa0 RCX: 00007f6cba97e929
[   29.092641][ T3489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000
[   29.092722][ T3489] RBP: 00007f6cb8fe7090 R08: 0000000000000000 R09: 0000000000000000
[   29.092733][ T3489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[   29.092745][ T3489] R13: 0000000000000000 R14: 00007f6cbaba5fa0 R15: 00007ffdee4ee568
[   29.092806][ T3489]  </TASK>
[   29.195530][ T3486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   29.286783][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   29.286799][   T29] audit: type=1400 audit(1751049529.725:111): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   29.299580][ T3486] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.3: reserved inode found cleared - inode=18
[   29.332719][   T29] audit: type=1400 audit(1751049529.725:112): avc:  denied  { mount } for  pid=3484 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   29.382689][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'.
[   29.402051][   T29] audit: type=1400 audit(1751049529.725:113): avc:  denied  { setattr } for  pid=3484 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   29.503791][   T29] audit: type=1400 audit(1751049529.815:114): avc:  denied  { create } for  pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   29.523178][   T29] audit: type=1400 audit(1751049529.815:115): avc:  denied  { create } for  pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   29.542599][   T29] audit: type=1400 audit(1751049529.825:116): avc:  denied  { mounton } for  pid=3497 comm="syz.1.9" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   29.563576][   T29] audit: type=1400 audit(1751049529.865:117): avc:  denied  { getopt } for  pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   29.678419][   T29] audit: type=1400 audit(1751049530.115:118): avc:  denied  { open } for  pid=3509 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   29.697645][   T29] audit: type=1400 audit(1751049530.115:119): avc:  denied  { kernel } for  pid=3509 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   29.725846][   T29] audit: type=1400 audit(1751049530.145:120): avc:  denied  { create } for  pid=3497 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   29.730087][    C1] hrtimer: interrupt took 38493 ns
[   29.764539][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   29.908511][ T3510] loop0: detected capacity change from 0 to 1024
[   29.949185][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   29.983678][ T3510] serio: Serial port ptm0
[   30.142555][ T3529] mmap: syz.2.12 (3529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   30.196334][ T3524] xt_CT: No such helper "snmp_trap"
[   30.296753][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   30.343562][ T3518] loop4: detected capacity change from 0 to 2048
[   30.368837][ T3518] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   30.408851][ T3533] veth2: entered promiscuous mode
[   30.413990][ T3533] veth2: entered allmulticast mode
[   30.448055][ T3533] syz.0.16 (3533) used greatest stack depth: 10952 bytes left
[   30.448809][ T3535] loop4: detected capacity change from 0 to 512
[   30.465861][ T3535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   30.479000][ T3535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   30.491811][ T3535] EXT4-fs (loop4): 1 truncate cleaned up
[   30.497819][ T3535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   30.582067][ T3542] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET)
[   30.593208][ T3542] loop0: detected capacity change from 0 to 512
[   30.610085][ T3542] =======================================================
[   30.610085][ T3542] WARNING: The mand mount option has been deprecated and
[   30.610085][ T3542]          and is ignored by this kernel. Remove the mand
[   30.610085][ T3542]          option from the mount to silence this warning.
[   30.610085][ T3542] =======================================================
[   30.734172][ T3542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   30.774697][ T3545] loop1: detected capacity change from 0 to 2048
[   30.805221][ T3542] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   30.821921][ T3542] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   30.850052][ T3297]  loop1: p1 < > p4
[   30.855797][ T3297] loop1: p4 size 8388608 extends beyond EOD, truncated
[   30.871335][ T3556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.22'.
[   30.879267][ T3542] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.19: mark_inode_dirty error
[   30.880248][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'.
[   30.917544][ T3545]  loop1: p1 < > p4
[   30.924818][ T3542] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   30.928498][ T3545] loop1: p4 size 8388608 extends beyond EOD, truncated
[   30.946709][ T3557] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   30.989716][ T3557] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.19: mark_inode_dirty error
[   31.022711][ T3541] SELinux: ebitmap: truncated map
[   31.036407][ T3557] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   31.048351][ T3557] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.19: mark_inode_dirty error
[   31.059644][ T3541] SELinux: failed to load policy
[   31.066503][ T3557] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   31.090136][ T3557] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.19: mark_inode_dirty error
[   31.104486][ T3561] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.19: corrupted inode contents
[   31.133653][ T3571] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   31.150821][ T3414] IPVS: starting estimator thread 0...
[   31.186658][ T3575] sd 0:0:1:0: device reset
[   31.198953][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.200511][ T3569] loop2: detected capacity change from 0 to 512
[   31.267924][ T3579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.27'.
[   31.269552][ T3572] IPVS: using max 2640 ests per chain, 132000 per kthread
[   31.276832][ T3579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   31.295569][ T3569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   31.310594][ T3569] EXT4-fs (loop2): 1 truncate cleaned up
[   31.320035][ T3569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.369699][ T3584] netlink: 'syz.1.28': attribute type 1 has an invalid length.
[   31.412883][ T3535] syz.4.17 (3535) used greatest stack depth: 6952 bytes left
[   31.472225][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.513945][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'.
[   31.528705][ T3592] vxcan3: entered allmulticast mode
[   31.543886][ T3597] netlink: 'syz.4.32': attribute type 21 has an invalid length.
[   31.552097][ T3597] netlink: 132 bytes leftover after parsing attributes in process `syz.4.32'.
[   31.561093][ T3597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.32'.
[   31.587819][ T3595] loop1: detected capacity change from 0 to 1024
[   31.606972][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.618304][ T3595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   31.637638][ T3604] netlink: 'syz.4.38': attribute type 21 has an invalid length.
[   31.647755][ T3604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.38'.
[   31.656740][ T3604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'.
[   31.658936][ T3595] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   31.676520][ T3595] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   31.686970][ T3595] JBD2: no valid journal superblock found
[   31.686993][ T3608] netlink: 'syz.3.37': attribute type 1 has an invalid length.
[   31.692784][ T3595] EXT4-fs (loop1): Could not load journal inode
[   31.726059][ T3614] netlink: 'syz.0.41': attribute type 21 has an invalid length.
[   31.738396][ T3612] veth2: entered promiscuous mode
[   31.743649][ T3612] veth2: entered allmulticast mode
[   31.784450][ T3617] netlink: 'syz.4.42': attribute type 4 has an invalid length.
[   31.813788][ T3619] loop0: detected capacity change from 0 to 1024
[   31.833368][ T3619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   31.861171][ T3619] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   31.872220][ T3619] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   31.883740][ T3619] JBD2: no valid journal superblock found
[   31.889518][ T3619] EXT4-fs (loop0): Could not load journal inode
[   32.019708][ T3632] usb usb7: usbfs: process 3632 (syz.0.47) did not claim interface 0 before use
[   32.052533][ T3639] loop4: detected capacity change from 0 to 2048
[   32.103699][ T3627] capability: warning: `syz.4.46' uses deprecated v2 capabilities in a way that may be insecure
[   32.116016][ T3632] loop0: detected capacity change from 0 to 2048
[   32.138829][ T3654] netlink: 'syz.2.50': attribute type 21 has an invalid length.
[   32.160937][ T3297]  loop0: p1 < > p4
[   32.167038][ T3297] loop0: p4 size 8388608 extends beyond EOD, truncated
[   32.188431][ T3632]  loop0: p1 < > p4
[   32.195837][ T3632] loop0: p4 size 8388608 extends beyond EOD, truncated
[   32.220353][ T3663] vxcan3: entered allmulticast mode
[   32.390509][ T3681] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.429105][ T3683] loop0: detected capacity change from 0 to 164
[   32.437513][ T3683] iso9660: Bad value for 'block'
[   32.451767][ T3683] lo speed is unknown, defaulting to 1000
[   32.462281][ T3683] lo speed is unknown, defaulting to 1000
[   32.468575][ T3683] lo speed is unknown, defaulting to 1000
[   32.478316][ T3683] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   32.487414][ T3683] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   32.498319][ T3683] lo speed is unknown, defaulting to 1000
[   32.512721][ T3683] lo speed is unknown, defaulting to 1000
[   32.518996][ T3683] lo speed is unknown, defaulting to 1000
[   32.531562][ T3683] lo speed is unknown, defaulting to 1000
[   32.537696][ T3683] lo speed is unknown, defaulting to 1000
[   32.576917][ T3696] netlink: 'syz.0.61': attribute type 21 has an invalid length.
[   32.595969][ T3698] loop2: detected capacity change from 0 to 2048
[   32.603936][ T3698] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   32.625017][ T3694] loop3: detected capacity change from 0 to 2048
[   32.633571][ T3694] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   32.701925][ T3707] netlink: 'syz.2.65': attribute type 21 has an invalid length.
[   32.742439][ T3708] loop0: detected capacity change from 0 to 2048
[   32.800841][ T3620]  loop0: p1 < > p4
[   32.805455][ T3620] loop0: p4 size 8388608 extends beyond EOD, truncated
[   32.896242][ T3708]  loop0: p1 < > p4
[   32.905474][ T3708] loop0: p4 size 8388608 extends beyond EOD, truncated
[   33.347441][ T3733] loop2: detected capacity change from 0 to 1024
[   33.368933][ T3728] loop0: detected capacity change from 0 to 8192
[   33.375447][ T3733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.396241][ T3733] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   33.407280][ T3733] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   33.429534][ T3733] JBD2: no valid journal superblock found
[   33.435899][ T3733] EXT4-fs (loop2): Could not load journal inode
[   33.456190][ T3743] loop1: detected capacity change from 0 to 512
[   33.474385][ T3743] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   33.490232][ T3743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   33.498274][ T3743] System zones: 1-12
[   33.504688][ T3743] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.78: bg 0: block 337: padding at end of block bitmap is not set
[   33.543264][ T3743] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.566121][ T3743] EXT4-fs (loop1): 1 truncate cleaned up
[   33.572126][ T3747] loop0: detected capacity change from 0 to 2048
[   33.587295][ T3743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.616365][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.630287][ T3750] vxcan3: entered allmulticast mode
[   33.690820][ T3747]  loop0: p1 < > p4
[   33.704615][ T3747] loop0: p4 size 8388608 extends beyond EOD, truncated
[   33.742685][ T3740] SELinux: ebitmap: truncated map
[   33.748123][ T3740] SELinux: failed to load policy
[   33.794445][ T3761] loop4: detected capacity change from 0 to 1024
[   33.815753][ T3761] EXT4-fs: inline encryption not supported
[   33.821682][ T3761] EXT4-fs: Ignoring removed i_version option
[   33.843516][ T3761] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   33.872267][ T3761] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.83: lblock 2 mapped to illegal pblock 2 (length 1)
[   33.918452][ T3761] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.83: lblock 0 mapped to illegal pblock 48 (length 1)
[   33.974217][ T3761] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.83: Failed to acquire dquot type 0
[   34.010111][ T3761] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   34.021965][ T3761] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.83: mark_inode_dirty error
[   34.042991][ T3761] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   34.053490][ T3761] EXT4-fs (loop4): 1 orphan inode deleted
[   34.059900][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.073139][   T12] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   34.087376][ T3774] loop1: detected capacity change from 0 to 8192
[   34.095317][ T3761] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.83: lblock 0 mapped to illegal pblock 16 (length 1)
[   34.097510][   T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0
[   34.121303][ T3775] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.83: lblock 0 mapped to illegal pblock 16 (length 1)
[   34.136471][ T3761] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.83: lblock 0 mapped to illegal pblock 16 (length 1)
[   34.185781][ T3761] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.83: lblock 0 mapped to illegal pblock 16 (length 1)
[   34.201812][ T3775] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 16: comm syz.4.83: lblock 0 mapped to illegal pblock 16 (length 1)
[   34.216636][ T3761] IPv4: Oversized IP packet from 127.202.26.0
[   34.237920][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.247758][ T3305] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[   34.260806][ T3305] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem
[   34.270385][ T3305] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   34.382153][ T3790] vxcan3: entered allmulticast mode
[   34.396952][   T29] kauditd_printk_skb: 126 callbacks suppressed
[   34.396965][   T29] audit: type=1326 audit(1751050302.844:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3781 comm="syz.1.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cba97e929 code=0x0
[   34.432103][   T29] audit: type=1326 audit(1751050302.884:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.446859][ T3793] can0: slcan on ttyS3.
[   34.471390][   T29] audit: type=1326 audit(1751050302.884:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.494680][   T29] audit: type=1326 audit(1751050302.884:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.518051][   T29] audit: type=1326 audit(1751050302.884:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.541206][   T29] audit: type=1326 audit(1751050302.884:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.589068][   T29] audit: type=1326 audit(1751050302.944:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.612366][   T29] audit: type=1326 audit(1751050302.944:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3792 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   34.635791][ T3798] can0 (unregistered): slcan off ttyS3.
[   34.735493][   T29] audit: type=1400 audit(1751050303.184:252): avc:  denied  { create } for  pid=3817 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   34.766260][ T3820] __nla_validate_parse: 16 callbacks suppressed
[   34.766277][ T3820] netlink: 148 bytes leftover after parsing attributes in process `syz.0.99'.
[   34.775020][ T3815] loop1: detected capacity change from 0 to 8192
[   34.825416][ T3825] siw: device registration error -23
[   34.842323][ T3823] hub 8-0:1.0: USB hub found
[   34.850671][ T3823] hub 8-0:1.0: 8 ports detected
[   34.868293][ T3830] loop0: detected capacity change from 0 to 512
[   34.905907][ T3830] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.102: casefold flag without casefold feature
[   34.938159][   T29] audit: type=1326 audit(1751050303.374:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3836 comm="syz.2.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7efa4de929 code=0x7ffc0000
[   34.957188][ T3840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.103'.
[   34.970708][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   34.979852][ T3830] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.102: couldn't read orphan inode 15 (err -117)
[   34.993684][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.020608][ T3837] loop2: detected capacity change from 0 to 8192
[   35.062032][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.132338][ T3847] vxcan3: entered allmulticast mode
[   35.182957][ T3857] loop2: detected capacity change from 0 to 512
[   35.204117][ T3857] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   35.218209][ T3857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   35.240811][ T3857] System zones: 1-12
[   35.255367][ T3857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.108: bg 0: block 337: padding at end of block bitmap is not set
[   35.277382][ T3857] EXT4-fs (loop2): 1 truncate cleaned up
[   35.283626][ T3857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.309077][ T3869] loop1: detected capacity change from 0 to 2048
[   35.318873][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.323520][ T3868] xfrm0: entered promiscuous mode
[   35.332926][ T3868] xfrm0: entered allmulticast mode
[   35.365843][ T3297]  loop1: p1 < > p4
[   35.374445][ T3297] loop1: p4 size 8388608 extends beyond EOD, truncated
[   35.385417][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   35.405205][ T3875] loop0: detected capacity change from 0 to 1024
[   35.411905][ T3869]  loop1: p1 < > p4
[   35.415964][ T3877] loop2: detected capacity change from 0 to 512
[   35.416663][ T3869] loop1: p4 size 8388608 extends beyond EOD, truncated
[   35.458155][ T3873] FAULT_INJECTION: forcing a failure.
[   35.458155][ T3873] name failslab, interval 1, probability 0, space 0, times 0
[   35.471059][ T3873] CPU: 0 UID: 0 PID: 3873 Comm: syz.4.114 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   35.471132][ T3873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   35.471143][ T3873] Call Trace:
[   35.471148][ T3873]  <TASK>
[   35.471155][ T3873]  __dump_stack+0x1d/0x30
[   35.471175][ T3873]  dump_stack_lvl+0xe8/0x140
[   35.471194][ T3873]  dump_stack+0x15/0x1b
[   35.471211][ T3873]  should_fail_ex+0x265/0x280
[   35.471293][ T3873]  should_failslab+0x8c/0xb0
[   35.471316][ T3873]  kmem_cache_alloc_node_noprof+0x57/0x320
[   35.471401][ T3873]  ? __alloc_skb+0x101/0x320
[   35.471428][ T3873]  __alloc_skb+0x101/0x320
[   35.471527][ T3873]  __ip6_append_data+0x194b/0x23d0
[   35.471554][ T3873]  ? __pfx_raw6_getfrag+0x10/0x10
[   35.471599][ T3873]  ? xfrm_lookup_with_ifid+0x10c2/0x1360
[   35.471625][ T3873]  ? __rcu_read_unlock+0x4f/0x70
[   35.471647][ T3873]  ? __pfx_ip6_mtu+0x10/0x10
[   35.471701][ T3873]  ? ip6_mtu+0xf5/0x120
[   35.471723][ T3873]  ip6_append_data+0x13b/0x250
[   35.471749][ T3873]  ? __pfx_raw6_getfrag+0x10/0x10
[   35.471773][ T3873]  rawv6_sendmsg+0xdba/0xf70
[   35.471808][ T3873]  ? __pfx_rawv6_sendmsg+0x10/0x10
[   35.471832][ T3873]  inet_sendmsg+0xc2/0xd0
[   35.471859][ T3873]  __sock_sendmsg+0x102/0x180
[   35.471884][ T3873]  ____sys_sendmsg+0x345/0x4e0
[   35.471963][ T3873]  ___sys_sendmsg+0x17b/0x1d0
[   35.472014][ T3873]  __sys_sendmmsg+0x178/0x300
[   35.472049][ T3873]  __x64_sys_sendmmsg+0x57/0x70
[   35.472127][ T3873]  x64_sys_call+0x2f2f/0x2fb0
[   35.472159][ T3873]  do_syscall_64+0xd2/0x200
[   35.472177][ T3873]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   35.472257][ T3873]  ? clear_bhb_loop+0x40/0x90
[   35.472275][ T3873]  ? clear_bhb_loop+0x40/0x90
[   35.472347][ T3873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.472364][ T3873] RIP: 0033:0x7f84fc72e929
[   35.472378][ T3873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.472393][ T3873] RSP: 002b:00007f84fad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   35.472411][ T3873] RAX: ffffffffffffffda RBX: 00007f84fc955fa0 RCX: 00007f84fc72e929
[   35.472423][ T3873] RDX: 0000000000000001 RSI: 0000200000002b00 RDI: 0000000000000003
[   35.472504][ T3873] RBP: 00007f84fad97090 R08: 0000000000000000 R09: 0000000000000000
[   35.472514][ T3873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.472525][ T3873] R13: 0000000000000000 R14: 00007f84fc955fa0 R15: 00007ffd8f0bf178
[   35.472608][ T3873]  </TASK>
[   35.475192][ T3863] SELinux: ebitmap: truncated map
[   35.488156][ T3875] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   35.523047][ T3863] SELinux: failed to load policy
[   35.598670][ T3877] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.116: casefold flag without casefold feature
[   35.602540][ T3875] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   35.606827][ T3877] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.116: couldn't read orphan inode 15 (err -117)
[   35.609465][ T3875] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   35.646154][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   35.678612][ T3875] JBD2: no valid journal superblock found
[   35.764217][ T3887] 9pnet_fd: p9_fd_create_tcp (3887): problem connecting socket to 127.0.0.1
[   35.768858][ T3875] EXT4-fs (loop0): Could not load journal inode
[   35.824644][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.865290][ T3893] validate_nla: 1 callbacks suppressed
[   35.865313][ T3893] netlink: 'syz.0.123': attribute type 21 has an invalid length.
[   35.878715][ T3893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.123'.
[   35.887762][ T3893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'.
[   35.963439][ T3901] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   35.993939][ T3905] program syz.1.128 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.040133][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'.
[   36.073015][ T3914] loop1: detected capacity change from 0 to 128
[   36.099659][ T3917] loop0: detected capacity change from 0 to 512
[   36.117073][ T3918] loop2: detected capacity change from 0 to 2048
[   36.124706][ T3917] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.132: casefold flag without casefold feature
[   36.141630][ T3917] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.132: couldn't read orphan inode 15 (err -117)
[   36.158576][ T3917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.197507][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.200517][ T3620]  loop2: p1 < > p4
[   36.233252][ T3620] loop2: p4 size 8388608 extends beyond EOD, truncated
[   36.255792][ T3927] random: crng reseeded on system resumption
[   36.275612][ T3918]  loop2: p1 < > p4
[   36.280466][ T3918] loop2: p4 size 8388608 extends beyond EOD, truncated
[   36.375834][ T3934] process 'syz.0.136' launched './file0' with NULL argv: empty string added
[   36.397225][ T3937] netlink: 'syz.1.137': attribute type 21 has an invalid length.
[   36.407368][ T3910] SELinux: ebitmap: truncated map
[   36.414572][ T3937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.137'.
[   36.423623][ T3937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'.
[   36.431472][ T3910] SELinux: failed to load policy
[   36.519637][ T3945] loop1: detected capacity change from 0 to 512
[   36.534476][ T3949] FAULT_INJECTION: forcing a failure.
[   36.534476][ T3949] name failslab, interval 1, probability 0, space 0, times 0
[   36.547187][ T3949] CPU: 1 UID: 0 PID: 3949 Comm: syz.4.143 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   36.547215][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   36.547227][ T3949] Call Trace:
[   36.547233][ T3949]  <TASK>
[   36.547240][ T3949]  __dump_stack+0x1d/0x30
[   36.547317][ T3949]  dump_stack_lvl+0xe8/0x140
[   36.547336][ T3949]  dump_stack+0x15/0x1b
[   36.547352][ T3949]  should_fail_ex+0x265/0x280
[   36.547377][ T3949]  should_failslab+0x8c/0xb0
[   36.547474][ T3949]  __kmalloc_noprof+0xa5/0x3e0
[   36.547494][ T3949]  ? alloc_pipe_info+0x1c9/0x350
[   36.547512][ T3949]  alloc_pipe_info+0x1c9/0x350
[   36.547532][ T3949]  splice_direct_to_actor+0x592/0x680
[   36.547561][ T3949]  ? kstrtouint_from_user+0x9f/0xf0
[   36.547592][ T3949]  ? __pfx_direct_splice_actor+0x10/0x10
[   36.547694][ T3949]  ? __rcu_read_unlock+0x4f/0x70
[   36.547716][ T3949]  ? get_pid_task+0x96/0xd0
[   36.547731][ T3949]  ? avc_policy_seqno+0x15/0x30
[   36.547843][ T3949]  ? selinux_file_permission+0x1e4/0x320
[   36.547942][ T3949]  do_splice_direct+0xda/0x150
[   36.547975][ T3949]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   36.548057][ T3949]  do_sendfile+0x380/0x650
[   36.548137][ T3949]  __x64_sys_sendfile64+0xb8/0x150
[   36.548156][ T3949]  x64_sys_call+0xb39/0x2fb0
[   36.548173][ T3949]  do_syscall_64+0xd2/0x200
[   36.548191][ T3949]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   36.548214][ T3949]  ? clear_bhb_loop+0x40/0x90
[   36.548293][ T3949]  ? clear_bhb_loop+0x40/0x90
[   36.548334][ T3949]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   36.548356][ T3949] RIP: 0033:0x7f84fc72e929
[   36.548371][ T3949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   36.548430][ T3949] RSP: 002b:00007f84fad97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   36.548496][ T3949] RAX: ffffffffffffffda RBX: 00007f84fc955fa0 RCX: 00007f84fc72e929
[   36.548512][ T3949] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004
[   36.548524][ T3949] RBP: 00007f84fad97090 R08: 0000000000000000 R09: 0000000000000000
[   36.548536][ T3949] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001
[   36.548549][ T3949] R13: 0000000000000000 R14: 00007f84fc955fa0 R15: 00007ffd8f0bf178
[   36.548564][ T3949]  </TASK>
[   36.781974][ T3950] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20006
[   36.788854][ T3945] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   36.828314][ T3951] netlink: 'syz.2.140': attribute type 1 has an invalid length.
[   36.836550][ T3947] loop0: detected capacity change from 0 to 256
[   36.837344][ T3945] EXT4-fs (loop1): 1 truncate cleaned up
[   36.850965][ T3945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   36.865785][ T3947] sd 0:0:1:0: device reset
[   36.866921][ T3955] loop4: detected capacity change from 0 to 8192
[   36.871469][ T3947] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[   36.885428][ T3947] FAT-fs (loop0): Filesystem has been set read-only
[   37.001720][ T3961] loop0: detected capacity change from 0 to 164
[   37.012438][ T3961] iso9660: Bad value for 'block'
[   37.051418][ T3964] loop0: detected capacity change from 0 to 512
[   37.058447][ T3964] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   37.072312][ T3964] EXT4-fs (loop0): 1 truncate cleaned up
[   37.078448][ T3964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.103838][ T3967] FAULT_INJECTION: forcing a failure.
[   37.103838][ T3967] name failslab, interval 1, probability 0, space 0, times 0
[   37.116621][ T3967] CPU: 0 UID: 0 PID: 3967 Comm: syz.4.149 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   37.116651][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   37.116663][ T3967] Call Trace:
[   37.116670][ T3967]  <TASK>
[   37.116678][ T3967]  __dump_stack+0x1d/0x30
[   37.116701][ T3967]  dump_stack_lvl+0xe8/0x140
[   37.116720][ T3967]  dump_stack+0x15/0x1b
[   37.116738][ T3967]  should_fail_ex+0x265/0x280
[   37.116807][ T3967]  should_failslab+0x8c/0xb0
[   37.116831][ T3967]  kmem_cache_alloc_noprof+0x50/0x310
[   37.116855][ T3967]  ? skb_clone+0x151/0x1f0
[   37.116920][ T3967]  skb_clone+0x151/0x1f0
[   37.116939][ T3967]  __netlink_deliver_tap+0x2c9/0x500
[   37.117027][ T3967]  netlink_unicast+0x64c/0x670
[   37.117052][ T3967]  netlink_sendmsg+0x58b/0x6b0
[   37.117073][ T3967]  ? __pfx_netlink_sendmsg+0x10/0x10
[   37.117093][ T3967]  __sock_sendmsg+0x142/0x180
[   37.117160][ T3967]  ____sys_sendmsg+0x31e/0x4e0
[   37.117189][ T3967]  ___sys_sendmsg+0x17b/0x1d0
[   37.117227][ T3967]  __x64_sys_sendmsg+0xd4/0x160
[   37.117293][ T3967]  x64_sys_call+0x2999/0x2fb0
[   37.117311][ T3967]  do_syscall_64+0xd2/0x200
[   37.117330][ T3967]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   37.117356][ T3967]  ? clear_bhb_loop+0x40/0x90
[   37.117375][ T3967]  ? clear_bhb_loop+0x40/0x90
[   37.117417][ T3967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.117439][ T3967] RIP: 0033:0x7f84fc72e929
[   37.117456][ T3967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.117517][ T3967] RSP: 002b:00007f84fad97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   37.117536][ T3967] RAX: ffffffffffffffda RBX: 00007f84fc955fa0 RCX: 00007f84fc72e929
[   37.117549][ T3967] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   37.117562][ T3967] RBP: 00007f84fad97090 R08: 0000000000000000 R09: 0000000000000000
[   37.117575][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   37.117585][ T3967] R13: 0000000000000000 R14: 00007f84fc955fa0 R15: 00007ffd8f0bf178
[   37.117623][ T3967]  </TASK>
[   37.372484][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.454985][ T3987] loop4: detected capacity change from 0 to 512
[   37.515708][ T3987] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.156: casefold flag without casefold feature
[   37.556639][ T3987] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.156: couldn't read orphan inode 15 (err -117)
[   37.643156][ T3987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   37.675010][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.756243][ T3998] vxcan3: entered allmulticast mode
[   37.878834][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.971692][ T4008] loop4: detected capacity change from 0 to 512
[   37.978490][ T4008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   37.989991][ T4008] EXT4-fs (loop4): 1 truncate cleaned up
[   37.996720][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.019434][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.039442][ T4014] FAULT_INJECTION: forcing a failure.
[   38.039442][ T4014] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   38.052618][ T4014] CPU: 1 UID: 0 PID: 4014 Comm: syz.2.164 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   38.052646][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   38.052657][ T4014] Call Trace:
[   38.052664][ T4014]  <TASK>
[   38.052749][ T4014]  __dump_stack+0x1d/0x30
[   38.052771][ T4014]  dump_stack_lvl+0xe8/0x140
[   38.052794][ T4014]  dump_stack+0x15/0x1b
[   38.052811][ T4014]  should_fail_ex+0x265/0x280
[   38.052851][ T4014]  should_fail+0xb/0x20
[   38.052940][ T4014]  should_fail_usercopy+0x1a/0x20
[   38.052970][ T4014]  _copy_from_user+0x1c/0xb0
[   38.052987][ T4014]  memdup_user+0x5e/0xd0
[   38.053006][ T4014]  strndup_user+0x68/0xb0
[   38.053076][ T4014]  __se_sys_mount+0x4d/0x2e0
[   38.053095][ T4014]  ? fput+0x8f/0xc0
[   38.053119][ T4014]  ? ksys_write+0x192/0x1a0
[   38.053191][ T4014]  __x64_sys_mount+0x67/0x80
[   38.053210][ T4014]  x64_sys_call+0xd36/0x2fb0
[   38.053230][ T4014]  do_syscall_64+0xd2/0x200
[   38.053249][ T4014]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   38.053273][ T4014]  ? clear_bhb_loop+0x40/0x90
[   38.053359][ T4014]  ? clear_bhb_loop+0x40/0x90
[   38.053381][ T4014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.053456][ T4014] RIP: 0033:0x7f7efa4de929
[   38.053472][ T4014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.053488][ T4014] RSP: 002b:00007f7ef8b47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   38.053504][ T4014] RAX: ffffffffffffffda RBX: 00007f7efa705fa0 RCX: 00007f7efa4de929
[   38.053514][ T4014] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[   38.053571][ T4014] RBP: 00007f7ef8b47090 R08: 0000200000000240 R09: 0000000000000000
[   38.053583][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.053596][ T4014] R13: 0000000000000000 R14: 00007f7efa705fa0 R15: 00007ffc54d1a878
[   38.053614][ T4014]  </TASK>
[   38.054157][ T4015] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   38.142281][ T4017] UHID_CREATE from different security context by process 81 (syz.4.163), this is not allowed.
[   38.336464][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[   38.349432][ T4029] loop2: detected capacity change from 0 to 1024
[   38.360301][ T4029] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.370482][ T4029] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   38.381501][ T4029] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   38.393424][ T4029] JBD2: no valid journal superblock found
[   38.399223][ T4029] EXT4-fs (loop2): Could not load journal inode
[   38.425582][ T4033] FAULT_INJECTION: forcing a failure.
[   38.425582][ T4033] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.438715][ T4033] CPU: 0 UID: 0 PID: 4033 Comm: syz.2.169 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   38.438741][ T4033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   38.438750][ T4033] Call Trace:
[   38.438758][ T4033]  <TASK>
[   38.438766][ T4033]  __dump_stack+0x1d/0x30
[   38.438820][ T4033]  dump_stack_lvl+0xe8/0x140
[   38.438836][ T4033]  dump_stack+0x15/0x1b
[   38.438852][ T4033]  should_fail_ex+0x265/0x280
[   38.438879][ T4033]  should_fail+0xb/0x20
[   38.438949][ T4033]  should_fail_usercopy+0x1a/0x20
[   38.439056][ T4033]  _copy_from_user+0x1c/0xb0
[   38.439073][ T4033]  ipv6_flowlabel_opt+0xa3/0x1230
[   38.439107][ T4033]  ? selinux_file_open+0x2df/0x330
[   38.439131][ T4033]  ? __rcu_read_unlock+0x4f/0x70
[   38.439197][ T4033]  ? mntput_no_expire+0x6f/0x3c0
[   38.439223][ T4033]  ? mntput+0x4b/0x80
[   38.439242][ T4033]  ? _raw_spin_unlock_bh+0x36/0x40
[   38.439260][ T4033]  ? lock_sock_nested+0x112/0x140
[   38.439354][ T4033]  ? should_fail_ex+0xdb/0x280
[   38.439378][ T4033]  do_ipv6_setsockopt+0xc92/0x22e0
[   38.439400][ T4033]  ? kstrtoull+0x111/0x140
[   38.439421][ T4033]  ? __rcu_read_unlock+0x4f/0x70
[   38.439484][ T4033]  ? avc_has_perm_noaudit+0x1b1/0x200
[   38.439507][ T4033]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[   38.439547][ T4033]  ipv6_setsockopt+0x59/0x130
[   38.439570][ T4033]  rawv6_setsockopt+0x1d2/0x420
[   38.439595][ T4033]  sock_common_setsockopt+0x66/0x80
[   38.439620][ T4033]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   38.439742][ T4033]  __sys_setsockopt+0x181/0x200
[   38.439768][ T4033]  __x64_sys_setsockopt+0x64/0x80
[   38.439804][ T4033]  x64_sys_call+0x2bd5/0x2fb0
[   38.439888][ T4033]  do_syscall_64+0xd2/0x200
[   38.439905][ T4033]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   38.439973][ T4033]  ? clear_bhb_loop+0x40/0x90
[   38.439993][ T4033]  ? clear_bhb_loop+0x40/0x90
[   38.440011][ T4033]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.440032][ T4033] RIP: 0033:0x7f7efa4de929
[   38.440048][ T4033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.440089][ T4033] RSP: 002b:00007f7ef8b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   38.440104][ T4033] RAX: ffffffffffffffda RBX: 00007f7efa705fa0 RCX: 00007f7efa4de929
[   38.440116][ T4033] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[   38.440128][ T4033] RBP: 00007f7ef8b47090 R08: 0000000000000020 R09: 0000000000000000
[   38.440140][ T4033] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[   38.440151][ T4033] R13: 0000000000000000 R14: 00007f7efa705fa0 R15: 00007ffc54d1a878
[   38.440172][ T4033]  </TASK>
[   38.703937][ T4031] loop3: detected capacity change from 0 to 2048
[   38.710897][ T4031] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   38.733865][ T4036] loop2: detected capacity change from 0 to 512
[   38.755352][ T4036] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.170: casefold flag without casefold feature
[   38.782170][ T4036] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.170: couldn't read orphan inode 15 (err -117)
[   38.795130][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.827556][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.857109][ T4041] vxcan3: entered allmulticast mode
[   38.876376][ T4046] program syz.4.174 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.885716][ T4044] loop2: detected capacity change from 0 to 512
[   38.894157][ T4046] loop4: detected capacity change from 0 to 1024
[   38.908138][ T4044] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   38.928027][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   38.944691][ T4044] EXT4-fs (loop2): 1 truncate cleaned up
[   38.946658][ T4046] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   38.951583][ T4044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   38.971319][ T4046] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   38.987999][ T4046] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[   39.000430][ T4046] EXT4-fs (loop4): This should not happen!! Data will be lost
[   39.000430][ T4046] 
[   39.010111][ T4046] EXT4-fs (loop4): Total free blocks count 0
[   39.016206][ T4046] EXT4-fs (loop4): Free/Dirty block details
[   39.022246][ T4046] EXT4-fs (loop4): free_blocks=4293918720
[   39.028266][ T4046] EXT4-fs (loop4): dirty_blocks=80
[   39.033466][ T4046] EXT4-fs (loop4): Block reservation details
[   39.039452][ T4046] EXT4-fs (loop4): i_reserved_data_blocks=5
[   39.046442][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.066908][ T4056] loop1: detected capacity change from 0 to 512
[   39.078262][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   39.103237][ T4056] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.178: casefold flag without casefold feature
[   39.121114][ T4061] loop4: detected capacity change from 0 to 512
[   39.126702][ T4056] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.178: couldn't read orphan inode 15 (err -117)
[   39.135630][ T4061] EXT4-fs: Ignoring removed i_version option
[   39.146742][ T4056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.162480][ T4061] EXT4-fs (loop4): 1 truncate cleaned up
[   39.168548][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   39.243494][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.284689][ T4066] hub 8-0:1.0: USB hub found
[   39.284964][ T4061] veth1_macvtap: left promiscuous mode
[   39.295254][ T4066] hub 8-0:1.0: 8 ports detected
[   39.305638][ T4069] loop1: detected capacity change from 0 to 128
[   39.318173][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.336913][ T4069] netlink: 'syz.1.181': attribute type 10 has an invalid length.
[   39.348102][ T4069] team0: Port device dummy0 added
[   39.356965][ T4069] netlink: 'syz.1.181': attribute type 10 has an invalid length.
[   39.400354][   T29] kauditd_printk_skb: 196 callbacks suppressed
[   39.400372][   T29] audit: type=1400 audit(1751050307.783:450): avc:  denied  { setopt } for  pid=4068 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.426395][   T29] audit: type=1400 audit(1751050307.783:451): avc:  denied  { bind } for  pid=4068 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   39.446085][   T29] audit: type=1400 audit(1751050307.783:452): avc:  denied  { bind } for  pid=4068 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.563945][ T4069] team0: Port device dummy0 removed
[   39.596829][ T4078] loop0: detected capacity change from 0 to 164
[   39.645638][ T4078] iso9660: Bad value for 'block'
[   39.654793][ T4072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4072 comm=syz.1.181
[   39.690862][   T29] audit: type=1400 audit(1751050308.003:453): avc:  denied  { write } for  pid=4073 comm="syz.2.184" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.712769][ T4075] loop2: detected capacity change from 0 to 1024
[   39.714012][   T29] audit: type=1400 audit(1751050308.003:454): avc:  denied  { ioctl } for  pid=4073 comm="syz.2.184" path="/dev/input/event2" dev="devtmpfs" ino=249 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   39.748691][ T4069] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   39.785606][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   39.815468][ T4084] loop0: detected capacity change from 0 to 512
[   39.831126][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   39.841376][ T4084] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   39.846911][ T4081] loop4: detected capacity change from 0 to 8192
[   39.852241][ T4075] EXT4-fs (loop2): invalid journal inode
[   39.869232][ T4075] loop2: detected capacity change from 0 to 1024
[   39.869425][ T4084] EXT4-fs (loop0): 1 truncate cleaned up
[   39.883560][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   39.894429][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   39.906990][   T29] audit: type=1326 audit(1751050308.353:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   39.930531][ T4075] EXT4-fs (loop2): invalid journal inode
[   39.946119][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.961010][   T29] audit: type=1326 audit(1751050308.353:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   39.984435][   T29] audit: type=1326 audit(1751050308.353:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   40.013114][   T29] audit: type=1326 audit(1751050308.353:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   40.036352][   T29] audit: type=1326 audit(1751050308.353:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.4.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   40.143994][ T4075] loop2: detected capacity change from 0 to 1024
[   40.197563][ T4096] loop1: detected capacity change from 0 to 1024
[   40.216424][ T4096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.189'.
[   40.261181][ T4093] loop3: detected capacity change from 0 to 8192
[   40.274363][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   40.287353][ T4096] loop1: detected capacity change from 0 to 512
[   40.294021][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   40.331015][ T4096] EXT4-fs: Ignoring removed orlov option
[   40.353861][ T4075] EXT4-fs (loop2): invalid journal inode
[   40.363685][ T4096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.390341][ T4075] loop2: detected capacity change from 0 to 1024
[   40.400819][ T4096] EXT4-fs (loop1): orphan cleanup on readonly fs
[   40.407596][ T4096] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.189: bg 0: block 248: padding at end of block bitmap is not set
[   40.425297][ T4096] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.189: Failed to acquire dquot type 1
[   40.441627][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   40.451229][ T4101] loop3: detected capacity change from 0 to 512
[   40.458588][ T4096] EXT4-fs (loop1): 1 truncate cleaned up
[   40.540556][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   40.571179][ T4096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   40.600620][ T4101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   40.605762][ T4075] EXT4-fs (loop2): invalid journal inode
[   40.621513][ T4096] EXT4-fs: Ignoring removed orlov option
[   40.627745][ T4096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   40.643645][ T4096] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   40.663080][ T4101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   40.667441][ T4075] loop2: detected capacity change from 0 to 1024
[   40.682730][ T4096] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.189: Abort forced by user
[   40.696437][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   40.698534][ T4101] System zones: 1-12
[   40.710711][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   40.721093][ T4096] EXT4-fs (loop1): Remounting filesystem read-only
[   40.727656][ T4096] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   40.736123][ T4096] ext4 filesystem being remounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   40.736254][ T4075] EXT4-fs (loop2): invalid journal inode
[   40.757232][ T4101] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.191: bg 0: block 337: padding at end of block bitmap is not set
[   40.786796][ T4105] FAULT_INJECTION: forcing a failure.
[   40.786796][ T4105] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.799928][ T4105] CPU: 1 UID: 0 PID: 4105 Comm: syz.4.192 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   40.799985][ T4105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.799995][ T4105] Call Trace:
[   40.800000][ T4105]  <TASK>
[   40.800007][ T4105]  __dump_stack+0x1d/0x30
[   40.800026][ T4105]  dump_stack_lvl+0xe8/0x140
[   40.800042][ T4105]  dump_stack+0x15/0x1b
[   40.800188][ T4105]  should_fail_ex+0x265/0x280
[   40.800286][ T4105]  should_fail+0xb/0x20
[   40.800314][ T4105]  should_fail_usercopy+0x1a/0x20
[   40.800347][ T4105]  _copy_from_user+0x1c/0xb0
[   40.800420][ T4105]  ___sys_sendmsg+0xc1/0x1d0
[   40.800466][ T4105]  __x64_sys_sendmsg+0xd4/0x160
[   40.800495][ T4105]  x64_sys_call+0x2999/0x2fb0
[   40.800513][ T4105]  do_syscall_64+0xd2/0x200
[   40.800582][ T4105]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.800607][ T4105]  ? clear_bhb_loop+0x40/0x90
[   40.800629][ T4105]  ? clear_bhb_loop+0x40/0x90
[   40.800646][ T4105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.800664][ T4105] RIP: 0033:0x7f84fc72e929
[   40.800760][ T4105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.800775][ T4105] RSP: 002b:00007f84fad97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   40.800797][ T4105] RAX: ffffffffffffffda RBX: 00007f84fc955fa0 RCX: 00007f84fc72e929
[   40.800807][ T4105] RDX: 0000000000000800 RSI: 0000200000000080 RDI: 0000000000000006
[   40.800848][ T4105] RBP: 00007f84fad97090 R08: 0000000000000000 R09: 0000000000000000
[   40.800860][ T4105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.800872][ T4105] R13: 0000000000000000 R14: 00007f84fc955fa0 R15: 00007ffd8f0bf178
[   40.800887][ T4105]  </TASK>
[   40.982453][ T4075] loop2: detected capacity change from 0 to 1024
[   40.987360][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.998044][ T4101] EXT4-fs (loop3): 1 truncate cleaned up
[   41.004249][ T4101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.017749][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.027885][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.038597][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.047109][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.096270][ T4108] Zero length message leads to an empty skb
[   41.112160][ T4075] loop2: detected capacity change from 0 to 1024
[   41.129012][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.144990][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.155486][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.177906][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.187090][ T4075] loop2: detected capacity change from 0 to 1024
[   41.202487][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.220048][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.241309][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.258645][ T4075] loop2: detected capacity change from 0 to 1024
[   41.267703][ T4117] loop3: detected capacity change from 0 to 128
[   41.275308][ T4114] netlink: 'syz.0.194': attribute type 1 has an invalid length.
[   41.289732][ T4117] Cannot find add_set index 0 as target
[   41.296037][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.308907][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.322778][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.334062][ T4120] loop1: detected capacity change from 0 to 2048
[   41.367010][ T4075] loop2: detected capacity change from 0 to 1024
[   41.378128][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.388668][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.388749][ T3620]  loop1: p1 < > p4
[   41.406457][ T3620] loop1: p4 size 8388608 extends beyond EOD, truncated
[   41.407667][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.422300][ T4120]  loop1: p1 < > p4
[   41.427542][ T4120] loop1: p4 size 8388608 extends beyond EOD, truncated
[   41.441632][ T4075] loop2: detected capacity change from 0 to 1024
[   41.481146][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.492323][ T4128] netlink: 10 bytes leftover after parsing attributes in process `syz.3.199'.
[   41.502556][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.518218][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.540894][ T4075] loop2: detected capacity change from 0 to 1024
[   41.548786][ T4119] SELinux: ebitmap: truncated map
[   41.558395][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.571028][ T4119] SELinux: failed to load policy
[   41.587654][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.618249][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.654306][ T4075] loop2: detected capacity change from 0 to 1024
[   41.679871][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.689734][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.704950][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.726675][ T4149] netlink: 'syz.1.201': attribute type 21 has an invalid length.
[   41.735235][ T4149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.201'.
[   41.744302][ T4149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[   41.757287][ T4075] loop2: detected capacity change from 0 to 1024
[   41.777024][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.793754][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.804410][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.831630][ T4075] loop2: detected capacity change from 0 to 1024
[   41.840960][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.861017][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.879405][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.898943][ T4155] loop3: detected capacity change from 0 to 512
[   41.907857][ T4075] loop2: detected capacity change from 0 to 1024
[   41.910445][ T4156] netlink: 'syz.1.202': attribute type 1 has an invalid length.
[   41.922209][ T4155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   41.938008][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   41.948977][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   41.961503][ T4075] EXT4-fs (loop2): invalid journal inode
[   41.970111][ T4155] EXT4-fs (loop3): 1 truncate cleaned up
[   41.980768][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.015743][ T4075] loop2: detected capacity change from 0 to 1024
[   42.037623][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.051612][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.065697][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.081089][ T4075] loop2: detected capacity change from 0 to 1024
[   42.081498][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.081536][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.082097][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.122600][ T4075] loop2: detected capacity change from 0 to 1024
[   42.123048][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.123116][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.123711][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.190153][ T4075] loop2: detected capacity change from 0 to 1024
[   42.200406][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.200454][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.201010][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.290919][ T4075] loop2: detected capacity change from 0 to 1024
[   42.292410][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.292447][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.299878][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.327668][ T4075] loop2: detected capacity change from 0 to 1024
[   42.334112][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.334153][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.334781][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.380805][ T4075] loop2: detected capacity change from 0 to 1024
[   42.388134][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.399730][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.410115][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.434224][ T4075] loop2: detected capacity change from 0 to 1024
[   42.446203][ T4075] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[   42.463781][ T4075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   42.478763][ T4075] EXT4-fs (loop2): invalid journal inode
[   42.505449][ T4165] vxcan3: entered allmulticast mode
[   42.518217][ T4168] loop4: detected capacity change from 0 to 512
[   42.526987][ T4168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   42.545405][ T4168] EXT4-fs (loop4): 1 truncate cleaned up
[   42.556840][ T4168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.792336][ T4178] 9pnet_fd: Insufficient options for proto=fd
[   42.846269][ T4183] netlink: 'syz.1.213': attribute type 21 has an invalid length.
[   42.854324][ T4183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.213'.
[   42.863386][ T4183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'.
[   43.242139][ T4186] xt_CT: No such helper "snmp_trap"
[   43.288625][ T4192] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   43.308382][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.355591][ T4194] loop3: detected capacity change from 0 to 512
[   43.380886][ T4194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   43.420682][ T4194] EXT4-fs (loop3): 1 truncate cleaned up
[   43.426798][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.527557][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.583889][ T4201] loop1: detected capacity change from 0 to 512
[   43.594608][ T4201] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.218: casefold flag without casefold feature
[   43.607531][ T4201] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.218: couldn't read orphan inode 15 (err -117)
[   43.645383][ T4203] program syz.0.216 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   43.649032][ T4201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.667673][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.685040][ T4205] loop2: detected capacity change from 0 to 128
[   43.737071][ T4211] 9pnet_fd: p9_fd_create_tcp (4211): problem connecting socket to 127.0.0.1
[   43.790228][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.827956][ T4207] loop3: detected capacity change from 0 to 2048
[   43.843093][ T4216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'.
[   43.852293][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'.
[   43.904053][ T3297]  loop3: p1 < > p4
[   43.913403][ T3297] loop3: p4 size 8388608 extends beyond EOD, truncated
[   43.929822][ T4220] netlink: 'syz.2.224': attribute type 21 has an invalid length.
[   43.938504][ T4218] FAULT_INJECTION: forcing a failure.
[   43.938504][ T4218] name failslab, interval 1, probability 0, space 0, times 0
[   43.951173][ T4218] CPU: 1 UID: 0 PID: 4218 Comm: syz.1.222 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   43.951201][ T4218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   43.951212][ T4218] Call Trace:
[   43.951218][ T4218]  <TASK>
[   43.951224][ T4218]  __dump_stack+0x1d/0x30
[   43.951323][ T4218]  dump_stack_lvl+0xe8/0x140
[   43.951343][ T4218]  dump_stack+0x15/0x1b
[   43.951409][ T4218]  should_fail_ex+0x265/0x280
[   43.951440][ T4218]  should_failslab+0x8c/0xb0
[   43.951460][ T4218]  kmem_cache_alloc_node_noprof+0x57/0x320
[   43.951510][ T4218]  ? __alloc_skb+0x101/0x320
[   43.951540][ T4218]  __alloc_skb+0x101/0x320
[   43.951566][ T4218]  netlink_alloc_large_skb+0xba/0xf0
[   43.951631][ T4218]  netlink_sendmsg+0x3cf/0x6b0
[   43.951651][ T4218]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.951671][ T4218]  __sock_sendmsg+0x142/0x180
[   43.951691][ T4218]  ____sys_sendmsg+0x31e/0x4e0
[   43.951728][ T4218]  ___sys_sendmsg+0x17b/0x1d0
[   43.951801][ T4218]  __x64_sys_sendmsg+0xd4/0x160
[   43.951835][ T4218]  x64_sys_call+0x2999/0x2fb0
[   43.951856][ T4218]  do_syscall_64+0xd2/0x200
[   43.951908][ T4218]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.951935][ T4218]  ? clear_bhb_loop+0x40/0x90
[   43.951956][ T4218]  ? clear_bhb_loop+0x40/0x90
[   43.951978][ T4218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.952009][ T4218] RIP: 0033:0x7f6cba97e929
[   43.952035][ T4218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.952048][ T4218] RSP: 002b:00007f6cb8fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   43.952067][ T4218] RAX: ffffffffffffffda RBX: 00007f6cbaba5fa0 RCX: 00007f6cba97e929
[   43.952138][ T4218] RDX: 000000000000c010 RSI: 00002000000000c0 RDI: 0000000000000003
[   43.952151][ T4218] RBP: 00007f6cb8fe7090 R08: 0000000000000000 R09: 0000000000000000
[   43.952163][ T4218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.952175][ T4218] R13: 0000000000000000 R14: 00007f6cbaba5fa0 R15: 00007ffdee4ee568
[   43.952190][ T4218]  </TASK>
[   43.954488][ T4207]  loop3: p1 < > p4
[   43.955758][ T4220] netlink: 132 bytes leftover after parsing attributes in process `syz.2.224'.
[   43.998378][ T4207] loop3: p4 size 8388608 extends beyond EOD, 
[   44.000948][ T4220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.224'.
[   44.099766][ T4224] loop2: detected capacity change from 0 to 512
[   44.109759][ T4207] truncated
[   44.204820][ T4224] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   44.218878][ T4224] EXT4-fs (loop2): 1 truncate cleaned up
[   44.227648][ T4225] loop1: detected capacity change from 0 to 512
[   44.227705][ T4224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.244547][ T4225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   44.300275][ T3606] udevd[3606]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   44.303445][ T3620] udevd[3620]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   44.340579][ T4225] EXT4-fs (loop1): 1 truncate cleaned up
[   44.353666][ T4225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.494894][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   44.494909][   T29] audit: type=1400 audit(1751050312.943:497): avc:  denied  { write } for  pid=4231 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   44.544211][   T29] audit: type=1400 audit(1751050312.973:498): avc:  denied  { connect } for  pid=4231 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   44.563878][   T29] audit: type=1404 audit(1751050312.973:499): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   44.578823][   T29] audit: type=1404 audit(1751050312.973:500): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[   44.593740][   T29] audit: type=1400 audit(1751050312.973:501): avc:  denied  { create } for  pid=4231 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.614173][   T29] audit: type=1400 audit(1751050312.973:502): avc:  denied  { write } for  pid=4231 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.634391][   T29] audit: type=1400 audit(1751050312.973:503): avc:  denied  { read } for  pid=4231 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   44.638398][ T4247] loop0: detected capacity change from 0 to 128
[   44.656214][   T29] audit: type=1400 audit(1751050312.993:504): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   44.684927][   T29] audit: type=1400 audit(1751050312.993:505): avc:  denied  { open } for  pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   44.704772][ T4232] lo speed is unknown, defaulting to 1000
[   44.709046][   T29] audit: type=1400 audit(1751050312.993:506): avc:  denied  { ioctl } for  pid=3309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   45.006170][ T4251] veth4: entered promiscuous mode
[   45.011432][ T4251] veth4: entered allmulticast mode
[   45.087865][ T4224] syz.2.226 (4224) used greatest stack depth: 6064 bytes left
[   45.113403][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.127054][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.216764][ T4263] loop1: detected capacity change from 0 to 512
[   45.245280][ T4263] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   45.269239][ T4263] EXT4-fs (loop1): 1 truncate cleaned up
[   45.282390][ T4263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.380176][ T4275] 9pnet_fd: p9_fd_create_tcp (4275): problem connecting socket to 127.0.0.1
[   45.422564][ T4280] netlink: 'syz.4.246': attribute type 1 has an invalid length.
[   45.453923][ T4278] loop0: detected capacity change from 0 to 2048
[   45.468147][ T4282] can0: slcan on ttyS3.
[   45.490858][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.501119][ T4282] can0 (unregistered): slcan off ttyS3.
[   45.532948][ T4285] loop4: detected capacity change from 0 to 1024
[   45.541547][ T4285] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   45.552590][ T4285] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   45.563575][ T4285] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   45.587892][ T4286] loop1: detected capacity change from 0 to 2048
[   45.592217][ T4285] JBD2: no valid journal superblock found
[   45.600029][ T4285] EXT4-fs (loop4): Could not load journal inode
[   45.618760][ T4286] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   45.625439][ T4290] loop0: detected capacity change from 0 to 512
[   45.635762][ T4290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.680293][ T4290] EXT4-fs (loop0): 1 truncate cleaned up
[   45.683960][ T4295] netlink: 'syz.4.253': attribute type 1 has an invalid length.
[   45.694323][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.822321][ T4299] loop4: detected capacity change from 0 to 512
[   46.139364][ T4313] 9pnet_fd: p9_fd_create_tcp (4313): problem connecting socket to 127.0.0.1
[   46.202406][ T4319] loop3: detected capacity change from 0 to 512
[   46.220754][ T4319] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   46.335859][ T4326] loop1: detected capacity change from 0 to 2048
[   46.350586][ T4326] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   46.380669][ T4319] EXT4-fs (loop3): 1 truncate cleaned up
[   46.433946][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.704942][ T4330] loop1: detected capacity change from 0 to 8192
[   46.713859][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.740402][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.849622][ T4336] Illegal XDP return value 4294967294 on prog  (id 145) dev N/A, expect packet loss!
[   46.924888][ T4340] vxcan3: entered allmulticast mode
[   46.936213][ T4342] 9pnet_fd: p9_fd_create_tcp (4342): problem connecting socket to 127.0.0.1
[   46.973865][ T4344] netlink: 'syz.0.269': attribute type 21 has an invalid length.
[   46.974222][ T4348] 9pnet_fd: p9_fd_create_tcp (4348): problem connecting socket to 127.0.0.1
[   46.981937][ T4344] __nla_validate_parse: 3 callbacks suppressed
[   46.981951][ T4344] netlink: 132 bytes leftover after parsing attributes in process `syz.0.269'.
[   47.005759][ T4344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.269'.
[   47.050172][ T4354] loop2: detected capacity change from 0 to 512
[   47.060792][ T4354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   47.088226][ T4357] loop3: detected capacity change from 0 to 512
[   47.113895][ T4357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   47.155481][ T4359] netlink: 24 bytes leftover after parsing attributes in process `syz.0.276'.
[   47.210748][ T4354] EXT4-fs (loop2): 1 truncate cleaned up
[   47.216962][ T4354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.230628][ T4357] EXT4-fs (loop3): 1 truncate cleaned up
[   47.235075][ T4365] loop0: detected capacity change from 0 to 512
[   47.236729][ T4357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.253831][ T4365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   47.279709][ T4365] EXT4-fs (loop0): 1 truncate cleaned up
[   47.303300][ T4365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.390689][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.829848][ T4354] syz.2.274 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[   47.843979][ T4354] CPU: 0 UID: 0 PID: 4354 Comm: syz.2.274 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   47.844006][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   47.844019][ T4354] Call Trace:
[   47.844058][ T4354]  <TASK>
[   47.844073][ T4354]  __dump_stack+0x1d/0x30
[   47.844148][ T4354]  dump_stack_lvl+0xe8/0x140
[   47.844170][ T4354]  dump_stack+0x15/0x1b
[   47.844187][ T4354]  dump_header+0x81/0x220
[   47.844215][ T4354]  oom_kill_process+0x334/0x3f0
[   47.844319][ T4354]  out_of_memory+0x979/0xb80
[   47.844346][ T4354]  try_charge_memcg+0x5e6/0x9e0
[   47.844370][ T4354]  obj_cgroup_charge_pages+0xa6/0x150
[   47.844399][ T4354]  __memcg_kmem_charge_page+0x9f/0x170
[   47.844450][ T4354]  __alloc_frozen_pages_noprof+0x188/0x360
[   47.844490][ T4354]  alloc_pages_mpol+0xb3/0x250
[   47.844525][ T4354]  alloc_pages_noprof+0x90/0x130
[   47.844604][ T4354]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   47.844644][ T4354]  __kvmalloc_node_noprof+0x30f/0x4e0
[   47.844672][ T4354]  ? ip_set_alloc+0x1f/0x30
[   47.844701][ T4354]  ? ip_set_alloc+0x1f/0x30
[   47.844819][ T4354]  ? __kmalloc_cache_noprof+0x189/0x320
[   47.844849][ T4354]  ip_set_alloc+0x1f/0x30
[   47.844879][ T4354]  hash_netiface_create+0x282/0x740
[   47.844909][ T4354]  ? __pfx_hash_netiface_create+0x10/0x10
[   47.844976][ T4354]  ip_set_create+0x3c9/0x960
[   47.845020][ T4354]  ? __nla_parse+0x40/0x60
[   47.845041][ T4354]  nfnetlink_rcv_msg+0x4c6/0x590
[   47.845096][ T4354]  ? selinux_capable+0x1f9/0x270
[   47.845176][ T4354]  netlink_rcv_skb+0x120/0x220
[   47.845209][ T4354]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   47.845274][ T4354]  nfnetlink_rcv+0x16b/0x1690
[   47.845295][ T4354]  ? __kfree_skb+0x109/0x150
[   47.845322][ T4354]  ? nlmon_xmit+0x4f/0x60
[   47.845423][ T4354]  ? consume_skb+0x49/0x150
[   47.845510][ T4354]  ? nlmon_xmit+0x4f/0x60
[   47.845664][ T4354]  ? dev_hard_start_xmit+0x3b0/0x3e0
[   47.845695][ T4354]  ? __dev_queue_xmit+0x11c0/0x1fb0
[   47.845772][ T4354]  ? __dev_queue_xmit+0x182/0x1fb0
[   47.845800][ T4354]  ? ref_tracker_free+0x37d/0x3e0
[   47.845876][ T4354]  ? __netlink_deliver_tap+0x4dc/0x500
[   47.845989][ T4354]  netlink_unicast+0x5a1/0x670
[   47.846020][ T4354]  netlink_sendmsg+0x58b/0x6b0
[   47.846043][ T4354]  ? __pfx_netlink_sendmsg+0x10/0x10
[   47.846113][ T4354]  __sock_sendmsg+0x142/0x180
[   47.846134][ T4354]  ____sys_sendmsg+0x31e/0x4e0
[   47.846169][ T4354]  ___sys_sendmsg+0x17b/0x1d0
[   47.846239][ T4354]  __x64_sys_sendmsg+0xd4/0x160
[   47.846320][ T4354]  x64_sys_call+0x2999/0x2fb0
[   47.846343][ T4354]  do_syscall_64+0xd2/0x200
[   47.846361][ T4354]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.846383][ T4354]  ? clear_bhb_loop+0x40/0x90
[   47.846401][ T4354]  ? clear_bhb_loop+0x40/0x90
[   47.846446][ T4354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.846469][ T4354] RIP: 0033:0x7f7efa4de929
[   47.846486][ T4354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.846504][ T4354] RSP: 002b:00007f7ef8b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.846524][ T4354] RAX: ffffffffffffffda RBX: 00007f7efa705fa0 RCX: 00007f7efa4de929
[   47.846549][ T4354] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004
[   47.846562][ T4354] RBP: 00007f7efa560b39 R08: 0000000000000000 R09: 0000000000000000
[   47.846577][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   47.846589][ T4354] R13: 0000000000000000 R14: 00007f7efa705fa0 R15: 00007ffc54d1a878
[   47.846605][ T4354]  </TASK>
[   47.846611][ T4354] memory: usage 307200kB, limit 307200kB, failcnt 153
[   48.199187][ T4354] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0
[   48.207242][ T4354] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[   48.214552][ T4354] Memory cgroup stats for /syz2:
[   48.227337][ T4374] xt_CT: No such helper "snmp_trap"
[   48.227344][ T4354] cache 4096
[   48.227353][ T4354] rss 0
[   48.227360][ T4354] shmem 0
[   48.246485][ T4354] mapped_file 0
[   48.249952][ T4354] dirty 0
[   48.252935][ T4354] writeback 0
[   48.256277][ T4354] workingset_refault_anon 118
[   48.261084][ T4354] workingset_refault_file 224
[   48.265782][ T4354] swap 446464
[   48.269088][ T4354] swapcached 8192
[   48.272804][ T4354] pgpgin 24210
[   48.276183][ T4354] pgpgout 24207
[   48.279695][ T4354] pgfault 36323
[   48.281478][ T4379] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   48.283164][ T4354] pgmajfault 64
[   48.297392][ T4354] inactive_anon 8192
[   48.301286][ T4354] active_anon 0
[   48.304778][ T4354] inactive_file 4096
[   48.308679][ T4354] active_file 0
[   48.312276][ T4354] unevictable 0
[   48.315745][ T4354] hierarchical_memory_limit 314572800
[   48.321193][ T4354] hierarchical_memsw_limit 9223372036854771712
[   48.327388][ T4354] total_cache 4096
[   48.331115][ T4354] total_rss 0
[   48.334467][ T4354] total_shmem 0
[   48.337920][ T4354] total_mapped_file 0
[   48.341979][ T4354] total_dirty 0
[   48.345560][ T4354] total_writeback 0
[   48.349376][ T4354] total_workingset_refault_anon 118
[   48.354627][ T4354] total_workingset_refault_file 224
[   48.359923][ T4354] total_swap 446464
[   48.363768][ T4354] total_swapcached 8192
[   48.367928][ T4354] total_pgpgin 24210
[   48.371850][ T4354] total_pgpgout 24207
[   48.375866][ T4354] total_pgfault 36323
[   48.379888][ T4354] total_pgmajfault 64
[   48.383944][ T4354] total_inactive_anon 8192
[   48.388364][ T4354] total_active_anon 0
[   48.392413][ T4354] total_inactive_file 4096
[   48.396955][ T4354] total_active_file 0
[   48.400931][ T4354] total_unevictable 0
[   48.405000][ T4354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.274,pid=4351,uid=0
[   48.419661][ T4354] Memory cgroup out of memory: Killed process 4351 (syz.2.274) total-vm:95668kB, anon-rss:1064kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[   48.615332][ T4396] loop1: detected capacity change from 0 to 164
[   48.655495][ T4396] iso9660: Bad value for 'block'
[   48.661010][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.679561][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.685987][ T4393] siw: device registration error -23
[   48.873245][ T4410] loop3: detected capacity change from 0 to 512
[   48.977419][ T4410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   49.098366][ T4410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   49.106583][ T4410] System zones: 1-12
[   49.112319][ T4410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.291: bg 0: block 337: padding at end of block bitmap is not set
[   49.127015][ T4416] loop0: detected capacity change from 0 to 1024
[   49.140500][ T4410] EXT4-fs (loop3): 1 truncate cleaned up
[   49.146814][ T4410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.163410][ T4416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.183964][ T4416] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   49.195017][ T4416] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   49.210974][ T4416] JBD2: no valid journal superblock found
[   49.216773][ T4416] EXT4-fs (loop0): Could not load journal inode
[   49.224099][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.328787][ T4430] loop2: detected capacity change from 0 to 512
[   49.497845][ T4430] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   49.585689][ T4431] xt_CT: No such helper "snmp_trap"
[   49.686135][ T4430] EXT4-fs (loop2): 1 truncate cleaned up
[   49.692282][ T4430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.713663][   T29] kauditd_printk_skb: 120 callbacks suppressed
[   49.713758][   T29] audit: type=1400 audit(1751050318.162:627): avc:  denied  { sys_module } for  pid=4443 comm="syz.0.304" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   49.747527][   T29] audit: type=1400 audit(1751050318.172:628): avc:  denied  { write } for  pid=4443 comm="syz.0.304" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   49.784247][ T4450] loop0: detected capacity change from 0 to 2048
[   49.788182][ T4448] can0: slcan on ttyS3.
[   49.791323][   T29] audit: type=1326 audit(1751050318.222:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.818049][   T29] audit: type=1326 audit(1751050318.222:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.841381][   T29] audit: type=1326 audit(1751050318.222:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.864643][   T29] audit: type=1326 audit(1751050318.232:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.887955][   T29] audit: type=1326 audit(1751050318.232:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.911189][   T29] audit: type=1326 audit(1751050318.232:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84fc72e929 code=0x7ffc0000
[   49.956413][   T29] audit: type=1400 audit(1751050318.262:635): avc:  denied  { search } for  pid=3034 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   49.977795][   T29] audit: type=1400 audit(1751050318.262:636): avc:  denied  { search } for  pid=3034 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   50.015031][ T4454] 9pnet_fd: Insufficient options for proto=fd
[   50.024427][ T3620]  loop0: p1 < > p4
[   50.035813][ T4448] can0 (unregistered): slcan off ttyS3.
[   50.049736][ T3620] loop0: p4 size 8388608 extends beyond EOD, truncated
[   50.087005][ T4462] loop3: detected capacity change from 0 to 512
[   50.117153][ T4461] ipvlan0: entered promiscuous mode
[   50.125984][ T4450]  loop0: p1 < > p4
[   50.131427][ T4450] loop0: p4 size 8388608 extends beyond EOD, truncated
[   50.139098][ T4462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   50.149100][ T4458] loop4: detected capacity change from 0 to 1024
[   50.162775][ T4461] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   50.178753][ T4462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   50.192830][ T4444] SELinux: ebitmap: truncated map
[   50.219369][ T2995]  loop0: p1 < > p4
[   50.223495][ T4458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.229486][ T4462] System zones: 1-12
[   50.236943][ T4461] 9pnet_fd: Insufficient options for proto=fd
[   50.239690][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated
[   50.246994][ T4444] SELinux: failed to load policy
[   50.263913][ T4462] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.309: bg 0: block 337: padding at end of block bitmap is not set
[   50.290260][ T4458] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.380769][ T4458] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   50.420038][ T4462] EXT4-fs (loop3): 1 truncate cleaned up
[   50.425992][ T4458] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   50.426414][ T4462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.438562][ T4458] EXT4-fs (loop4): This should not happen!! Data will be lost
[   50.438562][ T4458] 
[   50.460664][ T4458] EXT4-fs (loop4): Total free blocks count 0
[   50.466813][ T4458] EXT4-fs (loop4): Free/Dirty block details
[   50.472856][ T4458] EXT4-fs (loop4): free_blocks=4293918720
[   50.478579][ T4458] EXT4-fs (loop4): dirty_blocks=64
[   50.483792][ T4458] EXT4-fs (loop4): Block reservation details
[   50.489861][ T4458] EXT4-fs (loop4): i_reserved_data_blocks=4
[   50.558738][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.561479][ T4492] loop0: detected capacity change from 0 to 2048
[   50.591995][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.606217][ T4492] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[   50.708582][ T4498] loop2: detected capacity change from 0 to 8192
[   50.763198][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.785715][ T4515] can0: slcan on ttyS3.
[   50.791273][ T4517] 9pnet_fd: Insufficient options for proto=fd
[   50.861804][ T4515] can0 (unregistered): slcan off ttyS3.
[   50.886169][ T4521] loop4: detected capacity change from 0 to 2048
[   50.912383][ T3297]  loop4: p1 < > p4
[   50.916724][ T3297] loop4: p4 size 8388608 extends beyond EOD, truncated
[   50.930879][ T4521]  loop4: p1 < > p4
[   50.937440][ T4534] tmpfs: Bad value for 'mpol'
[   50.938879][ T4521] loop4: p4 size 8388608 extends beyond EOD, truncated
[   50.987764][ T4521] SELinux: ebitmap: truncated map
[   50.999956][ T4521] SELinux: failed to load policy
[   51.014800][ T4545] loop3: detected capacity change from 0 to 164
[   51.021554][ T4545] iso9660: Bad value for 'block'
[   51.026411][ T4542] loop2: detected capacity change from 0 to 512
[   51.032037][ T4545] siw: device registration error -23
[   51.058620][ T4549] loop3: detected capacity change from 0 to 128
[   51.079508][ T4542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.120860][ T4542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.325: invalid indirect mapped block 4294967295 (level 1)
[   51.172946][ T4542] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.325: invalid indirect mapped block 4294967295 (level 1)
[   51.220660][ T4542] EXT4-fs (loop2): 2 truncates cleaned up
[   51.232880][ T4542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.248853][ T4542] FAULT_INJECTION: forcing a failure.
[   51.248853][ T4542] name failslab, interval 1, probability 0, space 0, times 0
[   51.261623][ T4542] CPU: 1 UID: 0 PID: 4542 Comm: syz.2.325 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   51.261651][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   51.261662][ T4542] Call Trace:
[   51.261669][ T4542]  <TASK>
[   51.261677][ T4542]  __dump_stack+0x1d/0x30
[   51.261702][ T4542]  dump_stack_lvl+0xe8/0x140
[   51.261722][ T4542]  dump_stack+0x15/0x1b
[   51.261742][ T4542]  should_fail_ex+0x265/0x280
[   51.261778][ T4542]  should_failslab+0x8c/0xb0
[   51.261922][ T4542]  kmem_cache_alloc_noprof+0x50/0x310
[   51.261945][ T4542]  ? ext4_mb_new_blocks+0x79f/0x2050
[   51.261964][ T4542]  ext4_mb_new_blocks+0x79f/0x2050
[   51.261983][ T4542]  ? __rcu_read_unlock+0x4f/0x70
[   51.262060][ T4542]  ? ext4_ind_map_blocks+0x814/0x14f0
[   51.262081][ T4542]  ? ext4_get_branch+0x321/0x3a0
[   51.262104][ T4542]  ext4_ind_map_blocks+0xb4c/0x14f0
[   51.262193][ T4542]  ext4_map_blocks+0x5d2/0xd70
[   51.262215][ T4542]  ext4_convert_inline_data_nolock+0x16e/0x4c0
[   51.262245][ T4542]  ext4_convert_inline_data+0x2b8/0x350
[   51.262276][ T4542]  ext4_fallocate+0xa6/0x660
[   51.262318][ T4542]  vfs_fallocate+0x410/0x450
[   51.262337][ T4542]  __x64_sys_fallocate+0x7a/0xd0
[   51.262355][ T4542]  x64_sys_call+0x2b88/0x2fb0
[   51.262375][ T4542]  do_syscall_64+0xd2/0x200
[   51.262391][ T4542]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   51.262483][ T4542]  ? clear_bhb_loop+0x40/0x90
[   51.262566][ T4542]  ? clear_bhb_loop+0x40/0x90
[   51.262585][ T4542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   51.262605][ T4542] RIP: 0033:0x7f7efa4de929
[   51.262621][ T4542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   51.262637][ T4542] RSP: 002b:00007f7ef8b47038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   51.262713][ T4542] RAX: ffffffffffffffda RBX: 00007f7efa705fa0 RCX: 00007f7efa4de929
[   51.262751][ T4542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[   51.262775][ T4542] RBP: 00007f7ef8b47090 R08: 0000000000000000 R09: 0000000000000000
[   51.262786][ T4542] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001
[   51.262796][ T4542] R13: 0000000000000000 R14: 00007f7efa705fa0 R15: 00007ffc54d1a878
[   51.262811][ T4542]  </TASK>
[   51.502893][ T4562] 9pnet_fd: p9_fd_create_tcp (4562): problem connecting socket to 127.0.0.1
[   51.534019][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.628597][ T4566] loop3: detected capacity change from 0 to 8192
[   51.646424][ T4582] loop4: detected capacity change from 0 to 512
[   51.692777][ T4582] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   51.728872][ T4588] loop2: detected capacity change from 0 to 2048
[   51.747667][ T4582] EXT4-fs (loop4): 1 truncate cleaned up
[   51.804612][ T4588]  loop2: p1 < > p4
[   51.809405][ T4588] loop2: p4 size 8388608 extends beyond EOD, truncated
[   51.975859][ T4598] loop0: detected capacity change from 0 to 2048
[   51.994157][ T4602] 9pnet_fd: Insufficient options for proto=fd
[   52.112998][ T4604] loop4: detected capacity change from 0 to 512
[   52.127053][ T3297]  loop0: p1 < > p4
[   52.198365][ T3297] loop0: p4 size 8388608 extends beyond EOD, truncated
[   52.212356][ T4604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.228881][ T4606] SELinux: ebitmap: truncated map
[   52.235481][ T4606] SELinux: failed to load policy
[   52.249822][ T4604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002]
[   52.258006][ T4604] System zones: 1-12
[   52.264467][ T4598]  loop0: p1 < > p4
[   52.271593][ T4598] loop0: p4 size 8388608 extends beyond EOD, truncated
[   52.278861][ T4604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.341: bg 0: block 337: padding at end of block bitmap is not set
[   52.299063][ T2995]  loop0: p1 < > p4
[   52.299712][ T4604] EXT4-fs (loop4): 1 truncate cleaned up
[   52.303643][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated
[   52.471119][ T4626] loop1: detected capacity change from 0 to 512
[   52.496255][ T4624] loop4: detected capacity change from 0 to 512
[   52.619192][ T4624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   52.629817][ T4626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   52.748535][ T4624] EXT4-fs (loop4): 1 truncate cleaned up
[   52.759228][ T4627] xt_CT: No such helper "snmp_trap"
[   52.815355][ T4626] EXT4-fs (loop1): 1 truncate cleaned up
[   52.935675][ T4643] loop1: detected capacity change from 0 to 2048
[   52.975714][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   52.983448][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   52.992416][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.000052][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.002302][ T3304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[   53.023534][ T3304] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem
[   53.031906][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.039939][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.050647][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.058430][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.068215][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.075930][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.085899][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.093603][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.103685][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.111416][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.120968][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.128704][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.138377][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.146159][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.156110][ T4647] netlink: 'syz.4.353': attribute type 3 has an invalid length.
[   53.163806][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'.
[   53.258118][ T4657] loop4: detected capacity change from 0 to 512
[   53.269510][ T4657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.284618][ T4657] EXT4-fs (loop4): 1 truncate cleaned up
[   53.769206][ T4671] loop1: detected capacity change from 0 to 2048
[   53.855656][ T4671] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   53.963157][ T4675] loop3: detected capacity change from 0 to 128
[   54.292362][ T4686] loop1: detected capacity change from 0 to 128
[   54.451551][ T4701] loop4: detected capacity change from 0 to 2048
[   54.471468][ T4701] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   54.559413][ T4703] loop3: detected capacity change from 0 to 8192
[   54.615606][ T4708] loop4: detected capacity change from 0 to 1024
[   54.629607][ T4708] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   54.643511][ T4708] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   54.654460][ T4708] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   54.669126][ T4708] JBD2: no valid journal superblock found
[   54.674977][ T4708] EXT4-fs (loop4): Could not load journal inode
[   54.701091][ T4711] loop1: detected capacity change from 0 to 128
[   54.724863][ T4713] loop3: detected capacity change from 0 to 512
[   54.738201][ T4713] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.763164][ T4713] EXT4-fs (loop3): 1 truncate cleaned up
[   54.926831][ T4713] ==================================================================
[   54.934932][ T4713] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping
[   54.942906][ T4713] 
[   54.945210][ T4713] write to 0xffffea0005079668 of 8 bytes by task 51 on cpu 1:
[   54.952652][ T4713]  __delete_from_swap_cache+0x1e8/0x280
[   54.958187][ T4713]  delete_from_swap_cache+0x73/0xe0
[   54.963370][ T4713]  shmem_swapin_folio+0xe9b/0xf50
[   54.968379][ T4713]  shmem_get_folio_gfp+0x26c/0xd60
[   54.973479][ T4713]  shmem_write_begin+0xa8/0x190
[   54.978323][ T4713]  generic_perform_write+0x184/0x490
[   54.983592][ T4713]  shmem_file_write_iter+0xc5/0xf0
[   54.988686][ T4713]  lo_rw_aio+0x6ea/0x7a0
[   54.992916][ T4713]  loop_process_work+0x52d/0xa60
[   54.997839][ T4713]  loop_rootcg_workfn+0x22/0x30
[   55.002676][ T4713]  process_scheduled_works+0x4ce/0x9d0
[   55.008122][ T4713]  worker_thread+0x582/0x770
[   55.012699][ T4713]  kthread+0x486/0x510
[   55.016746][ T4713]  ret_from_fork+0xda/0x150
[   55.021231][ T4713]  ret_from_fork_asm+0x1a/0x30
[   55.025977][ T4713] 
[   55.028291][ T4713] read to 0xffffea0005079668 of 8 bytes by task 4713 on cpu 0:
[   55.035819][ T4713]  folio_mapping+0xdd/0x120
[   55.040307][ T4713]  evict_folios+0xdb9/0x33d0
[   55.044886][ T4713]  try_to_shrink_lruvec+0x45a/0x7e0
[   55.050069][ T4713]  shrink_lruvec+0x22e/0x1b40
[   55.054728][ T4713]  shrink_node+0x686/0x2120
[   55.059215][ T4713]  do_try_to_free_pages+0x3f6/0xcd0
[   55.064395][ T4713]  try_to_free_mem_cgroup_pages+0x1ab/0x410
[   55.070273][ T4713]  try_charge_memcg+0x358/0x9e0
[   55.075105][ T4713]  obj_cgroup_charge_pages+0xa6/0x150
[   55.080463][ T4713]  __memcg_kmem_charge_page+0x9f/0x170
[   55.085914][ T4713]  __alloc_frozen_pages_noprof+0x188/0x360
[   55.091707][ T4713]  alloc_pages_mpol+0xb3/0x250
[   55.096465][ T4713]  alloc_pages_noprof+0x90/0x130
[   55.101394][ T4713]  __vmalloc_node_range_noprof+0x6f2/0xe00
[   55.107222][ T4713]  __kvmalloc_node_noprof+0x30f/0x4e0
[   55.112581][ T4713]  ip_set_alloc+0x1f/0x30
[   55.116898][ T4713]  hash_netiface_create+0x282/0x740
[   55.122082][ T4713]  ip_set_create+0x3c9/0x960
[   55.126663][ T4713]  nfnetlink_rcv_msg+0x4c6/0x590
[   55.131626][ T4713]  netlink_rcv_skb+0x120/0x220
[   55.136380][ T4713]  nfnetlink_rcv+0x16b/0x1690
[   55.141042][ T4713]  netlink_unicast+0x5a1/0x670
[   55.145791][ T4713]  netlink_sendmsg+0x58b/0x6b0
[   55.150534][ T4713]  __sock_sendmsg+0x142/0x180
[   55.155200][ T4713]  ____sys_sendmsg+0x31e/0x4e0
[   55.159950][ T4713]  ___sys_sendmsg+0x17b/0x1d0
[   55.164625][ T4713]  __x64_sys_sendmsg+0xd4/0x160
[   55.169468][ T4713]  x64_sys_call+0x2999/0x2fb0
[   55.174136][ T4713]  do_syscall_64+0xd2/0x200
[   55.178623][ T4713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.184503][ T4713] 
[   55.186806][ T4713] value changed: 0x00000000000002ba -> 0x0000000000000000
[   55.193898][ T4713] 
[   55.196205][ T4713] Reported by Kernel Concurrency Sanitizer on:
[   55.202334][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: syz.3.380 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   55.214643][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   55.224685][ T4713] ==================================================================
[   55.246930][   T29] kauditd_printk_skb: 162 callbacks suppressed
[   55.246943][   T29] audit: type=1400 audit(1751050323.691:799): avc:  denied  { cpu } for  pid=4720 comm="syz.1.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1