last executing test programs:

22.696401631s ago: executing program 3 (id=374):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc)
pipe2(&(0x7f00000000c0), 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x80800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x7, 0xffffffff, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40084c0)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x8}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

22.549374134s ago: executing program 3 (id=377):
socket$key(0xf, 0x3, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x40}, 0x18)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000800)='./bus\x00', 0x41, &(0x7f0000001080)={[{@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x2080000001}}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resgid}, {@abort}, {@nombcache}, {@dioread_nolock}]}, 0x64, 0x50a, &(0x7f0000000940)="$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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32=<r3=>0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=<r4=>0x0, @ANYRES32, @ANYBLOB="0000000000000000000000e200deff00"/28], 0x48)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000001140)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYRESOCT=r3, @ANYBLOB="efd9ce92bd3e513d8915214469fbcb4307fd3e7e6df324fa33bbab7ebde3026a818bfa0f101608fd4a31dca58781076468e76352b7fc1513a45c53eeb92792a308e6aa74f28d4101c7b2950e60c8a8a48734dc94ba266ba577cf0231f8453823064b55883b082817ae4e3a797e5016f37bf1bc2fb55d9c3909e4d7169c2bfffd8929f93f74a86ba8f34e7ddfc47e56f3c8350d142fc07634331f8cc44ba524465b2f8b4b8d1e8915a3414f4bd4ecc8", @ANYRES16=r4], 0xb, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
process_mrelease(0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
faccessat2(0xffffffffffffffff, &(0x7f00000005c0)='./bus\x00', 0x2, 0x1200)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x88}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000006400000000000000000000009500000000000000e06eab6f3017aea6f80829754ad919274a49a953c30da689ca641d654e47c6f2ba588cea1e0319130faede54c80c90dd5fafb6c708975b42446c65c9b2360d2b8484d10113ee734acbde8705e6d45a3085c398622d10cb8d24efb935985752efabf0378bfcaf908257a3395cfd0759a183803f434e74c1aa0d190b785f85da4c1707cead2e9beb742bbf083861fab67b7cd8d591a9e0fe4d24fa1210eb4f61b58378877015293650961c87e8a77aaddeef3173435878e6f3c2740cfa3ed5c93f94216aaae5790f05194ebab1a4cfc102f59e084bbf9b838d45b9fde5e6e9"], &(0x7f0000000300)='GPL\x00', 0x1, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

22.418673066s ago: executing program 0 (id=380):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000180))

22.372509957s ago: executing program 0 (id=381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0)
getsockopt(r0, 0x7299, 0x1ff, &(0x7f00000002c0), &(0x7f0000000180))
openat(0xffffffffffffff9c, 0x0, 0x103442, 0x58)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18)
lstat(0x0, &(0x7f0000000200))
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
lseek(r3, 0x8, 0x2)

22.276457828s ago: executing program 0 (id=383):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x30}}, 0x200040c4) (fail_nth: 9)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x44000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, 0x4, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40008804)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x4}}]}, 0x38}}, 0x0)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2480)

21.599563119s ago: executing program 3 (id=395):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}, {&(0x7f0000000740)="9030d4958e56e924c194dcc40c17c8be76408b1f8d00818355a400b1025876b70f7cea389d895a81f4f217a265d32410a0ce7339f005ec3cfabf3dc682ccc242b8c74ca222fbb248cc4bcb7818dfdcecf71a9923b0c20ab63efd6c12346d4b178dae4cd036ffff6542f27a89d2f3a166fa4abf2665bb135d474aed250ce1cfcbc2b776e5c88501dfc3014f363b2bfe57bf1120dfe198815a0e37372b7f6149fb66a7ea2dff1d9d4d85b5dc9a8c23b7b10c9b048683e9550b214263ef6142a960c0e52a5e03f360cf93c8cfea19ff56d9194b906300", 0xd5}, {&(0x7f0000000840)="b442cf36dd4bfd4f879e4769a8b3c1724652b1c2ed412e9481f6200321884c17f0a4c6b0f51fad1797741762a6c6422534e716e47dc9ae3eaadd3dd229927202b1c0573450c70729d305133d1776eeb23a87acca3932ad500dec91a43c8a7df2945ca608ec0c263558eef1442ca9dc3d787c4eed766f4255d8", 0x79}, {&(0x7f0000000a40)="0898a9ff58569147df85d037ebab693ae4534e345819a36057f93dca8f4545225f63b7c9373108b956f22be214ba0691013c17a166345e5a3cf5ec0bf7d6a407d9d73923a5f79b19e03eb13201333cc831da86bcab2d095b5c9d9d7d80a147186a4610b98845b9694ca62db2a12c63fd6785c8737037109ba5b3d5d766b15ddba4fdeaa223b2a6d46c2f950e78f214b7dbe9c9aafe7176fb56c9ba66d51294cdc1113a7f850f339b87396a0a8ec8c61e4b4876d2ccf1c41942a85784cc00fd97ac617aaa53b955417db1fbe337ae45d2", 0xd0}], 0x5}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee000000000000000000", 0xbd}, {&(0x7f0000000640)="52f8380baae8e668551434e8e52993134696bf3c1070a44f8ceb3f19887414681b93293f0d2708000000a3d8cd2f44c13665c2b7b19ccc306f2564a04b723aca127f75146ebd099961bb5e6fbbd1b0565354e7a8f71134ab7e87ffe3ff2bc0eaed9485be7a3a004cc22c2d22c782bba426367b93ee2c699f89f97a186b3150c8e2584abae470fbda592a19cdb1712dcf558ff0b2bf908973c3ff49bf0effe80a596908e38ab9193c20b606c490819889722944eed829c7c2da45d09c470dcdb93356afd2be7ad8", 0xc7}], 0x2}}], 0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

21.556755459s ago: executing program 3 (id=396):
r0 = memfd_create(&(0x7f0000001040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1\x8c.?}jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff000000000000000003000500000000000200000000000000000000000000000001001400000000"], 0x68}, 0x1, 0x7}, 0x0)
write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x17)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r7, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r6}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

20.855419241s ago: executing program 0 (id=397):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
keyctl$negate(0xd, 0x0, 0x9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000001500000000000000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0)
statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137)

20.523803626s ago: executing program 3 (id=401):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000480)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)

20.056417493s ago: executing program 0 (id=407):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)

18.759347474s ago: executing program 0 (id=431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc)
pipe2(&(0x7f00000000c0), 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x80800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x7, 0xffffffff, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40084c0)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x8}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

18.754521494s ago: executing program 32 (id=431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc)
pipe2(&(0x7f00000000c0), 0x0)
signalfd4(r1, &(0x7f0000000000)={[0x4]}, 0x8, 0x80800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x7, 0xffffffff, {0x7, r8}}, 0x18}, 0x1, 0x0, 0x0, 0x48c0}, 0x40084c0)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10, 0x0, 0x8}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)

18.138763834s ago: executing program 3 (id=436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

18.117232914s ago: executing program 33 (id=436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

6.181783422s ago: executing program 6 (id=564):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESHEX=r2])

5.819085678s ago: executing program 6 (id=566):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 13)

5.484262234s ago: executing program 6 (id=573):
r0 = memfd_secret(0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x530, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x728}, @filter_kind_options=@f_bpf={{0x8}, {0x4f4, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_POLICE={0x458, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0xf1f7, 0xfffffffa, 0x5, {0x63, 0x2, 0xdc, 0x80, 0x8001, 0x1}, {0x5, 0x2, 0x3, 0x8, 0x200, 0x2}, 0x5, 0x29, 0x8001}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x3ff, 0x257, 0x1, 0xa, 0x6ce, 0x14000000, 0x1ff, 0x7f, 0x6, 0x9d5, 0xfffffff3, 0x5, 0x7f, 0x10000, 0xfff, 0x8, 0x1, 0x0, 0xe, 0x6, 0xff, 0x919, 0xe19, 0x6, 0xc49, 0x8, 0x2, 0x200, 0x97a, 0x3ff, 0x8, 0x1, 0x80000001, 0x1, 0x8, 0x1, 0x1, 0xbd7, 0xc, 0x7ff, 0x6, 0x4417, 0x7fff, 0x6, 0x1653, 0x350, 0x3, 0x3add, 0x1e, 0x7, 0x6a8, 0x3, 0xa9000000, 0x5, 0x0, 0x101, 0x9, 0x40, 0x8, 0x101, 0x5, 0x1, 0x1, 0x1, 0x3, 0x1ff, 0xfffffffc, 0x3, 0x0, 0x8b, 0x2, 0x4, 0x5, 0x10, 0xc88, 0x800, 0x5, 0x0, 0x78, 0xa5, 0x2, 0x5, 0x5, 0x1a7, 0x6, 0x21c, 0x0, 0x9, 0x6, 0x5, 0xfffffffd, 0x1, 0x1, 0x10000, 0x5, 0x5, 0x4, 0x2, 0x4, 0x6, 0x10, 0x646d, 0xf, 0x9, 0x0, 0x4, 0xfffffffe, 0x2, 0x9, 0x2, 0x9, 0x6, 0x1, 0x4c0c, 0xbc7, 0x9, 0xd1c64d54, 0x8, 0x4, 0xc99b, 0x5, 0x9e0d, 0xfffffffe, 0x1, 0xbc, 0xb, 0x5, 0x80000000, 0x8, 0x9, 0x0, 0x1, 0x6, 0xffff, 0x0, 0x800, 0x0, 0xffff, 0x2, 0x6, 0xa035, 0x279fb8bd, 0xfd5d, 0x4, 0x9, 0x101, 0xb, 0x7f, 0x401, 0xf3b, 0x4, 0x8, 0x8001, 0x8453, 0xfffffffe, 0x6, 0x3ff, 0x32, 0x28f3, 0x3, 0xfda2, 0x4, 0x4, 0x1, 0xf1, 0xd, 0xf, 0x4, 0x0, 0x2, 0x1, 0x369, 0xdf8, 0x2, 0x7d63, 0x6, 0xd, 0xa, 0x10001, 0x80, 0x0, 0xff, 0x8, 0x73e, 0x200, 0x900000, 0xffff, 0x0, 0x6, 0x5, 0x46, 0x8, 0x200, 0x8001, 0x7fff, 0x2, 0x4, 0x200, 0x1, 0x2, 0x2, 0x0, 0x200, 0x64670620, 0x8, 0x27, 0x4, 0x6, 0x11, 0x1, 0x101, 0x57f9, 0x0, 0x8, 0x600000, 0xfe, 0x6, 0x6, 0x8, 0x2, 0x8, 0xfffffffd, 0x2, 0x76026ce3, 0xb, 0x5, 0x1, 0x7, 0xd, 0x5, 0xd57, 0x7f36, 0x10001, 0xfffff214, 0x4, 0x4b0, 0x0, 0xee2a, 0x9, 0xbc9, 0xf3a, 0xfffffffe, 0x2, 0x31, 0x81, 0x1, 0x0, 0x9, 0x8000, 0x80000000, 0x7f, 0x1, 0x81, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_BPF_ACT={0x90, 0x1, [@m_simple={0x8c, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x5e, 0x6, "20bd81bfcac75bbef87e87e02f6605b1234a2cf90e926439d204e1d46300e77a61ca1c2bc0d8261b85c79393fe5158f6043a7d261a2fb6837f491eacd478b18ce4aba46ed65487cae05188ecbd7a056448e5395b1276519371d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
unshare(0x400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001)
setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close(r4)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$selinux_access(r5, 0x0, 0x0)

5.437221075s ago: executing program 6 (id=574):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000900)}}], 0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

4.723370785s ago: executing program 2 (id=581):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r0}, 0x18)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r2, 0x0, r1, 0x0, 0x6, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff)
fcntl$setstatus(r1, 0x4, 0x7c00)
dup3(r2, r1, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0)

4.493439119s ago: executing program 6 (id=586):
r0 = socket$inet6(0xa, 0x5, 0x1)
socket(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000002c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000040)=0x4, 0x12)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000008269fd6ae3faabbf56838239ea735902847d77161b563f4c93c924c05e7f8d3b00ac5b95dc77e533d08eeff1daa3dae739ed39ccfc20510b3dfa759c35a9399122c550348969", @ANYRES16=r6, @ANYBLOB="000228bd7000ffdbdf251100000008003b000400000005002e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000014)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x110)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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")
truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0xa, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@mcast1, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x8009, 0x2, 0x100, 0x4, 0x80040})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x328, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6c29218ad21b44b472e44f1d0807ee6675c"}]}, {0x240, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x328}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)

3.528940154s ago: executing program 6 (id=598):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff8a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x10)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000340)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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")
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xfffffffffffffc9b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES64=r2, @ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r9=>0x0})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x18)
sendto$packet(r5, &(0x7f0000000180)="09000000e70014000000d97bfbf788a83baa88a8008100"/32, 0x20, 0x200400c4, &(0x7f0000000080)={0x11, 0x8100, r9, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="33aaf14f564b1bf220cb1137d54b407511ce09dfd9657fe3", 0x18, 0x40, &(0x7f0000000200)={0x11, 0x2, r10, 0x1, 0x8, 0x6, @local}, 0x14)
sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0x3}}}, 0x24}}, 0x0)

2.913355524s ago: executing program 1 (id=605):
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="bdaca7177865c9701bb01177a0f9ae1268e5e352578d82fba4f1d65d44c5eb875cfac89ed3763edcf0c1d22dd44a81382474d28ece75aa435b5ce66404c58aca2c0af30b9e4bb5953d1f92ce0c85403714049b6c0612afd9c473bb0abcd66e16dbc81d084121c4b1f554bcba92cfc5d3fcd2a90468ce22f97b74b44f58a366f2af9d154386881aeed9ba0a425e2532f7c37304eb999f010a0e84ea4c06ca591953afbadb8173577f0cb595edb3618bad5885377f7d24b39e0fc3a4567b0f42c84ca811dd953d6003f1fb389c17324bd7c5c9b163050f08309bfbd24864b510b7bc906a1d0d04c7b16288fd", @ANYRESOCT=r6, @ANYRES64=r2, @ANYBLOB="caa06c191f", @ANYRES16, @ANYRES16, @ANYBLOB="19e675c1e6e75264435a9cac9301d2e409f2dbaa29", @ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3e9rHGkdAPDvTLK5tM2ZPRWpB94d3kl7aHeTi3eNIm0F0VcFtb6vMdmEkE02ZDe1CUVT/AMEERX8A3wj+AcI0j9BhIK+FxVFtNWX2pHdnWh+7CZLssnWzecDT/Z55pmZ7/MM2dn58TATwIX1VkTciYiRiHg3Iibz6WmeYqedmvM9f/ZovpmSyLJ7f0siyafFnmVGI+JKvth4RHz9KxHfSg7HrW9tr8xVq5WNvFxurK6X61vbN5ZX55YqS5W1mZnpD2Zvzr4/O5XlTtXPYkTc+tKffvT9n3351q8+8+3f3//L9e80m/WFj0XkzZs/VYAu2usutLbFruY22jiLYAPS7E9hZNCtAACgF81j9g9HxCdbx/+TMdI6mgMAAACGSXZ7Iv6VRGQAAADA0EojYiKStJSPBZiINC2V2mN4PxqX02qt3vj0Ym1zbaFZF1GMQrq4XK1M5WOFi1FImuXpfIztbvm9A+WZiHgtIn44ealVLs3XqguDvvgBAAAAF8SVN/ef//9zMm3lAQAAgCFT7FoAAAAAhoVTfgAAABh+zv8BAABgqH317t1mynbf473wYGtzpfbgxkKlvlJa3Zwvzdc21ktLtdpS65l9q8etr1qrrX821jYflhuVeqNc39q+v1rbXGvcX973CmwAAADgHL325pPfJRGx8/lLrRT5cwAB9vnjoBsA9NPIoBsADMzooBsADEzh2DnsIWDYJcfUHx68075WGL8+m/YAAAD9d+3jh+//j+V1x18bAP6fGesDABePu3twcRVOOgLwar9bAgzKh9ofr3Sr7/rwjh7u/7evMWTZiRoGAAD0zUQrJWkpP06fiDQtlSJebb0WoJAsLlcrU/n5wW8nC680y9OtJZNjxwwDAAAAAAAAAAAAAAAAAAAAAAAAAG1ZlkQGAAAADLWI9M9J62n+Edcm35nYf3XgwFu/fnrvxw/nGo2N6Yix5O+TzUljEdH4ST79vcwrAQAAAOAl0D5Pzz+nB90aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbN82eP5nfTecb96xcjotgp/miMtz7HoxARl/+RxOie5ZKIGOlD/J3HEXG1U/wkXmRZVsxb0Sn+pTOOX2xtms7x04i40of4cJE9ae5/7nT6/qXxVuuz8/dvNE+n1X3/l/53/zfSZf/z6oFyN68//UW5a/zHEa+Pdt7/7MZP2vH3hWgW3u6xj9/8xvZ2x4o9q+wUf2+scmN1vVzf2r6xvDq3VFmqrM3MTH8we3P2/dmp8uJytZL/7RjmB5/45Yuj+n+5S/zi/v4f2v7v9NT7LP799OGzj7QLhU7xr7/d+ff3apf4af7b96k836y/tpvfaef3euPnv3njqP4vdOn/+DH9v95T/+Nz737te3/oWHNoawAA56G+tb0yV61WNo7IjPcwzzlnbr8czehjJl6OZgwqk323/f94uvWccvFDmew0i49GH5oxduh7OhInXWESsdNcV4//kAAAwJD530H/UXeQAAAAAAAAAAAAAAAAAAAAgLN0wseSjUdEzzMfjLkzmK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzpPwEAAP//gEfRew==")
openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100))

2.096127877s ago: executing program 5 (id=611):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="2000a1ff", @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0)

2.051123808s ago: executing program 4 (id=612):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = fsopen(&(0x7f0000001500)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x6)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000780)='./file0/../file0\x00', 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r4}, 0x18)
mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xfffff92a, @loopback, 0xfffffffa}}, 0x8, 0x0, 0x7, 0x9, 0x1}, &(0x7f0000000140)=0x98)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0)
recvmsg(r5, 0x0, 0x40000021)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r6 = gettid()
write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffff8, 0x8)
write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x8)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
socket$inet6_sctp(0xa, 0x5, 0x84)
fsync(0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1.967336819s ago: executing program 4 (id=613):
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="bdaca7177865c9701bb01177a0f9ae1268e5e352578d82fba4f1d65d44c5eb875cfac89ed3763edcf0c1d22dd44a81382474d28ece75aa435b5ce66404c58aca2c0af30b9e4bb5953d1f92ce0c85403714049b6c0612afd9c473bb0abcd66e16dbc81d084121c4b1f554bcba92cfc5d3fcd2a90468ce22f97b74b44f58a366f2af9d154386881aeed9ba0a425e2532f7c37304eb999f010a0e84ea4c06ca591953afbadb8173577f0cb595edb3618bad5885377f7d24b39e0fc3a4567b0f42c84ca811dd953d6003f1fb389c17324bd7c5c9b163050f08309bfbd24864b510b7bc906a1d0d04c7b16288fd", @ANYRESOCT=r6, @ANYRES64=r2, @ANYBLOB="caa06c191f", @ANYRES16, @ANYRES16, @ANYBLOB="19e675c1e6e75264435a9cac9301d2e409f2dbaa29", @ANYRESDEC=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")
openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100))

1.92622681s ago: executing program 5 (id=614):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r0}, 0x10)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

1.864146621s ago: executing program 1 (id=615):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x7ff80, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
socket$netlink(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r6, 0x2007ffc)
sendfile(r6, r6, 0x0, 0x800000009)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13)

1.660428744s ago: executing program 5 (id=616):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x1, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.399470888s ago: executing program 2 (id=617):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)

1.362353669s ago: executing program 1 (id=618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

1.349185909s ago: executing program 5 (id=619):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x339)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f00000002c0)=0x18b1, 0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000140)=@rnullb, 0x0, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000faffffff040000008000000000800000", @ANYRES32=r2, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000a00000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bind$rxrpc(r3, &(0x7f00000005c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x80, @broadcast}}, 0x24)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'pim6reg0\x00'})
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0)
write(r6, &(0x7f0000000240)="94", 0x1)
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d4419810409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd870800000000000000d62f945e7a5bf2f5f7a31684c0503704881d2378a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r5, r9, 0x8f5, 0x0)
write$binfmt_script(r9, 0x0, 0xd9)
write(r7, 0x0, 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0)
write$binfmt_script(r10, &(0x7f0000000b80)={'#! ', './file0'}, 0xb)

1.231358251s ago: executing program 1 (id=620):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e0000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
ftruncate(r0, 0x2000009)

1.187788282s ago: executing program 2 (id=621):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800006c52f20f793339b1000000181100000000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703008f84f0ba15eb18e5fe3408ec410008000000b704000000000000850000005900000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2e2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r3, 0x0, 0x3904}, 0x18)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0xd, r3, &(0x7f0000001b80)="948601e5090c15a532613f4070758b67d1", 0x11, 0x4, 0x0, 0x3}])
r4 = syz_open_pts(0xffffffffffffffff, 0x2002)
ioctl$TCGETS(r4, 0x5401, &(0x7f0000000640))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
setfsuid(0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x80000000000}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)

1.074568003s ago: executing program 2 (id=622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x81)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000300030006010000418e01400004fcff", 0x58}], 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r5, 0x5, 0x4)
ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000180)=0xffffffff7fffffff)
syz_genetlink_get_family_id$nl80211(0x0, r5)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000340))
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r6 = getpid()
syz_pidfd_open(r6, 0x0)

1.044338534s ago: executing program 4 (id=623):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f00000022c0)=[{0x2, 0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/59, 0x3b}, {&(0x7f00000001c0)=""/128, 0x80}], &(0x7f0000000240)=[0x6, 0x1, 0x7, 0x800, 0xb, 0x3, 0x910]}, {0x4, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/17, 0x11}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/40, 0x28}], &(0x7f00000003c0)=[0x2, 0x6, 0x2, 0x666, 0x0, 0xd, 0xf7f]}, {0x4, 0x1, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/210, 0xd2}], &(0x7f00000006c0)=[0xffffffffffffffeb, 0x4]}, {0x4, 0x1, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/159, 0x9f}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000004800)=""/4096, 0x1000}, {&(0x7f0000005800)=""/4096, 0x1000}], &(0x7f0000000840)=[0x6, 0xcd, 0x3, 0x69, 0x0, 0x0]}, {0x6, 0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000880)=""/151, 0x97}, {&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000001c00)=""/191, 0xbf}, {&(0x7f0000000a40)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/190, 0xbe}], &(0x7f0000001e80)=[0x9, 0xfff, 0xce79, 0xe913, 0x4, 0x0]}, {0x6, 0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ec0)=""/9, 0x9}, {&(0x7f0000001f00)=""/227, 0xe3}, {&(0x7f0000002000)=""/1, 0x1}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/15, 0xf}, {&(0x7f0000002100)=""/153, 0x99}], &(0x7f0000002240)=[0x3, 0x9, 0xf, 0xa52e, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffb8]}], 0x6)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\x00\x00\x00\x00\x00Jd\xf9\xb7\xa9Z\xb9((\xee\xc8\xbe\xd4.X\x8b\xb3\x02g\xc4\xbe1\xccI\a\xe5\x14\xb2j\xd6\x7fi<92\x1eZ\x02')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff)

768.784308ms ago: executing program 2 (id=624):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x9, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d00f07251ca60bc24eab556a71a251e6182949a3651f60a84c910d5938037e786a6d0bdd7fcf50e4509985300782c37ba90adcd1500000080bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0xa, &(0x7f0000000080)={0x28, 0x4, 0x28})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x9a, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x3, 0x4)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f00000003c0)=""/214, 0xd6, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000098b04c4d7da3c1e9b18c254c411a893ebde566b02594bb86b6183003cd1d5a53b0fbbdbee37feb7e607c1bfd4012a1356831642da6648e0ef6955cff6ea3e4c810fed90484b6ecd2b86444ee8ee512f5dbbb59fcffc5d2ab3755dbd06451d8"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0)
unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200)

767.970618ms ago: executing program 5 (id=625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0))
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

610.138281ms ago: executing program 4 (id=626):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="da50000000002b0d820000000000000000000018118000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r2}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="6697764dd1dd66a243146b", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3)

573.236842ms ago: executing program 2 (id=627):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf09007eb9e6d5b4c90000000055090100000000009500311afa37b791840ba6c447c5a328000000000000bf91000000000000b7020000000000008500000084000000b700000000000000958737aef36dc05be9accd5a3857ebb320dde3b8946eb0231155122043a1bb8ce85391897d53d84ecb8c2a3b35736fa92fce8f675203bc35cf687f8e81"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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")
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=<r5=>r4])
close_range(r4, r3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000300)={0x493f, {{0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {{0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x108)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES8=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)

564.710462ms ago: executing program 5 (id=628):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x6000040)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rpcgss_context\x00', r0}, 0x18)
epoll_create(0x4c4)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000200)=""/114)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000009400"/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
close(r3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r8 = inotify_init()
r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r8, &(0x7f0000000200)='./file0\x00', 0x59000440)
close(r9)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x6}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x5c, 0x6, 0x1, @empty, @local, {[@hopopts={0x1, 0x6, '\x00', [@generic={0x3, 0x2f, "1c77ec50c8a5260b9657f14c0b4d5f8413ff4eb8537049fd4ebef9682fb13788a5a2d1164b5a0c737fe04631c13502"}]}, @fragment={0x5e, 0x0, 0x5, 0x0, 0x0, 0x19, 0x65}], {{0x4e21, 0x4e1e, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x13}}}}}}}, 0x0)
syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580))

485.437713ms ago: executing program 4 (id=629):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x7ff80, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES32=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
socket$netlink(0x10, 0x3, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r6, 0x2007ffc)
sendfile(r6, r6, 0x0, 0x800000009)
ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13)

342.603585ms ago: executing program 1 (id=630):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000100)="0100", 0x2, 0xffffffffffffffff) (fail_nth: 10)

301.052776ms ago: executing program 4 (id=631):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x113a0, 0x0, 0x3, 0x9, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d00f07251ca60bc24eab556a71a251e6182949a3651f60a84c910d5938037e786a6d0bdd7fcf50e4509985300782c37ba90adcd1500000080bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x4800)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0xa, &(0x7f0000000080)={0x28, 0x4, 0x28})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x9a, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0x3, 0x4)
mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f00000003c0)=""/214, 0xd6, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}})
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000000098b04c4d7da3c1e9b18c254c411a893ebde566b02594bb86b6183003cd1d5a53b0fbbdbee37feb7e607c1bfd4012a1356831642da6648e0ef6955cff6ea3e4c810fed90484b6ecd2b86444ee8ee512f5dbbb59fcffc5d2ab3755dbd06451d8"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0)
unlinkat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x200)

0s ago: executing program 1 (id=632):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3f6, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)

kernel console output (not intermixed with test programs):

mount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   40.755853][   T29] audit: type=1400 audit(1753240701.004:1158): avc:  denied  { prog_run } for  pid=4073 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   40.775865][   T29] audit: type=1400 audit(1753240701.074:1159): avc:  denied  { read } for  pid=4068 comm="syz.1.174" dev="nsfs" ino=4026532453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   40.797006][   T29] audit: type=1400 audit(1753240701.074:1160): avc:  denied  { open } for  pid=4068 comm="syz.1.174" path="net:[4026532453]" dev="nsfs" ino=4026532453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   40.836753][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.869086][ T4077] FAULT_INJECTION: forcing a failure.
[   40.869086][ T4077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   40.882233][ T4077] CPU: 0 UID: 0 PID: 4077 Comm: syz.2.179 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   40.882294][ T4077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   40.882304][ T4077] Call Trace:
[   40.882311][ T4077]  <TASK>
[   40.882319][ T4077]  __dump_stack+0x1d/0x30
[   40.882339][ T4077]  dump_stack_lvl+0xe8/0x140
[   40.882409][ T4077]  dump_stack+0x15/0x1b
[   40.882425][ T4077]  should_fail_ex+0x265/0x280
[   40.882453][ T4077]  should_fail+0xb/0x20
[   40.882509][ T4077]  should_fail_usercopy+0x1a/0x20
[   40.882538][ T4077]  _copy_from_user+0x1c/0xb0
[   40.882558][ T4077]  __sys_bpf+0x178/0x790
[   40.882591][ T4077]  __x64_sys_bpf+0x41/0x50
[   40.882677][ T4077]  x64_sys_call+0x2478/0x2fb0
[   40.882773][ T4077]  do_syscall_64+0xd2/0x200
[   40.882790][ T4077]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   40.882812][ T4077]  ? clear_bhb_loop+0x40/0x90
[   40.882829][ T4077]  ? clear_bhb_loop+0x40/0x90
[   40.882898][ T4077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.882915][ T4077] RIP: 0033:0x7f893ecce9a9
[   40.882930][ T4077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.882946][ T4077] RSP: 002b:00007f893d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   40.882965][ T4077] RAX: ffffffffffffffda RBX: 00007f893eef5fa0 RCX: 00007f893ecce9a9
[   40.882977][ T4077] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000003
[   40.882989][ T4077] RBP: 00007f893d32f090 R08: 0000000000000000 R09: 0000000000000000
[   40.883002][ T4077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.883070][ T4077] R13: 0000000000000000 R14: 00007f893eef5fa0 R15: 00007ffc5409a978
[   40.883085][ T4077]  </TASK>
[   41.105392][ T4079] loop1: detected capacity change from 0 to 512
[   41.183700][ T4079] EXT4-fs (loop1): 1 orphan inode deleted
[   41.189992][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.203470][ T2055] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   41.209712][ T4079] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.298169][ T4095] loop4: detected capacity change from 0 to 512
[   41.394930][ T4095] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   41.403174][ T4095] EXT4-fs (loop4): orphan cleanup on readonly fs
[   41.414454][ T4095] EXT4-fs (loop4): 1 orphan inode deleted
[   41.470365][ T4102] SELinux:  Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped).
[   41.596059][ T2055] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   41.621532][ T4095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   41.646641][ T4105] loop2: detected capacity change from 0 to 512
[   41.672104][ T4105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   41.684866][ T4105] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.696861][ T4105] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.186: bg 0: block 328: padding at end of block bitmap is not set
[   41.747205][ T4116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   41.770060][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.794297][ T4118] syzkaller1: entered promiscuous mode
[   41.799803][ T4118] syzkaller1: entered allmulticast mode
[   41.818862][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.844454][ T4120] FAULT_INJECTION: forcing a failure.
[   41.844454][ T4120] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   41.857851][ T4120] CPU: 0 UID: 0 PID: 4120 Comm: syz.2.192 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   41.857869][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   41.857877][ T4120] Call Trace:
[   41.857880][ T4120]  <TASK>
[   41.857885][ T4120]  __dump_stack+0x1d/0x30
[   41.857949][ T4120]  dump_stack_lvl+0xe8/0x140
[   41.857959][ T4120]  dump_stack+0x15/0x1b
[   41.857968][ T4120]  should_fail_ex+0x265/0x280
[   41.857984][ T4120]  should_fail_alloc_page+0xf2/0x100
[   41.858039][ T4120]  __alloc_frozen_pages_noprof+0xff/0x360
[   41.858141][ T4120]  alloc_pages_mpol+0xb3/0x250
[   41.858156][ T4120]  vma_alloc_folio_noprof+0x1aa/0x300
[   41.858199][ T4120]  handle_mm_fault+0xec2/0x2be0
[   41.858210][ T4120]  ? __rcu_read_lock+0x37/0x50
[   41.858313][ T4120]  __get_user_pages+0x1036/0x1fb0
[   41.858341][ T4120]  __mm_populate+0x243/0x3a0
[   41.858352][ T4120]  do_mlock+0x47f/0x520
[   41.858365][ T4120]  ? fput+0x8f/0xc0
[   41.858377][ T4120]  ? ksys_write+0x192/0x1a0
[   41.858393][ T4120]  __x64_sys_mlock+0x36/0x50
[   41.858473][ T4120]  x64_sys_call+0x28f4/0x2fb0
[   41.858484][ T4120]  do_syscall_64+0xd2/0x200
[   41.858494][ T4120]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   41.858533][ T4120]  ? clear_bhb_loop+0x40/0x90
[   41.858544][ T4120]  ? clear_bhb_loop+0x40/0x90
[   41.858555][ T4120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.858566][ T4120] RIP: 0033:0x7f893ecce9a9
[   41.858575][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   41.858617][ T4120] RSP: 002b:00007f893d32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[   41.858628][ T4120] RAX: ffffffffffffffda RBX: 00007f893eef5fa0 RCX: 00007f893ecce9a9
[   41.858635][ T4120] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[   41.858642][ T4120] RBP: 00007f893d32f090 R08: 0000000000000000 R09: 0000000000000000
[   41.858648][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   41.858655][ T4120] R13: 0000000000000000 R14: 00007f893eef5fa0 R15: 00007ffc5409a978
[   41.858718][ T4120]  </TASK>
[   42.142207][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.202014][ T4132] loop4: detected capacity change from 0 to 512
[   42.226446][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.248162][ T4132] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.273746][ T4132] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.197: corrupted inode contents
[   42.285836][ T4130] loop0: detected capacity change from 0 to 8192
[   42.294183][ T4132] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.197: mark_inode_dirty error
[   42.339717][ T4132] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.197: corrupted inode contents
[   42.352466][ T4132] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.197: mark_inode_dirty error
[   42.369877][ T4132] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.197: mark inode dirty (error -117)
[   42.382684][ T4132] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[   42.424398][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.460340][ T4145] netlink: 'syz.2.202': attribute type 4 has an invalid length.
[   42.500061][ T4150] loop0: detected capacity change from 0 to 512
[   42.524444][ T4150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.524622][ T4150] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   42.530129][ T4150] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.206: corrupted inode contents
[   42.530321][ T4150] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.206: mark_inode_dirty error
[   42.530439][ T4150] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.206: corrupted inode contents
[   42.530494][ T4150] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.206: mark_inode_dirty error
[   42.530610][ T4150] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.206: mark inode dirty (error -117)
[   42.530673][ T4150] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   42.574705][ T4157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.583460][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.605703][ T4157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.613049][ T4167] FAULT_INJECTION: forcing a failure.
[   42.613049][ T4167] name failslab, interval 1, probability 0, space 0, times 0
[   42.613078][ T4167] CPU: 0 UID: 0 PID: 4167 Comm: syz.4.210 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   42.613104][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   42.613117][ T4167] Call Trace:
[   42.613123][ T4167]  <TASK>
[   42.613131][ T4167]  __dump_stack+0x1d/0x30
[   42.613168][ T4167]  dump_stack_lvl+0xe8/0x140
[   42.613188][ T4167]  dump_stack+0x15/0x1b
[   42.613205][ T4167]  should_fail_ex+0x265/0x280
[   42.613234][ T4167]  should_failslab+0x8c/0xb0
[   42.613302][ T4167]  __kmalloc_noprof+0xa5/0x3e0
[   42.613326][ T4167]  ? security_key_alloc+0x50/0x140
[   42.613424][ T4167]  security_key_alloc+0x50/0x140
[   42.613443][ T4167]  key_alloc+0x458/0x9a0
[   42.613473][ T4167]  request_key_and_link+0x43a/0xd70
[   42.613504][ T4167]  ? __pfx_key_default_cmp+0x10/0x10
[   42.613567][ T4167]  ? __pfx_keyring_search_iterator+0x10/0x10
[   42.613591][ T4167]  __se_sys_request_key+0x1df/0x290
[   42.613614][ T4167]  ? fput+0x8f/0xc0
[   42.613639][ T4167]  __x64_sys_request_key+0x55/0x70
[   42.613670][ T4167]  x64_sys_call+0x2f19/0x2fb0
[   42.613766][ T4167]  do_syscall_64+0xd2/0x200
[   42.613835][ T4167]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   42.613863][ T4167]  ? clear_bhb_loop+0x40/0x90
[   42.613948][ T4167]  ? clear_bhb_loop+0x40/0x90
[   42.613969][ T4167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   42.613990][ T4167] RIP: 0033:0x7f1f0037e9a9
[   42.614006][ T4167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   42.614023][ T4167] RSP: 002b:00007f1efe9e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[   42.614057][ T4167] RAX: ffffffffffffffda RBX: 00007f1f005a5fa0 RCX: 00007f1f0037e9a9
[   42.614070][ T4167] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040
[   42.614083][ T4167] RBP: 00007f1efe9e7090 R08: 0000000000000000 R09: 0000000000000000
[   42.614096][ T4167] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000002
[   42.614169][ T4167] R13: 0000000000000000 R14: 00007f1f005a5fa0 R15: 00007ffc52649208
[   42.614262][ T4167]  </TASK>
[   42.657445][ T4157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.669304][ T4171] netlink: 232 bytes leftover after parsing attributes in process `syz.0.211'.
[   42.702321][ T4157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.788321][ T4157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.791188][ T4157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   43.120065][ T4157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.131511][ T4157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.141367][ T4176] @: renamed from vlan0 (while UP)
[   43.432871][ T4193] FAULT_INJECTION: forcing a failure.
[   43.432871][ T4193] name failslab, interval 1, probability 0, space 0, times 0
[   43.445586][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz.1.220 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   43.445613][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   43.445629][ T4193] Call Trace:
[   43.445670][ T4193]  <TASK>
[   43.445678][ T4193]  __dump_stack+0x1d/0x30
[   43.445699][ T4193]  dump_stack_lvl+0xe8/0x140
[   43.445843][ T4193]  dump_stack+0x15/0x1b
[   43.445857][ T4193]  should_fail_ex+0x265/0x280
[   43.445959][ T4193]  should_failslab+0x8c/0xb0
[   43.445977][ T4193]  kmem_cache_alloc_node_noprof+0x57/0x320
[   43.445999][ T4193]  ? __alloc_skb+0x101/0x320
[   43.446050][ T4193]  __alloc_skb+0x101/0x320
[   43.446148][ T4193]  netlink_alloc_large_skb+0xba/0xf0
[   43.446173][ T4193]  netlink_sendmsg+0x3cf/0x6b0
[   43.446248][ T4193]  ? __pfx_netlink_sendmsg+0x10/0x10
[   43.446268][ T4193]  __sock_sendmsg+0x145/0x180
[   43.446288][ T4193]  sock_write_iter+0x165/0x1b0
[   43.446313][ T4193]  do_iter_readv_writev+0x41e/0x4c0
[   43.446396][ T4193]  vfs_writev+0x2df/0x8b0
[   43.446471][ T4193]  do_writev+0xe7/0x210
[   43.446491][ T4193]  __x64_sys_writev+0x45/0x50
[   43.446506][ T4193]  x64_sys_call+0x2006/0x2fb0
[   43.446524][ T4193]  do_syscall_64+0xd2/0x200
[   43.446540][ T4193]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   43.446580][ T4193]  ? clear_bhb_loop+0x40/0x90
[   43.446597][ T4193]  ? clear_bhb_loop+0x40/0x90
[   43.446617][ T4193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   43.446638][ T4193] RIP: 0033:0x7f9a90bfe9a9
[   43.446653][ T4193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   43.446747][ T4193] RSP: 002b:00007f9a8f25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[   43.446765][ T4193] RAX: ffffffffffffffda RBX: 00007f9a90e25fa0 RCX: 00007f9a90bfe9a9
[   43.446778][ T4193] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 000000000000000a
[   43.446790][ T4193] RBP: 00007f9a8f25f090 R08: 0000000000000000 R09: 0000000000000000
[   43.446802][ T4193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   43.446890][ T4193] R13: 0000000000000000 R14: 00007f9a90e25fa0 R15: 00007ffd6c575878
[   43.446909][ T4193]  </TASK>
[   43.705140][ T4200] pimreg: entered allmulticast mode
[   43.712232][ T4200] pimreg: left allmulticast mode
[   43.766989][ T4214] loop1: detected capacity change from 0 to 512
[   43.805954][ T4200] netlink: 'syz.1.224': attribute type 10 has an invalid length.
[   43.828559][ T4200] team0: Port device dummy0 added
[   43.835178][ T4201] loop3: detected capacity change from 0 to 8192
[   43.918562][ T4237] loop0: detected capacity change from 0 to 512
[   43.943092][ T4237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.970393][ T4237] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   44.056228][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.228: corrupted inode contents
[   44.090261][ T4237] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #18: comm syz.0.228: mark_inode_dirty error
[   44.093862][ T4247] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4247 comm=syz.2.231
[   44.123579][ T4237] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #18: comm syz.0.228: corrupted inode contents
[   44.150347][ T4249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4249 comm=syz.1.232
[   44.163048][ T4237] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.228: mark_inode_dirty error
[   44.188520][ T4237] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.228: mark inode dirty (error -117)
[   44.221433][ T4237] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[   44.283930][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.647444][ T4264] @: renamed from vlan0 (while UP)
[   44.837822][ T4277] loop4: detected capacity change from 0 to 8192
[   44.966080][ T4291] netlink: 'syz.0.251': attribute type 4 has an invalid length.
[   45.181277][ T4306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'.
[   45.283793][ T4316] loop3: detected capacity change from 0 to 512
[   45.305492][ T4316] EXT4-fs (loop3): revision level too high, forcing read-only mode
[   45.313702][ T4316] EXT4-fs (loop3): orphan cleanup on readonly fs
[   45.340530][ T4316] EXT4-fs (loop3): 1 orphan inode deleted
[   45.346645][   T41] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   45.377770][ T4316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   45.463771][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.561616][ T4333] loop3: detected capacity change from 0 to 8192
[   45.660376][   T29] kauditd_printk_skb: 577 callbacks suppressed
[   45.660390][   T29] audit: type=1326 audit(1753240706.004:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.665486][ T4337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4337 comm=syz.2.268
[   45.689888][   T29] audit: type=1326 audit(1753240706.004:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.690015][   T29] audit: type=1326 audit(1753240706.004:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.748999][   T29] audit: type=1326 audit(1753240706.014:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.772541][   T29] audit: type=1326 audit(1753240706.014:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.796034][   T29] audit: type=1326 audit(1753240706.014:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.819243][   T29] audit: type=1326 audit(1753240706.014:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.842654][   T29] audit: type=1326 audit(1753240706.014:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.865898][   T29] audit: type=1400 audit(1753240706.014:1743): avc:  denied  { nlmsg_write } for  pid=4336 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   45.894104][   T29] audit: type=1326 audit(1753240706.060:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.2.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   45.930974][ T4345] FAULT_INJECTION: forcing a failure.
[   45.930974][ T4345] name failslab, interval 1, probability 0, space 0, times 0
[   45.943694][ T4345] CPU: 0 UID: 0 PID: 4345 Comm: syz.3.270 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   45.943717][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   45.943807][ T4345] Call Trace:
[   45.943813][ T4345]  <TASK>
[   45.943820][ T4345]  __dump_stack+0x1d/0x30
[   45.943843][ T4345]  dump_stack_lvl+0xe8/0x140
[   45.943861][ T4345]  dump_stack+0x15/0x1b
[   45.943875][ T4345]  should_fail_ex+0x265/0x280
[   45.943925][ T4345]  should_failslab+0x8c/0xb0
[   45.943948][ T4345]  __kvmalloc_node_noprof+0x123/0x4e0
[   45.943974][ T4345]  ? unix_prepare_fpl+0x154/0x290
[   45.944031][ T4345]  unix_prepare_fpl+0x154/0x290
[   45.944058][ T4345]  unix_scm_to_skb+0x1aa/0x250
[   45.944078][ T4345]  queue_oob+0x84/0x500
[   45.944099][ T4345]  unix_stream_sendmsg+0x7e0/0x8e0
[   45.944188][ T4345]  ? selinux_socket_sendmsg+0x175/0x1b0
[   45.944222][ T4345]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[   45.944316][ T4345]  __sock_sendmsg+0x145/0x180
[   45.944342][ T4345]  ____sys_sendmsg+0x31e/0x4e0
[   45.944414][ T4345]  ___sys_sendmsg+0x17b/0x1d0
[   45.944454][ T4345]  __x64_sys_sendmsg+0xd4/0x160
[   45.944484][ T4345]  x64_sys_call+0x2999/0x2fb0
[   45.944525][ T4345]  do_syscall_64+0xd2/0x200
[   45.944585][ T4345]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   45.944611][ T4345]  ? clear_bhb_loop+0x40/0x90
[   45.944679][ T4345]  ? clear_bhb_loop+0x40/0x90
[   45.944700][ T4345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.944801][ T4345] RIP: 0033:0x7fb8d236e9a9
[   45.944818][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.944833][ T4345] RSP: 002b:00007fb8d09cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   45.944853][ T4345] RAX: ffffffffffffffda RBX: 00007fb8d2595fa0 RCX: 00007fb8d236e9a9
[   45.944866][ T4345] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004
[   45.944878][ T4345] RBP: 00007fb8d09cf090 R08: 0000000000000000 R09: 0000000000000000
[   45.944891][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   45.944903][ T4345] R13: 0000000000000000 R14: 00007fb8d2595fa0 R15: 00007ffc13f5d928
[   45.944976][ T4345]  </TASK>
[   46.187689][ T4347] loop4: detected capacity change from 0 to 512
[   46.194872][ T4347] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   46.203986][ T4347] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[   46.228033][ T4347] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   46.238372][ T4347] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   46.249020][ T4347] System zones: 0-2, 18-18, 34-35
[   46.256020][ T4347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.270884][ T4347] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.271: bg 0: block 353: padding at end of block bitmap is not set
[   46.316164][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.336576][ T4359] loop4: detected capacity change from 0 to 512
[   46.389996][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.436783][ T4359] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.466549][ T4359] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.276: corrupted inode contents
[   46.479403][ T4359] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.276: mark_inode_dirty error
[   46.490964][ T4359] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.276: corrupted inode contents
[   46.518755][ T4359] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.276: mark_inode_dirty error
[   46.541441][ T4359] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.276: mark inode dirty (error -117)
[   46.555088][ T4359] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[   46.593538][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.684656][ T4390] loop2: detected capacity change from 0 to 512
[   46.711494][ T4390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.751470][ T4390] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.808712][ T4390] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.288: corrupted inode contents
[   46.820593][ T4397] loop3: detected capacity change from 0 to 164
[   46.842930][ T4397] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   46.868766][ T4390] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.288: mark_inode_dirty error
[   46.883935][ T4390] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.288: corrupted inode contents
[   46.885353][ T4397] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   46.905959][ T4390] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.288: mark_inode_dirty error
[   46.918860][ T4397] rock: directory entry would overflow storage
[   46.925105][ T4397] rock: sig=0x4f50, size=4, remaining=3
[   46.930654][ T4397] iso9660: Corrupted directory entry in block 4 of inode 1792
[   46.939115][ T4390] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.288: mark inode dirty (error -117)
[   46.951871][ T4390] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   47.056271][ T4404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4404 comm=syz.1.293
[   47.094831][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.113169][ T4406] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   47.233061][ T4416] loop2: detected capacity change from 0 to 512
[   47.245363][ T4416] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   47.253511][ T4416] EXT4-fs (loop2): orphan cleanup on readonly fs
[   47.260727][ T4416] EXT4-fs (loop2): 1 orphan inode deleted
[   47.266796][   T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   47.282724][ T4416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   47.302986][ T4420] loop1: detected capacity change from 0 to 512
[   47.310867][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.334744][ T4420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.347490][ T4420] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.364193][ T4420] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.297: corrupted inode contents
[   47.393941][ T4420] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.297: mark_inode_dirty error
[   47.420027][ T4431] FAULT_INJECTION: forcing a failure.
[   47.420027][ T4431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.433498][ T4431] CPU: 0 UID: 0 PID: 4431 Comm: syz.2.300 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   47.433514][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   47.433525][ T4431] Call Trace:
[   47.433532][ T4431]  <TASK>
[   47.433540][ T4431]  __dump_stack+0x1d/0x30
[   47.433567][ T4431]  dump_stack_lvl+0xe8/0x140
[   47.433609][ T4431]  dump_stack+0x15/0x1b
[   47.433617][ T4431]  should_fail_ex+0x265/0x280
[   47.433711][ T4431]  should_fail+0xb/0x20
[   47.433757][ T4431]  should_fail_usercopy+0x1a/0x20
[   47.433774][ T4431]  _copy_from_user+0x1c/0xb0
[   47.433785][ T4431]  ___sys_sendmsg+0xc1/0x1d0
[   47.433841][ T4431]  __x64_sys_sendmsg+0xd4/0x160
[   47.433859][ T4431]  x64_sys_call+0x2999/0x2fb0
[   47.433871][ T4431]  do_syscall_64+0xd2/0x200
[   47.433881][ T4431]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   47.433932][ T4431]  ? clear_bhb_loop+0x40/0x90
[   47.433944][ T4431]  ? clear_bhb_loop+0x40/0x90
[   47.433955][ T4431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.433966][ T4431] RIP: 0033:0x7f893ecce9a9
[   47.434002][ T4431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   47.434012][ T4431] RSP: 002b:00007f893d32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   47.434023][ T4431] RAX: ffffffffffffffda RBX: 00007f893eef5fa0 RCX: 00007f893ecce9a9
[   47.434030][ T4431] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[   47.434037][ T4431] RBP: 00007f893d32f090 R08: 0000000000000000 R09: 0000000000000000
[   47.434043][ T4431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.434099][ T4431] R13: 0000000000000000 R14: 00007f893eef5fa0 R15: 00007ffc5409a978
[   47.434109][ T4431]  </TASK>
[   47.434396][ T4420] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.297: corrupted inode contents
[   47.498797][ T4435] loop2: detected capacity change from 0 to 512
[   47.603036][ T4437] loop0: detected capacity change from 0 to 512
[   47.615118][ T4420] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.297: mark_inode_dirty error
[   47.647947][ T4420] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.297: mark inode dirty (error -117)
[   47.661343][ T4420] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   47.706330][ T4435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.726008][ T4437] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   47.734891][ T4437] EXT4-fs (loop0): orphan cleanup on readonly fs
[   47.741645][ T4435] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.760821][ T4437] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.304: corrupted inode contents
[   47.772828][ T4439] loop4: detected capacity change from 0 to 8192
[   47.786760][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.800622][ T4435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.302: corrupted inode contents
[   47.812924][ T4439] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   47.825784][ T4437] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.304: mark_inode_dirty error
[   47.825907][ T4435] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.302: mark_inode_dirty error
[   47.888913][ T4437] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.304: corrupted inode contents
[   47.894260][ T4435] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.302: corrupted inode contents
[   47.913408][ T4435] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.302: mark_inode_dirty error
[   47.925685][ T4435] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.302: mark inode dirty (error -117)
[   47.947152][ T4437] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.304: mark_inode_dirty error
[   47.970265][ T4439] 9pnet_fd: Insufficient options for proto=fd
[   47.992033][ T4437] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.304: corrupted inode contents
[   48.006239][ T4435] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   48.016130][ T4437] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   48.028707][ T4437] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.304: corrupted inode contents
[   48.041079][ T4437] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.304: mark_inode_dirty error
[   48.053508][ T4437] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   48.063648][ T4437] EXT4-fs (loop0): 1 truncate cleaned up
[   48.070645][ T2055] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   48.085779][ T4437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.102196][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.122422][ T4459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4459 comm=syz.1.312
[   48.176051][ T4461] loop2: detected capacity change from 0 to 1024
[   48.216404][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.236818][ T4467] loop1: detected capacity change from 0 to 512
[   48.281497][ T4461] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.313: Allocating blocks 449-513 which overlap fs metadata
[   48.311276][ T4465] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14)
[   48.318362][ T4465] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   48.326110][ T4465] vhci_hcd vhci_hcd.0: Device attached
[   48.346643][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.364915][ T4460] EXT4-fs (loop2): pa ffff888107211150: logic 48, phys. 177, len 21
[   48.365516][ T4467] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   48.372970][ T4460] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   48.395604][ T4471] vhci_hcd: connection closed
[   48.396681][ T2055] vhci_hcd: stop threads
[   48.405823][ T2055] vhci_hcd: release socket
[   48.410281][ T2055] vhci_hcd: disconnect device
[   48.430991][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.316: corrupted inode contents
[   48.442966][ T4467] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.316: mark_inode_dirty error
[   48.473499][ T4467] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.316: corrupted inode contents
[   48.492589][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.512041][ T4467] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.316: mark_inode_dirty error
[   48.526518][ T4479] netlink: 'syz.4.318': attribute type 21 has an invalid length.
[   48.534415][ T4479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.318'.
[   48.543499][ T4467] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.316: mark inode dirty (error -117)
[   48.548728][ T4479] loop4: detected capacity change from 0 to 512
[   48.557716][ T4467] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   48.607085][ T4479] loop4: detected capacity change from 0 to 2048
[   48.615507][ T4479] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   48.631038][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.640553][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.646461][ T4484] program syz.2.321 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   48.664351][ T4484] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   48.783350][ T4487] loop0: detected capacity change from 0 to 8192
[   48.841329][ T4499] loop4: detected capacity change from 0 to 512
[   48.873433][ T4499] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   48.882607][ T4499] EXT4-fs (loop4): orphan cleanup on readonly fs
[   48.891065][ T4499] EXT4-fs (loop4): 1 orphan inode deleted
[   48.897251][ T2055] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   48.915034][ T4504] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4504 comm=syz.0.326
[   48.928239][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   48.951443][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.166221][ T4520] @: renamed from vlan0 (while UP)
[   49.228895][ T4531] atomic_op ffff88811ab16128 conn xmit_atomic 0000000000000000
[   49.419481][ T4532] loop0: detected capacity change from 0 to 512
[   49.426230][ T4532] EXT4-fs: Ignoring removed mblk_io_submit option
[   49.432659][ T4532] EXT4-fs: Ignoring removed bh option
[   49.454165][ T4532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   49.511591][ T4532] EXT4-fs (loop0): 1 truncate cleaned up
[   49.518070][ T4532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.568857][ T4538] xt_hashlimit: size too large, truncated to 1048576
[   49.888126][ T4544] loop4: detected capacity change from 0 to 512
[   49.912209][ T4544] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   49.928071][ T4544] EXT4-fs (loop4): orphan cleanup on readonly fs
[   49.954369][ T4544] EXT4-fs (loop4): 1 orphan inode deleted
[   49.960998][   T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   50.039956][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.068381][ T4552] loop0: detected capacity change from 0 to 1024
[   50.082603][ T4544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.131507][ T4556] loop1: detected capacity change from 0 to 512
[   50.140658][ T4552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.198377][ T4556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.212211][ T4552] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.267150][ T4556] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.285255][ T4558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'.
[   50.326761][ T4556] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.344: corrupted inode contents
[   50.341386][ T4556] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.344: mark_inode_dirty error
[   50.356165][ T4552] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.401006][ T4556] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.344: corrupted inode contents
[   50.462158][ T4552] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.483667][ T4556] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.344: mark_inode_dirty error
[   50.505058][ T4556] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.344: mark inode dirty (error -117)
[   50.535730][ T4556] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117)
[   50.547941][ T4570] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.571458][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.623178][ T4552] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.642900][ T4570] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.679139][ T4586] loop9: detected capacity change from 0 to 7
[   50.698640][ T4586] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.718560][ T4588] loop1: detected capacity change from 0 to 512
[   50.722645][ T4552] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.725257][ T4588] ext4: Bad value for 'barrier'
[   50.736616][ T4552] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.749819][ T4552] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.760938][ T4570] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.767396][ T4586] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.779939][ T4586]  loop9: unable to read partition table
[   50.786162][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.800955][ T4586] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[   50.800955][ T4586] 
) failed (rc=-5)
[   50.801942][ T4552] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.824470][ T3650] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.832503][ T3650] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.850941][ T3650] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.859282][ T3650] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.867463][ T3650] Buffer I/O error on dev loop9, logical block 0, async page read
[   50.880342][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.897668][ T4592] netlink: 'syz.4.353': attribute type 10 has an invalid length.
[   50.897855][ T4593] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   50.909386][ T4592] team0: Port device dummy0 added
[   50.921592][ T4592] netlink: 'syz.4.353': attribute type 10 has an invalid length.
[   50.923780][ T4593] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   50.930316][ T4570] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.951369][ T4592] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   50.967415][ T4592] team0: Failed to send options change via netlink (err -105)
[   50.975369][ T4592] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   50.984418][ T4592] team0: Port device dummy0 removed
[   51.030691][ T4570] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.042739][ T4570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.054316][ T4570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.071221][ T4570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.118605][   T29] kauditd_printk_skb: 459 callbacks suppressed
[   51.118619][   T29] audit: type=1400 audit(1753240711.112:2200): avc:  denied  { read write } for  pid=4597 comm="syz.0.355" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.148923][   T29] audit: type=1400 audit(1753240711.112:2201): avc:  denied  { open } for  pid=4597 comm="syz.0.355" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.167636][ T4598] loop0: detected capacity change from 0 to 8192
[   51.180864][   T29] audit: type=1400 audit(1753240711.130:2202): avc:  denied  { map_create } for  pid=4601 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   51.199978][   T29] audit: type=1400 audit(1753240711.130:2203): avc:  denied  { map_read map_write } for  pid=4601 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   51.219879][   T29] audit: type=1400 audit(1753240711.168:2204): avc:  denied  { ioctl } for  pid=4597 comm="syz.0.355" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   51.253142][   T29] audit: type=1400 audit(1753240711.214:2205): avc:  denied  { mounton } for  pid=4597 comm="syz.0.355" path="/68/file1" dev="tmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   51.275774][   T29] audit: type=1400 audit(1753240711.224:2206): avc:  denied  { mount } for  pid=4597 comm="syz.0.355" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   51.297731][   T29] audit: type=1400 audit(1753240711.224:2207): avc:  denied  { bpf } for  pid=4597 comm="syz.0.355" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.318222][   T29] audit: type=1400 audit(1753240711.224:2208): avc:  denied  { prog_load } for  pid=4597 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   51.337258][   T29] audit: type=1400 audit(1753240711.224:2209): avc:  denied  { perfmon } for  pid=4597 comm="syz.0.355" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   51.440340][ T4610] loop3: detected capacity change from 0 to 8192
[   51.705157][ T4619] xt_hashlimit: size too large, truncated to 1048576
[   51.829242][ T4621] loop1: detected capacity change from 0 to 512
[   51.910628][ T4621] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   52.041794][ T4621] EXT4-fs (loop1): orphan cleanup on readonly fs
[   52.109760][ T4621] EXT4-fs (loop1): 1 orphan inode deleted
[   52.115935][ T2055] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   52.217520][ T4630] loop2: detected capacity change from 0 to 512
[   52.312954][ T4630] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   52.321074][ T4630] EXT4-fs (loop2): orphan cleanup on readonly fs
[   52.333809][ T4630] EXT4-fs (loop2): 1 orphan inode deleted
[   52.469186][ T2055] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   52.487887][ T4634] FAULT_INJECTION: forcing a failure.
[   52.487887][ T4634] name failslab, interval 1, probability 0, space 0, times 0
[   52.500602][ T4634] CPU: 0 UID: 0 PID: 4634 Comm: syz.0.367 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   52.500629][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.500687][ T4634] Call Trace:
[   52.500693][ T4634]  <TASK>
[   52.500701][ T4634]  __dump_stack+0x1d/0x30
[   52.500720][ T4634]  dump_stack_lvl+0xe8/0x140
[   52.500738][ T4634]  dump_stack+0x15/0x1b
[   52.500752][ T4634]  should_fail_ex+0x265/0x280
[   52.500839][ T4634]  ? p9_client_create+0x59/0xbc0
[   52.500863][ T4634]  should_failslab+0x8c/0xb0
[   52.500956][ T4634]  __kmalloc_cache_noprof+0x4c/0x320
[   52.501021][ T4634]  ? bpf_trace_run3+0x12c/0x1d0
[   52.501114][ T4634]  p9_client_create+0x59/0xbc0
[   52.501138][ T4634]  ? should_failslab+0x8c/0xb0
[   52.501155][ T4634]  ? __kmalloc_node_track_caller_noprof+0x1e5/0x410
[   52.501244][ T4634]  ? v9fs_session_init+0x78/0xde0
[   52.501271][ T4634]  v9fs_session_init+0xf7/0xde0
[   52.501296][ T4634]  ? obj_cgroup_charge_account+0x122/0x1a0
[   52.501405][ T4634]  ? __rcu_read_unlock+0x4f/0x70
[   52.501425][ T4634]  ? should_fail_ex+0xdb/0x280
[   52.501452][ T4634]  ? v9fs_mount+0x51/0x590
[   52.501475][ T4634]  ? should_failslab+0x8c/0xb0
[   52.501492][ T4634]  ? __kmalloc_cache_noprof+0x189/0x320
[   52.501544][ T4634]  v9fs_mount+0x67/0x590
[   52.501571][ T4634]  ? __pfx_v9fs_mount+0x10/0x10
[   52.501598][ T4634]  legacy_get_tree+0x75/0xd0
[   52.501639][ T4634]  vfs_get_tree+0x57/0x1d0
[   52.501707][ T4634]  do_new_mount+0x207/0x680
[   52.501732][ T4634]  path_mount+0x4a4/0xb20
[   52.501783][ T4634]  ? user_path_at+0x109/0x130
[   52.501860][ T4634]  __se_sys_mount+0x28f/0x2e0
[   52.501937][ T4634]  ? fput+0x8f/0xc0
[   52.501961][ T4634]  __x64_sys_mount+0x67/0x80
[   52.501987][ T4634]  x64_sys_call+0xd36/0x2fb0
[   52.502023][ T4634]  do_syscall_64+0xd2/0x200
[   52.502039][ T4634]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   52.502067][ T4634]  ? clear_bhb_loop+0x40/0x90
[   52.502083][ T4634]  ? clear_bhb_loop+0x40/0x90
[   52.502100][ T4634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.502137][ T4634] RIP: 0033:0x7fbe8189e9a9
[   52.502153][ T4634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.502184][ T4634] RSP: 002b:00007fbe7feff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   52.502203][ T4634] RAX: ffffffffffffffda RBX: 00007fbe81ac5fa0 RCX: 00007fbe8189e9a9
[   52.502214][ T4634] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[   52.502256][ T4634] RBP: 00007fbe7feff090 R08: 0000200000000240 R09: 0000000000000000
[   52.502311][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   52.502323][ T4634] R13: 0000000000000000 R14: 00007fbe81ac5fa0 R15: 00007ffeaaa58678
[   52.502341][ T4634]  </TASK>
[   52.775517][ T4636] netlink: 'syz.3.368': attribute type 12 has an invalid length.
[   52.804245][ T4630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.817533][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   52.995685][ T4652] loop0: detected capacity change from 0 to 8192
[   53.024832][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.036957][ T4652] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.104931][ T4657] loop3: detected capacity change from 0 to 512
[   53.123751][ T4657] ext4: Bad value for 'barrier'
[   53.201394][ T4664] siw: device registration error -23
[   53.318958][ T4675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=4675 comm=syz.0.383
[   53.391028][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'.
[   53.545313][ T4690] loop2: detected capacity change from 0 to 2048
[   53.573663][ T4690] ext4: Unknown parameter 'smackfsfloor'
[   53.681371][ T4700] tipc: Started in network mode
[   53.686323][ T4700] tipc: Node identity a68d4e0d4e48, cluster identity 4711
[   53.693550][ T4690] loop2: detected capacity change from 0 to 8192
[   53.693619][ T4700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.705875][ T4700] syzkaller0: entered promiscuous mode
[   53.712215][ T4700] syzkaller0: entered allmulticast mode
[   53.723127][ T4690] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   53.768616][ T4700] team0 (unregistering): Port device team_slave_0 removed
[   53.787448][ T4703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4703 comm=syz.2.393
[   53.802875][ T4700] team0 (unregistering): Port device team_slave_1 removed
[   53.810121][ T4704] loop4: detected capacity change from 0 to 512
[   53.835324][ T4700] team0 (unregistering): Port device dummy0 removed
[   53.848170][ T4704] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.859818][ T4704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.392: bg 0: block 328: padding at end of block bitmap is not set
[   53.876201][ T4704] program syz.4.392 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.015846][ T4699] tipc: Resetting bearer <eth:syzkaller0>
[   54.034744][ T4699] tipc: Disabling bearer <eth:syzkaller0>
[   54.477211][ T4720] loop2: detected capacity change from 0 to 512
[   54.536478][ T4720] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   54.544855][ T4720] EXT4-fs (loop2): orphan cleanup on readonly fs
[   54.553719][ T4720] EXT4-fs (loop2): 1 orphan inode deleted
[   54.594632][ T4724] loop3: detected capacity change from 0 to 512
[   54.601581][ T4724] EXT4-fs: Ignoring removed mblk_io_submit option
[   54.616291][ T4724] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   54.630018][ T4724] EXT4-fs (loop3): 1 truncate cleaned up
[   54.645476][ T4724] xt_hashlimit: max too large, truncated to 1048576
[   54.813845][ T4727] loop0: detected capacity change from 0 to 128
[   54.868401][ T1897] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   54.938162][ T4727] syz.0.397: attempt to access beyond end of device
[   54.938162][ T4727] loop0: rw=2049, sector=140, nr_sectors = 8 limit=128
[   54.955541][ T4727] syz.0.397: attempt to access beyond end of device
[   54.955541][ T4727] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128
[   54.968943][ T4727] Buffer I/O error on dev loop0, logical block 156, lost async page write
[   54.986676][ T4727] syz.0.397: attempt to access beyond end of device
[   54.986676][ T4727] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128
[   55.000046][ T4727] Buffer I/O error on dev loop0, logical block 157, lost async page write
[   55.014877][ T4727] syz.0.397: attempt to access beyond end of device
[   55.014877][ T4727] loop0: rw=2049, sector=158, nr_sectors = 1 limit=128
[   55.028225][ T4727] Buffer I/O error on dev loop0, logical block 158, lost async page write
[   55.036809][ T4727] syz.0.397: attempt to access beyond end of device
[   55.036809][ T4727] loop0: rw=2049, sector=159, nr_sectors = 1 limit=128
[   55.068422][ T4727] syz.0.397: attempt to access beyond end of device
[   55.068422][ T4727] loop0: rw=2049, sector=160, nr_sectors = 1 limit=128
[   55.127061][ T3308] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /67/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.132474][ T4727] syz.0.397: attempt to access beyond end of device
[   55.132474][ T4727] loop0: rw=2049, sector=161, nr_sectors = 1 limit=128
[   55.162799][ T4727] syz.0.397: attempt to access beyond end of device
[   55.162799][ T4727] loop0: rw=2049, sector=132, nr_sectors = 1 limit=128
[   55.177070][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.197473][ T4732] loop1: detected capacity change from 0 to 512
[   55.198828][ T4727] syz.0.397: attempt to access beyond end of device
[   55.198828][ T4727] loop0: rw=2049, sector=133, nr_sectors = 1 limit=128
[   55.229989][ T4732] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.243985][ T4727] syz.0.397: attempt to access beyond end of device
[   55.243985][ T4727] loop0: rw=2049, sector=150, nr_sectors = 1 limit=128
[   55.260808][ T3308] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /67/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.297320][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.305218][ T4732] veth0_vlan: entered allmulticast mode
[   55.325427][ T3308] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /67/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.356786][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.381681][ T4738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.400'.
[   55.398278][ T3308] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /67/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.427805][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.464195][ T3308] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /67/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   55.486894][ T3308] EXT4-fs error (device loop3): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   55.789770][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'.
[   55.912273][ T4767] loop1: detected capacity change from 0 to 512
[   55.990246][ T4767] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.001706][ T4767] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.411: bg 0: block 328: padding at end of block bitmap is not set
[   56.018625][ T4767] program syz.1.411 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.174080][ T4773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4773 comm=syz.4.413
[   56.210616][ T4778] netlink: 12 bytes leftover after parsing attributes in process `kfree'.
[   56.254532][ T4786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4786 comm=syz.1.418
[   56.274147][ T4788] loop4: detected capacity change from 0 to 764
[   56.281275][ T4788] iso9660: Unknown parameter '0xffffffffffffffff'
[   56.304985][ T4788] tmpfs: Unknown parameter 'q©Ô¹(>Å'
[   56.315628][ T4792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'.
[   56.331244][ T4794] loop4: detected capacity change from 0 to 256
[   56.359877][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.367421][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.375500][ T4796] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.383009][ T4796] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.417212][ T4797] netlink: 5 bytes leftover after parsing attributes in process `syz.4.423'.
[   56.459279][ T4800] syzkaller1: entered promiscuous mode
[   56.464760][ T4800] syzkaller1: entered allmulticast mode
[   56.496700][   T29] kauditd_printk_skb: 215 callbacks suppressed
[   56.496715][   T29] audit: type=1400 audit(1753240716.144:2422): avc:  denied  { watch } for  pid=4801 comm="syz.2.425" path="/110" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   56.524886][   T29] audit: type=1400 audit(1753240716.144:2423): avc:  denied  { watch_reads } for  pid=4801 comm="syz.2.425" path="/110" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   56.616907][ T4804] loop2: detected capacity change from 0 to 8192
[   56.617676][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[   56.635750][ T4806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'.
[   56.645386][   T29] audit: type=1400 audit(1753240716.284:2424): avc:  denied  { mount } for  pid=4805 comm="syz.1.427" name="/" dev="hugetlbfs" ino=8489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   56.694083][   T29] audit: type=1400 audit(1753240716.340:2425): avc:  denied  { unmount } for  pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[   56.721184][ T4808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'.
[   56.742698][ T4808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'.
[   56.759009][   T29] audit: type=1400 audit(1753240716.397:2426): avc:  denied  { create } for  pid=4811 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   56.780250][   T29] audit: type=1400 audit(1753240716.415:2427): avc:  denied  { write } for  pid=4811 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   56.780340][ T4812] siw: device registration error -23
[   56.811994][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.968552][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.985319][   T29] audit: type=1400 audit(1753240716.602:2428): avc:  denied  { mounton } for  pid=4821 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   57.101866][ T4825] loop4: detected capacity change from 0 to 512
[   57.111343][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.121297][   T29] audit: type=1400 audit(1753240716.687:2429): avc:  denied  { firmware_load } for  pid=4816 comm="syz.4.433" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   57.229516][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.303632][ T4825] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   57.311898][ T4825] EXT4-fs (loop4): orphan cleanup on readonly fs
[   57.321557][ T4825] EXT4-fs (loop4): 1 orphan inode deleted
[   57.352609][   T31] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   57.362434][   T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   57.374459][   T29] audit: type=1400 audit(1753240716.948:2430): avc:  denied  { read } for  pid=3036 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   57.442036][   T12] bridge_slave_1: left allmulticast mode
[   57.447723][   T12] bridge_slave_1: left promiscuous mode
[   57.453440][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.463628][   T12] bridge_slave_0: left allmulticast mode
[   57.469598][   T12] bridge_slave_0: left promiscuous mode
[   57.475543][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.754284][   T31] smc: removing ib device syz1
[   57.832323][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.856367][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.880571][   T12] bond0 (unregistering): Released all slaves
[   57.880755][ T4865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4865 comm=syz.4.441
[   57.905947][   T23] syz1: Port: 1 Link DOWN
[   57.963129][ T4870] siw: device registration error -23
[   58.003631][ T4877] loop4: detected capacity change from 0 to 512
[   58.016443][ T4877] EXT4-fs: Ignoring removed i_version option
[   58.037327][ T4877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   58.085430][ T4877] EXT4-fs (loop4): 1 truncate cleaned up
[   58.118148][ T4877] EXT4-fs error (device loop4): ext4_nfs_get_inode:1525: inode #11: comm syz.4.443: iget: bad extra_isize 46 (inode size 256)
[   58.190424][   T12] hsr_slave_0: left promiscuous mode
[   58.197541][   T12] hsr_slave_1: left promiscuous mode
[   58.211039][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.218541][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.261918][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.269453][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.280363][   T12] veth1_macvtap: left promiscuous mode
[   58.285877][   T12] veth0_macvtap: left promiscuous mode
[   58.291739][   T12] veth1_vlan: left promiscuous mode
[   58.297023][   T12] veth0_vlan: left promiscuous mode
[   58.435937][ T4904] loop4: detected capacity change from 0 to 512
[   58.448183][   T12] team0 (unregistering): Port device team_slave_1 removed
[   58.466940][   T12] team0 (unregistering): Port device team_slave_0 removed
[   58.595415][ T4906] loop1: detected capacity change from 0 to 512
[   58.655241][ T4906] EXT4-fs: Ignoring removed mblk_io_submit option
[   58.738199][ T4821] chnl_net:caif_netlink_parms(): no params data found
[   58.751554][ T4911] siw: device registration error -23
[   58.804902][ T4906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   58.813723][ T4904] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   58.822005][ T4904] EXT4-fs (loop4): orphan cleanup on readonly fs
[   58.829755][ T4904] EXT4-fs (loop4): 1 orphan inode deleted
[   58.837834][   T41] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   58.870017][ T4906] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   58.953769][ T4821] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.960903][ T4821] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.979328][ T4821] bridge_slave_0: entered allmulticast mode
[   58.998007][ T4821] bridge_slave_0: entered promiscuous mode
[   59.016887][ T4821] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.024033][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.037358][ T4821] bridge_slave_1: entered allmulticast mode
[   59.043814][ T4821] bridge_slave_1: entered promiscuous mode
[   59.050014][ T4858] chnl_net:caif_netlink_parms(): no params data found
[   59.084538][ T4821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.209643][ T4821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.231975][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.239182][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.262940][ T4858] bridge_slave_0: entered allmulticast mode
[   59.277178][ T4858] bridge_slave_0: entered promiscuous mode
[   59.323901][ T4821] team0: Port device team_slave_0 added
[   59.344965][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.352125][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.382954][ T4858] bridge_slave_1: entered allmulticast mode
[   59.389398][ T4858] bridge_slave_1: entered promiscuous mode
[   59.396508][ T4821] team0: Port device team_slave_1 added
[   59.427070][ T4952] __nla_validate_parse: 5 callbacks suppressed
[   59.427083][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'.
[   59.444155][ T4858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.461739][ T1577] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.494661][ T4858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.508729][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.515810][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.541915][ T4821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.566019][ T1577] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.577373][ T4821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.584383][ T4821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.610446][ T4821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.624516][ T4966] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   59.626526][ T4858] team0: Port device team_slave_0 added
[   59.632696][ T4966] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   59.649628][ T4858] team0: Port device team_slave_1 added
[   59.656570][ T1577] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.696101][ T4821] hsr_slave_0: entered promiscuous mode
[   59.702682][ T4821] hsr_slave_1: entered promiscuous mode
[   59.708549][ T4821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   59.716107][ T4821] Cannot create hsr debugfs directory
[   59.722244][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.729196][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.755229][ T4858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.853509][ T4977] loop4: detected capacity change from 0 to 512
[   59.872001][ T4977] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.885651][ T4977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.457: bg 0: block 328: padding at end of block bitmap is not set
[   59.903138][ T4977] program syz.4.457 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   59.940353][ T1577] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.953274][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.960275][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.986328][ T4858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.095950][ T4858] hsr_slave_0: entered promiscuous mode
[   60.102380][ T4858] hsr_slave_1: entered promiscuous mode
[   60.127029][ T4858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   60.135301][ T4858] Cannot create hsr debugfs directory
[   60.273129][ T1577] bridge_slave_1: left allmulticast mode
[   60.278823][ T1577] bridge_slave_1: left promiscuous mode
[   60.284496][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.304444][ T1577] bridge_slave_0: left allmulticast mode
[   60.310141][ T1577] bridge_slave_0: left promiscuous mode
[   60.315789][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.401450][ T5011] loop1: detected capacity change from 0 to 8192
[   60.430876][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.450786][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.461220][ T1577] bond0 (unregistering): Released all slaves
[   60.529788][ T1577] hsr_slave_0: left promiscuous mode
[   60.545260][ T1577] hsr_slave_1: left promiscuous mode
[   60.551056][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.558627][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.585896][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.593392][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.613762][ T1577] veth1_macvtap: left promiscuous mode
[   60.629885][ T1577] veth0_macvtap: left promiscuous mode
[   60.633712][ T5035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'.
[   60.636548][ T1577] veth1_vlan: left promiscuous mode
[   60.650346][ T1577] veth0_vlan: left promiscuous mode
[   60.728639][ T1577] team0 (unregistering): Port device team_slave_1 removed
[   60.739010][ T1577] team0 (unregistering): Port device team_slave_0 removed
[   60.790155][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'.
[   60.818250][ T5035] syz.4.465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   60.822326][ T4821] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   60.847931][ T4821] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   60.856768][ T4821] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   60.872617][ T4821] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   60.888046][ T4858] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   60.915392][ T4858] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   60.927741][ T5052] xt_hashlimit: size too large, truncated to 1048576
[   60.958080][ T4858] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   60.971748][ T5057] capability: warning: `syz.4.467' uses deprecated v2 capabilities in a way that may be insecure
[   61.015517][ T4858] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   61.038397][ T5061] loop4: detected capacity change from 0 to 128
[   61.045131][ T5061] EXT4-fs: Ignoring removed nobh option
[   61.069216][ T5061] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   61.105585][ T5061] FAULT_INJECTION: forcing a failure.
[   61.105585][ T5061] name failslab, interval 1, probability 0, space 0, times 0
[   61.118306][ T5061] CPU: 1 UID: 0 PID: 5061 Comm: syz.4.468 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   61.118333][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   61.118351][ T5061] Call Trace:
[   61.118359][ T5061]  <TASK>
[   61.118367][ T5061]  __dump_stack+0x1d/0x30
[   61.118434][ T5061]  dump_stack_lvl+0xe8/0x140
[   61.118453][ T5061]  dump_stack+0x15/0x1b
[   61.118470][ T5061]  should_fail_ex+0x265/0x280
[   61.118502][ T5061]  should_failslab+0x8c/0xb0
[   61.118582][ T5061]  __kmalloc_noprof+0xa5/0x3e0
[   61.118607][ T5061]  ? security_prepare_creds+0x52/0x120
[   61.118632][ T5061]  security_prepare_creds+0x52/0x120
[   61.118654][ T5061]  prepare_creds+0x34a/0x4c0
[   61.118756][ T5061]  prepare_exec_creds+0x14/0xe0
[   61.118778][ T5061]  bprm_execve+0x70/0x970
[   61.118844][ T5061]  ? copy_string_kernel+0x30d/0x340
[   61.118872][ T5061]  do_execveat_common+0x6e6/0x750
[   61.118901][ T5061]  ? getname_flags+0x154/0x3b0
[   61.118998][ T5061]  __x64_sys_execveat+0x73/0x90
[   61.119027][ T5061]  x64_sys_call+0x2dae/0x2fb0
[   61.119048][ T5061]  do_syscall_64+0xd2/0x200
[   61.119070][ T5061]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   61.119100][ T5061]  ? clear_bhb_loop+0x40/0x90
[   61.119158][ T5061]  ? clear_bhb_loop+0x40/0x90
[   61.119190][ T5061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.119210][ T5061] RIP: 0033:0x7f1f0037e9a9
[   61.119226][ T5061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.119247][ T5061] RSP: 002b:00007f1efe9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[   61.119266][ T5061] RAX: ffffffffffffffda RBX: 00007f1f005a5fa0 RCX: 00007f1f0037e9a9
[   61.119279][ T5061] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[   61.119292][ T5061] RBP: 00007f1efe9e7090 R08: 0000000000001000 R09: 0000000000000000
[   61.119305][ T5061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   61.119318][ T5061] R13: 0000000000000000 R14: 00007f1f005a5fa0 R15: 00007ffc52649208
[   61.119345][ T5061]  </TASK>
[   61.333569][ T4821] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.358803][ T4821] 8021q: adding VLAN 0 to HW filter on device team0
[   61.479085][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.486200][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.508518][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.515703][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.526995][ T5083] xt_hashlimit: size too large, truncated to 1048576
[   61.607236][ T4821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.678733][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.690308][ T4858] 8021q: adding VLAN 0 to HW filter on device team0
[   61.718624][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.725701][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.790912][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.798004][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.830199][ T5109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'.
[   61.855804][ T4821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.880518][ T5111] loop2: detected capacity change from 0 to 8192
[   61.891190][ T4858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.901655][ T4858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.924967][ T5111] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   62.059861][ T4858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.072319][ T5134] FAULT_INJECTION: forcing a failure.
[   62.072319][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.085452][ T5134] CPU: 0 UID: 0 PID: 5134 Comm: syz.4.476 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   62.085525][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   62.085537][ T5134] Call Trace:
[   62.085543][ T5134]  <TASK>
[   62.085549][ T5134]  __dump_stack+0x1d/0x30
[   62.085569][ T5134]  dump_stack_lvl+0xe8/0x140
[   62.085592][ T5134]  dump_stack+0x15/0x1b
[   62.085608][ T5134]  should_fail_ex+0x265/0x280
[   62.085635][ T5134]  should_fail+0xb/0x20
[   62.085659][ T5134]  should_fail_usercopy+0x1a/0x20
[   62.085731][ T5134]  copy_folio_from_iter_atomic+0x278/0x1170
[   62.085756][ T5134]  ? shmem_write_begin+0xa8/0x190
[   62.085784][ T5134]  ? shmem_write_begin+0xe1/0x190
[   62.085870][ T5134]  generic_perform_write+0x2c2/0x490
[   62.085894][ T5134]  shmem_file_write_iter+0xc5/0xf0
[   62.085959][ T5134]  ? __pfx_shmem_file_write_iter+0x10/0x10
[   62.086017][ T5134]  vfs_write+0x49d/0x8e0
[   62.086049][ T5134]  ksys_write+0xda/0x1a0
[   62.086083][ T5134]  __x64_sys_write+0x40/0x50
[   62.086111][ T5134]  x64_sys_call+0x2cdd/0x2fb0
[   62.086132][ T5134]  do_syscall_64+0xd2/0x200
[   62.086151][ T5134]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   62.086216][ T5134]  ? clear_bhb_loop+0x40/0x90
[   62.086269][ T5134]  ? clear_bhb_loop+0x40/0x90
[   62.086289][ T5134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.086308][ T5134] RIP: 0033:0x7f1f0037e9a9
[   62.086323][ T5134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.086338][ T5134] RSP: 002b:00007f1efe9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   62.086417][ T5134] RAX: ffffffffffffffda RBX: 00007f1f005a5fa0 RCX: 00007f1f0037e9a9
[   62.086507][ T5134] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009
[   62.086517][ T5134] RBP: 00007f1efe9e7090 R08: 0000000000000000 R09: 0000000000000000
[   62.086528][ T5134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.086540][ T5134] R13: 0000000000000000 R14: 00007f1f005a5fa0 R15: 00007ffc52649208
[   62.086559][ T5134]  </TASK>
[   62.396088][ T4821] veth0_vlan: entered promiscuous mode
[   62.401973][   T29] kauditd_printk_skb: 92 callbacks suppressed
[   62.401985][   T29] audit: type=1326 audit(1753240721.663:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.431512][   T29] audit: type=1326 audit(1753240721.663:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.440443][ T4821] veth1_vlan: entered promiscuous mode
[   62.454863][   T29] audit: type=1326 audit(1753240721.663:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.487911][   T29] audit: type=1400 audit(1753240721.672:2525): avc:  denied  { execute } for  pid=5147 comm="syz.4.479" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[   62.523362][   T29] audit: type=1326 audit(1753240721.784:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.557950][ T4821] veth0_macvtap: entered promiscuous mode
[   62.581348][ T4821] veth1_macvtap: entered promiscuous mode
[   62.589471][   T29] audit: type=1326 audit(1753240721.813:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.612906][   T29] audit: type=1326 audit(1753240721.813:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.636463][   T29] audit: type=1326 audit(1753240721.813:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.659902][   T29] audit: type=1326 audit(1753240721.813:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.683364][   T29] audit: type=1326 audit(1753240721.813:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893ecce9a9 code=0x7ffc0000
[   62.720562][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.731063][ T4821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.739271][ T4821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.748231][ T4821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.750155][ T5157] loop2: detected capacity change from 0 to 8192
[   62.756962][ T4821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.772082][ T4821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.935587][ T4858] veth0_vlan: entered promiscuous mode
[   62.955799][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'.
[   62.965081][ T4858] veth1_vlan: entered promiscuous mode
[   63.002941][ T4858] veth0_macvtap: entered promiscuous mode
[   63.018518][ T4858] veth1_macvtap: entered promiscuous mode
[   63.073216][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.085026][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.096071][ T4858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.104825][ T4858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.113773][ T4858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.122734][ T4858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.197269][ T5212] loop2: detected capacity change from 0 to 512
[   63.216005][ T5212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   63.313458][ T5221] loop1: detected capacity change from 0 to 512
[   63.333229][ T5221] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   63.341668][ T5216] FAULT_INJECTION: forcing a failure.
[   63.341668][ T5216] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.354759][ T5216] CPU: 1 UID: 0 PID: 5216 Comm: syz.6.437 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   63.354786][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.354866][ T5216] Call Trace:
[   63.354873][ T5216]  <TASK>
[   63.354881][ T5216]  __dump_stack+0x1d/0x30
[   63.354902][ T5216]  dump_stack_lvl+0xe8/0x140
[   63.354920][ T5216]  dump_stack+0x15/0x1b
[   63.354986][ T5216]  should_fail_ex+0x265/0x280
[   63.355015][ T5216]  should_fail+0xb/0x20
[   63.355037][ T5216]  should_fail_usercopy+0x1a/0x20
[   63.355130][ T5216]  fpu__restore_sig+0x12d/0xaa0
[   63.355217][ T5216]  ? should_fail_ex+0xdb/0x280
[   63.355254][ T5216]  __ia32_sys_rt_sigreturn+0x29f/0x350
[   63.355279][ T5216]  x64_sys_call+0x2e8a/0x2fb0
[   63.355308][ T5216]  do_syscall_64+0xd2/0x200
[   63.355323][ T5216]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   63.355345][ T5216]  ? clear_bhb_loop+0x40/0x90
[   63.355362][ T5216]  ? clear_bhb_loop+0x40/0x90
[   63.355439][ T5216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.355461][ T5216] RIP: 0033:0x7fc7fd6ce9a7
[   63.355476][ T5216] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[   63.355493][ T5216] RSP: 002b:00007fc7fbd2f038 EFLAGS: 00000246
[   63.355509][ T5216] RAX: 0000000000000116 RBX: 00007fc7fd8f5fa0 RCX: 00007fc7fd6ce9a9
[   63.355519][ T5216] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[   63.355529][ T5216] RBP: 00007fc7fbd2f090 R08: 0000000000000000 R09: 0000000000000000
[   63.355580][ T5216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   63.355590][ T5216] R13: 0000000000000000 R14: 00007fc7fd8f5fa0 R15: 00007ffc0cf9f5e8
[   63.355604][ T5216]  </TASK>
[   63.554907][ T5221] EXT4-fs (loop1): orphan cleanup on readonly fs
[   63.561897][ T5212] EXT4-fs (loop2): 1 truncate cleaned up
[   63.571617][ T5218] loop4: detected capacity change from 0 to 512
[   63.578852][ T5221] EXT4-fs (loop1): 1 orphan inode deleted
[   63.583897][ T5218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   63.596088][ T1897] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   63.622504][ T5218] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   63.672384][ T5218] EXT4-fs (loop4): 1 truncate cleaned up
[   64.137287][ T5268] loop4: detected capacity change from 0 to 8192
[   64.453600][ T5283] loop5: detected capacity change from 0 to 2048
[   64.519854][ T3650]  loop5: p1 < > p2 p3 < p5 p6 > p4
[   64.525148][ T3650] loop5: partition table partially beyond EOD, truncated
[   64.548477][ T3650] loop5: p1 start 4278190080 is beyond EOD, truncated
[   64.555404][ T3650] loop5: p2 start 16908800 is beyond EOD, truncated
[   64.567288][ T5288] loop6: detected capacity change from 0 to 764
[   64.598190][ T3650] loop5: p5 start 16908800 is beyond EOD, truncated
[   64.601937][ T5288] iso9660: Unknown parameter '0xffffffffffffffff'
[   64.654706][ T5288] tmpfs: Unknown parameter 'q©Ô¹(>Å'
[   64.665117][ T5283]  loop5: p1 < > p2 p3 < p5 p6 > p4
[   64.670487][ T5283] loop5: partition table partially beyond EOD, truncated
[   64.691130][ T5283] loop5: p1 start 4278190080 is beyond EOD, truncated
[   64.697938][ T5283] loop5: p2 start 16908800 is beyond EOD, truncated
[   64.747611][ T5283] loop5: p5 start 16908800 is beyond EOD, truncated
[   64.793765][ T5312] loop6: detected capacity change from 0 to 512
[   64.811459][ T5299] loop1: detected capacity change from 0 to 8192
[   64.840886][ T5299] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   64.886798][ T5312] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.921872][ T5312] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.504: corrupted inode contents
[   64.937463][ T5312] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.504: mark_inode_dirty error
[   64.949265][ T5212] syz.2.486 (5212) used greatest stack depth: 6064 bytes left
[   64.950509][ T5312] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.504: corrupted inode contents
[   64.985260][ T5312] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.504: mark_inode_dirty error
[   65.008929][ T5312] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.504: mark inode dirty (error -117)
[   65.024463][ T5312] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[   65.135448][ T5339] loop6: detected capacity change from 0 to 1024
[   65.147301][ T5337] loop2: detected capacity change from 0 to 8192
[   65.232354][ T5339] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.507: Allocating blocks 449-513 which overlap fs metadata
[   65.257020][ T5338] EXT4-fs (loop6): pa ffff8881007bf770: logic 48, phys. 177, len 21
[   65.265051][ T5338] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   65.339650][ T5358] FAULT_INJECTION: forcing a failure.
[   65.339650][ T5358] name failslab, interval 1, probability 0, space 0, times 0
[   65.352319][ T5358] CPU: 0 UID: 0 PID: 5358 Comm: syz.2.510 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   65.352342][ T5358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   65.352353][ T5358] Call Trace:
[   65.352358][ T5358]  <TASK>
[   65.352364][ T5358]  __dump_stack+0x1d/0x30
[   65.352486][ T5358]  dump_stack_lvl+0xe8/0x140
[   65.352503][ T5358]  dump_stack+0x15/0x1b
[   65.352518][ T5358]  should_fail_ex+0x265/0x280
[   65.352546][ T5358]  should_failslab+0x8c/0xb0
[   65.352641][ T5358]  kmem_cache_alloc_noprof+0x50/0x310
[   65.352665][ T5358]  ? skb_clone+0x151/0x1f0
[   65.352737][ T5358]  skb_clone+0x151/0x1f0
[   65.352752][ T5358]  __netlink_deliver_tap+0x2c9/0x500
[   65.352783][ T5358]  netlink_unicast+0x653/0x680
[   65.352876][ T5358]  netlink_sendmsg+0x58b/0x6b0
[   65.352893][ T5358]  ? __pfx_netlink_sendmsg+0x10/0x10
[   65.352910][ T5358]  __sock_sendmsg+0x145/0x180
[   65.352933][ T5358]  ____sys_sendmsg+0x31e/0x4e0
[   65.352983][ T5358]  ___sys_sendmsg+0x17b/0x1d0
[   65.353068][ T5358]  __x64_sys_sendmsg+0xd4/0x160
[   65.353098][ T5358]  x64_sys_call+0x2999/0x2fb0
[   65.353118][ T5358]  do_syscall_64+0xd2/0x200
[   65.353165][ T5358]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   65.353191][ T5361] xt_hashlimit: size too large, truncated to 1048576
[   65.353201][ T5358]  ? clear_bhb_loop+0x40/0x90
[   65.353220][ T5358]  ? clear_bhb_loop+0x40/0x90
[   65.353265][ T5358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.353285][ T5358] RIP: 0033:0x7f893ecce9a9
[   65.353301][ T5358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.353317][ T5358] RSP: 002b:00007f893d32f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   65.353335][ T5358] RAX: ffffffffffffffda RBX: 00007f893eef5fa0 RCX: 00007f893ecce9a9
[   65.353347][ T5358] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[   65.353399][ T5358] RBP: 00007f893d32f090 R08: 0000000000000000 R09: 0000000000000000
[   65.353410][ T5358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.353422][ T5358] R13: 0000000000000000 R14: 00007f893eef5fa0 R15: 00007ffc5409a978
[   65.353439][ T5358]  </TASK>
[   65.382331][ T5359] loop1: detected capacity change from 0 to 512
[   65.663312][ T5369] lo speed is unknown, defaulting to 1000
[   65.687874][ T5369] lo speed is unknown, defaulting to 1000
[   65.699865][ T5369] lo speed is unknown, defaulting to 1000
[   65.709575][ T5369] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.740785][ T5359] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   65.769805][ T5359] EXT4-fs (loop1): orphan cleanup on readonly fs
[   65.784527][ T5369] lo speed is unknown, defaulting to 1000
[   65.790773][ T5369] lo speed is unknown, defaulting to 1000
[   65.802241][ T5369] lo speed is unknown, defaulting to 1000
[   65.804073][ T5359] EXT4-fs (loop1): 1 orphan inode deleted
[   65.813847][   T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1
[   65.843690][ T5369] lo speed is unknown, defaulting to 1000
[   65.869560][ T5369] lo speed is unknown, defaulting to 1000
[   65.908236][ T5379] loop4: detected capacity change from 0 to 8192
[   65.942608][ T5386] loop2: detected capacity change from 0 to 512
[   66.089770][ T5396] loop5: detected capacity change from 0 to 512
[   66.111930][ T5394] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   66.221326][ T5399] loop6: detected capacity change from 0 to 256
[   66.389192][ T5396] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   66.397267][ T5396] EXT4-fs (loop5): orphan cleanup on readonly fs
[   66.405701][ T5396] EXT4-fs (loop5): 1 orphan inode deleted
[   66.411706][ T2055] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   66.425187][ T5386] EXT4-fs mount: 34 callbacks suppressed
[   66.425202][ T5386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.444286][ T5386] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.455079][ T5396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   66.500720][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.518: corrupted inode contents
[   66.516164][ T5399] tmpfs: Bad value for 'mpol'
[   66.532327][ T5386] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.518: mark_inode_dirty error
[   66.554022][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.518: corrupted inode contents
[   66.611026][ T5386] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.518: mark_inode_dirty error
[   66.650936][ T5411] loop6: detected capacity change from 0 to 8192
[   66.653451][ T5386] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.518: mark inode dirty (error -117)
[   66.670175][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.749167][ T5386] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   66.763436][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.852189][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.984948][ T5454] loop4: detected capacity change from 0 to 512
[   67.004224][ T5454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.017035][ T5454] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.030121][ T5454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.532: bg 0: block 328: padding at end of block bitmap is not set
[   67.030680][ T5455] loop1: detected capacity change from 0 to 8192
[   67.059466][ T5455] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   67.070478][ T5454] program syz.4.532 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.247922][ T5462] loop2: detected capacity change from 0 to 8192
[   67.261269][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.309293][ T5467] loop6: detected capacity change from 0 to 8192
[   67.335048][ T5475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.379592][ T5475] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[   67.386370][ T5475] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   67.394205][ T5475] vhci_hcd vhci_hcd.0: Device attached
[   67.409575][ T5480] vhci_hcd: connection closed
[   67.409710][ T2055] vhci_hcd: stop threads
[   67.418876][ T2055] vhci_hcd: release socket
[   67.423391][ T2055] vhci_hcd: disconnect device
[   67.472945][ T5486] loop4: detected capacity change from 0 to 1024
[   67.481905][ T5486] journal_path: Non-blockdev passed as './bus'
[   67.488210][ T5486] EXT4-fs: error: could not find journal device path
[   67.832942][   T29] kauditd_printk_skb: 609 callbacks suppressed
[   67.832957][   T29] audit: type=1326 audit(1753240726.761:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   67.905814][ T5502] FAULT_INJECTION: forcing a failure.
[   67.905814][ T5502] name failslab, interval 1, probability 0, space 0, times 0
[   67.918550][ T5502] CPU: 1 UID: 0 PID: 5502 Comm: syz.6.543 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   67.918627][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   67.918636][ T5502] Call Trace:
[   67.918642][ T5502]  <TASK>
[   67.918649][ T5502]  __dump_stack+0x1d/0x30
[   67.918670][ T5502]  dump_stack_lvl+0xe8/0x140
[   67.918689][ T5502]  dump_stack+0x15/0x1b
[   67.918777][ T5502]  should_fail_ex+0x265/0x280
[   67.918801][ T5502]  should_failslab+0x8c/0xb0
[   67.918822][ T5502]  kmem_cache_alloc_node_noprof+0x57/0x320
[   67.918847][ T5502]  ? __alloc_skb+0x101/0x320
[   67.918938][ T5502]  __alloc_skb+0x101/0x320
[   67.918959][ T5502]  ? audit_log_start+0x365/0x6c0
[   67.918986][ T5502]  audit_log_start+0x380/0x6c0
[   67.919029][ T5502]  audit_seccomp+0x48/0x100
[   67.919079][ T5502]  ? __seccomp_filter+0x68c/0x10d0
[   67.919098][ T5502]  __seccomp_filter+0x69d/0x10d0
[   67.919176][ T5502]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   67.919202][ T5502]  ? vfs_write+0x75e/0x8e0
[   67.919327][ T5502]  ? __rcu_read_unlock+0x4f/0x70
[   67.919348][ T5502]  ? __fget_files+0x184/0x1c0
[   67.919368][ T5502]  __secure_computing+0x82/0x150
[   67.919385][ T5502]  syscall_trace_enter+0xcf/0x1e0
[   67.919450][ T5502]  do_syscall_64+0xac/0x200
[   67.919504][ T5502]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   67.919532][ T5502]  ? clear_bhb_loop+0x40/0x90
[   67.919552][ T5502]  ? clear_bhb_loop+0x40/0x90
[   67.919573][ T5502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.919667][ T5502] RIP: 0033:0x7fc7fd6cd3bc
[   67.919682][ T5502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   67.919696][ T5502] RSP: 002b:00007fc7fbd2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   67.919712][ T5502] RAX: ffffffffffffffda RBX: 00007fc7fd8f5fa0 RCX: 00007fc7fd6cd3bc
[   67.919756][ T5502] RDX: 000000000000000f RSI: 00007fc7fbd2f0a0 RDI: 0000000000000006
[   67.919768][ T5502] RBP: 00007fc7fbd2f090 R08: 0000000000000000 R09: 0000000000000000
[   67.919780][ T5502] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[   67.919790][ T5502] R13: 0000000000000000 R14: 00007fc7fd8f5fa0 R15: 00007ffc0cf9f5e8
[   67.919805][ T5502]  </TASK>
[   67.919814][ T5502] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[   68.043950][   T29] audit: type=1326 audit(1753240726.761:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   68.048239][ T5502] audit: out of memory in audit_log_start
[   68.176567][   T29] audit: type=1326 audit(1753240726.761:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   68.200233][   T29] audit: type=1326 audit(1753240726.761:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   68.224643][   T29] audit: type=1326 audit(1753240726.817:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   68.248051][   T29] audit: type=1326 audit(1753240726.817:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc7fd6cd310 code=0x7ffc0000
[   68.271623][   T29] audit: type=1326 audit(1753240726.817:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc7fd6cd45f code=0x7ffc0000
[   68.295070][   T29] audit: type=1326 audit(1753240726.817:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc7fd6ce9a9 code=0x7ffc0000
[   68.497281][ T5527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5527 comm=syz.1.548
[   68.529314][ T5529] loop1: detected capacity change from 0 to 512
[   68.545931][ T5529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.558559][ T5529] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.573122][ T5529] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.550: bg 0: block 328: padding at end of block bitmap is not set
[   68.589302][ T5529] program syz.1.550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.753278][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.771754][ T5548] loop4: detected capacity change from 0 to 8192
[   68.793071][ T5550] loop1: detected capacity change from 0 to 764
[   68.800059][ T5550] iso9660: Unknown parameter '0xffffffffffffffff'
[   68.810660][ T5550] tmpfs: Unknown parameter 'q©Ô¹(>Å'
[   68.896226][ T5554] loop1: detected capacity change from 0 to 256
[   69.106353][ T5560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.150385][ T5560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.204107][ T5560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.247761][ T5560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.320476][ T5560] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.338527][ T5560] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.347377][ T5567] syzkaller1: entered promiscuous mode
[   69.352985][ T5567] syzkaller1: entered allmulticast mode
[   69.363498][ T5560] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.386787][ T5560] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.448078][ T5578] 9pnet_fd: Insufficient options for proto=fd
[   69.477688][ T5583] FAULT_INJECTION: forcing a failure.
[   69.477688][ T5583] name failslab, interval 1, probability 0, space 0, times 0
[   69.490336][ T5583] CPU: 0 UID: 0 PID: 5583 Comm: syz.6.566 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   69.490361][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   69.490373][ T5583] Call Trace:
[   69.490380][ T5583]  <TASK>
[   69.490387][ T5583]  __dump_stack+0x1d/0x30
[   69.490407][ T5583]  dump_stack_lvl+0xe8/0x140
[   69.490474][ T5583]  dump_stack+0x15/0x1b
[   69.490488][ T5583]  should_fail_ex+0x265/0x280
[   69.490512][ T5583]  should_failslab+0x8c/0xb0
[   69.490532][ T5583]  kmem_cache_alloc_noprof+0x50/0x310
[   69.490573][ T5583]  ? skb_clone+0x151/0x1f0
[   69.490590][ T5583]  skb_clone+0x151/0x1f0
[   69.490604][ T5583]  skb_share_check+0x43/0x80
[   69.490620][ T5583]  ip_check_defrag+0x1e3/0x320
[   69.490639][ T5583]  packet_rcv_fanout+0xd9/0x3d0
[   69.490662][ T5583]  ? __pfx_packet_rcv_fanout+0x10/0x10
[   69.490757][ T5583]  __netif_receive_skb_core+0x1a48/0x2410
[   69.490780][ T5583]  ? __list_del_entry_valid_or_report+0x65/0x130
[   69.490799][ T5583]  ? _raw_spin_unlock_irqrestore+0x2b/0x60
[   69.490837][ T5583]  ? get_partial_node+0x2e0/0x320
[   69.490869][ T5583]  __netif_receive_skb_list_core+0x113/0x500
[   69.490935][ T5583]  netif_receive_skb_list_internal+0x487/0x600
[   69.490959][ T5583]  netif_receive_skb_list+0x31/0x200
[   69.491036][ T5583]  bpf_test_run_xdp_live+0xdcb/0xfe0
[   69.491068][ T5583]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[   69.491160][ T5583]  ? cpus_read_unlock+0x6e/0xc0
[   69.491172][ T5583]  ? synchronize_rcu+0x45/0x320
[   69.491188][ T5583]  ? 0xffffffffa0205540
[   69.491196][ T5583]  ? bpf_test_run_xdp_live+0x29d/0xfe0
[   69.491239][ T5583]  bpf_prog_test_run_xdp+0x4f5/0x910
[   69.491256][ T5583]  ? __rcu_read_unlock+0x4f/0x70
[   69.491336][ T5583]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[   69.491352][ T5583]  bpf_prog_test_run+0x22a/0x390
[   69.491370][ T5583]  __sys_bpf+0x3dc/0x790
[   69.491419][ T5583]  __x64_sys_bpf+0x41/0x50
[   69.491433][ T5583]  x64_sys_call+0x2478/0x2fb0
[   69.491521][ T5583]  do_syscall_64+0xd2/0x200
[   69.491534][ T5583]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   69.491548][ T5583]  ? clear_bhb_loop+0x40/0x90
[   69.491559][ T5583]  ? clear_bhb_loop+0x40/0x90
[   69.491570][ T5583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.491624][ T5583] RIP: 0033:0x7fc7fd6ce9a9
[   69.491633][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.491642][ T5583] RSP: 002b:00007fc7fbd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   69.491654][ T5583] RAX: ffffffffffffffda RBX: 00007fc7fd8f5fa0 RCX: 00007fc7fd6ce9a9
[   69.491718][ T5583] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[   69.491725][ T5583] RBP: 00007fc7fbd2f090 R08: 0000000000000000 R09: 0000000000000000
[   69.491754][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   69.491760][ T5583] R13: 0000000000000000 R14: 00007fc7fd8f5fa0 R15: 00007ffc0cf9f5e8
[   69.491770][ T5583]  </TASK>
[   70.051731][ T5602] loop5: detected capacity change from 0 to 512
[   70.072168][ T5602] ext4: Bad value for 'barrier'
[   70.096994][ T5598] lo speed is unknown, defaulting to 1000
[   70.194750][ T5611] siw: device registration error -23
[   70.657272][ T5624] loop4: detected capacity change from 0 to 1024
[   70.689663][ T5624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.713713][ T5624] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.579: Allocating blocks 449-513 which overlap fs metadata
[   70.728948][ T5623] EXT4-fs (loop4): pa ffff8881007bf7e0: logic 48, phys. 177, len 21
[   70.737007][ T5623] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   70.757503][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.926503][ T5650] ref_tracker: memory allocation failure, unreliable refcount tracker.
[   70.969244][ T5653] xt_hashlimit: size too large, truncated to 1048576
[   71.064096][ T5665] loop5: detected capacity change from 0 to 512
[   71.131141][ T5665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.228774][ T5665] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   71.372586][ T5680] loop6: detected capacity change from 0 to 128
[   71.506992][ T5684] loop1: detected capacity change from 0 to 1024
[   71.525781][ T5684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.605535][ T5689] loop4: detected capacity change from 0 to 2048
[   71.624219][ T5684] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.590: Allocating blocks 449-513 which overlap fs metadata
[   71.668000][ T5689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.688929][ T5682] EXT4-fs (loop1): pa ffff8881007bf770: logic 48, phys. 177, len 21
[   71.697018][ T5682] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   71.715950][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.736349][ T5696] loop1: detected capacity change from 0 to 512
[   71.747371][ T5696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.760746][ T5696] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.812707][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.833661][ T5700] loop1: detected capacity change from 0 to 512
[   71.840719][ T5700] ext4: Bad value for 'barrier'
[   71.865590][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.934472][ T5707] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.947689][ T5707] loop5: detected capacity change from 0 to 256
[   72.018103][ T5714] loop5: detected capacity change from 0 to 512
[   72.032901][ T5714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   72.079275][ T5714] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   72.108520][ T5714] EXT4-fs (loop5): 1 truncate cleaned up
[   72.123720][ T5714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.138444][ T5714] FAULT_INJECTION: forcing a failure.
[   72.138444][ T5714] name failslab, interval 1, probability 0, space 0, times 0
[   72.151192][ T5714] CPU: 0 UID: 0 PID: 5714 Comm: syz.5.597 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   72.151215][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   72.151225][ T5714] Call Trace:
[   72.151232][ T5714]  <TASK>
[   72.151240][ T5714]  __dump_stack+0x1d/0x30
[   72.151259][ T5714]  dump_stack_lvl+0xe8/0x140
[   72.151301][ T5714]  dump_stack+0x15/0x1b
[   72.151315][ T5714]  should_fail_ex+0x265/0x280
[   72.151338][ T5714]  should_failslab+0x8c/0xb0
[   72.151357][ T5714]  kmem_cache_alloc_noprof+0x50/0x310
[   72.151460][ T5714]  ? security_file_alloc+0x32/0x100
[   72.151480][ T5714]  security_file_alloc+0x32/0x100
[   72.151496][ T5714]  init_file+0x5c/0x1d0
[   72.151635][ T5714]  alloc_empty_file+0x8b/0x200
[   72.151658][ T5714]  path_openat+0x68/0x2170
[   72.151683][ T5714]  ? _parse_integer_limit+0x170/0x190
[   72.151711][ T5714]  ? _parse_integer+0x27/0x40
[   72.151747][ T5714]  ? kstrtoull+0x111/0x140
[   72.151768][ T5714]  ? kstrtouint+0x76/0xc0
[   72.151789][ T5714]  do_filp_open+0x109/0x230
[   72.151834][ T5714]  do_sys_openat2+0xa6/0x110
[   72.151858][ T5714]  __x64_sys_open+0xe6/0x110
[   72.151957][ T5714]  x64_sys_call+0x14d4/0x2fb0
[   72.151999][ T5714]  do_syscall_64+0xd2/0x200
[   72.152015][ T5714]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   72.152036][ T5714]  ? clear_bhb_loop+0x40/0x90
[   72.152082][ T5714]  ? clear_bhb_loop+0x40/0x90
[   72.152101][ T5714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.152121][ T5714] RIP: 0033:0x7fd5a9a3e9a9
[   72.152137][ T5714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.152154][ T5714] RSP: 002b:00007fd5a80a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   72.152173][ T5714] RAX: ffffffffffffffda RBX: 00007fd5a9c65fa0 RCX: 00007fd5a9a3e9a9
[   72.152238][ T5714] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240
[   72.152257][ T5714] RBP: 00007fd5a80a7090 R08: 0000000000000000 R09: 0000000000000000
[   72.152270][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   72.152283][ T5714] R13: 0000000000000000 R14: 00007fd5a9c65fa0 R15: 00007ffe0b076b48
[   72.152303][ T5714]  </TASK>
[   72.376890][ T5719] loop6: detected capacity change from 0 to 164
[   72.384736][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.394448][ T5719] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   72.424524][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.598'.
[   72.457977][ T5719] hsr_slave_0: left promiscuous mode
[   72.471091][ T5719] hsr_slave_1: left promiscuous mode
[   72.483699][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.529282][ T5727] loop1: detected capacity change from 0 to 1024
[   72.561652][ T5727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.574637][ T5725] loop4: detected capacity change from 0 to 8192
[   72.622933][ T5727] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.602: Allocating blocks 449-513 which overlap fs metadata
[   72.664510][ T5726] EXT4-fs (loop1): pa ffff8881072112a0: logic 48, phys. 177, len 21
[   72.672588][ T5726] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   72.703003][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.988805][ T5751] loop1: detected capacity change from 0 to 512
[   73.239656][   T29] kauditd_printk_skb: 251 callbacks suppressed
[   73.239671][   T29] audit: type=1400 audit(1753240731.803:3397): avc:  denied  { read } for  pid=5764 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.267954][   T29] audit: type=1400 audit(1753240731.803:3398): avc:  denied  { open } for  pid=5764 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.292965][ T5751] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   73.301243][ T5751] EXT4-fs (loop1): orphan cleanup on readonly fs
[   73.311314][ T5751] EXT4-fs (loop1): 1 orphan inode deleted
[   73.322238][   T29] audit: type=1400 audit(1753240731.887:3399): avc:  denied  { sys_module } for  pid=5755 comm="syz.5.609" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   73.323132][   T31] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   73.353004][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   73.370835][ T5751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   73.394478][   T29] audit: type=1326 audit(1753240731.952:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9a3e9a9 code=0x7ffc0000
[   73.417922][   T29] audit: type=1326 audit(1753240731.952:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.5.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a9a3e9a9 code=0x7ffc0000
[   73.489658][   T29] audit: type=1400 audit(1753240731.980:3402): avc:  denied  { unmount } for  pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   73.510263][   T29] audit: type=1400 audit(1753240732.018:3403): avc:  denied  { add_name } for  pid=5759 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   73.532899][   T29] audit: type=1400 audit(1753240732.018:3404): avc:  denied  { create } for  pid=5759 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.555814][   T29] audit: type=1400 audit(1753240732.018:3405): avc:  denied  { write } for  pid=5759 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=5213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   73.748834][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.792692][ T5795] loop1: detected capacity change from 0 to 1024
[   73.900733][ T5797] loop4: detected capacity change from 0 to 512
[   73.965253][ T5797] EXT4-fs (loop4): revision level too high, forcing read-only mode
[   73.973495][ T5797] EXT4-fs (loop4): orphan cleanup on readonly fs
[   73.982309][ T5797] EXT4-fs (loop4): 1 orphan inode deleted
[   73.993366][ T5795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.124640][ T5795] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.615: Allocating blocks 449-513 which overlap fs metadata
[   74.139461][ T1577] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   74.171953][ T5797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.213858][ T5794] EXT4-fs (loop1): pa ffff888107211230: logic 48, phys. 177, len 21
[   74.222058][ T5794] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   74.248347][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.282186][ T5812] tap0: tun_chr_ioctl cmd 1074025677
[   74.294321][ T5812] tap0: linktype set to 825
[   74.307836][ T5812] loop5: detected capacity change from 0 to 128
[   74.336388][ T5812] EXT4-fs: Ignoring removed nobh option
[   74.385368][ T5812] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.396480][ T5817] loop1: detected capacity change from 0 to 8192
[   74.468274][ T5812] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   74.567821][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.704491][ T5848] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[   74.712378][ T5848] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.622'.
[   74.839407][ T4821] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.873241][ T5853] loop5: detected capacity change from 0 to 512
[   74.891341][ T5853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.911374][ T5853] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.922256][ T5851] loop2: detected capacity change from 0 to 8192
[   74.929535][ T5853] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.625: corrupted inode contents
[   74.941791][ T5853] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.625: mark_inode_dirty error
[   74.958292][ T5853] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.625: corrupted inode contents
[   74.972873][ T5853] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.625: mark_inode_dirty error
[   75.002046][ T5853] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.625: mark inode dirty (error -117)
[   75.014798][ T5853] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[   75.063793][ T4821] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.078340][ T5859] loop2: detected capacity change from 0 to 512
[   75.118491][ T5859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.132674][ T5859] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.150992][ T5859] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.627: bg 0: block 328: padding at end of block bitmap is not set
[   75.172033][ T5865] loop4: detected capacity change from 0 to 1024
[   75.192020][ T5865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.192448][ T5859] program syz.2.627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.244563][ T5865] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.629: Allocating blocks 449-513 which overlap fs metadata
[   75.261558][ T5864] EXT4-fs (loop4): pa ffff8881007bf7e0: logic 48, phys. 177, len 21
[   75.269628][ T5864] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[   75.307810][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.325874][ T5870] FAULT_INJECTION: forcing a failure.
[   75.325874][ T5870] name failslab, interval 1, probability 0, space 0, times 0
[   75.338682][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.1.630 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   75.338764][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   75.338776][ T5870] Call Trace:
[   75.338783][ T5870]  <TASK>
[   75.338790][ T5870]  __dump_stack+0x1d/0x30
[   75.338810][ T5870]  dump_stack_lvl+0xe8/0x140
[   75.338859][ T5870]  dump_stack+0x15/0x1b
[   75.338894][ T5870]  should_fail_ex+0x265/0x280
[   75.338918][ T5870]  ? x509_cert_parse+0x3b/0x430
[   75.338940][ T5870]  should_failslab+0x8c/0xb0
[   75.339003][ T5870]  __kmalloc_cache_noprof+0x4c/0x320
[   75.339026][ T5870]  x509_cert_parse+0x3b/0x430
[   75.339048][ T5870]  x509_key_preparse+0x3c/0x420
[   75.339076][ T5870]  asymmetric_key_preparse+0x65/0xb0
[   75.339116][ T5870]  __key_create_or_update+0x288/0x750
[   75.339140][ T5870]  ? key_validate+0xad/0xd0
[   75.339166][ T5870]  key_create_or_update+0x42/0x60
[   75.339231][ T5870]  __se_sys_add_key+0x296/0x350
[   75.339251][ T5870]  ? __schedule+0x6a8/0xb30
[   75.339274][ T5870]  __x64_sys_add_key+0x67/0x80
[   75.339355][ T5870]  x64_sys_call+0x1d0d/0x2fb0
[   75.339372][ T5870]  do_syscall_64+0xd2/0x200
[   75.339394][ T5870]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   75.339458][ T5870]  ? clear_bhb_loop+0x40/0x90
[   75.339478][ T5870]  ? clear_bhb_loop+0x40/0x90
[   75.339498][ T5870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.339517][ T5870] RIP: 0033:0x7f9a90bfe9a9
[   75.339564][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.339581][ T5870] RSP: 002b:00007f9a8f25f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[   75.339600][ T5870] RAX: ffffffffffffffda RBX: 00007f9a90e25fa0 RCX: 00007f9a90bfe9a9
[   75.339611][ T5870] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000040
[   75.339659][ T5870] RBP: 00007f9a8f25f090 R08: ffffffffffffffff R09: 0000000000000000
[   75.339672][ T5870] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002
[   75.339682][ T5870] R13: 0000000000000000 R14: 00007f9a90e25fa0 R15: 00007ffd6c575878
[   75.339698][ T5870]  </TASK>
[   75.584449][ T5875] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5875 comm=syz.1.632
[   75.597836][ T5873] loop4: detected capacity change from 0 to 8192
[   75.617844][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.721976][ T5885] loop1: detected capacity change from 0 to 8192
[   75.735325][ T5885] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.843001][ T5892] loop4: detected capacity change from 0 to 8192
[   75.856539][ T5894] loop2: detected capacity change from 0 to 1024
[   75.873969][ T4163] ==================================================================
[   75.882074][ T4163] BUG: KCSAN: data-race in set_nlink / set_nlink
[   75.888431][ T4163] 
[   75.890766][ T4163] read to 0xffff88810713b5f0 of 4 bytes by task 2997 on cpu 1:
[   75.898309][ T4163]  set_nlink+0x29/0xb0
[   75.902386][ T4163]  kernfs_iop_permission+0x1e2/0x220
[   75.907683][ T4163]  inode_permission+0x1c7/0x310
[   75.912535][ T4163]  link_path_walk+0x162/0x900
[   75.917207][ T4163]  path_lookupat+0x63/0x2a0
[   75.921712][ T4163]  filename_lookup+0x147/0x340
[   75.926477][ T4163]  vfs_statx+0x9d/0x390
[   75.930637][ T4163]  vfs_fstatat+0x115/0x170
[   75.935056][ T4163]  __se_sys_newfstatat+0x55/0x260
[   75.940084][ T4163]  __x64_sys_newfstatat+0x55/0x70
[   75.945124][ T4163]  x64_sys_call+0x2c22/0x2fb0
[   75.949900][ T4163]  do_syscall_64+0xd2/0x200
[   75.954414][ T4163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.960313][ T4163] 
[   75.962634][ T4163] write to 0xffff88810713b5f0 of 4 bytes by task 4163 on cpu 0:
[   75.970268][ T4163]  set_nlink+0x99/0xb0
[   75.974359][ T4163]  kernfs_iop_permission+0x1e2/0x220
[   75.979667][ T4163]  inode_permission+0x1c7/0x310
[   75.984533][ T4163]  link_path_walk+0x162/0x900
[   75.989218][ T4163]  path_openat+0x1de/0x2170
[   75.993720][ T4163]  do_filp_open+0x109/0x230
[   75.998227][ T4163]  do_sys_openat2+0xa6/0x110
[   76.002824][ T4163]  __x64_sys_openat+0xf2/0x120
[   76.007591][ T4163]  x64_sys_call+0x1af/0x2fb0
[   76.012188][ T4163]  do_syscall_64+0xd2/0x200
[   76.016695][ T4163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.022593][ T4163] 
[   76.024909][ T4163] value changed: 0x00000009 -> 0x00000008
[   76.030624][ T4163] 
[   76.032946][ T4163] Reported by Kernel Concurrency Sanitizer on:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[   76.039095][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: udevd Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) 
[   76.049344][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   76.059393][ T4163] ==================================================================
[   76.069327][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.346601][ T1577] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.410383][ T1577] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.461458][ T1577] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.504263][ T1577] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.580586][ T1577] bridge_slave_1: left allmulticast mode
[   76.586262][ T1577] bridge_slave_1: left promiscuous mode
[   76.589539][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.592002][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.608902][ T1577] bridge_slave_0: left allmulticast mode
[   76.614776][ T1577] bridge_slave_0: left promiscuous mode
[   76.620442][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.719260][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.728840][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.738247][ T1577] bond0 (unregistering): Released all slaves
[   76.778102][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.785668][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.793999][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.801417][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.812319][ T1577] veth1_macvtap: left promiscuous mode
[   76.818062][ T1577] veth0_macvtap: left promiscuous mode
[   76.823629][ T1577] veth1_vlan: left promiscuous mode
[   76.829090][ T1577] veth0_vlan: left promiscuous mode
[   76.880877][ T1577] team0 (unregistering): Port device team_slave_1 removed
[   76.891260][ T1577] team0 (unregistering): Port device team_slave_0 removed
[   76.922421][ T3375] lo speed is unknown, defaulting to 1000
[   76.928251][ T3375] syz0: Port: 1 Link DOWN
[   77.147192][ T1577] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.188833][ T1577] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.255020][ T1577] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.317022][ T1577] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.387552][ T1577] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.435816][ T1577] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.489634][ T1577] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.532015][ T1577] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.598904][ T1577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.639857][ T1577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.704415][ T1577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.761154][ T1577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.814057][ T1577] bridge_slave_1: left allmulticast mode
[   77.819907][ T1577] bridge_slave_1: left promiscuous mode
[   77.825561][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.833670][ T1577] bridge_slave_0: left allmulticast mode
[   77.839339][ T1577] bridge_slave_0: left promiscuous mode
[   77.844982][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.852933][ T1577] bridge_slave_1: left allmulticast mode
[   77.858559][ T1577] bridge_slave_1: left promiscuous mode
[   77.864308][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.872263][ T1577] bridge_slave_0: left allmulticast mode
[   77.877896][ T1577] bridge_slave_0: left promiscuous mode
[   77.883584][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.892029][ T1577] bridge_slave_1: left allmulticast mode
[   77.897711][ T1577] bridge_slave_1: left promiscuous mode
[   77.903337][ T1577] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.910865][ T1577] bridge_slave_0: left allmulticast mode
[   77.916539][ T1577] bridge_slave_0: left promiscuous mode
[   77.922201][ T1577] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.045983][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.055974][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.065681][ T1577] bond0 (unregistering): Released all slaves
[   78.130190][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.139922][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.149176][ T1577] bond0 (unregistering): Released all slaves
[   78.216308][ T1577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.226372][ T1577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.235839][ T1577] bond0 (unregistering): Released all slaves
[   78.284571][ T1577] hsr_slave_0: left promiscuous mode
[   78.290371][ T1577] hsr_slave_1: left promiscuous mode
[   78.295952][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.303384][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.311195][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.318628][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.328403][ T1577] hsr_slave_0: left promiscuous mode
[   78.334342][ T1577] hsr_slave_1: left promiscuous mode
[   78.339986][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.347470][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.355285][ T1577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.362799][ T1577] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.371598][ T1577] hsr_slave_0: left promiscuous mode
[   78.377191][ T1577] hsr_slave_1: left promiscuous mode
[   78.387910][ T1577] veth1_macvtap: left promiscuous mode
[   78.393375][ T1577] veth0_macvtap: left promiscuous mode
[   78.398895][ T1577] veth1_vlan: left promiscuous mode
[   78.404096][ T1577] veth0_vlan: left promiscuous mode
[   78.409685][ T1577] veth1_macvtap: left promiscuous mode
[   78.415146][ T1577] veth0_macvtap: left promiscuous mode
[   78.420774][ T1577] veth1_vlan: left promiscuous mode
[   78.426057][ T1577] veth0_vlan: left promiscuous mode
[   78.431917][ T1577] veth1_macvtap: left promiscuous mode
[   78.437377][ T1577] veth0_macvtap: left promiscuous mode
[   78.443051][ T1577] veth1_vlan: left promiscuous mode
[   78.448300][ T1577] veth0_vlan: left promiscuous mode
[   78.560864][ T1577] team0 (unregistering): Port device team_slave_1 removed
[   78.570977][ T1577] team0 (unregistering): Port device team_slave_0 removed
[   78.614572][ T1577] team0 (unregistering): Port device team_slave_1 removed
[   78.625275][ T1577] team0 (unregistering): Port device team_slave_0 removed
[   78.668913][ T1577] team0 (unregistering): Port device team_slave_1 removed
[   78.677890][ T1577] team0 (unregistering): Port device team_slave_0 removed
[   79.279882][ T1577] IPVS: stop unused estimator thread 0...