last executing test programs:

7m3.416645114s ago: executing program 32 (id=1762):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000b00)=""/4, 0x41100, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x0, 0x5, 0xb3b}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ec0), 0x10, 0xffffffff}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_subtree(r3, 0x0, 0x31)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000300)={'bond_slave_0\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="9e640a2d00000000000000000000002fbf1228000000000095000007000000005d1c4ae65632dccffb33317acaa892380c343db45a0ed05161"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

6m54.204843545s ago: executing program 33 (id=1892):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='spi_set_cs\x00', r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
personality(0x400000b)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000850)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a7e1c8cb000000000000000000"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
fcntl$dupfd(r0, 0x0, r0)

6m30.050959761s ago: executing program 1 (id=2223):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x200000000000000)

6m29.955570772s ago: executing program 1 (id=2225):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2229c13, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r1, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x7f}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}]}, 0x48}}, 0x4050814)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'macvlan0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x2)

6m29.744001656s ago: executing program 1 (id=2230):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, r2, 0x3)

6m29.623471097s ago: executing program 1 (id=2233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='vlan1\x00'})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
semget$private(0x0, 0x6, 0x40d)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$eJzs3c9vG1kdAPDvOL+cbHaTXfYACNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ0LghuXckDiRwRqKnHwasaT1E3tJm0SO4o/H2k08+Y5830v7rxnf934BTC0rkXEXkSMR8QnETGTn0/yLT5sb+njHu3fXT7Yv7ucRKv18b+TrD49Fx0/k3olv2YxIn7yg4ifJ8/Gbezsri9Vq5WtdnFyrlnbnGvs7N5cqy2tVlYrG+Xy4sLi/Pu33iufW1/fqo3nR199+Ke97/wybdZ0fqazH+ep3fWxozip0Yj40UUEG4CRvD/jg24IL6UQEW9ExNvZ/T8TI9mzCQBcZa3WTLRmOssAwFVXyHJgSaGU5wKmo1Aoldo5vDdjqlCtN5o37tS3N1baubLZGCvcWatW5vNc4WyMJWl5ITt+Ui4fK9+KiNcj4lcTk1m5tFyvrgzyhQ8ADLFXjs3//5toz/8AwBVXHHQDAIC+M/8DwPAx/wPA8DH/A8DwMf8DwPAx/wPA8DH/A8BQ+fFHH6Vb6yD//uuVT3e21+uf3lypNNZLte3l0nJ9a7O0Wq+vZt/ZUzvpetV6fXPh3dj+bPa7m43mXGNn93atvr3RvJ19r/ftylhfegUAPM/rbz34axIRex9MZlt0rOVgroarrTDoBgADMzLoBgADc7TalwXcYOic4T2+9ABcEV2W6H1KMSImj59stVqti2sScMGuf0n+H4ZVR/7f/wKGISP/D8NrdNANAAam1UpOu+Z/nPaBAMDlJscP9Pj8/418//v8w4GfrRx/xP2LbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbofr/5bytcCno1AolSJejYjZGEvurFUr8xHxWkT8ZWJsIi0vDLjNAMBZFf6R5Ot/XZ95Z/p47XjyeCLbR8QvfvPxrz9baja3/pye/89Ekp9v3s/PlwfSAQDgBIfzdLbveCP/aP/u8uHWz/b88/sRUWzHP9gfj4Oj+KMxmu2LMRYRU/9N8nJb0pG7OIu9exHxxW79T2I6y4G0Vz49Hj+N/Wpf4xeeil/I6tr79HfxhXNoCwybB+n482G3+68Q17J99/u/mI1QZ5ePf+mllg+yMfBJ/MPxb6TH+HfttDHe/eMP20eTz9bdi/jyaMRh7IOO8ecwftIj/junjP+3r3zt7V51rd9GXI/u8TtjzTVrm3ONnd2ba7Wl1cpqZaNcXlxYnH//1nvluSxHPdd7NvjXBzde61WX9n+qR/ziCf3/5in7/7v/f/LTrz8n/re/0S1+Id58Tvx0TvzWKeMvTf2h2Ksujb/So/8nPf83Thn/4d93n1k2HAAYnMbO7vpStVrZ6ufB4QuJvgZ18CIHI3G+F4yIvXO4Tvqv5lL8frocfK9fscbjhX6q1XqpWL1GjPPIugGXwdFNHxGPB90YAAAAAAAAAAAAAACgq378xdKg+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDV9XkAAAD///ogzOo=")
r4 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
socket(0x11, 0x2, 0x3b5)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]})
write$binfmt_misc(r4, &(0x7f00000003c0)='(', 0x1)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, &(0x7f00000004c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = mq_open(0x0, 0x42, 0x1f0, 0x0)
r9 = semget$private(0x0, 0x6, 0x3b1)
semtimedop(r9, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
semctl$SETVAL(r9, 0x3, 0x10, &(0x7f0000000240)=0x8)
mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="11030000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

6m28.826191207s ago: executing program 1 (id=2238):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

6m28.303801714s ago: executing program 1 (id=2252):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='spi_set_cs\x00', r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
personality(0x400000b)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000850)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a7e1c8cb000000000000000000"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
fcntl$dupfd(r0, 0x0, r0)

6m28.303345404s ago: executing program 34 (id=2252):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='spi_set_cs\x00', r3}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
personality(0x400000b)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20000850)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000a7e1c8cb000000000000000000"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
fcntl$dupfd(r0, 0x0, r0)

4m46.274871171s ago: executing program 7 (id=3801):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5bcff1", 0x28)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write(r1, &(0x7f0000000980)="a9", 0x1)
fsmount(r0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)

4m46.257797041s ago: executing program 7 (id=3802):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x78}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x4c, r2, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x77828c56c50794f8)
socket$can_bcm(0x1d, 0x2, 0x2)
timer_create(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r3, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)
capset(0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1)

4m46.233380641s ago: executing program 7 (id=3803):
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0, 0x0, 0x80000000}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
acct(&(0x7f00000001c0)='./file0\x00')

4m46.115544453s ago: executing program 7 (id=3804):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x0, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc884}, 0x0, 0x0, r2, 0x0)
syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

4m46.072106723s ago: executing program 7 (id=3805):
unshare(0x20000400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10)

4m45.843266856s ago: executing program 7 (id=3811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000000)

4m45.843034076s ago: executing program 35 (id=3811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x20000000)

2m19.769627299s ago: executing program 6 (id=5965):
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r3}, 0x18)
read(r1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000000800005c34000400000086620900020073697a30000000000500400007000000050005000a0000000c000780080012400000ffff11000300686173683a697023706f72f551e37400"], 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800)

2m19.643373431s ago: executing program 6 (id=5966):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ed9bf1474e1025b812", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
lsm_get_self_attr(0x0, &(0x7f00000002c0)={0x0, 0x0, 0xdb, 0xbb, ""/187}, &(0x7f0000000000)=0xdb, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x281c2, 0x120)
fcntl$setlease(r4, 0x400, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x3)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES64=r5], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x212e, 0x100, 0x3, 0x3de}, &(0x7f0000000040), &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x187242, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000080)={0x3920e, r9, 0x2, 0x20000000, 0x2})
io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000200)=[r7], 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x0, 0xb4d0}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x2}, {0x400}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x16e}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x5}], [{0x2}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

2m18.692823674s ago: executing program 6 (id=5982):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18)
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r1, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000})
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000004880)=ANY=[@ANYBLOB="40840220f8b602"], 0x7)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)

2m18.488499926s ago: executing program 6 (id=5985):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r0, r0, &(0x7f0000000080)=0x7, 0xffffffffffffff7f)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x33, 0x8, 0x70051b8, "8f5151239582"}})
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000700)="$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")
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

2m18.295018879s ago: executing program 6 (id=5990):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f0000000a80)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00')
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c}, 0x90)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x4)

2m18.035379672s ago: executing program 6 (id=5992):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000011", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_simple={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7f, 0x2, 0xb813, 0xff}}, @TCA_DEF_DATA={0x16, 0x3, '&\')!)+:.):\\))+\xbb\xe2)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x20000000, 0x437, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x20000000, 0x71d}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x9, 0x6, "d58bf499cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5)
r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES32=r8], &(0x7f0000000040)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27)

2m18.003447633s ago: executing program 36 (id=5992):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000011", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_simple={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7f, 0x2, 0xb813, 0xff}}, @TCA_DEF_DATA={0x16, 0x3, '&\')!)+:.):\\))+\xbb\xe2)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x20000000, 0x437, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x20000000, 0x71d}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x9, 0x6, "d58bf499cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5)
r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095", @ANYRES32=r8], &(0x7f0000000040)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10)
write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27)

2m8.441545298s ago: executing program 4 (id=6125):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200))

2m8.403627838s ago: executing program 4 (id=6127):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$kcm(0x11, 0xa, 0x300)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2m8.2492545s ago: executing program 4 (id=6130):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r4, r0, 0x2f}, 0x20)
r5 = socket(0x2, 0x3, 0xff)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308)
sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a066", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0)

2m8.228518061s ago: executing program 4 (id=6131):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000011", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x108, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xa4, 0x1, [@m_simple={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7f, 0x2, 0xb813, 0xff}}, @TCA_DEF_DATA={0x16, 0x3, '&\')!)+:.):\\))+\xbb\xe2)\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x200, 0x20000000, 0x437, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8001, 0x6, 0x20000000, 0x71d}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x9, 0x6, "d58bf499cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r4 = socket(0x10, 0x803, 0x0)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2m8.159739781s ago: executing program 4 (id=6133):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x20)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
setns(r3, 0x24020000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/159, 0x9f}, 0xfffffffa}], 0x1, 0x10140, 0x0)

2m7.908705525s ago: executing program 4 (id=6137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

2m2.237372339s ago: executing program 2 (id=6206):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x1, 0x224}, &(0x7f0000000040), &(0x7f00000000c0))

2m2.19496045s ago: executing program 2 (id=6207):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
getxattr(0x0, 0x0, 0x0, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x100, &(0x7f00000000c0)="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"})

2m2.15240625s ago: executing program 2 (id=6208):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001680)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
r6 = fsmount(r5, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

2m0.62736227s ago: executing program 2 (id=6226):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000))
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x1d, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
brk(0xfffffffffffff845)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', 0x4000, 0x0)
mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', <r7=>0x0, 0x2f, 0xda, 0x8, 0x9, 0x74, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x3, 0x1ff}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000580)={'ip6tnl0\x00', r7, 0x2f, 0x4, 0x3, 0xffffffb1, 0xc, @mcast2, @local, 0x20, 0x7, 0x7}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r6, 0x0, 0x5}, 0x18)
mount$9p_rdma(&(0x7f00000013c0), 0x0, 0x0, 0x800, &(0x7f0000000080)=ANY=[])
open$dir(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x38, 0x1, 0x0, 0xd3, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x5a60}, 0x101000, 0x10000, 0x1, 0x1, 0x51, 0x220005, 0x2b, 0x0, 0x1, 0x0, 0xffffffffffffff82}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2m0.113982547s ago: executing program 2 (id=6230):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01020000010000ecffff0300260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0)

1m59.489476505s ago: executing program 2 (id=6238):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

1m59.405760866s ago: executing program 37 (id=6238):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

1m51.723146567s ago: executing program 38 (id=6137):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

8.610361547s ago: executing program 5 (id=8100):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x68, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

8.525171178s ago: executing program 5 (id=8104):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d010000150003000000000000000000dd5f392602cc30570500000008000500f80800001e0106"], 0x154}}, 0x0) (fail_nth: 3)

8.457182709s ago: executing program 5 (id=8105):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
syz_read_part_table(0x61a, &(0x7f0000000ac0)="$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")
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r10=>0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
write$nci(r7, &(0x7f0000004880)=ANY=[@ANYBLOB="40840220f8b602"], 0x7)
creat(&(0x7f0000000200)='./bus\x00', 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0)

8.201755463s ago: executing program 5 (id=8111):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9fe6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r4, 0x400, 0x1)
fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

7.979182926s ago: executing program 5 (id=8113):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEykzadbtn/b7Qbx358zuNjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU8qi0FdyMJm7Oq3MlrBcQ4T8oFvFWNPutr4xCLof/WsfV6NtVFMOPIgYXLl+6++VcJll/TsIvAosW+Pjp4MG9fn//0Rlis1i4+NcJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJTPvfL1qGDX5nUK0owGUPWvbbrftbkvHhIvDmDvygx9EAcrsSHlw2N/fGsvnWVobh0GVlOQz48FhUPW0za0a1WqlUq1Warfrt+8YRm5qhhESxhCmIpZ+0NIbZrkncKKXkLEa/zH+JIA2iuhiB7uQqT8WGnDhoDNjeSzp/9+5pebWO97/J738ymjxFej+/1r07dqs/n9GLhJSr5C2RMyYv9jPis5I4jGeYoAHuIc++tjHoyWULSHXXrqEvBG35FLymfnTgkIXNjw4sNGBiRa+CBnPkaijhhoMvIdtNOFBogkbbSh42IMHHyo8ovJhpgomfDhwIbEBCzchUUEddWxBQqGMPTjYQRctNGDiX0EQHOBQt/tWnM/zlK1GElSZsREF5JLjbh/VOVs7q///4bNo7bj/N9j/f15Fx0Eh+vh4XgzRZ0AQX/8vaO3VZENEREREREREr4LQv30X+q/ybwMI0LTbypiIKby27IiIiIiIiIhoGQSCAq5CRHfl422I6et/IiIiIiIiInqzCf2MnQBQ0jf1i9HjUmf5JUD2HFIkIiIiIiIiopekn/y/lgcCfZf/GsRC1/9ERERERERE9Ab41dgY+7lsPMZukPxZPwNg7c8F8dHfCnBXxHFv96viyAyXmEdxzNQdAH7zirgYD9SrP/IA9DdLXRVxbRL4Z/Lbh9AnB+lj/T8PIkII90QC+ex4ATMSEGHNtVz8DR/gerTK9Xic+fuDDPSSaEThUtNuq7LltO9WYJoXM77a9X/28PDngDvczoPD/n75Rz/u39e5HIezjo/CQp9NpJNJb4xRLk/0eAv6mYu00Y1X0Uyq/HW3UxK6XiPZ/izMo8x4RfN2QG0ViLbyF1iP9tl6EMWWBsMR9wWwpgd/qJT1LpvYendFjLKonNzytB0xY8uLOosbUcyNjRvRR9ImYTkZUfxaFqiWp/fBRBbV8SxObwvx9xPtPz8LiGLYFlthFn8ICzqRxfc/ilbe6u0mw2OcJYupo4CI6HU5GPVCehDzqTH2k+4hOamdvd9BDojPcjN691EtQdx/JL37k98GUQ+VBXLx3ybSa0n6FYRn9A2hy8lHA7rnrqSc0Y3yp0EQmBeLGD+j/zcIkg0yFujdjoMgOHlG//3oHUhx2lNZ/DsIgrsV3ZP85kSv+mG4wocz6/Xa1SyKKODJ0U/0APih9/ff339YrW7VjHcN43YVK/p/FeKPLNj3EBHRlNPfsaMjMnMixLu4HpVx/f5f34mmJnq8L8W3FGi3gD7uYzN5hcBaeqklHOCb/4huQ9iMrlqB9VL0WRrIy5fuhle1w9hDkdNveNmceVWn+9IoVt/eUB3GJu8dOnkFOIrdesV7gYiI6Hytz+iHgYn+H5P9f3Gi/9/ERhSxcSX1urs0dkvhZnJ1PLykH1w4To2tnJ78t5bcGERERJ8Tyv1ElPxfCte1e+9V6vWK6W8r6TrWd6VrN1pK2l1fuda22W0p2XMd37Gctuy5KNirypPeTq/nuL5sOq7sOZ69q9/8LuNXv3uqY3Z92/J6bWV6SlpO1zctXzZsz5K9nW+3bW9buXplr6csu2lbpm87Xek5O66lylJ6So0F2g3V9e2mHU52Zc+1O6a7J7/ntHc6SjaUZ7l2z3eiApO67G7TcTu62DKChV90SERE9P/o8dPBg3v9/v6jkxOr4aV5NOcYM2KmJ/IpBXKMICIios+YUXe9wErFV5gQERERERERERERERERERERERERERERERFNOf2RvgUnVtIeFgSGc356MZ6D5xg9YjhVjsDL5vOp+0c9sN+LrJ5ZtNLkkYjBg4/nBK8O5yTNPx5zvEiluAS8cPv85QvABT0H0ZzcEg+A6edHl36MpU184yBq0VkxemHqosJwX+SW/59DOPHwd9OLRNjyQRAE81cvTLZh/uzHcw7Ao/ycXbB6yvFz3mciIjpv/wsAAP//eO06pA==")
futimesat(r4, &(0x7f0000000000)='./file1\x00', 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES64=r5, @ANYRES16=r5, @ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRES64=0x0, @ANYRES32=r5, @ANYRES64=r5, @ANYRESOCT=0x0], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000cd06000000000000000000000000000000b2cd1a3f0e4d851979b7b2e34f395a4bbe7d8f76b1f14f689e69ab8ca8124b931e7783ba8f526b5a931e68310f107a56b4d3ffd9387741c4ff481745f05ccf868600739d8933576ce9ed206229e9231b3b5e1bffdf9ac3691d812e06a3521c98b7c18ec010b1e96b8cc32e3bad490000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
sendmsg$kcm(r5, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x0, 0x6b2b}, 0x8)
sendto$inet6(r9, &(0x7f00000002c0)='W', 0x34000, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c)
setsockopt$inet6_int(r9, 0x29, 0x33, &(0x7f0000000400)=0xfffffffb, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9cb7d5cb", @ANYRES16, @ANYBLOB="250300000200140001800d"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES32=r8], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)

7.000069888s ago: executing program 5 (id=8128):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000b00)=[{&(0x7f0000000c80)="483b5bad", 0x4}, {&(0x7f0000000680)="b6", 0x1}, {&(0x7f0000000700)="0087c0f786ce", 0x6}, {&(0x7f00000008c0)="2ffecb", 0x3}, {&(0x7f00000004c0)="a4a96f226d", 0x5}, {&(0x7f0000000ac0)="80b1", 0x2}], 0x6, 0xe)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = dup(r2)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYBLOB="20000000280e0400280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0)

3.240265658s ago: executing program 0 (id=8186):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r1, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)

3.196411158s ago: executing program 0 (id=8188):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4040880)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'})
sendmsg$IEEE802154_LIST_IFACE(r2, 0x0, 0x4800)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)={0x34, r5, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

3.141098439s ago: executing program 0 (id=8191):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000580), &(0x7f0000000240)=r3}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xfffffffffffffe31, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

3.01959061s ago: executing program 0 (id=8192):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000580), &(0x7f0000000240)=r3}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xfffffffffffffe31, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfffffffb, 0x4, 0xf7da, 0x2038d, r1, 0x2, '\x00', r7, r8, 0x4, 0x0, 0x5, 0x1}, 0x50)
sendfile(r8, r8, 0x0, 0x1000000201005)

2.772375693s ago: executing program 0 (id=8198):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)

2.612536355s ago: executing program 0 (id=8203):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4044d, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0xd, 0xf18, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000004000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x0, 0x1}]})

1.392264412s ago: executing program 9 (id=8219):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000580), &(0x7f0000000240)=r2}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xfffffffffffffe31, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r7, r7, 0x0, 0x1000000201005)

1.209692544s ago: executing program 9 (id=8220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0)

1.122503205s ago: executing program 9 (id=8221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x9800, &(0x7f0000000240)={0x80, 0x4, 0x40000}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000000c0)='inode_foreign_history\x00', r2, 0x0, 0x4}, 0x18)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x90000, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x2, <r4=>0x0}, 0x8)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r3, 0xd, 0x0, @val=@target_btf_id=r4}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0xf7}, 0x18)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r9, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r9, 0x0, 0x0, 0x400000000000000)
write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)

1.095882286s ago: executing program 9 (id=8223):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@exit]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
socket(0x400000000010, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001a00)=[{0x0}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2, 0x0, 0x81}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0)

956.377148ms ago: executing program 3 (id=8225):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x4)
clock_gettime(0x5, &(0x7f0000000180))
r1 = dup2(r0, r0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r3 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000})
io_uring_enter(r3, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x127d, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
recvmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/253, 0xfd}, {&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/183, 0xb7}, {&(0x7f0000000040)=""/24, 0x18}, {&(0x7f0000001580)=""/228, 0xe4}], 0x7}, 0x6}, {{&(0x7f0000001680)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001700)=""/179, 0xb3}, {&(0x7f00000017c0)=""/235, 0xeb}, {&(0x7f00000018c0)=""/92, 0x5c}], 0x3, &(0x7f0000001980)=""/218, 0xda}, 0x2}, {{&(0x7f0000001a80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b00)=""/216, 0xd8}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/46, 0x2e}], 0x3, &(0x7f0000001cc0)=""/8, 0x8}, 0x1}, {{&(0x7f0000001d00)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/176, 0xb0}], 0x1, &(0x7f0000001e80)=""/32, 0x20}, 0xf}, {{&(0x7f0000001ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/58, 0x3a}, {&(0x7f0000001f80)=""/79, 0x4f}, {&(0x7f0000002000)=""/32, 0x20}, {&(0x7f0000002040)=""/200, 0xc8}], 0x4}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002180)=""/239, 0xef}, {&(0x7f0000002280)=""/186, 0xba}, {&(0x7f0000002340)=""/125, 0x7d}, {&(0x7f00000023c0)=""/166, 0xa6}], 0x4, &(0x7f00000024c0)=""/12, 0xc}, 0x7ff}, {{&(0x7f0000002500)=@phonet, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002580)=""/189, 0xbd}, {&(0x7f0000002640)=""/189, 0xbd}, {&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f00000027c0)=""/108, 0x6c}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000002840)=""/236, 0xec}, {&(0x7f0000002940)=""/130, 0x82}], 0x7, &(0x7f0000002a80)=""/74, 0x4a}, 0x2}, {{&(0x7f0000002b00)=@can, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002b80)=""/23, 0x17}, {&(0x7f0000002bc0)=""/179, 0xb3}, {&(0x7f0000002c80)=""/129, 0x81}, {&(0x7f0000002d40)=""/147, 0x93}], 0x4, &(0x7f0000002e40)=""/77, 0x4d}, 0xe}, {{&(0x7f0000002ec0)=@nfc, 0x80, &(0x7f0000005300)=[{&(0x7f0000004f80)=""/210, 0xd2}, {&(0x7f0000005080)=""/200, 0xc8}, {&(0x7f0000005180)=""/15, 0xf}, {&(0x7f00000051c0)=""/28, 0x1c}, {&(0x7f0000005200)=""/209, 0xd1}], 0x5}, 0x8}], 0x9, 0x1, &(0x7f00000055c0)={0x0, 0x3938700})
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000ffffffff80000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c005020000001bd300058edb7c"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0)
getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002)

905.922478ms ago: executing program 9 (id=8226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001401038010010080080003400000000203"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

894.893449ms ago: executing program 9 (id=8228):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xe, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x3)

791.30012ms ago: executing program 3 (id=8229):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9fe6}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000000b0601020000000000000000030000082d81f2b2444e9a6ddebae20867bb52b306d66ff5a11914342958b4f6518ce7fa0b49928bc4f92e52e7da280cba66fa8e3e9c304480004ee3d89be7344bc9066369d2d81a210912a21cd65491f504d2"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r4, 0x400, 0x1)
fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

698.586551ms ago: executing program 3 (id=8230):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f00000002c0)=[{r3, 0x1666}, {r1, 0x244}], 0x2, 0x0, 0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)
msgget$private(0x0, 0x0)

483.920014ms ago: executing program 3 (id=8231):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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")
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127)

359.842495ms ago: executing program 8 (id=8232):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$eJzs3c1rHOUfAPDvbJK+/35NoRQVkUAPVmo3TeJLBQ/1KFos6L0uyTSUbLoluylNLNge7MWLFEHEgnjXu8fiP+BfUdBCkRL04CUym9k0L7vJNt2ajfP5wITn2Znd5/nuzPfJMzuzbACFNZL9KUW8GBFfJRFHIyLJ1w1GvnJkZbulxzcnsyWJ5eWP/0ia22X11mu1nnc4r7wQEb98EXG6tLnd+sLiTKVaTefy+mhj9tpofWHxzJXZynQ6nV4dn5g49+bE+Dtvv9WzWF+7+Ne3H91//9yXJ5e++enhsbtJnI8j+bq1cTyDW2srIzGSvydDcX7DhmM9aKyfJLvdAXZkIM/zocjGgKMxkGc98N/3eUQsAwWVyH8oqNY8oHVu36Pz4D3j0XsrJ0Cb4x9c+WwkDjTPjQ4tJevOjLLz3eEetJ+18fPv9+5mS2z4HOJAD14foJNbtyPi7ODg5vEvyce/nTvbxTYb2yja/x/YTfez+c/r7eY/pdX5T7SZ/xxuk7s7sX3+lx72oJmOsvnfu23nv6sXrYYH8tr/mnO+oeTylWqajW3/j4hTMbQ/q291Pefc0oPlTuvWzv+yJWu/NRfM+/FwcP/650xVGpVniXmtR7cjXmo7/01W93/SZv9n78fFLts4kd57pdO67eN/vpZ/iHi17f5/ckUr2fr65GjzeBhtHRWb/XnnxK+d2t/t+LP9f2jr+IeTtddr60/fxvcH/k47rVsXf3R//O9LPmmW9+WP3ag0GnNjEfuSDzc/Pv7kua16a/ss/lMntx7/2h3/ByPi0y7jv3P8x5e7in+X9v/UU+3/py88+OCz7zq1393490azdCp/pJvxr9sOPst7BwAAAAAAAP2mFBFHIimVV8ulUrm8cn/H8ThUqtbqjdOXa/NXp6L5XdnhGCq1rnQfXXM/xFh+P2yrPr6hPhERxyLi64GDzXp5slad2u3gAQAAAAAAAAAAAAAAAAAAoE8c7vD9/8xvA7vdO+C585PfUFzb5n8vfukJ6Ev+/0NxyX8oLvkPxSX/objkPxSX/Ifikv9QXPIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvZsrz0+OZkVp+6vjA/U7t+Ziqtz5Rn5yfLk7W5a+XpWm26mpYna7PbvV61Vrs2Nh7zN0Ybab0xWl9YvDRbm7/auHRltjKdXkqH/pWoAAAAAAAAAAAAAAAAAAAAYG+pLyzOVKrVdE5BYUeFwf7oxp4vZNnYB91Y1x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6A//BAAA//8iuzYD")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000580), &(0x7f0000000240)=r3}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r7}}]}, {0x0, 0xa}, {0xc}, {0xfffffffffffffe31, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(0xffffffffffffffff, 0x2007ffb)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

249.900357ms ago: executing program 3 (id=8233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

145.482338ms ago: executing program 3 (id=8234):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x2, 0x5, 0x80000000})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
syz_read_part_table(0x61a, &(0x7f0000000ac0)="$eJzs3D1olHccB/DvJbk8SQTTwcmlxqGTUBRHM1RJroqFcCqF4GDfEGmmCIGTHkbi0GZQzCAdu0jhOmicjBmcFIXORRwsQgaXgl2kdsiVe/FyS99oSil+PsPz+z9/fvy/94PnGZ8L/2sDKXdXzaJd3v34D/ub41vrxZxqTE0fbTabzZNJKadTzkR552qSoU5H0evdm2S475wb34ytf/Xz++XGkxMv3zlzf3mgd2aRt5Ls6G/O6OtF0bdZ/O1h2XY3Jx+ML12er1xp3VTqG5sfJrdeTFXXji+vrB67dOTT1v7F5GG3v/NgjOZ8armQz/PR0F+OurS1LK2V+/IXW/m1yXOPK/WNrxvP9m/urgzeOXvo1Z71q/cOJAutiJm0H/Ytw/949F7+Ul/+wsS12ZX64X23d10/WLv7qPp88JfW+9F+udqR5e3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg33Gzdbk8X7lSmzz3uFLf+PKH7z+49WKqunZ8eWX12PCRp92+h9061K3nU8uFlJPMZS6fZf7Po0a6dbbUnz/5YHypl//rWPJs/+buSuPO2UOvptev3jvQ7iplplUGtmvq38uvbyxMXJtdqR/ed3vX9YO1u4+qzwc7fXNFPmmPm6TY/p8BAAAAAAAAAAAAAAAAAADAG25q+uiemfeqJ5NSTo8k+emL9lf2zWL0u4y1djv2duvTItmZ5MZI578AGk9OvBw+c3/5x+5H8Yspsphkx7drp5K3ezkX29fm69vy1sn8l34LAAD//3inkUM=")
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0)
write$nci(r7, &(0x7f0000004880)=ANY=[@ANYBLOB="40840220f8b602"], 0x7)
creat(&(0x7f0000000200)='./bus\x00', 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0)

122.434908ms ago: executing program 8 (id=8235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0xa0}}, 0x0)

79.658909ms ago: executing program 8 (id=8236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

57.533299ms ago: executing program 8 (id=8237):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1f)

426.6µs ago: executing program 8 (id=8238):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xea9}, {0x0, 0x6}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r4 = socket(0x8000000010, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18)
write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x6}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r9}, 0x10)

0s ago: executing program 8 (id=8239):
r0 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000200)={0xec8aacf3d754631d, 0x1, 0x200, 0x7})
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000280)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0x72}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0x1, 0x502, &(0x7f0000000a00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x30)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000))
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x54b0, 0x80, 0x3, 0x12e}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x1})
r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x101000, 0x100)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_LINKAT={0x27, 0x12, 0x0, r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', r3, 0x1400, 0x0, {0x0, r7}})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x0, 0xe4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
r10 = socket$inet(0x2, 0x3, 0x8)
r11 = socket$inet(0x2, 0x3, 0x6)
r12 = dup3(r10, r11, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r12, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

XT4-fs (loop5): Remounting filesystem read-only
[  501.465321][T28854] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  501.477826][T28862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  501.490499][T10663] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0
[  501.527575][T17829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.537594][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.571326][T28892] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  501.577955][T28892] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  501.585692][T28892] vhci_hcd vhci_hcd.0: Device attached
[  501.586022][T25352] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  501.633030][T28893] vhci_hcd: connection closed
[  501.637614][T10664] vhci_hcd: stop threads
[  501.646658][T10664] vhci_hcd: release socket
[  501.651280][T10664] vhci_hcd: disconnect device
[  501.664873][T25352] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  501.685577][T25352] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  501.803693][T28906] loop9: detected capacity change from 0 to 1024
[  501.844290][T28906] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7726: Failed to acquire dquot type 0
[  501.878299][T28906] EXT4-fs (loop9): 1 truncate cleaned up
[  501.973143][T28921] netlink: 'syz.9.7730': attribute type 1 has an invalid length.
[  501.996827][T28921] 8021q: adding VLAN 0 to HW filter on device bond13
[  502.042268][T28930] SELinux: syz.8.7734 (28930) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  502.153816][T28941] loop3: detected capacity change from 0 to 512
[  502.244928][T24007] IPVS: starting estimator thread 0...
[  502.269800][T28953] loop9: detected capacity change from 0 to 512
[  502.333073][T28954] loop0: detected capacity change from 0 to 8192
[  502.343928][T28950] IPVS: using max 2208 ests per chain, 110400 per kthread
[  502.417893][T28962] FAULT_INJECTION: forcing a failure.
[  502.417893][T28962] name failslab, interval 1, probability 0, space 0, times 0
[  502.430695][T28962] CPU: 1 UID: 0 PID: 28962 Comm: syz.8.7742 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  502.430732][T28962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  502.430749][T28962] Call Trace:
[  502.430770][T28962]  <TASK>
[  502.430779][T28962]  __dump_stack+0x1d/0x30
[  502.430814][T28962]  dump_stack_lvl+0xe8/0x140
[  502.430839][T28962]  dump_stack+0x15/0x1b
[  502.430928][T28962]  should_fail_ex+0x265/0x280
[  502.430964][T28962]  should_failslab+0x8c/0xb0
[  502.430990][T28962]  kmem_cache_alloc_noprof+0x50/0x310
[  502.431045][T28962]  ? alloc_empty_file+0x76/0x200
[  502.431077][T28962]  alloc_empty_file+0x76/0x200
[  502.431108][T28962]  path_openat+0x68/0x2170
[  502.431174][T28962]  ? exc_page_fault+0x7b/0xa0
[  502.431211][T28962]  ? _parse_integer_limit+0x170/0x190
[  502.431250][T28962]  ? kstrtoull+0x111/0x140
[  502.431355][T28962]  ? kstrtouint+0x76/0xc0
[  502.431390][T28962]  do_filp_open+0x109/0x230
[  502.431482][T28962]  do_sys_openat2+0xa6/0x110
[  502.431549][T28962]  __x64_sys_openat+0xf2/0x120
[  502.431585][T28962]  x64_sys_call+0x1af/0x2fb0
[  502.431611][T28962]  do_syscall_64+0xd2/0x200
[  502.431634][T28962]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  502.431724][T28962]  ? clear_bhb_loop+0x40/0x90
[  502.431753][T28962]  ? clear_bhb_loop+0x40/0x90
[  502.431781][T28962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.431862][T28962] RIP: 0033:0x7fbb47f9e929
[  502.431883][T28962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.431906][T28962] RSP: 002b:00007fbb46607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  502.431931][T28962] RAX: ffffffffffffffda RBX: 00007fbb481c5fa0 RCX: 00007fbb47f9e929
[  502.431948][T28962] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  502.431964][T28962] RBP: 00007fbb46607090 R08: 0000000000000000 R09: 0000000000000000
[  502.431980][T28962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.431996][T28962] R13: 0000000000000000 R14: 00007fbb481c5fa0 R15: 00007ffc961a41e8
[  502.432072][T28962]  </TASK>
[  502.854999][T28976] hub 2-0:1.0: USB hub found
[  502.872417][T28980] loop5: detected capacity change from 0 to 164
[  502.882456][T28976] hub 2-0:1.0: 8 ports detected
[  502.891928][T28980] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  502.906192][T28980] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  502.916010][T28980] Symlink component flag not implemented
[  502.921793][T28980] Symlink component flag not implemented
[  502.928619][T28980] Symlink component flag not implemented (7)
[  502.934638][T28980] Symlink component flag not implemented (116)
[  502.945708][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  502.945725][   T29] audit: type=1400 audit(710.317:44344): avc:  denied  { bind } for  pid=28981 comm="syz.0.7749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  503.025554][   T29] audit: type=1400 audit(710.391:44345): avc:  denied  { setopt } for  pid=28981 comm="syz.0.7749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  503.061331][   T29] audit: type=1400 audit(710.391:44346): avc:  denied  { connect } for  pid=28981 comm="syz.0.7749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  503.099432][T28990] loop8: detected capacity change from 0 to 2048
[  503.154833][T28995] netlink: 'syz.9.7753': attribute type 1 has an invalid length.
[  503.167920][T19437]  loop8: p1 < > p4
[  503.178176][T19437] loop8: p4 size 8388608 extends beyond EOD, truncated
[  503.189061][T28995] 8021q: adding VLAN 0 to HW filter on device bond14
[  503.199680][T28990]  loop8: p1 < > p4
[  503.206147][T28990] loop8: p4 size 8388608 extends beyond EOD, truncated
[  503.298673][ T2995]  loop8: p1 < > p4
[  503.306472][ T2995] loop8: p4 size 8388608 extends beyond EOD, truncated
[  503.331169][T29007] SELinux: syz.8.7755 (29007) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  503.364100][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  503.386459][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  503.403545][T29015] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  503.410120][T29015] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  503.417869][T29015] vhci_hcd vhci_hcd.0: Device attached
[  503.442426][T29016] vhci_hcd: connection closed
[  503.442699][T10663] vhci_hcd: stop threads
[  503.451812][T10663] vhci_hcd: release socket
[  503.456235][T10663] vhci_hcd: disconnect device
[  503.462132][T29013] loop9: detected capacity change from 0 to 8192
[  503.553860][T29025] SELinux: syz.8.7763 (29025) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  503.716746][T29030] loop8: detected capacity change from 0 to 1024
[  503.751733][T29030] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  503.762256][T29030] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  503.771655][T29030] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7765: Failed to acquire dquot type 0
[  503.869380][T29036] netlink: 'syz.0.7767': attribute type 1 has an invalid length.
[  503.881715][T29030] EXT4-fs (loop8): 1 truncate cleaned up
[  503.915566][T29036] 8021q: adding VLAN 0 to HW filter on device bond16
[  503.989264][T29045] loop9: detected capacity change from 0 to 1024
[  504.108046][T29056] SELinux: syz.8.7775 (29056) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  504.162169][T29062] loop8: detected capacity change from 0 to 1024
[  504.187461][T29064] loop0: detected capacity change from 0 to 164
[  504.203497][T29064] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  504.219685][T29064] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  504.229671][   T29] audit: type=1326 audit(711.523:44347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29068 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86735ae929 code=0x7ffc0000
[  504.252858][   T29] audit: type=1326 audit(711.523:44348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29068 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86735ae929 code=0x7ffc0000
[  504.254925][T29064] Symlink component flag not implemented
[  504.281904][T29064] Symlink component flag not implemented
[  504.296229][T29066] loop3: detected capacity change from 0 to 1024
[  504.303131][T29066] EXT4-fs: inline encryption not supported
[  504.309170][T29066] EXT4-fs: Ignoring removed i_version option
[  504.310581][T29070] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  504.346619][   T29] audit: type=1326 audit(711.589:44349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29068 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86735ae929 code=0x7ffc0000
[  504.346974][T29066] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  504.369892][   T29] audit: type=1326 audit(711.589:44350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29068 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86735ae929 code=0x7ffc0000
[  504.402403][T29064] Symlink component flag not implemented (7)
[  504.407674][   T29] audit: type=1326 audit(711.589:44351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29068 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86735ae929 code=0x7ffc0000
[  504.409028][T29064] Symlink component flag not implemented (116)
[  504.513956][T29066] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.7780: lblock 2 mapped to illegal pblock 2 (length 1)
[  504.528525][T29066] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.7780: lblock 0 mapped to illegal pblock 48 (length 1)
[  504.546552][T29066] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7780: Failed to acquire dquot type 0
[  504.566134][T29066] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  504.576621][T29066] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.7780: mark_inode_dirty error
[  504.588299][T29066] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  504.598566][T29066] EXT4-fs (loop3): 1 orphan inode deleted
[  504.605108][T10680] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1)
[  504.627749][T10680] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0
[  504.642611][T29066] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.7780: Invalid inode table block 1 in block_group 0
[  504.659926][T29078] loop5: detected capacity change from 0 to 8192
[  504.665935][T29066] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  504.709289][T29066] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.7780: mark_inode_dirty error
[  504.755578][T29084] netlink: 'syz.5.7785': attribute type 1 has an invalid length.
[  504.800638][T29084] 8021q: adding VLAN 0 to HW filter on device bond19
[  504.851626][T29092] loop9: detected capacity change from 0 to 1024
[  504.865669][T29092] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7786: Failed to acquire dquot type 0
[  504.922677][T29092] EXT4-fs (loop9): 1 truncate cleaned up
[  504.986725][T29100] SELinux: syz.3.7790 (29100) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  505.058248][T29104] netlink: 'syz.5.7792': attribute type 1 has an invalid length.
[  505.069453][T29106] loop3: detected capacity change from 0 to 512
[  505.076242][T29106] EXT4-fs: Ignoring removed orlov option
[  505.098496][T29106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  505.122685][T29106] EXT4-fs (loop3): orphan cleanup on readonly fs
[  505.123258][T29104] 8021q: adding VLAN 0 to HW filter on device bond20
[  505.158230][T29113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  505.165759][T29113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  505.173386][T29113] vhci_hcd vhci_hcd.0: Device attached
[  505.180403][T29106] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7794: bg 0: block 248: padding at end of block bitmap is not set
[  505.236740][T29106] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7794: Failed to acquire dquot type 1
[  505.237079][T29117] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13)
[  505.255024][T29117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  505.262657][T29117] vhci_hcd vhci_hcd.0: Device attached
[  505.276197][T29113] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  505.287552][T29106] EXT4-fs (loop3): 1 truncate cleaned up
[  505.304263][T29106] EXT4-fs: Ignoring removed orlov option
[  505.325995][T29106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  505.341648][T29113] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15)
[  505.343365][T29124] __nla_validate_parse: 28 callbacks suppressed
[  505.343385][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.348273][T29113] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  505.348417][T29113] vhci_hcd vhci_hcd.0: Device attached
[  505.354831][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.365395][ T2958] vhci_hcd: vhci_device speed not set
[  505.408619][T29106] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  505.418067][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.435593][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.437808][T29113] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18)
[  505.451090][T29113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  505.458744][T29113] vhci_hcd vhci_hcd.0: Device attached
[  505.467093][T29118] vhci_hcd: connection closed
[  505.467293][T29126] vhci_hcd: connection closed
[  505.472043][T14398] vhci_hcd: stop threads
[  505.481125][T14398] vhci_hcd: release socket
[  505.485747][T14398] vhci_hcd: disconnect device
[  505.490544][T29106] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.7794: Abort forced by user
[  505.500941][T29114] vhci_hcd: connection closed
[  505.501058][ T2958] usb 1-1: new high-speed USB device number 2 using vhci_hcd
[  505.513510][T29120] vhci_hcd: connection closed
[  505.514534][T29115] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  505.523505][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.525356][T29106] EXT4-fs (loop3): Remounting filesystem read-only
[  505.540769][T29106] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  505.549501][T14398] vhci_hcd: stop threads
[  505.553788][T14398] vhci_hcd: release socket
[  505.558265][T14398] vhci_hcd: disconnect device
[  505.558382][T29124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'.
[  505.572517][T14398] vhci_hcd: stop threads
[  505.576815][T14398] vhci_hcd: release socket
[  505.581308][T14398] vhci_hcd: disconnect device
[  505.601264][T14398] vhci_hcd: stop threads
[  505.605592][T14398] vhci_hcd: release socket
[  505.610098][T14398] vhci_hcd: disconnect device
[  505.650351][T29137] netlink: 'syz.5.7800': attribute type 1 has an invalid length.
[  505.665559][T29135] loop9: detected capacity change from 0 to 2048
[  505.674675][T29137] 8021q: adding VLAN 0 to HW filter on device bond21
[  505.692802][T29145] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7802'.
[  505.730591][T29135]  loop9: p1 < > p4
[  505.738075][T29135] loop9: p4 size 8388608 extends beyond EOD, truncated
[  505.815826][T29155] loop8: detected capacity change from 0 to 1024
[  505.825322][ T2995]  loop9: p1 < > p4
[  505.830433][T29157] SELinux: syz.5.7805 (29157) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  505.830859][ T2995] loop9: p4 size 8388608 extends beyond EOD, truncated
[  505.852476][T29155] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7804: Failed to acquire dquot type 0
[  505.868058][T29155] EXT4-fs (loop8): 1 truncate cleaned up
[  505.889956][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  505.897401][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  505.948448][T29165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  505.955150][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  505.962647][T29165] vhci_hcd vhci_hcd.0: Device attached
[  505.970146][T29165] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12)
[  505.976849][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  505.984498][T29165] vhci_hcd vhci_hcd.0: Device attached
[  506.011013][T29165] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  506.020965][T29165] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16)
[  506.027600][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  506.035265][T29165] vhci_hcd vhci_hcd.0: Device attached
[  506.058233][T29165] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18)
[  506.065034][T29165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  506.072777][T29165] vhci_hcd vhci_hcd.0: Device attached
[  506.084287][T29175] vhci_hcd: connection closed
[  506.084409][T29177] vhci_hcd: connection closed
[  506.089307][T29166] vhci_hcd: connection closed
[  506.094390][T29168] vhci_hcd: connection closed
[  506.109752][T29182] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7809'.
[  506.111046][T14396] vhci_hcd: stop threads
[  506.116401][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7810'.
[  506.123637][T14396] vhci_hcd: release socket
[  506.128031][T29180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7810'.
[  506.136932][T14396] vhci_hcd: disconnect device
[  506.156863][T22740] vhci_hcd: vhci_device speed not set
[  506.163060][T14396] vhci_hcd: stop threads
[  506.167457][T14396] vhci_hcd: release socket
[  506.172020][T14396] vhci_hcd: disconnect device
[  506.178194][T14396] vhci_hcd: stop threads
[  506.182574][T14396] vhci_hcd: release socket
[  506.187025][T14396] vhci_hcd: disconnect device
[  506.199714][T14396] vhci_hcd: stop threads
[  506.204011][T14396] vhci_hcd: release socket
[  506.208468][T14396] vhci_hcd: disconnect device
[  506.213565][T29182] netlink: 'syz.8.7809': attribute type 12 has an invalid length.
[  506.220745][T22740] usb 7-1: new high-speed USB device number 3 using vhci_hcd
[  506.229117][T22740] usb 7-1: enqueue for inactive port 0
[  506.234727][T22740] usb 7-1: enqueue for inactive port 0
[  506.240426][T22740] usb 7-1: enqueue for inactive port 0
[  506.321984][T22740] vhci_hcd: vhci_device speed not set
[  506.385389][T29203] SELinux: syz.5.7817 (29203) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  506.425797][T29199] loop0: detected capacity change from 0 to 2048
[  506.467276][T29199]  loop0: p1 < > p4
[  506.475284][T29199] loop0: p4 size 8388608 extends beyond EOD, truncated
[  506.492070][T29215] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10)
[  506.498784][T29215] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  506.506446][T29215] vhci_hcd vhci_hcd.0: Device attached
[  506.515609][T29215] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(12)
[  506.522301][T29215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  506.529883][T29215] vhci_hcd vhci_hcd.0: Device attached
[  506.535646][T29217] loop9: detected capacity change from 0 to 1024
[  506.556709][T29215] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(14)
[  506.563425][T29215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  506.571111][T29215] vhci_hcd vhci_hcd.0: Device attached
[  506.581829][T29217] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7822: Failed to acquire dquot type 0
[  506.621353][T29215] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16)
[  506.628003][T29215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  506.635745][T29215] vhci_hcd vhci_hcd.0: Device attached
[  506.648756][T29217] EXT4-fs (loop9): 1 truncate cleaned up
[  506.666679][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  506.679345][T29215] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(18)
[  506.685981][T29215] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  506.693741][T29215] vhci_hcd vhci_hcd.0: Device attached
[  506.700533][T29229] vhci_hcd: connection closed
[  506.700646][T29223] vhci_hcd: connection closed
[  506.702838][T29233] vhci_hcd: connection closed
[  506.705936][T29218] vhci_hcd: connection closed
[  506.710249][T29236] vhci_hcd: connection closed
[  506.714867][    T9] vhci_hcd: vhci_device speed not set
[  506.732371][T14396] vhci_hcd: stop threads
[  506.736856][T14396] vhci_hcd: release socket
[  506.741310][T14396] vhci_hcd: disconnect device
[  506.777020][T14396] vhci_hcd: stop threads
[  506.781385][T14396] vhci_hcd: release socket
[  506.785833][T14396] vhci_hcd: disconnect device
[  506.797965][    T9] usb 17-1: new full-speed USB device number 3 using vhci_hcd
[  506.811414][T14396] vhci_hcd: stop threads
[  506.815745][T14396] vhci_hcd: release socket
[  506.820336][T14396] vhci_hcd: disconnect device
[  506.826067][T14396] vhci_hcd: stop threads
[  506.830475][T14396] vhci_hcd: release socket
[  506.834917][T14396] vhci_hcd: disconnect device
[  506.840754][T14396] vhci_hcd: stop threads
[  506.845072][T14396] vhci_hcd: release socket
[  506.849515][T14396] vhci_hcd: disconnect device
[  507.068328][T29266] netlink: 'syz.0.7833': attribute type 12 has an invalid length.
[  507.089157][T29268] loop3: detected capacity change from 0 to 1024
[  507.110540][T29268] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7834: Failed to acquire dquot type 0
[  507.146835][T29268] EXT4-fs (loop3): 1 truncate cleaned up
[  507.219965][T29274] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  507.421562][T29302] pim6reg: entered allmulticast mode
[  507.431736][T29293] loop9: detected capacity change from 0 to 8192
[  507.445603][T29302] 9pnet_fd: Insufficient options for proto=fd
[  507.484721][T14401] netdevsim netdevsim5 netdevsim1 (unregistering): left allmulticast mode
[  507.512442][T14401] netdevsim netdevsim5 netdevsim1 (unregistering): left promiscuous mode
[  507.521173][T14401] bridge0: port 3(netdevsim1) entered disabled state
[  507.667394][T29285] chnl_net:caif_netlink_parms(): no params data found
[  507.690726][T29322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64371 sclass=netlink_route_socket pid=29322 comm=syz.3.7848
[  507.786911][T14401] bridge_slave_1: left allmulticast mode
[  507.792663][T14401] bridge_slave_1: left promiscuous mode
[  507.798399][T14401] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.808253][T14401] bridge_slave_0: left allmulticast mode
[  507.814223][T14401] bridge_slave_0: left promiscuous mode
[  507.815129][T29341] netlink: 'syz.8.7853': attribute type 1 has an invalid length.
[  507.820510][T14401] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.855606][T14401] bond0 (unregistering): (slave gretap1): Releasing active interface
[  507.954409][T14401] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.963245][T14401] bond_slave_0: left promiscuous mode
[  507.969893][T14401] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.978876][T14401] bond_slave_1: left promiscuous mode
[  507.985057][T14401] $Hÿ (unregistering): Released all slaves
[  507.993715][T14401] bond0 (unregistering): Released all slaves
[  508.002203][T14401] bond1 (unregistering): Released all slaves
[  508.010491][T14401] bond2 (unregistering): Released all slaves
[  508.019040][T14401] bond3 (unregistering): Released all slaves
[  508.029223][T14401] bond4 (unregistering): Released all slaves
[  508.038567][T14401] bond5 (unregistering): Released all slaves
[  508.047717][T14401] bond6 (unregistering): Released all slaves
[  508.056952][T14401] bond7 (unregistering): Released all slaves
[  508.066035][T14401] bond8 (unregistering): Released all slaves
[  508.075659][T14401] bond9 (unregistering): Released all slaves
[  508.084180][T14401] bond10 (unregistering): Released all slaves
[  508.092617][T14401] bond11 (unregistering): Released all slaves
[  508.101125][T14401] bond12 (unregistering): Released all slaves
[  508.109693][T14401] bond13 (unregistering): Released all slaves
[  508.118488][T14401] bond14 (unregistering): Released all slaves
[  508.126854][T14401] bond15 (unregistering): Released all slaves
[  508.135792][T14401] bond16 (unregistering): Released all slaves
[  508.144683][T14401] bond17 (unregistering): Released all slaves
[  508.153531][T14401] bond18 (unregistering): Released all slaves
[  508.162292][T14401] bond19 (unregistering): Released all slaves
[  508.170872][T14401] bond20 (unregistering): Released all slaves
[  508.179634][T14401] bond21 (unregistering): Released all slaves
[  508.190246][T29285] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.197404][T29285] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.204840][T29285] bridge_slave_0: entered allmulticast mode
[  508.211996][T29285] bridge_slave_0: entered promiscuous mode
[  508.224874][T29341] 8021q: adding VLAN 0 to HW filter on device bond9
[  508.262356][T29285] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.269600][T29285] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.276973][T29285] bridge_slave_1: entered allmulticast mode
[  508.283474][T29285] bridge_slave_1: entered promiscuous mode
[  508.309113][T29285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.320436][T14401] hsr_slave_1: left promiscuous mode
[  508.356015][T14401] team0 (unregistering): Port device team_slave_1 removed
[  508.366149][T14401] team0 (unregistering): Port device team_slave_0 removed
[  508.410613][T29285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.465335][T29285] team0: Port device team_slave_0 added
[  508.479957][T29285] team0: Port device team_slave_1 added
[  508.548794][T29285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.555988][T29285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.582078][T29285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.608871][T29285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.616001][T29285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.641988][T29285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.676667][T29386] loop8: detected capacity change from 0 to 1024
[  508.695231][   T29] kauditd_printk_skb: 271 callbacks suppressed
[  508.695246][   T29] audit: type=1400 audit(715.695:44610): avc:  denied  { read } for  pid=29383 comm="syz.9.7857" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  508.700160][T29386] EXT4-fs: inline encryption not supported
[  508.701519][   T29] audit: type=1400 audit(715.695:44611): avc:  denied  { open } for  pid=29383 comm="syz.9.7857" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  508.723794][T29386] EXT4-fs: Ignoring removed i_version option
[  508.770386][T29285] hsr_slave_0: entered promiscuous mode
[  508.797698][T29285] hsr_slave_1: entered promiscuous mode
[  508.828168][T29393] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  508.828208][T14401] IPVS: stop unused estimator thread 0...
[  508.835419][   T29] audit: type=1326 audit(715.817:44612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.849242][T29386] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  508.868373][   T29] audit: type=1326 audit(715.817:44613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.902626][   T29] audit: type=1326 audit(715.817:44614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.925702][   T29] audit: type=1326 audit(715.817:44615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.948866][   T29] audit: type=1326 audit(715.817:44616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.971959][   T29] audit: type=1326 audit(715.817:44617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  508.994966][   T29] audit: type=1326 audit(715.817:44618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  509.018230][   T29] audit: type=1326 audit(715.817:44619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29392 comm="syz.3.7859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  509.076891][T29401] loop3: detected capacity change from 0 to 8192
[  509.086566][T29386] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.7858: lblock 2 mapped to illegal pblock 2 (length 1)
[  509.149955][T29386] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.7858: lblock 0 mapped to illegal pblock 48 (length 1)
[  509.165497][T29386] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7858: Failed to acquire dquot type 0
[  509.177727][T29386] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  509.194286][T29386] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.7858: mark_inode_dirty error
[  509.206320][T29386] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  509.218016][T29386] EXT4-fs (loop8): 1 orphan inode deleted
[  509.224925][T14396] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  509.271320][T14396] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  509.355323][T29386] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.7858: Invalid inode table block 1 in block_group 0
[  509.390011][T29423] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  509.405611][T29386] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  509.465464][T29386] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.7858: mark_inode_dirty error
[  509.585754][T29445] SELinux: syz.0.7868 (29445) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  509.762136][T29285] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  509.785220][T29285] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  509.799626][T29285] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  509.813928][T29464] loop8: detected capacity change from 0 to 164
[  509.834953][T29285] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  509.856950][T29464] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  509.886387][T29468] netlink: 'syz.0.7875': attribute type 12 has an invalid length.
[  509.887628][T29464] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  509.941715][T29464] Symlink component flag not implemented
[  509.947598][T29464] Symlink component flag not implemented
[  509.975195][T29285] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.985679][T29464] Symlink component flag not implemented (7)
[  509.991724][T29464] Symlink component flag not implemented (116)
[  510.027646][T29285] 8021q: adding VLAN 0 to HW filter on device team0
[  510.040416][T29483] loop3: detected capacity change from 0 to 1024
[  510.057054][T29483] EXT4-fs: Ignoring removed orlov option
[  510.063893][T10680] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.071020][T10680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.092732][T10680] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.099899][T10680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.116858][T29485] loop0: detected capacity change from 0 to 164
[  510.147984][T29285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  510.158545][T29285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  510.172567][T29485] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  510.182492][T29485] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  510.197387][T29485] Symlink component flag not implemented
[  510.203292][T29485] Symlink component flag not implemented
[  510.209665][T29485] Symlink component flag not implemented (7)
[  510.215672][T29485] Symlink component flag not implemented (116)
[  510.335099][T29285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.380756][T29499] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[  510.387524][T29499] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  510.395193][T29499] vhci_hcd vhci_hcd.0: Device attached
[  510.414719][T29510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  510.434074][T29510] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(15)
[  510.440861][T29510] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  510.448595][T29510] vhci_hcd vhci_hcd.0: Device attached
[  510.481998][T29499] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(12)
[  510.488710][T29499] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  510.496480][T29499] vhci_hcd vhci_hcd.0: Device attached
[  510.540031][T29499] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(18)
[  510.540866][T29285] veth0_vlan: entered promiscuous mode
[  510.546676][T29499] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  510.546736][T29499] vhci_hcd vhci_hcd.0: Device attached
[  510.555616][T29285] veth1_vlan: entered promiscuous mode
[  510.574174][T29518] vhci_hcd: connection closed
[  510.574396][T29513] vhci_hcd: connection closed
[  510.579285][T29529] vhci_hcd: connection closed
[  510.584793][T14398] vhci_hcd: stop threads
[  510.593952][T14398] vhci_hcd: release socket
[  510.598630][T14398] vhci_hcd: disconnect device
[  510.604123][T22727] vhci_hcd: vhci_device speed not set
[  510.605543][T14398] vhci_hcd: stop threads
[  510.609620][T29501] vhci_hcd: connection closed
[  510.613778][T14398] vhci_hcd: release socket
[  510.613792][T14398] vhci_hcd: disconnect device
[  510.629310][T14398] vhci_hcd: stop threads
[  510.633595][T14398] vhci_hcd: release socket
[  510.638090][T14398] vhci_hcd: disconnect device
[  510.644753][T29285] veth0_macvtap: entered promiscuous mode
[  510.651679][T14398] vhci_hcd: stop threads
[  510.652881][T29285] veth1_macvtap: entered promiscuous mode
[  510.655967][T14398] vhci_hcd: release socket
[  510.655986][T14398] vhci_hcd: disconnect device
[  510.673592][T29285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  510.683110][T29285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  510.700331][T22727] usb 19-1: new full-speed USB device number 2 using vhci_hcd
[  510.709524][T22727] usb 19-1: enqueue for inactive port 0
[  510.713859][T29285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.724024][T29285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.732798][T29285] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.741591][T29285] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  510.742897][T22727] usb 19-1: enqueue for inactive port 0
[  510.773722][T29537] __nla_validate_parse: 44 callbacks suppressed
[  510.773740][T29537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7883'.
[  510.792726][T22727] usb 19-1: enqueue for inactive port 0
[  510.852659][T29537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7883'.
[  510.883886][T29553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64371 sclass=netlink_route_socket pid=29553 comm=syz.8.7884
[  510.893351][T22727] vhci_hcd: vhci_device speed not set
[  510.907175][T29544] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7884'.
[  510.916873][T29556] loop5: detected capacity change from 0 to 1024
[  510.930386][T29556] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7838: Failed to acquire dquot type 0
[  510.962707][T29556] EXT4-fs (loop5): 1 truncate cleaned up
[  510.967274][ T2958] vhci_hcd: vhci_device speed not set
[  511.256191][T29585] loop3: detected capacity change from 0 to 2048
[  511.264433][T29583] loop0: detected capacity change from 0 to 8192
[  511.303981][T29594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7890'.
[  511.334250][T15012]  loop3: p1 < > p4
[  511.351325][T15012] loop3: p4 size 8388608 extends beyond EOD, truncated
[  511.386386][T29585]  loop3: p1 < > p4
[  511.404597][T29585] loop3: p4 size 8388608 extends beyond EOD, truncated
[  511.630327][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  511.641091][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  511.676825][T29630] macvlan2: entered promiscuous mode
[  511.682175][T29630] macvlan2: entered allmulticast mode
[  511.730518][T29633] loop3: detected capacity change from 0 to 512
[  511.771428][T29635] loop0: detected capacity change from 0 to 1024
[  511.796312][T29635] EXT4-fs: inline encryption not supported
[  511.802377][T29635] EXT4-fs: Ignoring removed i_version option
[  511.821557][T29635] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  511.856129][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7896'.
[  511.869853][T29635] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.7895: lblock 2 mapped to illegal pblock 2 (length 1)
[  511.893586][T29654] loop9: detected capacity change from 0 to 1024
[  511.931487][T29635] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.7895: lblock 0 mapped to illegal pblock 48 (length 1)
[  511.954604][T29635] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.7895: Failed to acquire dquot type 0
[  511.971804][T29654] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7897: Failed to acquire dquot type 0
[  511.985970][T29635] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.003214][T29654] EXT4-fs (loop9): 1 truncate cleaned up
[  512.019020][T29635] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.7895: mark_inode_dirty error
[  512.030737][T29635] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  512.047368][T29635] EXT4-fs (loop0): 1 orphan inode deleted
[  512.063954][T10663] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1)
[  512.083982][T10663] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0
[  512.103309][T23877] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  512.117069][T23877] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.126763][T23877] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  512.261383][    T9] usb 17-1: enqueue for inactive port 0
[  512.279960][    T9] usb 17-1: enqueue for inactive port 0
[  512.296174][T29677] loop9: detected capacity change from 0 to 8192
[  512.343845][T29683] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7908'.
[  512.354916][T29683] SELinux: syz.8.7908 (29683) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  512.403830][    T9] vhci_hcd: vhci_device speed not set
[  512.425967][T29681] loop0: detected capacity change from 0 to 512
[  512.432653][T29681] EXT4-fs: Ignoring removed mblk_io_submit option
[  512.439758][T29681] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  512.450537][T29681] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  512.458670][T29681] EXT4-fs (loop0): orphan cleanup on readonly fs
[  512.468719][T29681] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7907: Invalid block bitmap block 0 in block_group 0
[  512.482643][T29681] EXT4-fs (loop0): Remounting filesystem read-only
[  512.489416][T29681] EXT4-fs (loop0): 1 orphan inode deleted
[  512.687090][T29697] loop8: detected capacity change from 0 to 1024
[  512.696044][T29697] EXT4-fs: inline encryption not supported
[  512.701995][T29697] EXT4-fs: Ignoring removed i_version option
[  512.711062][T29697] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  512.731962][T29697] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.7913: lblock 2 mapped to illegal pblock 2 (length 1)
[  512.755140][T29697] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.7913: lblock 0 mapped to illegal pblock 48 (length 1)
[  512.778925][T29700] loop3: detected capacity change from 0 to 512
[  512.789914][T29697] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7913: Failed to acquire dquot type 0
[  512.805538][T29697] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.817107][T29697] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.7913: mark_inode_dirty error
[  512.828695][T29697] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  512.843121][T29697] EXT4-fs (loop8): 1 orphan inode deleted
[  512.861176][   T51] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  512.876876][   T51] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  512.891874][T25352] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0
[  512.906709][T25352] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  512.917147][T25352] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  512.963989][T29713] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7915'.
[  512.983625][T29717] netlink: 276 bytes leftover after parsing attributes in process `syz.9.7918'.
[  512.996313][T29713] SELinux: syz.8.7915 (29713) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  513.051180][T29721] 9pnet: Could not find request transport: «WR(©ônÙ½û�‘»«-Åã¦h¯Ä)@Y2>zE1ŸˆÑ9½=¢í¨þdh
[  513.051180][T29721] ?Â-×ä!Må”i2ÖɌѩûáçÕŒ¬¯0#[‘Š1Òì¥_t¢6Aö-[0ŒðÐ1°ÇðÎÖ™“é–õ÷`æ
[  513.161463][T29729] SELinux: syz.9.7924 (29729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  513.249400][T29737] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7928'.
[  513.267911][T29735] loop9: detected capacity change from 0 to 1024
[  513.276481][T29735] EXT4-fs: Ignoring removed bh option
[  513.329239][T29740] netlink: 276 bytes leftover after parsing attributes in process `syz.8.7929'.
[  513.397371][T29746] SELinux: syz.8.7931 (29746) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  513.418056][T29748] netlink: 'syz.0.7932': attribute type 12 has an invalid length.
[  513.466977][T29752] unsupported nlmsg_type 40
[  513.493234][T29752] loop5: detected capacity change from 0 to 128
[  513.515619][T29752] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  513.661507][T29766] loop5: detected capacity change from 0 to 1024
[  513.683344][T29766] EXT4-fs: inline encryption not supported
[  513.689281][T29766] EXT4-fs: Ignoring removed i_version option
[  513.696776][T29770] loop0: detected capacity change from 0 to 2048
[  513.703915][T29770] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  513.715606][T29766] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  513.731092][T29766] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.7940: lblock 2 mapped to illegal pblock 2 (length 1)
[  513.755152][T29766] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.7940: lblock 0 mapped to illegal pblock 48 (length 1)
[  513.771932][T29766] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7940: Failed to acquire dquot type 0
[  513.789011][T29766] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  513.802926][T29766] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7940: mark_inode_dirty error
[  513.837024][T29766] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  513.869028][T29781] loop0: detected capacity change from 0 to 164
[  513.875934][T29766] EXT4-fs (loop5): 1 orphan inode deleted
[  513.893931][T29781] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  513.902400][T10664] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[  513.921520][T29781] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  513.933613][T10664] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0
[  513.933673][T29781] Symlink component flag not implemented
[  513.950983][T29781] Symlink component flag not implemented
[  513.958473][T29766] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.7940: Invalid inode table block 1 in block_group 0
[  513.971758][T29781] Symlink component flag not implemented (7)
[  513.977887][T29781] Symlink component flag not implemented (116)
[  513.982674][T29766] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  513.995957][T29783] netlink: 'syz.9.7945': attribute type 12 has an invalid length.
[  514.005522][T29766] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.7940: mark_inode_dirty error
[  514.164319][T29793] FAULT_INJECTION: forcing a failure.
[  514.164319][T29793] name failslab, interval 1, probability 0, space 0, times 0
[  514.177129][T29793] CPU: 0 UID: 0 PID: 29793 Comm: syz.9.7947 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  514.177156][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  514.177169][T29793] Call Trace:
[  514.177254][T29793]  <TASK>
[  514.177265][T29793]  __dump_stack+0x1d/0x30
[  514.177287][T29793]  dump_stack_lvl+0xe8/0x140
[  514.177307][T29793]  dump_stack+0x15/0x1b
[  514.177322][T29793]  should_fail_ex+0x265/0x280
[  514.177441][T29793]  should_failslab+0x8c/0xb0
[  514.177464][T29793]  kmem_cache_alloc_noprof+0x50/0x310
[  514.177490][T29793]  ? security_file_alloc+0x32/0x100
[  514.177551][T29793]  security_file_alloc+0x32/0x100
[  514.177592][T29793]  init_file+0x5c/0x1d0
[  514.177617][T29793]  alloc_empty_file+0x8b/0x200
[  514.177709][T29793]  alloc_file_pseudo+0xc6/0x160
[  514.177736][T29793]  __shmem_file_setup+0x1de/0x210
[  514.177769][T29793]  shmem_file_setup+0x3b/0x50
[  514.177798][T29793]  __se_sys_memfd_create+0x2c3/0x590
[  514.177865][T29793]  __x64_sys_memfd_create+0x31/0x40
[  514.177895][T29793]  x64_sys_call+0x122f/0x2fb0
[  514.177917][T29793]  do_syscall_64+0xd2/0x200
[  514.177983][T29793]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  514.178087][T29793]  ? clear_bhb_loop+0x40/0x90
[  514.178108][T29793]  ? clear_bhb_loop+0x40/0x90
[  514.178129][T29793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.178226][T29793] RIP: 0033:0x7f4d3961e929
[  514.178241][T29793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.178258][T29793] RSP: 002b:00007f4d37c44e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  514.178276][T29793] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007f4d3961e929
[  514.178289][T29793] RDX: 00007f4d37c44ef0 RSI: 0000000000000000 RDI: 00007f4d396a14cc
[  514.178300][T29793] RBP: 00002000000005c0 R08: 00007f4d37c44bb7 R09: 00007f4d37c44e40
[  514.178323][T29793] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  514.178383][T29793] R13: 00007f4d37c44ef0 R14: 00007f4d37c44eb0 R15: 00002000000001c0
[  514.178402][T29793]  </TASK>
[  515.099486][T29810] loop5: detected capacity change from 0 to 2048
[  515.190848][T29810]  loop5: p1 < > p4
[  515.215447][T29816] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  515.222104][T29816] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  515.229741][T29816] vhci_hcd vhci_hcd.0: Device attached
[  515.251208][T29810] loop5: p4 size 8388608 extends beyond EOD, truncated
[  515.270939][T29821] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  515.280333][ T2995]  loop5: p1 < > p4
[  515.285368][T29821] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15)
[  515.292004][T29821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  515.299626][T29821] vhci_hcd vhci_hcd.0: Device attached
[  515.305118][ T2995] loop5: p4 size 8388608 extends beyond EOD, truncated
[  515.315190][T29821] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17)
[  515.321828][T29821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  515.329481][T29821] vhci_hcd vhci_hcd.0: Device attached
[  515.384114][ T2995]  loop5: p1 < > p4
[  515.389027][ T2995] loop5: p4 size 8388608 extends beyond EOD, truncated
[  515.417766][T29816] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12)
[  515.424514][T29816] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  515.432287][T29816] vhci_hcd vhci_hcd.0: Device attached
[  515.469610][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  515.500067][T22740] usb 7-1: new low-speed USB device number 4 using vhci_hcd
[  515.511697][   T29] kauditd_printk_skb: 228 callbacks suppressed
[  515.511714][   T29] audit: type=1326 audit(722.065:44829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.541073][   T29] audit: type=1326 audit(722.065:44830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.564430][   T29] audit: type=1326 audit(722.065:44831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.587523][   T29] audit: type=1326 audit(722.065:44832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.610704][   T29] audit: type=1326 audit(722.065:44833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.634228][   T29] audit: type=1326 audit(722.065:44834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.657300][   T29] audit: type=1326 audit(722.065:44835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.680520][   T29] audit: type=1326 audit(722.065:44836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.703581][   T29] audit: type=1326 audit(722.065:44837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.726919][   T29] audit: type=1326 audit(722.065:44838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29826 comm="syz.0.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  515.764242][T29843] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  515.775112][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  515.797985][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  515.826009][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  515.837272][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  515.919381][T29822] vhci_hcd: connection closed
[  515.941501][T10659] vhci_hcd: stop threads
[  515.950751][T10659] vhci_hcd: release socket
[  515.955245][T10659] vhci_hcd: disconnect device
[  515.962153][T29817] vhci_hcd: connection reset by peer
[  515.967935][T29843] loop0: detected capacity change from 0 to 8192
[  515.974696][T29831] vhci_hcd: connection closed
[  515.976670][T29825] vhci_hcd: connection closed
[  515.983754][T29848] loop8: detected capacity change from 0 to 1024
[  515.991894][T14398] vhci_hcd: stop threads
[  515.999178][T14398] vhci_hcd: release socket
[  516.003721][T14398] vhci_hcd: disconnect device
[  516.011584][T14398] vhci_hcd: stop threads
[  516.015892][T14398] vhci_hcd: release socket
[  516.020336][T14398] vhci_hcd: disconnect device
[  516.036582][T14398] vhci_hcd: stop threads
[  516.040876][T14398] vhci_hcd: release socket
[  516.045375][T14398] vhci_hcd: disconnect device
[  516.072620][T29848] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7964: Failed to acquire dquot type 0
[  516.098782][T29848] EXT4-fs (loop8): 1 truncate cleaned up
[  516.139734][T29852] loop9: detected capacity change from 0 to 8192
[  516.230885][T29864] loop8: detected capacity change from 0 to 1024
[  516.240979][T29865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64371 sclass=netlink_route_socket pid=29865 comm=syz.0.7967
[  516.255260][T29865] __nla_validate_parse: 9 callbacks suppressed
[  516.255335][T29865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7967'.
[  516.275357][T29864] EXT4-fs: inline encryption not supported
[  516.281381][T29864] EXT4-fs: Ignoring removed i_version option
[  516.291515][T29864] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  516.308267][T29864] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.7971: lblock 2 mapped to illegal pblock 2 (length 1)
[  516.322498][T29864] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.7971: lblock 0 mapped to illegal pblock 48 (length 1)
[  516.337082][T29864] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7971: Failed to acquire dquot type 0
[  516.348599][T29864] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  516.361175][T29867] loop5: detected capacity change from 0 to 2048
[  516.369203][T29864] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.7971: mark_inode_dirty error
[  516.398407][T29864] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  516.409445][T19437]  loop5: p1 < > p4
[  516.414127][T19437] loop5: p4 size 8388608 extends beyond EOD, truncated
[  516.421335][T29864] EXT4-fs (loop8): 1 orphan inode deleted
[  516.427752][T10659] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  516.443895][T10659] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0
[  516.457293][T29867]  loop5: p1 < > p4
[  516.463062][T29864] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.7971: Invalid inode table block 1 in block_group 0
[  516.474316][T29867] loop5: p4 size 8388608 extends beyond EOD, truncated
[  516.505673][T29864] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  516.542685][T29864] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.7971: mark_inode_dirty error
[  516.661591][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  516.663759][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  516.709511][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  516.730776][T29886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7977'.
[  516.742713][T29886] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7977'.
[  516.763466][T29884] loop9: detected capacity change from 0 to 2048
[  516.831595][T15012]  loop9: p1 < > p4
[  516.848514][T15012] loop9: p4 size 8388608 extends beyond EOD, truncated
[  516.854403][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7980'.
[  516.864453][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7980'.
[  516.881371][T29899] SELinux: syz.3.7981 (29899) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  516.891910][T29884]  loop9: p1 < > p4
[  516.901630][T29884] loop9: p4 size 8388608 extends beyond EOD, truncated
[  517.046055][ T2995]  loop9: p1 < > p4
[  517.053521][ T2995] loop9: p4 size 8388608 extends beyond EOD, truncated
[  517.071467][T29908] loop3: detected capacity change from 0 to 8192
[  517.153666][T29911] loop5: detected capacity change from 0 to 2048
[  517.169516][T19428] udevd[19428]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  517.176037][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  517.232721][ T3739]  loop5: p1 < > p4
[  517.239565][ T3739] loop5: p4 size 8388608 extends beyond EOD, truncated
[  517.251149][T29913] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  517.285699][T29911]  loop5: p1 < > p4
[  517.299632][T29911] loop5: p4 size 8388608 extends beyond EOD, truncated
[  517.349408][T29929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7989'.
[  517.385488][T29929] SELinux: syz.0.7989 (29929) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  517.447422][ T2995]  loop5: p1 < > p4
[  517.459647][ T2995] loop5: p4 size 8388608 extends beyond EOD, truncated
[  517.499256][T29937] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7993'.
[  517.509557][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  517.517003][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  517.539999][T29937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7993'.
[  517.558764][T29939] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7991'.
[  517.594644][T29945] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  517.601305][T29945] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  517.608866][T29945] vhci_hcd vhci_hcd.0: Device attached
[  517.653506][T29952] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  517.662789][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7991'.
[  517.690147][T29945] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12)
[  517.696890][T29945] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  517.704674][T29945] vhci_hcd vhci_hcd.0: Device attached
[  517.726775][T29955] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  517.736089][T29945] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16)
[  517.742742][T29945] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  517.750488][T29945] vhci_hcd vhci_hcd.0: Device attached
[  517.778662][T29945] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18)
[  517.785328][T29945] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  517.793134][T29945] vhci_hcd vhci_hcd.0: Device attached
[  517.807792][T29968] vhci_hcd: connection closed
[  517.807796][T29963] vhci_hcd: connection closed
[  517.808111][T10680] vhci_hcd: stop threads
[  517.812577][T22727] vhci_hcd: vhci_device speed not set
[  517.817232][T10680] vhci_hcd: release socket
[  517.831672][T10680] vhci_hcd: disconnect device
[  517.838638][T29946] vhci_hcd: connection closed
[  517.838848][T29956] vhci_hcd: connection closed
[  517.851539][T10680] vhci_hcd: stop threads
[  517.860721][T10680] vhci_hcd: release socket
[  517.865242][T10680] vhci_hcd: disconnect device
[  517.867396][T29973] loop8: detected capacity change from 0 to 512
[  517.872535][T10680] vhci_hcd: stop threads
[  517.880568][T10680] vhci_hcd: release socket
[  517.885031][T10680] vhci_hcd: disconnect device
[  517.890328][T10680] vhci_hcd: stop threads
[  517.894887][T10680] vhci_hcd: release socket
[  517.899399][T10680] vhci_hcd: disconnect device
[  517.919893][T22727] usb 1-1: new full-speed USB device number 3 using vhci_hcd
[  517.942571][T29971] loop3: detected capacity change from 0 to 8192
[  517.958825][T22727] usb 1-1: enqueue for inactive port 0
[  517.981368][T29979] loop5: detected capacity change from 0 to 128
[  518.010368][T22727] usb 1-1: enqueue for inactive port 0
[  518.064205][T22727] usb 1-1: enqueue for inactive port 0
[  518.074284][T29983] loop5: detected capacity change from 0 to 164
[  518.080942][T29985] loop8: detected capacity change from 0 to 1024
[  518.100356][T29985] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8004: Failed to acquire dquot type 0
[  518.117695][T29983] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  518.134797][T29981] loop9: detected capacity change from 0 to 2048
[  518.136362][T29985] EXT4-fs (loop8): 1 truncate cleaned up
[  518.147983][T29983] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  518.155678][T29989] loop3: detected capacity change from 0 to 1024
[  518.163614][T22727] vhci_hcd: vhci_device speed not set
[  518.167781][T29989] EXT4-fs: Ignoring removed bh option
[  518.174983][T29983] Symlink component flag not implemented
[  518.180654][T29983] Symlink component flag not implemented
[  518.187839][T29983] Symlink component flag not implemented (7)
[  518.193950][T29983] Symlink component flag not implemented (116)
[  518.200946][T19437]  loop9: p1 < > p4
[  518.207231][T19437] loop9: p4 size 8388608 extends beyond EOD, truncated
[  518.238628][T29981]  loop9: p1 < > p4
[  518.244261][T29981] loop9: p4 size 8388608 extends beyond EOD, truncated
[  518.346337][ T2995]  loop9: p1 < > p4
[  518.357417][ T2995] loop9: p4 size 8388608 extends beyond EOD, truncated
[  518.396790][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  518.407072][ T3739] udevd[3739]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  518.478059][T30010] netlink: 'syz.8.8008': attribute type 10 has an invalid length.
[  518.505972][T30010] ipvlan0: entered allmulticast mode
[  518.511327][T30010] veth0_vlan: entered allmulticast mode
[  518.540800][T30010] team0: Device ipvlan0 failed to register rx_handler
[  518.568030][T30013] loop8: detected capacity change from 0 to 1024
[  518.586864][T30014] loop0: detected capacity change from 0 to 164
[  518.600013][T30017] loop9: detected capacity change from 0 to 512
[  518.606984][T30013] EXT4-fs: Ignoring removed orlov option
[  518.613958][T30014] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  518.625840][T30014] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  518.636456][T30014] Symlink component flag not implemented
[  518.642116][T30014] Symlink component flag not implemented
[  518.648039][T30014] Symlink component flag not implemented (7)
[  518.654101][T30014] Symlink component flag not implemented (116)
[  518.662804][T30017] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  518.708588][T30017] EXT4-fs (loop9): mount failed
[  518.828523][T30026] lo speed is unknown, defaulting to 1000
[  518.835223][T30026] lo speed is unknown, defaulting to 1000
[  518.841378][T30026] lo speed is unknown, defaulting to 1000
[  518.909780][T30026] infiniband syz0: set down
[  518.914470][T30026] infiniband syz0: added lo
[  518.935777][T24007] lo speed is unknown, defaulting to 1000
[  519.004864][T30026] RDS/IB: syz0: added
[  519.004969][T30026] smc: adding ib device syz0 with port count 1
[  519.005022][T30026] smc:    ib device syz0 port 1 has pnetid 
[  519.005485][T30026] lo speed is unknown, defaulting to 1000
[  519.067341][T30026] lo speed is unknown, defaulting to 1000
[  519.127654][T30026] lo speed is unknown, defaulting to 1000
[  519.190372][T30026] lo speed is unknown, defaulting to 1000
[  519.254617][T30026] lo speed is unknown, defaulting to 1000
[  519.318634][T30026] lo speed is unknown, defaulting to 1000
[  519.378758][T24007] lo speed is unknown, defaulting to 1000
[  519.410959][T30032] FAULT_INJECTION: forcing a failure.
[  519.410959][T30032] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  519.460187][T30032] CPU: 0 UID: 0 PID: 30032 Comm: syz.9.8014 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  519.460259][T30032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.460274][T30032] Call Trace:
[  519.460281][T30032]  <TASK>
[  519.460290][T30032]  __dump_stack+0x1d/0x30
[  519.460313][T30032]  dump_stack_lvl+0xe8/0x140
[  519.460334][T30032]  dump_stack+0x15/0x1b
[  519.460352][T30032]  should_fail_ex+0x265/0x280
[  519.460438][T30032]  should_fail_alloc_page+0xf2/0x100
[  519.460464][T30032]  __alloc_frozen_pages_noprof+0xff/0x360
[  519.460597][T30032]  alloc_pages_mpol+0xb3/0x250
[  519.460628][T30032]  alloc_pages_noprof+0x90/0x130
[  519.460704][T30032]  pte_alloc_one+0x2d/0x120
[  519.460726][T30032]  __pte_alloc+0x32/0x2b0
[  519.460754][T30032]  ? mas_state_walk+0x574/0x650
[  519.460786][T30032]  handle_mm_fault+0x1c16/0x2be0
[  519.460836][T30032]  ? mas_walk+0xf2/0x120
[  519.460873][T30032]  do_user_addr_fault+0x636/0x1090
[  519.460909][T30032]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  519.460946][T30032]  exc_page_fault+0x62/0xa0
[  519.460986][T30032]  asm_exc_page_fault+0x26/0x30
[  519.461011][T30032] RIP: 0033:0x7f4d394e0ca3
[  519.461031][T30032] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  519.461053][T30032] RSP: 002b:00007f4d37c864a0 EFLAGS: 00010206
[  519.461073][T30032] RAX: 0000000000000000 RBX: 00007f4d37c86540 RCX: 00007f4d2f867000
[  519.461140][T30032] RDX: 00007f4d37c866e0 RSI: 0000000000000001 RDI: 00007f4d37c865e0
[  519.461155][T30032] RBP: 000000000000013b R08: 0000000000000008 R09: 00000000000000b8
[  519.461170][T30032] R10: 00000000000000c4 R11: 00007f4d37c86540 R12: 00007f4d37c86540
[  519.461188][T30032] R13: 00007f4d396bc3a0 R14: 00000000000000eb R15: 00007f4d37c865e0
[  519.461221][T30032]  </TASK>
[  519.461235][T30032] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  519.655444][T30032] loop9: detected capacity change from 0 to 128
[  519.770332][T30034] loop3: detected capacity change from 0 to 1024
[  519.860763][T30048] loop8: detected capacity change from 0 to 1024
[  519.903337][T30043] loop0: detected capacity change from 0 to 2048
[  519.951338][T15012]  loop0: p1 < > p4
[  519.961695][T15012] loop0: p4 size 8388608 extends beyond EOD, truncated
[  519.993587][T30043]  loop0: p1 < > p4
[  519.997360][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  519.998599][T30043] loop0: p4 size 8388608 extends beyond EOD, truncated
[  520.058847][ T2995]  loop0: p1 < > p4
[  520.068158][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated
[  520.140800][T30065] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  520.151056][ T2995]  loop0: p1 < > p4
[  520.156412][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated
[  520.221546][T30073] SELinux: syz.5.8027 (30073) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  520.230006][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  520.237961][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  520.372967][T30091] netlink: 'syz.0.8033': attribute type 1 has an invalid length.
[  520.408749][T30095] loop9: detected capacity change from 0 to 256
[  520.426681][T30091] 8021q: adding VLAN 0 to HW filter on device bond17
[  520.436399][T30095] vfat: Bad value for 'gid'
[  520.441138][T30095] vfat: Bad value for 'gid'
[  520.523847][T30095] atomic_op ffff88811e93cd28 conn xmit_atomic 0000000000000000
[  520.543167][T30095] bridge_slave_1 (unregistering): left allmulticast mode
[  520.550363][T30095] bridge_slave_1 (unregistering): left promiscuous mode
[  520.557448][T30095] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.615936][T30100] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  520.678405][T30100] loop5: detected capacity change from 0 to 8192
[  520.771414][T30116] loop0: detected capacity change from 0 to 512
[  520.864837][T30124] loop9: detected capacity change from 0 to 1024
[  521.155474][T22740] usb 7-1: enqueue for inactive port 0
[  521.161068][T22740] usb 7-1: enqueue for inactive port 0
[  521.251618][T22740] vhci_hcd: vhci_device speed not set
[  521.700197][   T29] kauditd_printk_skb: 396 callbacks suppressed
[  521.700212][   T29] audit: type=1326 audit(727.855:45227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.733248][T30129] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  521.769125][   T29] audit: type=1326 audit(727.893:45228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.792456][   T29] audit: type=1326 audit(727.893:45229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.815610][   T29] audit: type=1326 audit(727.893:45230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.838686][   T29] audit: type=1326 audit(727.893:45231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.862207][   T29] audit: type=1326 audit(727.893:45232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.883042][T30129] loop0: detected capacity change from 0 to 8192
[  521.885197][   T29] audit: type=1326 audit(727.893:45233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.914633][   T29] audit: type=1326 audit(727.893:45234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.937547][   T29] audit: type=1326 audit(727.893:45235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  521.960537][   T29] audit: type=1326 audit(727.893:45236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30128 comm="syz.0.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183097e929 code=0x7ffc0000
[  522.024823][T30133] loop0: detected capacity change from 0 to 1024
[  522.038502][T30133] EXT4-fs: inline encryption not supported
[  522.044535][T30133] EXT4-fs: Ignoring removed i_version option
[  522.052233][T30133] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.065700][T30133] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.8044: lblock 2 mapped to illegal pblock 2 (length 1)
[  522.080223][T30133] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.8044: lblock 0 mapped to illegal pblock 48 (length 1)
[  522.094521][T30133] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8044: Failed to acquire dquot type 0
[  522.106429][T30133] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.116039][T30133] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8044: mark_inode_dirty error
[  522.127454][T30133] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  522.137790][T30133] EXT4-fs (loop0): 1 orphan inode deleted
[  522.144142][T10663] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1)
[  522.160120][T10663] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 0
[  522.173130][T30133] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.8044: Invalid inode table block 1 in block_group 0
[  522.187665][T30133] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.197721][T30133] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.8044: mark_inode_dirty error
[  522.256108][T30136] netlink: 'syz.0.8045': attribute type 1 has an invalid length.
[  522.271288][T30136] 8021q: adding VLAN 0 to HW filter on device bond18
[  522.308754][T30139] loop0: detected capacity change from 0 to 1024
[  522.327993][T30139] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8046: Failed to acquire dquot type 0
[  522.346556][T30139] EXT4-fs (loop0): 1 truncate cleaned up
[  522.473536][T30147] netlink: 'syz.0.8049': attribute type 12 has an invalid length.
[  522.505193][T30149] __nla_validate_parse: 11 callbacks suppressed
[  522.505208][T30149] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8050'.
[  522.522447][T30149] SELinux: syz.0.8050 (30149) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  522.664311][T30155] loop5: detected capacity change from 0 to 1024
[  522.672335][T30155] EXT4-fs: inline encryption not supported
[  522.678255][T30155] EXT4-fs: Ignoring removed i_version option
[  522.691352][T30155] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.703743][T30155] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.8052: lblock 2 mapped to illegal pblock 2 (length 1)
[  522.718003][T30155] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.8052: lblock 0 mapped to illegal pblock 48 (length 1)
[  522.732349][T30155] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.8052: Failed to acquire dquot type 0
[  522.739755][T30159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64371 sclass=netlink_route_socket pid=30159 comm=syz.0.8053
[  522.745687][T30155] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.759701][T30159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8053'.
[  522.767445][T30155] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8052: mark_inode_dirty error
[  522.787509][T30155] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  522.797825][T30155] EXT4-fs (loop5): 1 orphan inode deleted
[  522.804621][   T51] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  522.819361][   T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  522.832630][T30155] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.8052: Invalid inode table block 1 in block_group 0
[  522.845426][T30155] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  522.855269][T30155] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.8052: mark_inode_dirty error
[  522.923254][T30163] loop5: detected capacity change from 0 to 1024
[  522.930698][T30163] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.942225][T30163] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.8054: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0)
[  522.960817][T30163] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.8054: Bad quota inode: 3, type: 0
[  523.012994][T30167] netlink: 'syz.3.8056': attribute type 1 has an invalid length.
[  523.019059][T30163] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  523.035713][T30163] EXT4-fs (loop5): mount failed
[  523.052019][T30163] loop5: detected capacity change from 0 to 512
[  523.059946][T30170] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8057'.
[  523.069018][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8057'.
[  523.106454][T30167] 8021q: adding VLAN 0 to HW filter on device bond13
[  523.211345][T30180] loop5: detected capacity change from 0 to 1024
[  523.220743][T30180] EXT4-fs: inline encryption not supported
[  523.226679][T30180] EXT4-fs: Ignoring removed i_version option
[  523.236158][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8063'.
[  523.244039][T30180] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  523.245174][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8063'.
[  523.264552][T30180] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.8060: lblock 2 mapped to illegal pblock 2 (length 1)
[  523.279322][T30180] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.8060: lblock 0 mapped to illegal pblock 48 (length 1)
[  523.295323][T30180] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.8060: Failed to acquire dquot type 0
[  523.307093][T30180] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  523.316689][T30180] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.8060: mark_inode_dirty error
[  523.332280][T30180] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  523.334100][T30191] loop3: detected capacity change from 0 to 1024
[  523.372385][T30180] EXT4-fs (loop5): 1 orphan inode deleted
[  523.378326][T30187] loop9: detected capacity change from 0 to 8192
[  523.390921][T10659] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  523.407778][T10659] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0
[  523.436560][T30180] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.8060: Invalid inode table block 1 in block_group 0
[  523.454991][T30180] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  523.459032][T30195] loop8: detected capacity change from 0 to 1024
[  523.464982][T30180] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.8060: mark_inode_dirty error
[  523.507665][T30195] EXT4-fs: inline encryption not supported
[  523.513598][T30195] EXT4-fs: Ignoring removed i_version option
[  523.532482][T30195] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  523.582382][T30195] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.8067: lblock 2 mapped to illegal pblock 2 (length 1)
[  523.610082][T30195] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.8067: lblock 0 mapped to illegal pblock 48 (length 1)
[  523.638562][T30195] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8067: Failed to acquire dquot type 0
[  523.652968][T30195] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  523.663812][T30195] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.8067: mark_inode_dirty error
[  523.679439][T30195] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  523.690092][T30195] EXT4-fs (loop8): 1 orphan inode deleted
[  523.697429][T30195] EXT4-fs mount: 66 callbacks suppressed
[  523.697447][T30195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.719363][   T51] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  523.734994][T30210] netlink: 'syz.5.8072': attribute type 1 has an invalid length.
[  523.752887][   T51] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  523.769504][T30195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.773356][T30210] 8021q: adding VLAN 0 to HW filter on device bond1
[  523.782392][T30195] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.8067: Invalid inode table block 1 in block_group 0
[  523.805914][T30216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8074'.
[  523.815647][T30212] lo speed is unknown, defaulting to 1000
[  523.817553][T30216] SELinux: syz.3.8074 (30216) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  523.839391][T30195] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  523.851244][T30195] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.8067: mark_inode_dirty error
[  523.913871][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'.
[  523.922809][T30221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8076'.
[  523.937970][T30225] loop5: detected capacity change from 0 to 1024
[  523.958263][T30227] loop8: detected capacity change from 0 to 1024
[  523.983454][T30227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.040118][T30227] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8079: Allocating blocks 481-513 which overlap fs metadata
[  524.157487][T30227] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8079'.
[  524.189100][T30250] SELinux: syz.5.8086 (30250) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  524.211975][T30256] netlink: 'syz.9.8085': attribute type 1 has an invalid length.
[  524.212431][T30251] EXT4-fs (loop8): pa ffff88810698b9a0: logic 352, phys. 465, len 3
[  524.227944][T30251] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  524.254780][T30256] 8021q: adding VLAN 0 to HW filter on device bond15
[  524.323757][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.403920][T30272] loop8: detected capacity change from 0 to 1024
[  524.429311][T30276] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8)
[  524.435884][T30276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  524.443434][T30276] vhci_hcd vhci_hcd.0: Device attached
[  524.445421][T30280] FAULT_INJECTION: forcing a failure.
[  524.445421][T30280] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  524.462337][T30280] CPU: 0 UID: 0 PID: 30280 Comm: syz.3.8096 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  524.462450][T30280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  524.462466][T30280] Call Trace:
[  524.462472][T30280]  <TASK>
[  524.462479][T30280]  __dump_stack+0x1d/0x30
[  524.462528][T30280]  dump_stack_lvl+0xe8/0x140
[  524.462551][T30280]  dump_stack+0x15/0x1b
[  524.462572][T30280]  should_fail_ex+0x265/0x280
[  524.462650][T30280]  should_fail_alloc_page+0xf2/0x100
[  524.462716][T30280]  __alloc_frozen_pages_noprof+0xff/0x360
[  524.462758][T30280]  alloc_pages_mpol+0xb3/0x250
[  524.462866][T30280]  alloc_pages_noprof+0x90/0x130
[  524.462899][T30280]  pte_alloc_one+0x2d/0x120
[  524.462919][T30280]  __pte_alloc+0x32/0x2b0
[  524.462998][T30280]  ? mas_state_walk+0x574/0x650
[  524.463031][T30280]  handle_mm_fault+0x1c16/0x2be0
[  524.463059][T30280]  ? mas_walk+0xf2/0x120
[  524.463115][T30280]  do_user_addr_fault+0x636/0x1090
[  524.463227][T30280]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  524.463251][T30280]  exc_page_fault+0x62/0xa0
[  524.463283][T30280]  asm_exc_page_fault+0x26/0x30
[  524.463322][T30280] RIP: 0033:0x7fe8aa4e0ca3
[  524.463336][T30280] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  524.463352][T30280] RSP: 002b:00007fe8a8c864a0 EFLAGS: 00010206
[  524.463367][T30280] RAX: 0000000000000000 RBX: 00007fe8a8c86540 RCX: 00007fe8a0867000
[  524.463379][T30280] RDX: 00007fe8a8c866e0 RSI: 0000000000000003 RDI: 00007fe8a8c865e0
[  524.463391][T30280] RBP: 0000000000000139 R08: 0000000000000009 R09: 00000000000001ca
[  524.463477][T30280] R10: 00000000000001dc R11: 00007fe8a8c86540 R12: 00007fe8a8c86540
[  524.463488][T30280] R13: 00007fe8aa6bc3a0 R14: 0000000000000060 R15: 00007fe8a8c865e0
[  524.463561][T30280]  </TASK>
[  524.463572][T30280] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  524.508617][T30276] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(10)
[  524.663257][T30276] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  524.670977][T30276] vhci_hcd vhci_hcd.0: Device attached
[  524.688752][T30280] loop3: detected capacity change from 0 to 2048
[  524.698783][T30286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  524.729479][T30276] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(12)
[  524.736280][T30276] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  524.743960][T30276] vhci_hcd vhci_hcd.0: Device attached
[  524.758143][ T3526] vhci_hcd: vhci_device speed not set
[  524.764375][T30276] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(16)
[  524.771025][T30276] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  524.778750][T30276] vhci_hcd vhci_hcd.0: Device attached
[  524.809574][T30286] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(19)
[  524.816309][T30286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  524.824009][T30286] vhci_hcd vhci_hcd.0: Device attached
[  524.829664][ T3526] usb 19-1: new full-speed USB device number 3 using vhci_hcd
[  524.834280][T30304] SELinux: syz.3.8101 (30304) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  524.857313][T30303] loop0: detected capacity change from 0 to 1024
[  524.876526][T30303] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8103: Failed to acquire dquot type 0
[  524.905621][T30293] vhci_hcd: connection closed
[  524.905711][T30284] vhci_hcd: connection closed
[  524.905769][T30299] vhci_hcd: connection closed
[  524.911249][T30277] vhci_hcd: connection reset by peer
[  524.915530][T10659] vhci_hcd: stop threads
[  524.921949][T30291] vhci_hcd: connection closed
[  524.925522][T10659] vhci_hcd: release socket
[  524.935125][T30302] lo speed is unknown, defaulting to 1000
[  524.938918][T10659] vhci_hcd: disconnect device
[  524.953398][T30303] EXT4-fs (loop0): 1 truncate cleaned up
[  524.959355][T10659] vhci_hcd: stop threads
[  524.963731][T10659] vhci_hcd: release socket
[  524.968190][T10659] vhci_hcd: disconnect device
[  524.972501][T30303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.994245][T10659] vhci_hcd: stop threads
[  524.998715][T10659] vhci_hcd: release socket
[  525.003306][T10659] vhci_hcd: disconnect device
[  525.019085][T10659] vhci_hcd: stop threads
[  525.023377][T10659] vhci_hcd: release socket
[  525.025872][T30313] loop5: detected capacity change from 0 to 2048
[  525.028307][T10659] vhci_hcd: disconnect device
[  525.052170][T23877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.064706][T10659] vhci_hcd: stop threads
[  525.069210][T10659] vhci_hcd: release socket
[  525.073733][T10659] vhci_hcd: disconnect device
[  525.079347][T19437]  loop5: p1 < > p4
[  525.083803][T19437] loop5: p4 size 8388608 extends beyond EOD, truncated
[  525.103194][T30313]  loop5: p1 < > p4
[  525.107804][T30313] loop5: p4 size 8388608 extends beyond EOD, truncated
[  525.127067][T30319] loop3: detected capacity change from 0 to 1024
[  525.163646][T30319] EXT4-fs: inline encryption not supported
[  525.169579][T30319] EXT4-fs: Ignoring removed i_version option
[  525.194337][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  525.208588][T30319] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  525.219408][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  525.232033][T30319] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.8108: lblock 2 mapped to illegal pblock 2 (length 1)
[  525.252525][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  525.265583][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  525.282067][T30319] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.8108: lblock 0 mapped to illegal pblock 48 (length 1)
[  525.296703][T30323] loop8: detected capacity change from 0 to 8192
[  525.320765][T30319] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8108: Failed to acquire dquot type 0
[  525.363922][T30319] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  525.399582][T30319] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.8108: mark_inode_dirty error
[  525.418922][T30319] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  525.447920][T30339] loop5: detected capacity change from 0 to 164
[  525.458243][T30319] EXT4-fs (loop3): 1 orphan inode deleted
[  525.464559][T30319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.477154][T14401] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1)
[  525.494604][T30339] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  525.509334][T30339] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  525.518495][T14401] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0
[  525.532447][T30339] Symlink component flag not implemented
[  525.538160][T30339] Symlink component flag not implemented
[  525.547880][T30339] Symlink component flag not implemented (7)
[  525.554041][T30339] Symlink component flag not implemented (116)
[  525.561638][T30319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.578850][T30344] IPv6: sit1: Disabled Multicast RS
[  525.584756][T30319] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.8108: Invalid inode table block 1 in block_group 0
[  525.610846][T30319] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  525.654898][T30319] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.8108: mark_inode_dirty error
[  525.694286][T30347] loop9: detected capacity change from 0 to 512
[  525.725913][T30347] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  525.788263][T30347] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.822745][T30347] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.8116: corrupted xattr block 32: bad e_name length
[  525.852406][T30347] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop9 ino=15
[  525.901618][T30362] loop8: detected capacity change from 0 to 2048
[  525.946429][T30362]  loop8: p1 < > p4
[  525.953135][T30362] loop8: p4 size 8388608 extends beyond EOD, truncated
[  526.040865][T30371] netlink: 'syz.0.8122': attribute type 1 has an invalid length.
[  526.052953][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  526.072980][T30371] 8021q: adding VLAN 0 to HW filter on device bond19
[  526.073982][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  526.099318][T30376] netlink: 'syz.8.8123': attribute type 1 has an invalid length.
[  526.119410][T30376] 8021q: adding VLAN 0 to HW filter on device bond10
[  526.140450][T30375] SELinux: syz.3.8124 (30375) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  526.175872][T30380] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7)
[  526.182460][T30380] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  526.189989][T30380] vhci_hcd vhci_hcd.0: Device attached
[  526.196708][T30380] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(9)
[  526.203262][T30380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  526.210942][T30380] vhci_hcd vhci_hcd.0: Device attached
[  526.228580][T30380] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  526.239252][T30380] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(13)
[  526.245910][T30380] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  526.246457][T30387] loop3: detected capacity change from 0 to 1024
[  526.253538][T30380] vhci_hcd vhci_hcd.0: Device attached
[  526.274322][T30387] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8126: Failed to acquire dquot type 0
[  526.284383][T30380] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(15)
[  526.286455][T30387] EXT4-fs (loop3): 1 truncate cleaned up
[  526.292228][T30380] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  526.292337][T30380] vhci_hcd vhci_hcd.0: Device attached
[  526.299097][T30387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.337066][T30380] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(17)
[  526.343714][T30380] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  526.351415][T30380] vhci_hcd vhci_hcd.0: Device attached
[  526.362374][T30395] vhci_hcd: connection closed
[  526.362490][T30383] vhci_hcd: connection closed
[  526.362723][   T51] vhci_hcd: stop threads
[  526.367276][T30381] vhci_hcd: connection closed
[  526.376481][   T51] vhci_hcd: release socket
[  526.377139][T30392] vhci_hcd: connection closed
[  526.381203][   T51] vhci_hcd: disconnect device
[  526.381587][T30386] vhci_hcd: connection closed
[  526.386426][   T51] vhci_hcd: stop threads
[  526.404377][   T51] vhci_hcd: release socket
[  526.404511][T24007] vhci_hcd: vhci_device speed not set
[  526.414209][   T51] vhci_hcd: disconnect device
[  526.419372][   T51] vhci_hcd: stop threads
[  526.423767][   T51] vhci_hcd: release socket
[  526.428264][   T51] vhci_hcd: disconnect device
[  526.430975][T30397] loop0: detected capacity change from 0 to 512
[  526.441666][T23343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.451501][   T51] vhci_hcd: stop threads
[  526.455808][   T51] vhci_hcd: release socket
[  526.460390][   T51] vhci_hcd: disconnect device
[  526.475985][   T51] vhci_hcd: stop threads
[  526.477883][T30397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.480296][   T51] vhci_hcd: release socket
[  526.480312][   T51] vhci_hcd: disconnect device
[  526.505826][T30397] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.511586][T24007] usb 17-1: new full-speed USB device number 4 using vhci_hcd
[  526.523020][T24007] usb 17-1: enqueue for inactive port 0
[  526.528676][T24007] usb 17-1: enqueue for inactive port 0
[  526.534854][T24007] usb 17-1: enqueue for inactive port 0
[  526.576448][T22267] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.618703][T30410] loop3: detected capacity change from 0 to 1024
[  526.627052][T24007] vhci_hcd: vhci_device speed not set
[  526.650889][T30410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.697617][T30407] lo speed is unknown, defaulting to 1000
[  526.838989][T23343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.898766][T30420] loop3: detected capacity change from 0 to 8192
[  527.104761][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  527.104778][   T29] audit: type=1400 audit(732.916:45334): avc:  denied  { bind } for  pid=30428 comm="syz.9.8134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  527.130804][   T29] audit: type=1400 audit(732.916:45335): avc:  denied  { map } for  pid=30428 comm="syz.9.8134" path="socket:[88881]" dev="sockfs" ino=88881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  527.153771][   T29] audit: type=1400 audit(732.916:45336): avc:  denied  { read } for  pid=30428 comm="syz.9.8134" path="socket:[88881]" dev="sockfs" ino=88881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  527.176798][   T29] audit: type=1400 audit(732.916:45337): avc:  denied  { watch watch_reads } for  pid=30428 comm="syz.9.8134" path="/399" dev="tmpfs" ino=2174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  527.202357][   T29] audit: type=1326 audit(732.963:45338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.225618][   T29] audit: type=1326 audit(732.963:45339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.248764][   T29] audit: type=1326 audit(732.963:45340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.271854][   T29] audit: type=1326 audit(732.963:45341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.294895][   T29] audit: type=1326 audit(732.963:45342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.296644][T30426] loop8: detected capacity change from 0 to 8192
[  527.318041][   T29] audit: type=1326 audit(732.963:45343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30425 comm="syz.8.8137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb47f9e929 code=0x7ffc0000
[  527.367609][T30436] loop9: detected capacity change from 0 to 1024
[  527.453403][T30436] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8138: Failed to acquire dquot type 0
[  527.475639][T30436] EXT4-fs (loop9): 1 truncate cleaned up
[  527.496392][T30436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.565880][T30454] loop8: detected capacity change from 0 to 1024
[  527.588878][T30454] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  527.615783][T22267] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.625940][T30454] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8146: Allocating blocks 481-513 which overlap fs metadata
[  527.626805][T30458] lo speed is unknown, defaulting to 1000
[  527.661062][T30454] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8146: Allocating blocks 465-513 which overlap fs metadata
[  527.699383][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.818610][T30476] loop8: detected capacity change from 0 to 1024
[  527.833419][T30476] EXT4-fs: Ignoring removed bh option
[  527.858835][T30476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.014673][T30478] loop3: detected capacity change from 0 to 8192
[  528.027370][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.099709][T30489] lo speed is unknown, defaulting to 1000
[  528.141520][T30499] loop8: detected capacity change from 0 to 2048
[  528.155654][T30504] loop3: detected capacity change from 0 to 1024
[  528.162736][T30504] EXT4-fs: inline encryption not supported
[  528.168760][T30504] EXT4-fs: Ignoring removed i_version option
[  528.176000][T30504] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  528.190784][T19437]  loop8: p1 < > p4
[  528.200922][T19437] loop8: p4 size 8388608 extends beyond EOD, truncated
[  528.209003][T30504] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.8159: lblock 2 mapped to illegal pblock 2 (length 1)
[  528.231815][T30504] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.8159: lblock 0 mapped to illegal pblock 48 (length 1)
[  528.255833][T30499]  loop8: p1 < > p4
[  528.260766][T30499] loop8: p4 size 8388608 extends beyond EOD, truncated
[  528.277858][T30504] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8159: Failed to acquire dquot type 0
[  528.328560][T30504] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  528.353050][T30508] __nla_validate_parse: 32 callbacks suppressed
[  528.353068][T30508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8160'.
[  528.368280][T30508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8160'.
[  528.390543][T30504] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.8159: mark_inode_dirty error
[  528.418232][T30504] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  528.429340][T30510] loop8: detected capacity change from 0 to 1024
[  528.456337][T30504] EXT4-fs (loop3): 1 orphan inode deleted
[  528.469537][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  528.480106][T30504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  528.489189][T14396] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  528.508262][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  528.542133][T14396] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  528.582292][T30516] netlink: 'syz.0.8164': attribute type 12 has an invalid length.
[  528.594992][T30504] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.621586][T30504] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.8159: Invalid inode table block 1 in block_group 0
[  528.648313][T30520] netlink: 'syz.8.8166': attribute type 12 has an invalid length.
[  528.666529][T30514] loop9: detected capacity change from 0 to 8192
[  528.674394][T30504] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  528.684366][T30504] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.8159: mark_inode_dirty error
[  528.785628][T30529] loop0: detected capacity change from 0 to 164
[  528.810354][T30529] ISOFS: unable to read i-node block
[  528.815710][T30529] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  528.831577][T30528] lo speed is unknown, defaulting to 1000
[  528.862623][T30529] isofs_fill_super: get root inode failed
[  529.086341][T30537] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8172'.
[  529.100632][T30534] loop8: detected capacity change from 0 to 2048
[  529.111445][T30537] SELinux: syz.3.8172 (30537) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  529.165564][T30534]  loop8: p1 < > p4
[  529.175961][T30534] loop8: p4 size 8388608 extends beyond EOD, truncated
[  529.286467][T30544] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  529.306425][T19437] udevd[19437]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  529.308188][T15012] udevd[15012]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  529.378648][T30552] loop3: detected capacity change from 0 to 1024
[  529.384722][T30554] loop9: detected capacity change from 0 to 128
[  529.438316][T30552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.469024][T30559] loop8: detected capacity change from 0 to 1024
[  529.486341][T30552] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.8177: Allocating blocks 481-513 which overlap fs metadata
[  529.505029][T30552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8177'.
[  529.507794][T30559] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8179: Failed to acquire dquot type 0
[  529.514074][T30552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8177'.
[  529.514096][T30552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8177'.
[  529.546008][T30552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8177'.
[  529.558285][T30552] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.8177: Allocating blocks 465-513 which overlap fs metadata
[  529.567747][T30559] EXT4-fs (loop8): 1 truncate cleaned up
[  529.593134][T23343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.623844][T30559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.662738][T30563] loop0: detected capacity change from 0 to 1024
[  529.685886][T30563] EXT4-fs: inline encryption not supported
[  529.691806][T30563] EXT4-fs: Ignoring removed i_version option
[  529.711084][T30567] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8182'.
[  529.721445][T30563] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  529.731092][T30567] loop3: detected capacity change from 0 to 164
[  529.745314][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.747714][T30563] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 2: comm syz.0.8181: lblock 2 mapped to illegal pblock 2 (length 1)
[  529.771377][T30563] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 48: comm syz.0.8181: lblock 0 mapped to illegal pblock 48 (length 1)
[  529.772017][T30567] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  529.795948][T30563] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8181: Failed to acquire dquot type 0
[  529.802256][T30567] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  529.815739][T30567] Symlink component flag not implemented
[  529.821478][T30567] Symlink component flag not implemented
[  529.827659][T30563] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  529.842467][T30567] Symlink component flag not implemented (7)
[  529.842923][T30563] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.8181: mark_inode_dirty error
[  529.848608][T30567] Symlink component flag not implemented (116)
[  529.882773][T30563] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  529.903881][T30563] EXT4-fs (loop0): 1 orphan inode deleted
[  529.910526][T30563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.922742][T14396] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:58: lblock 1 mapped to illegal pblock 1 (length 1)
[  529.952567][T14396] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 0
[  529.974006][T30563] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.985583][T30563] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.8181: Invalid inode table block 1 in block_group 0
[  530.018836][T30563] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  530.038446][T30573] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8184'.
[  530.047587][T30573] netlink: 260 bytes leftover after parsing attributes in process `syz.8.8184'.
[  530.057241][T30563] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.8181: mark_inode_dirty error
[  530.111190][T30575] netlink: 'syz.8.8185': attribute type 12 has an invalid length.
[  530.221373][ T3526] usb 19-1: enqueue for inactive port 0
[  530.233141][ T3526] usb 19-1: enqueue for inactive port 0
[  530.233559][T30589] loop0: detected capacity change from 0 to 1024
[  530.266831][T30589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.276624][T30587] lo speed is unknown, defaulting to 1000
[  530.283539][T30589] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.8191: Allocating blocks 481-513 which overlap fs metadata
[  530.306167][T30589] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.8191: Allocating blocks 465-513 which overlap fs metadata
[  530.306726][ T3526] vhci_hcd: vhci_device speed not set
[  530.343574][T23877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.389175][T30594] loop0: detected capacity change from 0 to 1024
[  530.405255][T30596] netlink: 'syz.9.8193': attribute type 1 has an invalid length.
[  530.417345][T30594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  530.433314][T30596] 8021q: adding VLAN 0 to HW filter on device bond16
[  530.439246][T30594] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.8192: Allocating blocks 481-513 which overlap fs metadata
[  530.491843][T30594] EXT4-fs (loop0): pa ffff888106acb7e0: logic 352, phys. 465, len 3
[  530.500009][T30594] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  530.633429][T23877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.670982][T30605] loop8: detected capacity change from 0 to 8192
[  530.941225][T30637] lo speed is unknown, defaulting to 1000
[  530.950560][T30629] loop3: detected capacity change from 0 to 8192
[  531.109377][T30645] loop3: detected capacity change from 0 to 2048
[  531.173152][T19437]  loop3: p4 < >
[  531.180415][T30645]  loop3: p4 < >
[  531.319087][T30652] loop9: detected capacity change from 0 to 128
[  531.438172][T30654] loop3: detected capacity change from 0 to 164
[  531.448453][T30654] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  531.462018][T30654] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  531.470528][T30654] Symlink component flag not implemented
[  531.476323][T30654] Symlink component flag not implemented
[  531.489308][T30654] Symlink component flag not implemented (7)
[  531.495404][T30654] Symlink component flag not implemented (116)
[  531.518507][T30658] FAULT_INJECTION: forcing a failure.
[  531.518507][T30658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.531639][T30658] CPU: 0 UID: 0 PID: 30658 Comm: syz.9.8214 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  531.531685][T30658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  531.531697][T30658] Call Trace:
[  531.531702][T30658]  <TASK>
[  531.531776][T30658]  __dump_stack+0x1d/0x30
[  531.531802][T30658]  dump_stack_lvl+0xe8/0x140
[  531.531898][T30658]  dump_stack+0x15/0x1b
[  531.531919][T30658]  should_fail_ex+0x265/0x280
[  531.531995][T30658]  should_fail+0xb/0x20
[  531.532052][T30658]  should_fail_usercopy+0x1a/0x20
[  531.532083][T30658]  strncpy_from_user+0x25/0x230
[  531.532112][T30658]  ? __kmalloc_cache_noprof+0x189/0x320
[  531.532220][T30658]  __se_sys_memfd_create+0x1ff/0x590
[  531.532330][T30658]  __x64_sys_memfd_create+0x31/0x40
[  531.532361][T30658]  x64_sys_call+0x122f/0x2fb0
[  531.532383][T30658]  do_syscall_64+0xd2/0x200
[  531.532450][T30658]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  531.532474][T30658]  ? clear_bhb_loop+0x40/0x90
[  531.532493][T30658]  ? clear_bhb_loop+0x40/0x90
[  531.532514][T30658]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.532559][T30658] RIP: 0033:0x7f4d3961e929
[  531.532572][T30658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  531.532654][T30658] RSP: 002b:00007f4d37c86e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  531.532677][T30658] RAX: ffffffffffffffda RBX: 00000000000005fd RCX: 00007f4d3961e929
[  531.532691][T30658] RDX: 00007f4d37c86ef0 RSI: 0000000000000000 RDI: 00007f4d396a14cc
[  531.532703][T30658] RBP: 0000200000000c00 R08: 00007f4d37c86bb7 R09: 00007f4d37c86e40
[  531.532782][T30658] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480
[  531.532793][T30658] R13: 00007f4d37c86ef0 R14: 00007f4d37c86eb0 R15: 00002000000002c0
[  531.532812][T30658]  </TASK>
[  531.815724][T30665] loop8: detected capacity change from 0 to 1024
[  531.822764][T30665] EXT4-fs: inline encryption not supported
[  531.828706][T30665] EXT4-fs: Ignoring removed i_version option
[  531.836395][T30665] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  531.871388][T30665] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.8215: lblock 2 mapped to illegal pblock 2 (length 1)
[  531.897039][T30665] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 48: comm syz.8.8215: lblock 0 mapped to illegal pblock 48 (length 1)
[  531.923285][T30665] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8215: Failed to acquire dquot type 0
[  531.945352][T30665] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  531.981130][T30665] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.8215: mark_inode_dirty error
[  531.994928][T30672] loop9: detected capacity change from 0 to 1024
[  532.007705][T30665] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  532.023706][T30665] EXT4-fs (loop8): 1 orphan inode deleted
[  532.030323][T30672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.042562][   T51] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  532.043179][T30665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.056834][   T51] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  532.084489][T30672] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.8219: Allocating blocks 481-513 which overlap fs metadata
[  532.117131][T30665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.126516][T30665] EXT4-fs error (device loop8): __ext4_get_inode_loc:4792: comm syz.8.8215: Invalid inode table block 1 in block_group 0
[  532.154279][T22267] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.169212][T30665] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  532.180562][T30665] EXT4-fs error (device loop8): ext4_quota_off:7217: inode #3: comm syz.8.8215: mark_inode_dirty error
[  532.251833][T30680] loop8: detected capacity change from 0 to 1024
[  532.275689][T30680] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.309612][T30680] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8222: Allocating blocks 481-513 which overlap fs metadata
[  532.442120][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.487427][   T29] kauditd_printk_skb: 381 callbacks suppressed
[  532.487443][   T29] audit: type=1400 audit(737.948:45712): avc:  denied  { unlink } for  pid=23343 comm="syz-executor" name="file0" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  532.519755][T30698] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  532.526330][T30698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  532.533898][T30698] vhci_hcd vhci_hcd.0: Device attached
[  532.550987][T30698] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5)
[  532.557563][T30698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  532.565154][T30698] vhci_hcd vhci_hcd.0: Device attached
[  532.570927][   T29] audit: type=1326 audit(738.023:45713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.593966][   T29] audit: type=1326 audit(738.023:45714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.617240][   T29] audit: type=1326 audit(738.023:45715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.640282][   T29] audit: type=1326 audit(738.023:45716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.663610][   T29] audit: type=1326 audit(738.023:45717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.686645][   T29] audit: type=1326 audit(738.023:45718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.709813][   T29] audit: type=1326 audit(738.023:45719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.732930][   T29] audit: type=1326 audit(738.023:45720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.756025][   T29] audit: type=1326 audit(738.023:45721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30701 comm="syz.3.8229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8aa61e929 code=0x7ffc0000
[  532.765598][    T9] vhci_hcd: vhci_device speed not set
[  532.784580][T30712] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  532.796305][T30715] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(13)
[  532.802940][T30715] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  532.810595][T30715] vhci_hcd vhci_hcd.0: Device attached
[  532.816867][T30698] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7)
[  532.823402][T30698] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  532.831320][T30698] vhci_hcd vhci_hcd.0: Device attached
[  532.850921][T30712] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(12)
[  532.857563][T30712] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  532.865258][T30712] vhci_hcd vhci_hcd.0: Device attached
[  532.881912][T30721] vhci_hcd: connection closed
[  532.882052][T30714] vhci_hcd: connection closed
[  532.882079][T30699] vhci_hcd: connection closed
[  532.891703][T30717] vhci_hcd: connection closed
[  532.897151][T14401] vhci_hcd: stop threads
[  532.906119][T14401] vhci_hcd: release socket
[  532.910614][T14401] vhci_hcd: disconnect device
[  532.915450][T30704] vhci_hcd: connection closed
[  532.916306][T14401] vhci_hcd: stop threads
[  532.925327][T14401] vhci_hcd: release socket
[  532.929929][T14401] vhci_hcd: disconnect device
[  532.936449][    T9] usb 19-1: new full-speed USB device number 4 using vhci_hcd
[  532.944005][T30700] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  532.978663][T30728] loop8: detected capacity change from 0 to 1024
[  532.979641][T14401] vhci_hcd: stop threads
[  532.989377][T14401] vhci_hcd: release socket
[  532.993835][T14401] vhci_hcd: disconnect device
[  533.011646][T14401] vhci_hcd: stop threads
[  533.015956][T14401] vhci_hcd: release socket
[  533.020481][T14401] vhci_hcd: disconnect device
[  533.026554][T30724] loop3: detected capacity change from 0 to 8192
[  533.045766][T30728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.075148][T14401] vhci_hcd: stop threads
[  533.079514][T14401] vhci_hcd: release socket
[  533.083938][T14401] vhci_hcd: disconnect device
[  533.131750][T30728] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8232: Allocating blocks 481-513 which overlap fs metadata
[  533.191579][T30728] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.8232: Allocating blocks 465-513 which overlap fs metadata
[  533.240713][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.313568][T30734] loop3: detected capacity change from 0 to 2048
[  533.340772][T30743] netlink: 'syz.8.8238': attribute type 12 has an invalid length.
[  533.375504][T30734]  loop3: p1 < > p4
[  533.375577][T30745] ==================================================================
[  533.387502][T30745] BUG: KCSAN: data-race in data_alloc / prb_reserve
[  533.394135][T30745] 
[  533.396481][T30745] write to 0xffffffff8686a078 of 8 bytes by task 30734 on cpu 0:
[  533.404222][T30745]  data_alloc+0x27d/0x2b0
[  533.408588][T30745]  prb_reserve+0x808/0xaf0
[  533.413031][T30745]  vprintk_store+0x56d/0x860
[  533.417759][T30745]  vprintk_emit+0x178/0x650
[  533.422296][T30745]  vprintk_default+0x26/0x30
[  533.426925][T30745]  vprintk+0x1d/0x30
[  533.430848][T30745]  _printk+0x79/0xa0
[  533.434765][T30745]  bdev_disk_changed+0x9f1/0xcb0
[  533.439727][T30745]  loop_set_status+0x541/0x5f0
[  533.444523][T30745]  lo_ioctl+0x75b/0x15d0
[  533.448793][T30745]  blkdev_ioctl+0x34f/0x440
[  533.453326][T30745]  __se_sys_ioctl+0xce/0x140
[  533.457937][T30745]  __x64_sys_ioctl+0x43/0x50
[  533.462549][T30745]  x64_sys_call+0x19a8/0x2fb0
[  533.467250][T30745]  do_syscall_64+0xd2/0x200
[  533.471778][T30745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.477781][T30745] 
[  533.480118][T30745] read to 0xffffffff8686a078 of 8 bytes by task 30745 on cpu 1:
[  533.487791][T30745]  prb_reserve+0x221/0xaf0
[  533.492233][T30745]  vprintk_store+0x56d/0x860
[  533.496839][T30745]  vprintk_emit+0x178/0x650
[  533.501438][T30745]  vprintk_default+0x26/0x30
[  533.506040][T30745]  vprintk+0x1d/0x30
[  533.509950][T30745]  _printk+0x79/0xa0
[  533.513869][T30745]  set_capacity_and_notify+0x14c/0x1f0
[  533.519356][T30745]  loop_set_size+0x2e/0x70
[  533.523801][T30745]  loop_configure+0x8d3/0xa50
[  533.528504][T30745]  lo_ioctl+0x559/0x15d0
[  533.532774][T30745]  blkdev_ioctl+0x34f/0x440
[  533.537300][T30745]  __se_sys_ioctl+0xce/0x140
[  533.541907][T30745]  __x64_sys_ioctl+0x43/0x50
[  533.546520][T30745]  x64_sys_call+0x19a8/0x2fb0
[  533.551213][T30745]  do_syscall_64+0xd2/0x200
[  533.555726][T30745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.561634][T30745] 
[  533.563973][T30745] value changed: 0x0000000000065790 -> 0x0000000000115640
[  533.571087][T30745] 
[  533.573419][T30745] Reported by Kernel Concurrency Sanitizer on:
[  533.579581][T30745] CPU: 1 UID: 0 PID: 30745 Comm: syz.8.8239 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) 
[  533.592095][T30745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  533.602162][T30745] ==================================================================
[  533.375485][T30745] loop8: detected capacity change from 0 to 512
[  533.617344][T30734] loop3: p4 size 8388608 extends beyond EOD, truncated
[  533.657104][T30745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  533.697904][T30745] EXT4-fs error (device loop8): ext4_lookup:1787: inode #12: comm syz.8.8239: iget: bad i_size value: 2533274857506816
[  533.711070][T30745] EXT4-fs (loop8): Remounting filesystem read-only
[  533.735625][T25352] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  538.356603][    T9] usb 19-1: enqueue for inactive port 0
[  538.362211][    T9] usb 19-1: enqueue for inactive port 0
[  538.442148][    T9] vhci_hcd: vhci_device speed not set
[  542.280479][   T29] kauditd_printk_skb: 40 callbacks suppressed
[  542.280496][   T29] audit: type=1400 audit(747.115:45762): avc:  denied  { egress } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1
[  542.309585][   T29] audit: type=1400 audit(747.115:45763): avc:  denied  { sendto } for  pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1