last executing test programs:

35.885474328s ago: executing program 1 (id=2792):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000053943059d0448c37aadea979964fdc3e6e78d1df36e3ee3cae653e8ff0faf921c2fedffd5107e5cf7a057a2ce26842c8e07f070548c25c0cac367e6692ba78d5bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x13, r0, 0x3a8bc000)
mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x800, &(0x7f00000000c0), 0x48)
mknod$loop(0x0, 0x6000, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010000006e657665000010000280060005004e20000004000600"], 0x40}}, 0x40800)
socket(0x840000000002, 0x3, 0x100)
pipe(&(0x7f0000000d00))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff"], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r9}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40008001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10)

35.592679842s ago: executing program 1 (id=2798):
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040), 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1])
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

35.515984728s ago: executing program 1 (id=2800):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18)
lstat(&(0x7f0000000440)='./file0\x00', 0x0)

35.476211061s ago: executing program 1 (id=2801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (fail_nth: 4)

35.092597192s ago: executing program 1 (id=2804):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="240400000201010100000000000000000a0000010c001980080006000c48000004000280"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f00000000c0), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@enum={0xc, 0x9, 0x0, 0x6, 0x4, [{0x6, 0x819}, {0x0, 0x1dfa}, {0x0, 0x4}, {0x2, 0xffffff6e}, {0xb, 0x790}, {0x5, 0x1}, {0xd, 0xf7}, {0xb, 0x400}, {0x1, 0x6}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/129, 0x73, 0x81, 0x1, 0x6}, 0x28)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0xfffff9e1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
r6 = syz_open_dev$vcsn(&(0x7f0000000400), 0x8, 0x5010c1)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x101, 0x1}, 0x50)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x10)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0xfffffbff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x825, 0x8}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1e, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000140)='syzkaller\x00', 0x248, 0x1a, &(0x7f0000000180)=""/26, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000680)=[{0x1, 0x2, 0x2, 0x5}, {0x1, 0x1, 0x9, 0x8}], 0x10, 0x7fffffff}, 0x94)

35.092228443s ago: executing program 1 (id=2805):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @echo_reply={0x81, 0x0, 0x0, 0x800, 0xd4ff}}}}}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000016c0)="0000000000000000002a00006b22ef3a024788ac62c2da344ee1971d5a0850704efb81412f628bbb029baeab59434ab6b98d1d8d7d836d5c652abadb2d7983019c1e93e1bd770a66f203ada8acc518b9715851c6f475a156b16c878d65aa883f4e1bf80251208eefb2e2d1c621106dc6950d3b84dff6f7dc09ae779f7e6c", 0x7e, r6)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

20.01760153s ago: executing program 32 (id=2805):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @echo_reply={0x81, 0x0, 0x0, 0x800, 0xd4ff}}}}}}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain)
r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f00000016c0)="0000000000000000002a00006b22ef3a024788ac62c2da344ee1971d5a0850704efb81412f628bbb029baeab59434ab6b98d1d8d7d836d5c652abadb2d7983019c1e93e1bd770a66f203ada8acc518b9715851c6f475a156b16c878d65aa883f4e1bf80251208eefb2e2d1c621106dc6950d3b84dff6f7dc09ae779f7e6c", 0x7e, r6)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

5.635079192s ago: executing program 2 (id=3127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)={0x14, r3, 0xb3d3e8a28760fb9b, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x2000c804}, 0x20048004) (fail_nth: 2)

5.594775085s ago: executing program 0 (id=3128):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r1, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002)

5.374196363s ago: executing program 0 (id=3132):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x2}, 0x7)
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '//[,{\x87&', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2f)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000000000000000000000000ffff0000000000000a00000000000000b926865082dfd35cfcb82bc8fbbabb4e3b2ff17788e9da814ac5f03a2324a74c1e0f98887f00000000000000c761ad04ed53aaaa9fa3d4e33cebdb30938f700216a8036820e9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x180}}, 0x0)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108)

5.28832289s ago: executing program 2 (id=3134):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f8000000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000015cce67dc5febb13dbc30000070000000000000000000000000000000000000000000000e80a000000000000000000000a00020070000000000000000800160006000000"], 0xf8}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
dup2(r5, r5)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x7c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "64946da8918f72a96b9c7199cdf0b9df"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "9686d82af12cc1448e40955d2cbe0734"}, @NL80211_ATTR_PMK={0x14, 0xfe, "69e60f5602273861fe66439d764d700a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "65784be1a81829175021df9fbd2a0101"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

4.908061151s ago: executing program 2 (id=3137):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000001440)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000580)=""/241, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095000000000000008881c88f6fd6b50b74213b4dda23311bb43f9e26f736af488811eb192def0ac819099717056a5c11133b799126bd6ffcacbcdbda3edc0750ea5908da6547526768c8e2ecdf57400442"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x2c, 0x803, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8, 0x2)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)

2.280933134s ago: executing program 5 (id=3160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2.080279431s ago: executing program 4 (id=3162):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

1.933443993s ago: executing program 5 (id=3163):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00'}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

1.932114433s ago: executing program 4 (id=3164):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
fchdir(0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="35e2000000000000600012800b000100697036746e6c00005000028008000100", @ANYRES32, @ANYBLOB="0800140000000000080008000a0000000500090089000000060010000d000000080008000c000000050009"], 0x80}}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f00000005c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000020000000000000000181100005cb5af4d183e46d0ccb69901d603634c2fbe27bf4f87ecfddc7d17c3fee5679c43c44e3ea5e872a62bca24c2d80ac343dfd59f0eb1e60379f3934df708e41acd04ec76f16e6a262f885118698e6c4a82e588df5c18c3dbc1ff0401dddd0d4426dc419f8e8d950c9d9092dbebe4c85ba9229a8fc8367bbff8d5b87c4d09", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet(r7, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="81", 0x1}], 0x1}, 0x24000881)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x5, 0x3, 0xbc17, 0xfffffff7, 0xa41, 0x401c, 0xff, 0x80, 0x796, 0xf55d]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000014)
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x4)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)

1.876528408s ago: executing program 0 (id=3165):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x4)
ppoll(&(0x7f0000000100)=[{r1, 0xf38fa597db41d6bb}], 0x1, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x53a, &(0x7f0000000c80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

1.869476048s ago: executing program 3 (id=3166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8509}}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x458, &(0x7f0000000d80)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)

1.770521486s ago: executing program 5 (id=3167):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="80000000000000000000ffff0000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x2}, 0x18)
unshare(0x2c020600)
r2 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, &(0x7f00000007c0)="7ed0067df370244eb9453ebd3d4ef9065118fbb5cbdbdb73518d2664f613314401e2fa460121b2e32d737d08", 0x2c}, 0x44)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='yeah\x00', 0x5)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180040991934cc0fbcfea45fb7020fa3935d44b2760127440000a52f4edd55b3ba757031613f19dcddb09f781300000200000000007d4185153c57028942e4b10e5af17215a5e8cc7160bc5eb21761733f2769897605f8cabcb0b7420a6e8dde47a0ffccfe5aaeb426c655dbc684026a032b3bf71c8f340058e7c5af3206dc943175e169cf7d7c9b18e93f71c5afa360813d2bbfd7fb5cedbd9724a2ba800f2ceeb0c48a27767096fe7d7359735348cb64e0d9d009f661c505ffbe1da72a8cf2591be9c2af23a1adee6711a974940ef82a50740088a6a87d8e2659930ac9386f22401c05dd79e7922dab4333992c041e15fb5d35f0769228dc4b4f5de2674fe09131bdb35fbc3684c4cbfecb73000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
r7 = fsopen(&(0x7f0000000100)='cramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x8)
close_range(r6, 0xffffffffffffffff, 0x0)

1.591398121s ago: executing program 2 (id=3168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x65, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x800)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000900), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000980)=0x5, 0x2, 0x2)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$rds(r9, &(0x7f0000000880)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/116, 0x74}], 0x4, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x6}, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffffffffffd, 0x84c, 0x5, 0x1, 0x1, 0x21, 0xc}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6}, &(0x7f0000000440)=0x80000000, &(0x7f0000000480)=0x5a94, 0x8, 0x45000, 0x40, 0x1, 0x20, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/239, 0xef}, &(0x7f00000005c0), 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x9ac4}}], 0xf8, 0x44084}, 0x400c010)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a00), 0x141220, 0x0)
getpeername$inet6(r10, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000a80)=0x1c)
ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000940)={0x1, 0x1, 0x9})
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r12=>r5, {0x9}}, './bus\x00'})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r13, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="510843bd7000fddbdf251b000000070021006189dc"], 0x1c}}, 0x20000000)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r12, &(0x7f0000001280)={&(0x7f0000000b80), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r14, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
creat(&(0x7f00000009c0)='./file0/file0\x00', 0x109)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x870bd2b, 0x10000, {0x0, 0x0, 0x0, r11, {0xc, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

1.35678512s ago: executing program 3 (id=3169):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001600)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x77}, 0x18)
syz_read_part_table(0x105e, &(0x7f0000000000)="$eJzsz71NA0EYBNC55eCO4FohoQMqICGhGbohoA96ISG3LFuftSf/dGA7eC9YjTSzWm24rZZtVT3Wb6WGJE/9+Gp5yZw8p62jt3FO5k1V1ZQh+e/33ntT0/64SS/aX6Y1f74Ou6rLM8vDKX2Py3n/8XO9jwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/ToEAAD//zfUF2I=")
statx(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x1000, 0x4, &(0x7f0000001200))
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
setregid(r3, 0xffffffffffffffff)
newfstatat(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', &(0x7f0000001340), 0x1000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r4, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c)
stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x3)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r5, @ANYRESOCT, @ANYRES16, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r6, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004"], 0x94, 0x1)

787.447616ms ago: executing program 5 (id=3170):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000003c0))
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount_setattr(r2, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000380), &(0x7f0000000400)=r4}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
openat(0xffffffffffffffff, 0x0, 0x200102, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x1, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

705.481963ms ago: executing program 0 (id=3171):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:apt_var_lib_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0xf}, 0x66) (async)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x1)
ioctl$SG_BLKTRACESTART(r1, 0x1274, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3, 0x1, 0xffff, 0x1, 0x7, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000180)='oom_score\x00')
prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async)
syz_clone3(&(0x7f0000000440)={0x80000000, &(0x7f00000001c0)=<r4=>0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f0000000280)=""/141, 0x8d, &(0x7f0000000340)=""/192, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, 0x0, r2], 0x8, {r3}}, 0x58)
writev(r4, &(0x7f0000000740)=[{&(0x7f00000004c0)="481202541574e7e09c31921f149cc387e23844b911045d89d08f159ff0a5fcc8903b31aa5b67ed4d668409bb6d59ce552b7c329163593fa48c044ddbe3feef3a45a78ce920a588c88ead2d8bd036be77f7450a0bc002d259a6692b180f05ba4362ebc0224996acd6deb720a3c78181fe7130b9772aa58f599980cb162ddd585b83449376f706f3b0b47cf283cb6cae94dac7354a83c6a1a71b3c886621c9a1edfc12d2a284461bcc2d3312", 0xab}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="cdd6969067d28eb1a135f47dbb29dfe046421060b20525abc4f6d3de1de2b9cabbf55d7ff15953e444b16b1f9e66b77170fa312991c41b8bb48b3a614da0499e3cb4", 0x42}, {&(0x7f0000000640)="774910a912c412cdce583592a6244e9ab92bc35310fdd892ebc0cca53eec84457f0ef39a850e789823dbf5caa89e80333586cb77208f4fe65f9edb29e1467a8da8dba124", 0x44}, {&(0x7f00000006c0)="43b4c6b89d7699e3b970945c698d6b834134ba8538cdc00e1e30e316377bf1cb89862faba9b5a3ff2b1c1d7a99ad6373a2625e5a78155788567e4e199d6af0e0e7766e8c1021e67343111431241a1e09ff692029a39898b234b5c024aabdb7167cc5cc82ba75091c0b041f33eca7e2ffc13d3ca1", 0x74}], 0x5)
sendmsg$qrtr(r3, &(0x7f0000000c00)={&(0x7f00000007c0)={0x2a, 0x2, 0x7ffe}, 0xc, &(0x7f0000000b80)=[{&(0x7f0000000800)="3473f467bbca97f1fd25441deb542bfd2ffaf3811422d38b9bb438ce9b9ab57b432a8b9468dd048fea59876bf035bf11b4b8d7da5732ff6bd340ec43fcb9d49c4993be6f7b68c81085cac6842a29b3c6fd4ef3970a802f6eea62322b6d", 0x5d}, {&(0x7f0000000880)="34133539664fca3cf0bd3478274c7ac0825721e4d480aca0917fd99394856adfbe88031f11471852e276cdba0d93dba83b685690ed7ccc888ce234f6ffcc14a856908d8e106967ef63c6a75db5edad90389e086f6bf2998c2270bf76a3e5d22358d749ae3ca1eabfa18540b3e79d197e00fd1df93aaec8b58db93d3afc436e51358deed4", 0x84}, {&(0x7f0000000940)="8dc5360cee65aa895e04b7e8ba059f2862", 0x11}, {&(0x7f0000000980)="69841cd96ed208a2b66a3f1f88f15cd690574f149f7362514cc33e0e2a68f42c38cda0d11e81fa67a216efe908d61e7bd975b6d73de265f42d8265efd7316f9fa2381e69d1ac18b8616199ffd60264a7bfd1ae5a0a91c64fe74e5baf0a21e67dcbaad5eeaa9adc6cd650d53c24cc69548c7f510541f054b19bf0d8bfc56d194ff994b30005fbe4a5c12e73bd6072b0c351dca52f7da4d1", 0x97}, {&(0x7f0000000a40)="46dabe76301086e6d0e7eca614fa4150ba220b741027b404f2679ab7cf28b16a06330f8ee4f9dde38164ce208885680d461c7bd39dfe67524409b094cd1afe75f43f6158843eb0484407a6ea833f51b4c0e795769cd76d1d137bea43001675039f67c730c561290ce04336c1785a4b185f183db9e01816b7", 0x78}, {&(0x7f0000000ac0)="5eb2f01824f74f406f65a0e7a489742ebe7d62ba6dede2a7c31a28e2f9f14b8ed697772d6e98a95f12f22a7ff8a9a27f20e126316a239967d8ee1dddc3864daaf2e183", 0x43}, {&(0x7f0000000b40)="12310703625d52a60b8f7d852d0bb2e54dac3066036920d6d31da48d5d81f82361d7d90437ef2734cd496c7ce91978", 0x2f}], 0x7, 0x0, 0x0, 0x4000004}, 0x38) (async)
lseek(r3, 0xac2, 0x4) (async)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000c40)=0x550, 0x7ff, 0x4) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000c80)) (async)
r6 = syz_open_dev$loop(&(0x7f0000000cc0), 0x2, 0x12000)
ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000d00)={0x9, 0x3, 0x1})
close_range(r3, r6, 0x2)
getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000d40)={0x0, 0x8, 0x5, 0x3, 0x3, 0x5, 0x47, 0x5, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x6, 0x8, 0x4, 0x8, 0xfff}}, &(0x7f0000000e00)=0xb0)
perf_event_open(&(0x7f0000000e80)={0x4, 0x80, 0xf, 0x9, 0x1, 0xbf, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000e40), 0xe}, 0x400, 0x8, 0xffffffff, 0x4, 0x5, 0xf, 0x6, 0x0, 0x8001, 0x0, 0xe6e7}, r2, 0xc, r3, 0x1) (async)
statfs(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)=""/36)
mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000f80)=""/108)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl1\x00', <r7=>0x0, 0x4, 0x2, 0xe, 0x677ad841, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x8000, 0x16c3, 0x40}})
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xb, 0x1d, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffff1c9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x4, 0x4, 0xd, 0x18, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001100)='GPL\x00', 0x3, 0x62, &(0x7f0000001140)=""/98, 0x41000, 0x5a, '\x00', r7, @fallback=0x2c, r3, 0x8, &(0x7f0000001280)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x3, 0x305c, 0x1ff}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001300)=[r3], &(0x7f0000001340)=[{0x5, 0x4, 0x6, 0xc}, {0x4, 0x1, 0xa, 0xa}, {0x2, 0x4, 0x5, 0x7}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x5, 0x9, 0x89fc0b3d0745edfc}], 0x10, 0x8}, 0x94)
r8 = syz_open_dev$loop(&(0x7f0000001480), 0x1, 0x0)
ioctl$BLKDISCARD(r8, 0x1277, &(0x7f00000014c0)=0x2) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6}}, &(0x7f0000001640)=0xe8)
sendmsg$nl_generic(r3, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x6c, 0x3f, 0x20, 0x70bd2a, 0x25dfdbfc, {0x1d}, [@typed={0x5, 0x11f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xef, 0x0, 0x0, @uid=r9}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0x6}, @nested={0x39, 0x9e, 0x0, 0x1, [@nested={0x4, 0xcc}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x8}, @generic="75543d981fe0dd7d298cf8558ce933ca0919f8611b8beac6bda25e3afa619e9bd8", @nested={0x4, 0xcd}, @nested={0x4, 0xbe}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048890) (async)
gettid() (async)
r10 = syz_open_dev$mouse(&(0x7f0000001780), 0x7, 0x400100)
sendmsg$GTP_CMD_GETPDP(r10, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)

659.295717ms ago: executing program 4 (id=3172):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x16, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
fchdir(0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe54, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='qgroup_update_counters\x00', 0xffffffffffffffff, 0x0, 0x10000}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="35e2000000000000600012800b000100697036746e6c00005000028008000100", @ANYRES32, @ANYBLOB="0800140000000000080008000a0000000500090089000000060010000d000000080008000c000000050009"], 0x80}}, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x35, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f00000005c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000020000000000000000181100005cb5af4d183e46d0ccb69901d603634c2fbe27bf4f87ecfddc7d17c3fee5679c43c44e3ea5e872a62bca24c2d80ac343dfd59f0eb1e60379f3934df708e41acd04ec76f16e6a262f885118698e6c4a82e588df5c18c3dbc1ff0401dddd0d4426dc419f8e8d950c9d9092dbebe4c85ba9229a8fc8367bbff8d5b87c4d09", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet(r8, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="81", 0x1}], 0x1}, 0x24000881)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x0, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_LABELS_MASK={0x2c, 0x17, [0x5, 0x3, 0xbc17, 0xfffffff7, 0xa41, 0x401c, 0xff, 0x80, 0x796, 0xf55d]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000014)
ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65)

620.49836ms ago: executing program 2 (id=3173):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

526.410988ms ago: executing program 3 (id=3174):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000010200"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

525.448708ms ago: executing program 2 (id=3175):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48)
write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x7, 0x7b, 0x2}, 0x7)
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@minixdf}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18)
write$binfmt_register(r7, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '//[,{\x87&', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2f)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbfc0000000000000000000000000000002001000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000000000000000000000000ffff0000000000000a00000000000000b926865082dfd35cfcb82bc8fbbabb4e3b2ff17788e9da814ac5f03a2324a74c1e0f98887f00000000000000c761ad04ed53aaaa9fa3d4e33cebdb30938f700216a8036820e9", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x180}}, 0x0)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108)

454.346133ms ago: executing program 3 (id=3176):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0)
write$vga_arbiter(r0, &(0x7f0000000240)=@unlock_all, 0xb)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0x6, &(0x7f0000000080)=[{0x8, 0x8, 0x8, 0x5}, {0x5, 0x1, 0x2, 0x3}, {0x8, 0x1a, 0x9, 0x8}, {0x5, 0xf3, 0xf8, 0x10000}, {0x1ff, 0x9, 0x5}, {0x400, 0x1, 0x3, 0x8}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10)
r6 = socket$pptp(0x18, 0x1, 0x2)
r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6})
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f0000000a40)={0x0, 0x0})
close_range(r6, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='sys_enter\x00', r3}, 0x2)
nanosleep(&(0x7f0000000200), 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'})
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
setxattr$incfs_metadata(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x1)
r10 = fsmount(r1, 0x1, 0x6)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r10, &(0x7f0000000380)="b3d998d556b453a008860c975f56673f1f14cd34e42f71cc09e8bbc46436c1e4e6fdaa7099c1b66a57cb7633d67129fb9365b4a71f155c8b44c9af15579d776f813d81b6466d241d221fdf85e59bfb7130fb3cb3670e606ed622cc86d79fc09c2164e2a335f981752170e56c75566f284c167127a20f5428938b017b2692a6ff4e44903553334cdc5f5f713b962972c0ce6e3b890b", &(0x7f00000004c0)=""/74}, 0x20)
gettid()

250.73405ms ago: executing program 5 (id=3177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r1], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="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"], 0x14}}, 0x4040044)

202.087194ms ago: executing program 0 (id=3178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x4)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

201.114364ms ago: executing program 4 (id=3179):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
lstat(&(0x7f0000000440)='./file0\x00', 0x0)

124.32435ms ago: executing program 5 (id=3180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448d4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0400000004000000040000000525c6eada01e7581f4c1fe9ca388ad3e8abba927a5c74e4c051f27438b37c8b3039984f08e0c0ec687a3cc9ee6b0f506a154ef0226efee7a6a15a4ffa72eb2c7ec21de3c3575ebe19ecd5d093"], 0x48)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000002c0)={0x7, 'xfrm0\x00', {0x6}, 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8200, 0x70, 0x1, <r5=>0x0}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="fffffe0bd8b0b40d0045adf84fabee0000800400"], 0x18) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="fffffe0bd8b0b40d0045adf84fabee0000800400"], 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8)
socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) (async)
sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r3], 0x1000f) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r3], 0x1000f)

123.66901ms ago: executing program 3 (id=3181):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='percpu_free_percpu\x00'}, 0x18)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil)
write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083f63090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d3b6d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa3647f17b28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833fea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

93.670993ms ago: executing program 4 (id=3182):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18)
lstat(&(0x7f0000000440)='./file0\x00', 0x0)

55.034996ms ago: executing program 3 (id=3183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x65, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x800)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, &(0x7f0000000900), 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000980)=0x5, 0x2, 0x2)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$rds(r9, &(0x7f0000000880)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/116, 0x74}], 0x4, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x6}, &(0x7f00000003c0), &(0x7f0000000400)=0xfffffffffffffffd, 0x84c, 0x5, 0x1, 0x1, 0x21, 0xc}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6}, &(0x7f0000000440)=0x80000000, &(0x7f0000000480)=0x5a94, 0x8, 0x45000, 0x40, 0x1, 0x20, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/239, 0xef}, &(0x7f00000005c0), 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x5, 0x9ac4}}], 0xf8, 0x44084}, 0x400c010)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a00), 0x141220, 0x0)
getpeername$inet6(r10, &(0x7f0000000a40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000a80)=0x1c)
ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000940)={0x1, 0x1, 0x9})
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, <r12=>r5, {0x9}}, './bus\x00'})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r13, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="510843bd7000fddbdf251b000000070021006189dc"], 0x1c}}, 0x20000000)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r12, &(0x7f0000001280)={&(0x7f0000000b80), 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r14, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
creat(&(0x7f00000009c0)='./file0/file0\x00', 0x109)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x870bd2b, 0x10000, {0x0, 0x0, 0x0, r11, {0xc, 0xffff}, {0x0, 0xf}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0)

54.367136ms ago: executing program 4 (id=3184):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x2c, 0x4, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xdf}}, 0x80d6)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r6}, 0x18)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e1de2ff1c008102e00f801b002db4825fc804be0d00000088081a02000a0ada1b40d80800c500c50083b8", 0x2b}], 0x1, 0x0, 0x0, 0x5865}, 0x800)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105c03, 0xb0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)

0s ago: executing program 0 (id=3185):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

etected capacity change from 0 to 2048
[  234.962118][T11560] loop4: detected capacity change from 0 to 8192
[  234.994309][T11560]  loop4: p1 p2 p4
[  235.002446][T11560] loop4: p1 size 65536 extends beyond EOD, truncated
[  235.037353][T11560] loop4: p2 start 861536256 is beyond EOD, truncated
[  235.044118][T11560] loop4: p4 size 65536 extends beyond EOD, truncated
[  235.053439][T11558] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2807: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  235.074143][T11572] loop0: detected capacity change from 0 to 512
[  235.092904][T11558] EXT4-fs (loop3): Remounting filesystem read-only
[  235.102884][T11560] siw: device registration error -23
[  235.110474][T11572] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.142384][T11560] Invalid logical block size (3)
[  235.189507][T11578] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  235.242121][T11578] SELinux: failed to load policy
[  235.315033][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  235.330725][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  235.611834][T11586] loop3: detected capacity change from 0 to 2048
[  235.644850][T11586] EXT4-fs: Ignoring removed mblk_io_submit option
[  235.912329][T11592] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  235.934939][T11592] SELinux: failed to load policy
[  236.251577][T11569] Set syz1 is full, maxelem 65536 reached
[  236.252828][T11597] program syz.4.2818 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.289450][   T29] kauditd_printk_skb: 283 callbacks suppressed
[  236.289506][   T29] audit: type=1326 audit(1756066415.876:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31cdaebe9 code=0x7ffc0000
[  236.328565][   T29] audit: type=1326 audit(1756066415.916:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31cdaebe9 code=0x7ffc0000
[  236.341001][T11601] loop2: detected capacity change from 0 to 256
[  236.352192][   T29] audit: type=1326 audit(1756066415.916:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb31cdaebe9 code=0x7ffc0000
[  236.382044][   T29] audit: type=1326 audit(1756066415.916:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31cdaebe9 code=0x7ffc0000
[  236.405545][   T29] audit: type=1326 audit(1756066415.916:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.4.2818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb31cdaebe9 code=0x7ffc0000
[  236.435066][   T29] audit: type=1326 audit(1756066415.916:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  236.458700][   T29] audit: type=1326 audit(1756066415.916:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  236.482259][   T29] audit: type=1326 audit(1756066415.916:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a796ed69f code=0x7ffc0000
[  236.484390][T11603] loop4: detected capacity change from 0 to 512
[  236.505754][   T29] audit: type=1326 audit(1756066415.916:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  236.535510][   T29] audit: type=1326 audit(1756066415.916:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11600 comm="syz.2.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  236.620468][T11606] loop2: detected capacity change from 0 to 2048
[  236.637740][T11610] __nla_validate_parse: 3 callbacks suppressed
[  236.637753][T11610] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2822'.
[  236.656820][T11603] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.695001][T11606] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2823: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  236.722103][T11606] EXT4-fs (loop2): Remounting filesystem read-only
[  236.731037][T11616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2824'.
[  236.822263][T11617] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  236.845194][T11617] SELinux: failed to load policy
[  236.856898][T11610] loop3: detected capacity change from 0 to 8192
[  236.942981][ T7349]  loop3: p1 p2 p4
[  236.951976][ T7349] loop3: p1 size 65536 extends beyond EOD, truncated
[  236.971591][ T7349] loop3: p2 start 861536256 is beyond EOD, truncated
[  236.978502][ T7349] loop3: p4 size 65536 extends beyond EOD, truncated
[  236.993401][T11623] siw: device registration error -23
[  237.053247][T11626] loop0: detected capacity change from 0 to 512
[  237.053761][T11627] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  237.073542][T11627] SELinux: failed to load policy
[  237.078774][T11610]  loop3: p1 p2 p4
[  237.090160][T11610] loop3: p1 size 65536 extends beyond EOD, truncated
[  237.097185][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2828'.
[  237.104003][T11610] loop3: p2 start 861536256 is beyond EOD, truncated
[  237.113405][T11610] loop3: p4 size 65536 extends beyond EOD, truncated
[  237.130974][T11629] netlink: 'syz.4.2828': attribute type 13 has an invalid length.
[  237.146638][T11626] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.162809][T11629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.182055][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  237.224752][T11634] loop2: detected capacity change from 0 to 512
[  237.234588][T11634] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  237.262624][T11634] EXT4-fs (loop2): 1 truncate cleaned up
[  237.287402][T11639] program syz.4.2831 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.317846][T11641] loop4: detected capacity change from 0 to 256
[  237.369245][ T3595] udevd[3595]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  237.379277][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  237.420803][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  237.432010][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  237.440018][T11651] loop3: detected capacity change from 0 to 512
[  237.461351][T11650] loop4: detected capacity change from 0 to 2048
[  237.470041][T11651] EXT4-fs: Ignoring removed i_version option
[  237.496648][T11650] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2835: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  237.514773][T11651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  237.545683][T11650] EXT4-fs (loop4): Remounting filesystem read-only
[  237.561219][T11651] EXT4-fs (loop3): 1 truncate cleaned up
[  237.783683][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'.
[  237.892441][T11664] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  237.924722][T11664] SELinux: failed to load policy
[  238.063761][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  238.266041][T11668] loop3: detected capacity change from 0 to 512
[  238.325737][T11668] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.430705][T11677] program syz.2.2843 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  238.455368][T11663] Set syz1 is full, maxelem 65536 reached
[  238.606975][T11686] loop2: detected capacity change from 0 to 2048
[  238.637291][T11686] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2847: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  238.659186][T11684] loop4: detected capacity change from 0 to 1024
[  238.686308][T11686] EXT4-fs (loop2): Remounting filesystem read-only
[  238.693485][T11684] EXT4-fs: Ignoring removed orlov option
[  238.713072][T11693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2849'.
[  238.848617][T11698] loop2: detected capacity change from 0 to 1024
[  238.938517][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2851'.
[  239.020872][T11706] loop0: detected capacity change from 0 to 512
[  239.040190][T11698] 8021q: adding VLAN 0 to HW filter on device bond20
[  239.073563][T11706] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  239.113408][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2851'.
[  239.118879][T11706] EXT4-fs (loop0): 1 truncate cleaned up
[  239.216913][T11711] bond20 (unregistering): Released all slaves
[  239.383453][T11721] program syz.2.2857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  239.417197][T11704] lo speed is unknown, defaulting to 1000
[  239.443790][T11724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2858'.
[  239.445901][T11719] loop0: detected capacity change from 0 to 8192
[  239.496003][T11719] bio_check_eod: 2 callbacks suppressed
[  239.496017][T11719] syz.0.2856: attempt to access beyond end of device
[  239.496017][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.515063][T11719] buffer_io_error: 2 callbacks suppressed
[  239.515150][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.545967][T11719] syz.0.2856: attempt to access beyond end of device
[  239.545967][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.559574][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.568161][T11719] syz.0.2856: attempt to access beyond end of device
[  239.568161][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.579819][T11704] chnl_net:caif_netlink_parms(): no params data found
[  239.581616][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.597939][T11719] syz.0.2856: attempt to access beyond end of device
[  239.597939][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.611381][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.619870][T11719] syz.0.2856: attempt to access beyond end of device
[  239.619870][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.633464][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.641707][T11719] syz.0.2856: attempt to access beyond end of device
[  239.641707][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.655153][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.665630][T11719] syz.0.2856: attempt to access beyond end of device
[  239.665630][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.679109][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.694763][T11719] syz.0.2856: attempt to access beyond end of device
[  239.694763][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.708305][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.716734][T11724] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  239.724986][T11719] syz.0.2856: attempt to access beyond end of device
[  239.724986][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.725016][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.760722][T11719] syz.0.2856: attempt to access beyond end of device
[  239.760722][T11719] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  239.769338][T11724] SELinux: failed to load policy
[  239.774284][T11719] Buffer I/O error on dev loop0, logical block 57847, async page read
[  239.902523][T11704] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.903627][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'.
[  239.909686][T11704] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.925847][T11704] bridge_slave_0: entered allmulticast mode
[  239.932634][T11704] bridge_slave_0: entered promiscuous mode
[  239.939588][T11704] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.946882][T11704] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.954155][T11704] bridge_slave_1: entered allmulticast mode
[  239.960641][T11704] bridge_slave_1: entered promiscuous mode
[  240.059931][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.092463][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.126000][T11734] netlink: 'syz.4.2859': attribute type 13 has an invalid length.
[  240.312059][ T1036] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.374195][T11734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  240.390432][T11704] team0: Port device team_slave_0 added
[  240.405491][T11704] team0: Port device team_slave_1 added
[  240.470824][T11740] loop0: detected capacity change from 0 to 512
[  240.493812][T11740] EXT4-fs: Ignoring removed nomblk_io_submit option
[  240.525315][T11740] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  240.572458][T11740] EXT4-fs (loop0): 1 truncate cleaned up
[  240.593518][ T1036] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.674010][T11726] Set syz1 is full, maxelem 65536 reached
[  240.704479][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.711529][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.737532][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.753074][T11746] loop4: detected capacity change from 0 to 512
[  240.762402][T11746] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  240.787392][T11746] EXT4-fs (loop4): 1 truncate cleaned up
[  240.795227][T11749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2863'.
[  240.799554][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.811406][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.837451][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.920531][T11704] hsr_slave_0: entered promiscuous mode
[  240.932430][T11704] hsr_slave_1: entered promiscuous mode
[  240.944870][T11704] debugfs: 'hsr0' already exists in 'hsr'
[  240.950725][T11704] Cannot create hsr debugfs directory
[  240.990651][T11753] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  240.999093][T11753] SELinux: failed to load policy
[  241.004127][T11751] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  241.021579][T11751] SELinux: failed to load policy
[  241.101832][T11762] loop2: detected capacity change from 0 to 512
[  241.149666][T11762] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  241.162023][T11704] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.174050][T11765] loop4: detected capacity change from 0 to 1024
[  241.181793][T11762] EXT4-fs (loop2): 1 truncate cleaned up
[  241.199281][T11765] EXT4-fs: Ignoring removed orlov option
[  241.228581][T11767] loop0: detected capacity change from 0 to 512
[  241.250485][T11767] EXT4-fs (loop0): orphan cleanup on readonly fs
[  241.252069][T11767] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2870: bad orphan inode 13
[  241.253951][T11767] ext4_test_bit(bit=12, block=18) = 1
[  241.253967][T11767] is_bad_inode(inode)=0
[  241.253993][T11767] NEXT_ORPHAN(inode)=2130706432
[  241.254003][T11767] max_ino=32
[  241.254010][T11767] i_nlink=1
[  241.255750][T11704] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.263329][T11767] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  241.288525][T11767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2870: bg 0: block 248: padding at end of block bitmap is not set
[  241.288797][T11767] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2870: Failed to acquire dquot type 1
[  241.292923][T11767] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  241.410345][T11704] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.490607][T11704] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.586067][T11704] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  241.607302][T11704] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  241.617701][T11704] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  241.626636][T11704] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  241.680803][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  241.680819][   T29] audit: type=1326 audit(1756066421.266:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.710416][T11704] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.720771][   T29] audit: type=1326 audit(1756066421.266:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.770965][T11781] loop2: detected capacity change from 0 to 256
[  241.784581][   T29] audit: type=1326 audit(1756066421.356:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4a796ed69f code=0x7ffc0000
[  241.807984][   T29] audit: type=1326 audit(1756066421.356:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.831687][   T29] audit: type=1326 audit(1756066421.356:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.855324][   T29] audit: type=1326 audit(1756066421.376:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.874990][T11704] 8021q: adding VLAN 0 to HW filter on device team0
[  241.878834][   T29] audit: type=1326 audit(1756066421.376:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.908943][   T29] audit: type=1326 audit(1756066421.376:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.929262][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.932473][   T29] audit: type=1326 audit(1756066421.376:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  241.939492][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.962935][   T29] audit: type=1326 audit(1756066421.376:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.2.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a796eebe9 code=0x7ffc0000
[  242.035182][T11704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  242.045577][T11704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.079892][T11783] loop2: detected capacity change from 0 to 256
[  242.103028][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.110109][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.182805][T11788] __nla_validate_parse: 4 callbacks suppressed
[  242.182824][T11788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2874'.
[  242.252792][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.264283][T11795] loop4: detected capacity change from 0 to 256
[  242.314941][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'.
[  242.349466][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'.
[  242.367457][T11800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2879'.
[  242.428581][T11803] netlink: 'syz.0.2878': attribute type 13 has an invalid length.
[  242.442097][T11803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.484689][T11704] veth0_vlan: entered promiscuous mode
[  242.494803][T11813] loop4: detected capacity change from 0 to 512
[  242.508762][T11812] loop2: detected capacity change from 0 to 512
[  242.514731][T11704] veth1_vlan: entered promiscuous mode
[  242.547843][T11813] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.561165][T11815] FAULT_INJECTION: forcing a failure.
[  242.561165][T11815] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  242.574473][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.0.2883 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  242.574501][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  242.574529][T11815] Call Trace:
[  242.574537][T11815]  <TASK>
[  242.574546][T11815]  __dump_stack+0x1d/0x30
[  242.574625][T11815]  dump_stack_lvl+0xe8/0x140
[  242.574687][T11815]  dump_stack+0x15/0x1b
[  242.574704][T11815]  should_fail_ex+0x265/0x280
[  242.574731][T11815]  should_fail_alloc_page+0xf2/0x100
[  242.574816][T11815]  __alloc_frozen_pages_noprof+0xff/0x360
[  242.574862][T11815]  alloc_pages_mpol+0xb3/0x250
[  242.574902][T11815]  vma_alloc_folio_noprof+0x1aa/0x300
[  242.574964][T11815]  do_wp_page+0x5db/0x24e0
[  242.574993][T11815]  ? avc_has_perm+0xf7/0x180
[  242.575023][T11815]  ? __rcu_read_lock+0x37/0x50
[  242.575052][T11815]  handle_mm_fault+0x77d/0x2c20
[  242.575155][T11815]  ? __rcu_read_unlock+0x4f/0x70
[  242.575183][T11815]  do_user_addr_fault+0x3fe/0x1090
[  242.575228][T11815]  exc_page_fault+0x62/0xa0
[  242.575257][T11815]  asm_exc_page_fault+0x26/0x30
[  242.575341][T11815] RIP: 0010:rep_stos_alternative+0x40/0x80
[  242.575373][T11815] Code: c9 75 f6 e9 52 04 02 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47
[  242.575390][T11815] RSP: 0018:ffffc900018e7d98 EFLAGS: 00050246
[  242.575410][T11815] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000040
[  242.575426][T11815] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 0000200000002000
[  242.575441][T11815] RBP: 0000200000001040 R08: 0001ffff858ad8ff R09: 0000000000000000
[  242.575518][T11815] R10: 0000000000000000 R11: ffffffff8221a970 R12: 0000000000001000
[  242.575534][T11815] R13: 00007ffffffff000 R14: 000000007fffe000 R15: 0000000000000000
[  242.575552][T11815]  ? __pfx_read_zero+0x10/0x10
[  242.575586][T11815]  read_zero+0x77/0x160
[  242.575607][T11815]  ? __pfx_read_zero+0x10/0x10
[  242.575623][T11815]  vfs_read+0x1a8/0x770
[  242.575658][T11815]  ? __rcu_read_unlock+0x4f/0x70
[  242.575683][T11815]  ? __fget_files+0x184/0x1c0
[  242.575725][T11815]  ksys_read+0xda/0x1a0
[  242.575804][T11815]  __x64_sys_read+0x40/0x50
[  242.575829][T11815]  x64_sys_call+0x27bc/0x2ff0
[  242.575855][T11815]  do_syscall_64+0xd2/0x200
[  242.575888][T11815]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  242.575919][T11815]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  242.575981][T11815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.576005][T11815] RIP: 0033:0x7f92582eebe9
[  242.576023][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.576044][T11815] RSP: 002b:00007f9256d57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  242.576091][T11815] RAX: ffffffffffffffda RBX: 00007f9258515fa0 RCX: 00007f92582eebe9
[  242.576103][T11815] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000006
[  242.576113][T11815] RBP: 00007f9256d57090 R08: 0000000000000000 R09: 0000000000000000
[  242.576125][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.576139][T11815] R13: 00007f9258516038 R14: 00007f9258515fa0 R15: 00007fff3e962518
[  242.576161][T11815]  </TASK>
[  242.747989][T11704] veth0_macvtap: entered promiscuous mode
[  242.788710][T11813] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2881: corrupted inode contents
[  242.791446][T11812] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  242.798705][T11813] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2881: mark_inode_dirty error
[  242.833930][T11704] veth1_macvtap: entered promiscuous mode
[  242.952824][T11812] EXT4-fs (loop2): 1 truncate cleaned up
[  242.964174][T11813] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2881: corrupted inode contents
[  243.023836][T11813] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2881: mark_inode_dirty error
[  243.119914][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.142601][T11824] loop0: detected capacity change from 0 to 128
[  243.149739][T11820] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.2881: corrupted inode contents
[  243.165273][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.181407][ T4019] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.203331][  T144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.217259][T11820] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #19: comm syz.4.2881: mark_inode_dirty error
[  243.217835][T11824] FAT-fs (loop0): Directory bread(block 32) failed
[  243.236477][T11824] FAT-fs (loop0): Directory bread(block 33) failed
[  243.243443][T11824] FAT-fs (loop0): Directory bread(block 34) failed
[  243.250002][T11824] FAT-fs (loop0): Directory bread(block 35) failed
[  243.254243][  T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.258989][T11824] FAT-fs (loop0): Directory bread(block 36) failed
[  243.272184][T11824] FAT-fs (loop0): Directory bread(block 37) failed
[  243.274178][T11820] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.2881: corrupted inode contents
[  243.278844][T11824] FAT-fs (loop0): Directory bread(block 38) failed
[  243.297840][T11824] FAT-fs (loop0): Directory bread(block 39) failed
[  243.305408][T11824] FAT-fs (loop0): Directory bread(block 40) failed
[  243.306554][  T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.312551][T11824] FAT-fs (loop0): Directory bread(block 41) failed
[  243.328676][T11827] loop2: detected capacity change from 0 to 1024
[  243.336958][T11827] EXT4-fs: Ignoring removed orlov option
[  243.377538][T11820] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.2881: mark_inode_dirty error
[  243.394704][T11824] FAT-fs (loop0): Filesystem has been set read-only
[  243.433739][T11820] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.2881: mark inode dirty (error -117)
[  243.463056][T11833] loop0: detected capacity change from 0 to 128
[  243.482858][T11833] FAT-fs (loop0): Directory bread(block 32) failed
[  243.499368][T11833] FAT-fs (loop0): Directory bread(block 33) failed
[  243.507618][T11820] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  243.525363][T11833] FAT-fs (loop0): Directory bread(block 34) failed
[  243.546816][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  243.555898][T11833] FAT-fs (loop0): Directory bread(block 35) failed
[  243.564117][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  243.573165][T11833] FAT-fs (loop0): Directory bread(block 36) failed
[  243.585493][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  243.598959][T11833] FAT-fs (loop0): Directory bread(block 37) failed
[  243.613471][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  243.619820][T11833] FAT-fs (loop0): Directory bread(block 38) failed
[  243.653338][T11833] FAT-fs (loop0): Directory bread(block 39) failed
[  243.667902][T11833] FAT-fs (loop0): Directory bread(block 40) failed
[  243.689587][T11833] FAT-fs (loop0): Directory bread(block 41) failed
[  243.778541][T11844] loop4: detected capacity change from 0 to 512
[  243.787062][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'.
[  243.829226][T11833] FAT-fs (loop0): Filesystem has been set read-only
[  243.836436][T11844] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  243.908871][T11844] EXT4-fs (loop4): 1 truncate cleaned up
[  243.939135][T11847] loop0: detected capacity change from 0 to 512
[  243.954325][T11847] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  244.054145][T11847] EXT4-fs (loop0): 1 truncate cleaned up
[  244.249994][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2894'.
[  244.286198][T11854] program syz.4.2895 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.397498][T11861] 9pnet_fd: Insufficient options for proto=fd
[  244.412674][T11863] loop4: detected capacity change from 0 to 256
[  244.455228][T11868] ip6tnl1: entered allmulticast mode
[  244.509003][T11871] loop0: detected capacity change from 0 to 512
[  244.560921][T11871] EXT4-fs (loop0): orphan cleanup on readonly fs
[  244.568284][T11871] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.2902: bad orphan inode 13
[  244.587507][T11873] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  244.589991][T11871] ext4_test_bit(bit=12, block=18) = 1
[  244.601228][T11871] is_bad_inode(inode)=0
[  244.605431][T11871] NEXT_ORPHAN(inode)=2130706432
[  244.610286][T11871] max_ino=32
[  244.613570][T11871] i_nlink=1
[  244.645377][T11873] SELinux: failed to load policy
[  244.751556][T11871] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  244.765156][T11883] program syz.4.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.784612][T11881] loop2: detected capacity change from 0 to 512
[  244.791342][T11881] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  244.841392][T11871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2902: bg 0: block 248: padding at end of block bitmap is not set
[  244.907957][T11886] program syz.4.2909 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.941086][T11871] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2902: Failed to acquire dquot type 1
[  245.019421][T11871] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  245.262624][T11894] 9pnet_fd: Insufficient options for proto=fd
[  245.378586][T11891] lo speed is unknown, defaulting to 1000
[  245.412562][T11868] Set syz1 is full, maxelem 65536 reached
[  245.600726][T11921] loop0: detected capacity change from 0 to 512
[  245.612766][T11922] loop3: detected capacity change from 0 to 512
[  245.651237][T11891] chnl_net:caif_netlink_parms(): no params data found
[  245.664720][T11921] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  245.695820][T11922] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.717695][T11921] EXT4-fs (loop0): 1 truncate cleaned up
[  245.808405][T11891] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.815559][T11891] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.823093][T11891] bridge_slave_0: entered allmulticast mode
[  245.829652][T11891] bridge_slave_0: entered promiscuous mode
[  245.836801][T11891] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.843912][T11891] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.851313][T11891] bridge_slave_1: entered allmulticast mode
[  245.858363][T11891] bridge_slave_1: entered promiscuous mode
[  245.985689][T11891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.998712][T11891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.061903][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  246.088248][T11891] team0: Port device team_slave_0 added
[  246.106616][T11891] team0: Port device team_slave_1 added
[  246.150806][T11891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.157992][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.183999][T11891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.276870][T11961] loop4: detected capacity change from 0 to 1024
[  246.338508][T11961] 8021q: adding VLAN 0 to HW filter on device bond17
[  246.400793][T11961] bond17 (unregistering): Released all slaves
[  246.429771][T11891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.436886][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.462907][T11891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.631985][T11991] loop3: detected capacity change from 0 to 256
[  246.655387][T11891] hsr_slave_0: entered promiscuous mode
[  246.673732][T11891] hsr_slave_1: entered promiscuous mode
[  246.682438][T11891] debugfs: 'hsr0' already exists in 'hsr'
[  246.688188][T11891] Cannot create hsr debugfs directory
[  246.693828][   T29] kauditd_printk_skb: 222 callbacks suppressed
[  246.693860][   T29] audit: type=1326 audit(1756066426.276:7592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facfd67d550 code=0x7ffc0000
[  246.723743][   T29] audit: type=1326 audit(1756066426.276:7593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7facfd67d937 code=0x7ffc0000
[  246.747370][   T29] audit: type=1326 audit(1756066426.276:7594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facfd67d550 code=0x7ffc0000
[  246.770902][   T29] audit: type=1326 audit(1756066426.276:7595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.794499][   T29] audit: type=1326 audit(1756066426.276:7596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.818034][   T29] audit: type=1326 audit(1756066426.276:7597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.841566][   T29] audit: type=1326 audit(1756066426.276:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.845744][T12001] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  246.865069][   T29] audit: type=1326 audit(1756066426.276:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.875258][T11989] loop4: detected capacity change from 0 to 8192
[  246.896795][   T29] audit: type=1326 audit(1756066426.276:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.896830][   T29] audit: type=1326 audit(1756066426.276:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.3.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfd67ebe9 code=0x7ffc0000
[  246.918720][T12001] SELinux: failed to load policy
[  246.987139][T11989] bio_check_eod: 7042 callbacks suppressed
[  246.987235][T11989] syz.4.2925: attempt to access beyond end of device
[  246.987235][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.006612][T11989] buffer_io_error: 7042 callbacks suppressed
[  247.006627][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.026794][T11989] syz.4.2925: attempt to access beyond end of device
[  247.026794][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.040257][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.163250][T11989] syz.4.2925: attempt to access beyond end of device
[  247.163250][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.176801][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.232753][T11989] syz.4.2925: attempt to access beyond end of device
[  247.232753][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.246293][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.340719][T11891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.352168][T11989] syz.4.2925: attempt to access beyond end of device
[  247.352168][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.365730][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.381997][T12023] gre1: entered allmulticast mode
[  247.403448][T11989] syz.4.2925: attempt to access beyond end of device
[  247.403448][T11989] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  247.416891][T11989] Buffer I/O error on dev loop4, logical block 57847, async page read
[  247.444757][T11891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.586003][T11891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.618943][T12034] loop3: detected capacity change from 0 to 1024
[  247.897252][T11985] Set syz1 is full, maxelem 65536 reached
[  247.898494][T12041] __nla_validate_parse: 6 callbacks suppressed
[  247.898520][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2932'.
[  247.927003][T11891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.954582][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'.
[  247.973533][T12034] team0: Port device team_slave_1 removed
[  248.087776][T11891] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  248.194938][T12049] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  248.200503][T11891] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  248.203685][T12049] SELinux: failed to load policy
[  248.229613][T11891] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  248.237485][T12051] loop4: detected capacity change from 0 to 128
[  248.254001][T11891] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  248.285875][T12055] syz_tun: entered allmulticast mode
[  248.295779][T12051] FAT-fs (loop4): Directory bread(block 32) failed
[  248.302737][T12051] FAT-fs (loop4): Directory bread(block 33) failed
[  248.309310][T12051] FAT-fs (loop4): Directory bread(block 34) failed
[  248.309473][T12053] loop3: detected capacity change from 0 to 512
[  248.317763][T12051] FAT-fs (loop4): Directory bread(block 35) failed
[  248.329162][T12051] FAT-fs (loop4): Directory bread(block 36) failed
[  248.343694][T12051] FAT-fs (loop4): Directory bread(block 37) failed
[  248.346557][T12055] dvmrp1: entered allmulticast mode
[  248.350330][T12051] FAT-fs (loop4): Directory bread(block 38) failed
[  248.368624][T12051] FAT-fs (loop4): Directory bread(block 39) failed
[  248.382975][T12051] FAT-fs (loop4): Directory bread(block 40) failed
[  248.385073][T12053] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.389604][T12051] FAT-fs (loop4): Directory bread(block 41) failed
[  248.429713][T12055] netlink: 'syz.0.2940': attribute type 12 has an invalid length.
[  248.455100][T11891] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.485971][T12055] loop9: detected capacity change from 0 to 7
[  248.496947][T11891] 8021q: adding VLAN 0 to HW filter on device team0
[  248.502857][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read
[  248.512820][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read
[  248.517732][T12051] syz.4.2938: attempt to access beyond end of device
[  248.517732][T12051] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128
[  248.520649][ T3293]  loop9: unable to read partition table
[  248.539533][T12051] Buffer I/O error on dev loop4, logical block 1028, async page read
[  248.548320][T12055] Buffer I/O error on dev loop9, logical block 0, async page read
[  248.558812][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.561972][T12051] syz.4.2938: attempt to access beyond end of device
[  248.561972][T12051] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128
[  248.565902][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.579269][T12051] FAT-fs (loop4): Filesystem has been set read-only
[  248.592791][T12055]  loop9: unable to read partition table
[  248.596479][T12051] syz.4.2938: attempt to access beyond end of device
[  248.596479][T12051] loop4: rw=0, sector=4112, nr_sectors = 4 limit=128
[  248.609000][T12055] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  248.609000][T12055] 
) failed (rc=-5)
[  248.613916][T12051] syz.4.2938: attempt to access beyond end of device
[  248.613916][T12051] loop4: rw=0, sector=167964, nr_sectors = 4 limit=128
[  248.661679][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.668792][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.682908][T12068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2942'.
[  248.709282][T11891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.719758][T11891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.755140][T12054] syz_tun: left allmulticast mode
[  248.854848][T12077] lo speed is unknown, defaulting to 1000
[  248.874762][T11891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.897572][T12081] dvmrp1: entered allmulticast mode
[  248.978682][T12086] loop3: detected capacity change from 0 to 512
[  248.999705][T12086] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  249.034903][T12086] EXT4-fs (loop3): 1 truncate cleaned up
[  249.066990][T12093] loop0: detected capacity change from 0 to 512
[  249.080065][T12093] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  249.096016][T12093] EXT4-fs (loop0): 1 truncate cleaned up
[  249.144981][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'.
[  249.158659][T11891] veth0_vlan: entered promiscuous mode
[  249.196296][T11891] veth1_vlan: entered promiscuous mode
[  249.218873][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2952'.
[  249.255882][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2953'.
[  249.260604][T11891] veth0_macvtap: entered promiscuous mode
[  249.291695][T11891] veth1_macvtap: entered promiscuous mode
[  249.322797][T12108] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  249.331477][T12108] SELinux: failed to load policy
[  249.358606][T11891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.382973][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2956'.
[  249.396861][T11891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.487557][  T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.504348][T12121] loop3: detected capacity change from 0 to 512
[  249.510944][  T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.533746][  T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.566989][  T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.620368][T12112] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  249.631156][T12112] SELinux: failed to load policy
[  249.673715][T12122] loop4: detected capacity change from 0 to 8192
[  249.682427][T12130] program syz.3.2961 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  249.793477][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'.
[  249.913065][T12137] loop3: detected capacity change from 0 to 128
[  249.957302][T12137] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  250.035842][T12137] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.320516][T12116] Set syz1 is full, maxelem 65536 reached
[  250.326376][  T296] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  250.404494][T12157] loop2: detected capacity change from 0 to 512
[  250.466920][T12157] EXT4-fs mount: 77 callbacks suppressed
[  250.466934][T12157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.494508][T12142] lo speed is unknown, defaulting to 1000
[  250.551784][T12157] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.714278][T12175] loop0: detected capacity change from 0 to 1024
[  250.720982][T12175] EXT4-fs: Ignoring removed orlov option
[  250.731690][T12174] loop3: detected capacity change from 0 to 512
[  250.752461][T12142] chnl_net:caif_netlink_parms(): no params data found
[  250.781045][T12174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.816574][T12174] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.844523][T12184] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2977'.
[  250.864605][T12175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.885328][T12142] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.892520][T12142] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.900742][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.927377][T12142] bridge_slave_0: entered allmulticast mode
[  250.934447][T12142] bridge_slave_0: entered promiscuous mode
[  250.937150][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'.
[  250.953547][T12142] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.960653][T12142] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.968453][T12142] bridge_slave_1: entered allmulticast mode
[  250.976563][T12142] bridge_slave_1: entered promiscuous mode
[  251.003595][T12188] loop4: detected capacity change from 0 to 8192
[  251.012349][T12142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.027114][T12142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.049891][T12142] team0: Port device team_slave_0 added
[  251.056579][T12188]  loop4: p1 p2 p4
[  251.056966][T12142] team0: Port device team_slave_1 added
[  251.060456][T12188] loop4: p1 size 65536 extends beyond EOD, truncated
[  251.074070][T12188] loop4: p2 start 861536256 is beyond EOD, truncated
[  251.080781][T12188] loop4: p4 size 65536 extends beyond EOD, truncated
[  251.094339][T12142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.101305][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.127361][T12142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.143017][T12142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.150077][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.176144][T12142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.198082][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.235744][T12142] hsr_slave_0: entered promiscuous mode
[  251.244818][T12142] hsr_slave_1: entered promiscuous mode
[  251.250788][T12142] debugfs: 'hsr0' already exists in 'hsr'
[  251.256559][T12142] Cannot create hsr debugfs directory
[  251.267334][ T2992]  loop4: p1 p2 p4
[  251.271160][ T2992] loop4: p1 size 65536 extends beyond EOD, truncated
[  251.286972][ T2992] loop4: p2 start 861536256 is beyond EOD, truncated
[  251.293766][ T2992] loop4: p4 size 65536 extends beyond EOD, truncated
[  251.306439][T12184] siw: device registration error -23
[  251.330454][T12195] netlink: 'syz.2.2979': attribute type 13 has an invalid length.
[  251.333120][T12197] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  251.355131][T12197] SELinux: failed to load policy
[  251.372019][T12184] Invalid logical block size (3)
[  251.410226][T12195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.491635][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  251.495940][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  251.617180][T12211] loop2: detected capacity change from 0 to 2048
[  251.622036][T12142] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  251.645473][T12211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.652194][T12212] vlan2: entered promiscuous mode
[  251.662622][T12212] 0ªX¹¦D: entered promiscuous mode
[  251.667618][T12211] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.2986: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  251.685138][T12211] EXT4-fs (loop2): Remounting filesystem read-only
[  251.703997][T12142] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  251.724541][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.728975][T12142] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  251.734984][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.764712][T12142] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  251.807898][T12217] loop2: detected capacity change from 0 to 128
[  251.836732][T12219] loop4: detected capacity change from 0 to 1024
[  251.844598][T12217] FAT-fs (loop2): Directory bread(block 32) failed
[  251.851159][T12217] FAT-fs (loop2): Directory bread(block 33) failed
[  251.860398][T12217] FAT-fs (loop2): Directory bread(block 34) failed
[  251.867296][T12217] FAT-fs (loop2): Directory bread(block 35) failed
[  251.883054][T12219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.908924][T12217] FAT-fs (loop2): Directory bread(block 36) failed
[  251.915930][T12217] FAT-fs (loop2): Directory bread(block 37) failed
[  251.922808][T12217] FAT-fs (loop2): Directory bread(block 38) failed
[  251.929395][T12217] FAT-fs (loop2): Directory bread(block 39) failed
[  251.936887][T12217] FAT-fs (loop2): Directory bread(block 40) failed
[  251.943496][T12217] FAT-fs (loop2): Directory bread(block 41) failed
[  251.981538][T12217] FAT-fs (loop2): Filesystem has been set read-only
[  252.093103][T12226] loop2: detected capacity change from 0 to 512
[  252.103380][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  252.103392][   T29] audit: type=1400 audit(1756066431.696:7662): avc:  denied  { create } for  pid=12225 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  252.292589][T12229] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  252.301436][T12229] SELinux: failed to load policy
[  252.318662][T12219] 8021q: adding VLAN 0 to HW filter on device bond17
[  252.574265][T12228] bond17 (unregistering): Released all slaves
[  252.619575][T12240] FAULT_INJECTION: forcing a failure.
[  252.619575][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.632860][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.2.2991 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  252.632895][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  252.632945][T12240] Call Trace:
[  252.632952][T12240]  <TASK>
[  252.632959][T12240]  __dump_stack+0x1d/0x30
[  252.633055][T12240]  dump_stack_lvl+0xe8/0x140
[  252.633073][T12240]  dump_stack+0x15/0x1b
[  252.633093][T12240]  should_fail_ex+0x265/0x280
[  252.633134][T12240]  should_fail+0xb/0x20
[  252.633165][T12240]  should_fail_usercopy+0x1a/0x20
[  252.633193][T12240]  _copy_from_user+0x1c/0xb0
[  252.633221][T12240]  btf_new_fd+0x20a/0x790
[  252.633243][T12240]  bpf_btf_load+0x112/0x130
[  252.633313][T12240]  __sys_bpf+0x352/0x7b0
[  252.633415][T12240]  __x64_sys_bpf+0x41/0x50
[  252.633484][T12240]  x64_sys_call+0x2aea/0x2ff0
[  252.633554][T12240]  do_syscall_64+0xd2/0x200
[  252.633581][T12240]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  252.633668][T12240]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  252.633779][T12240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.633805][T12240] RIP: 0033:0x7fef3c37ebe9
[  252.633824][T12240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.633863][T12240] RSP: 002b:00007fef3addf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.633882][T12240] RAX: ffffffffffffffda RBX: 00007fef3c5a5fa0 RCX: 00007fef3c37ebe9
[  252.633894][T12240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  252.633922][T12240] RBP: 00007fef3addf090 R08: 0000000000000000 R09: 0000000000000000
[  252.633938][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.633953][T12240] R13: 00007fef3c5a6038 R14: 00007fef3c5a5fa0 R15: 00007ffc12e97c78
[  252.633977][T12240]  </TASK>
[  252.886083][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.945872][T12246] __nla_validate_parse: 5 callbacks suppressed
[  252.945890][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2993'.
[  252.976241][T12142] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.988622][T12142] 8021q: adding VLAN 0 to HW filter on device team0
[  253.011978][T12142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  253.022397][T12142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  253.065828][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2994'.
[  253.080065][  T296] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.087316][  T296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.098775][  T296] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.105964][  T296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.181235][T12142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.190182][T12254] netlink: 'syz.4.2994': attribute type 13 has an invalid length.
[  253.232119][ T1036] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.256410][T12191] Set syz1 is full, maxelem 65536 reached
[  253.305204][T12254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  253.371432][T12262] loop3: detected capacity change from 0 to 2048
[  253.454498][T12262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.480272][T12262] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.2996: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  253.499256][T12262] EXT4-fs (loop3): Remounting filesystem read-only
[  253.520644][T12270] program syz.4.2998 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.532320][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.536247][T12272] loop2: detected capacity change from 0 to 1024
[  253.549625][T12272] EXT4-fs: Ignoring removed orlov option
[  253.570886][T12272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.674885][T12278] loop3: detected capacity change from 0 to 512
[  253.763417][T12278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.796113][T12278] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.814710][T12142] veth0_vlan: entered promiscuous mode
[  253.815844][T12224] Set syz1 is full, maxelem 65536 reached
[  253.840201][T12142] veth1_vlan: entered promiscuous mode
[  253.873679][T12288] loop0: detected capacity change from 0 to 1024
[  253.902162][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.911291][ T3383] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.941065][T12142] veth0_macvtap: entered promiscuous mode
[  253.971043][T12288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.973418][T12291] loop4: detected capacity change from 0 to 512
[  253.991979][T12291] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  254.013740][T12142] veth1_macvtap: entered promiscuous mode
[  254.081191][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3002'.
[  254.093567][T12142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.108117][T12291] EXT4-fs (loop4): 1 truncate cleaned up
[  254.130343][T12291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.153809][T12288] 8021q: adding VLAN 0 to HW filter on device bond7
[  254.164984][T12142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.188934][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3002'.
[  254.199680][  T144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.199795][  T144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.199825][  T144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.199859][  T144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.203141][T12288] bond7 (unregistering): Released all slaves
[  254.275200][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.419161][T12313] loop3: detected capacity change from 0 to 512
[  254.449878][T12313] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  254.462253][T12315] loop5: detected capacity change from 0 to 512
[  254.475896][T12315] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  254.485469][T12313] EXT4-fs (loop3): 1 truncate cleaned up
[  254.491550][T12313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.506213][T12315] EXT4-fs (loop5): 1 truncate cleaned up
[  254.514501][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.534081][T12315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.593490][T12310] lo speed is unknown, defaulting to 1000
[  254.609612][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.628242][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.703967][T12329] FAULT_INJECTION: forcing a failure.
[  254.703967][T12329] name failslab, interval 1, probability 0, space 0, times 0
[  254.711052][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.716891][T12329] CPU: 1 UID: 0 PID: 12329 Comm: syz.3.3012 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  254.716918][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  254.716933][T12329] Call Trace:
[  254.716941][T12329]  <TASK>
[  254.716951][T12329]  __dump_stack+0x1d/0x30
[  254.716977][T12329]  dump_stack_lvl+0xe8/0x140
[  254.717001][T12329]  dump_stack+0x15/0x1b
[  254.717109][T12329]  should_fail_ex+0x265/0x280
[  254.717135][T12329]  ? allocate_file_region_entries+0xd2/0x310
[  254.717193][T12329]  should_failslab+0x8c/0xb0
[  254.717311][T12329]  __kmalloc_cache_noprof+0x4c/0x320
[  254.717351][T12329]  allocate_file_region_entries+0xd2/0x310
[  254.717446][T12329]  region_chg+0x232/0x2d0
[  254.717474][T12329]  alloc_hugetlb_folio+0x312/0x1070
[  254.717523][T12329]  hugetlb_fault+0xd71/0x1b50
[  254.717683][T12329]  handle_mm_fault+0x1861/0x2c20
[  254.717719][T12329]  ? mt_find+0x200/0x320
[  254.717765][T12329]  ? inode_to_bdi+0x47/0xa0
[  254.717800][T12329]  ? down_read+0x77/0xe0
[  254.717981][T12329]  __get_user_pages+0x102e/0x1fa0
[  254.718031][T12329]  __gup_longterm_locked+0x2fb/0xe60
[  254.718073][T12329]  gup_fast_fallback+0x1f5/0x1420
[  254.718098][T12329]  ? alloc_pages_mpol+0x201/0x250
[  254.718172][T12329]  pin_user_pages_fast+0x5f/0x90
[  254.718205][T12329]  io_pin_pages+0xb5/0x170
[  254.718268][T12329]  io_sqe_buffer_register+0x184/0x1430
[  254.718313][T12329]  ? __memcg_slab_post_alloc_hook+0x44c/0x580
[  254.718363][T12329]  ? __kvmalloc_node_noprof+0x398/0x4e0
[  254.718408][T12329]  io_sqe_buffers_register+0x2ac/0x530
[  254.718603][T12329]  __se_sys_io_uring_register+0xa9f/0xeb0
[  254.718642][T12329]  ? fput+0x8f/0xc0
[  254.718680][T12329]  ? ksys_write+0x192/0x1a0
[  254.718735][T12329]  __x64_sys_io_uring_register+0x55/0x70
[  254.718777][T12329]  x64_sys_call+0x18a3/0x2ff0
[  254.718807][T12329]  do_syscall_64+0xd2/0x200
[  254.718844][T12329]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  254.718953][T12329]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  254.719023][T12329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.719053][T12329] RIP: 0033:0x7facfd67ebe9
[  254.719080][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.719153][T12329] RSP: 002b:00007facfc0e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  254.719179][T12329] RAX: ffffffffffffffda RBX: 00007facfd8a5fa0 RCX: 00007facfd67ebe9
[  254.719303][T12329] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006
[  254.719319][T12329] RBP: 00007facfc0e7090 R08: 0000000000000000 R09: 0000000000000000
[  254.719336][T12329] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001
[  254.719354][T12329] R13: 00007facfd8a6038 R14: 00007facfd8a5fa0 R15: 00007fff5ae614f8
[  254.719405][T12329]  </TASK>
[  254.747621][T12310] chnl_net:caif_netlink_parms(): no params data found
[  254.919158][   T29] audit: type=1326 audit(1756066434.506:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.032618][   T29] audit: type=1326 audit(1756066434.516:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.042328][T12329] loop5: detected capacity change from 512 to 511
[  255.056161][   T29] audit: type=1326 audit(1756066434.516:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.086051][   T29] audit: type=1326 audit(1756066434.516:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.093094][T12332] loop2: detected capacity change from 0 to 736
[  255.109576][   T29] audit: type=1326 audit(1756066434.516:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.109678][   T29] audit: type=1326 audit(1756066434.516:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.109713][   T29] audit: type=1326 audit(1756066434.516:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.109758][   T29] audit: type=1326 audit(1756066434.516:7670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.109788][   T29] audit: type=1326 audit(1756066434.516:7671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  255.149166][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3014'.
[  255.254173][T12342] ip6tnl1: entered allmulticast mode
[  255.290221][T12348] program syz.4.3016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.315114][T12332] rock: directory entry would overflow storage
[  255.321578][T12332] rock: sig=0x3b10, size=4, remaining=3
[  255.405665][T12345] lo speed is unknown, defaulting to 1000
[  255.413367][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'.
[  255.437788][T12310] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.444890][T12310] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.454655][T12310] bridge_slave_0: entered allmulticast mode
[  255.461175][T12310] bridge_slave_0: entered promiscuous mode
[  255.468961][T12360] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  255.525668][T12310] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.532892][T12310] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.541759][T12310] bridge_slave_1: entered allmulticast mode
[  255.553993][T12310] bridge_slave_1: entered promiscuous mode
[  255.560118][T12360] SELinux: failed to load policy
[  255.566022][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'.
[  255.578361][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3019'.
[  255.654574][T12367] loop4: detected capacity change from 0 to 512
[  255.682203][T12367] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  255.708593][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3023'.
[  255.731496][T12367] EXT4-fs (loop4): 1 truncate cleaned up
[  255.738184][T12367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.753274][T12370] ip6tnl1: entered allmulticast mode
[  255.774270][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.808644][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.005766][T12379] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  256.013233][T12342] Set syz1 is full, maxelem 65536 reached
[  256.021000][T12379] SELinux: failed to load policy
[  256.067377][T12374] loop3: detected capacity change from 0 to 1024
[  256.079163][T12374] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  256.088862][T12310] team0: Port device team_slave_0 added
[  256.121430][T12310] team0: Port device team_slave_1 added
[  256.134020][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.296544][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'.
[  256.311727][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.319003][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.345210][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.742434][T12370] Set syz1 is full, maxelem 65536 reached
[  256.766801][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.773879][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.799890][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.836048][T12398] netlink: 'syz.2.3030': attribute type 13 has an invalid length.
[  256.847948][T12310] hsr_slave_0: entered promiscuous mode
[  256.857935][T12310] hsr_slave_1: entered promiscuous mode
[  256.864517][T12310] debugfs: 'hsr0' already exists in 'hsr'
[  256.870284][T12310] Cannot create hsr debugfs directory
[  256.901062][T12398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.950171][T12402] loop3: detected capacity change from 0 to 256
[  256.985182][T12405] netdevsim netdevsim2 
5Â: renamed from netdevsim0 (while UP)
[  257.037109][T12409] netlink: 'syz.4.3034': attribute type 21 has an invalid length.
[  257.067260][T12415] loop2: detected capacity change from 0 to 128
[  257.081885][T12409] netlink: 'syz.4.3034': attribute type 1 has an invalid length.
[  257.097146][T12415] FAT-fs (loop2): Directory bread(block 32) failed
[  257.115302][T12415] FAT-fs (loop2): Directory bread(block 33) failed
[  257.124755][T12415] FAT-fs (loop2): Directory bread(block 34) failed
[  257.131467][T12415] FAT-fs (loop2): Directory bread(block 35) failed
[  257.138891][T12415] FAT-fs (loop2): Directory bread(block 36) failed
[  257.148567][T12415] FAT-fs (loop2): Directory bread(block 37) failed
[  257.155783][T12415] FAT-fs (loop2): Directory bread(block 38) failed
[  257.181067][T12415] FAT-fs (loop2): Directory bread(block 39) failed
[  257.193291][T12415] FAT-fs (loop2): Directory bread(block 40) failed
[  257.207685][T12415] FAT-fs (loop2): Directory bread(block 41) failed
[  257.256530][T12423] loop4: detected capacity change from 0 to 8192
[  257.278950][T12415] bio_check_eod: 18454 callbacks suppressed
[  257.278969][T12415] syz.2.3037: attempt to access beyond end of device
[  257.278969][T12415] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[  257.298344][T12415] buffer_io_error: 18463 callbacks suppressed
[  257.298358][T12415] Buffer I/O error on dev loop2, logical block 1028, async page read
[  257.313076][T12423] syz.4.3041: attempt to access beyond end of device
[  257.313076][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.326569][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.342909][T12423] syz.4.3041: attempt to access beyond end of device
[  257.342909][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.356525][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.360890][T12415] syz.2.3037: attempt to access beyond end of device
[  257.360890][T12415] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[  257.366510][T12423] syz.4.3041: attempt to access beyond end of device
[  257.366510][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.378241][T12415] Buffer I/O error on dev loop2, logical block 41991, async page read
[  257.378291][T12415] FAT-fs (loop2): Filesystem has been set read-only
[  257.391674][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.419717][T12426] loop3: detected capacity change from 0 to 512
[  257.432486][T12415] syz.2.3037: attempt to access beyond end of device
[  257.432486][T12415] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128
[  257.441433][T12310] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  257.445834][T12415] Buffer I/O error on dev loop2, logical block 1028, async page read
[  257.466337][T12310] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  257.476388][T12415] syz.2.3037: attempt to access beyond end of device
[  257.476388][T12415] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128
[  257.489824][T12415] Buffer I/O error on dev loop2, logical block 41991, async page read
[  257.514172][T12310] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  257.527717][T12426] EXT4-fs (loop3): orphan cleanup on readonly fs
[  257.528010][T12423] syz.4.3041: attempt to access beyond end of device
[  257.528010][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.534721][T12426] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3042: bad orphan inode 13
[  257.547555][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.570287][T12310] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  257.577277][T12423] syz.4.3041: attempt to access beyond end of device
[  257.577277][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.591393][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.608819][T12426] ext4_test_bit(bit=12, block=18) = 1
[  257.609114][T12423] syz.4.3041: attempt to access beyond end of device
[  257.609114][T12423] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  257.614506][T12426] is_bad_inode(inode)=0
[  257.627935][T12423] Buffer I/O error on dev loop4, logical block 57847, async page read
[  257.631971][T12426] NEXT_ORPHAN(inode)=2130706432
[  257.645086][T12426] max_ino=32
[  257.648288][T12426] i_nlink=1
[  257.669407][T12431] loop5: detected capacity change from 0 to 512
[  257.687519][T12426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  257.741521][T12426] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  257.773070][T12310] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.791086][T12310] 8021q: adding VLAN 0 to HW filter on device team0
[  257.794031][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.803275][ T3427] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.807289][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.813127][ T3427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.830632][   T29] kauditd_printk_skb: 91 callbacks suppressed
[  257.830644][   T29] audit: type=1400 audit(1756066437.426:7763): avc:  denied  { listen } for  pid=12438 comm="syz.2.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  257.858785][T12426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3042: bg 0: block 248: padding at end of block bitmap is not set
[  257.859866][T12431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.889513][T12426] Quota error (device loop3): write_blk: dquota write failed
[  257.896974][T12426] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  257.905153][T12310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  257.907034][T12426] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3042: Failed to acquire dquot type 1
[  257.917367][T12310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.940954][T12431] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.941021][ T3427] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.958344][ T3427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.966491][T12426] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  258.008047][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.051564][   T29] audit: type=1326 audit(1756066437.636:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e49e3ebe9 code=0x7ffc0000
[  258.072066][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.087900][T12453] loop5: detected capacity change from 0 to 256
[  258.094487][   T29] audit: type=1326 audit(1756066437.676:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e49e3d69f code=0x7ffc0000
[  258.117966][   T29] audit: type=1326 audit(1756066437.676:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e49e3ebe9 code=0x7ffc0000
[  258.141511][   T29] audit: type=1326 audit(1756066437.676:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e49e3ebe9 code=0x7ffc0000
[  258.165318][   T29] audit: type=1326 audit(1756066437.676:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e49e3ebe9 code=0x7ffc0000
[  258.188892][   T29] audit: type=1326 audit(1756066437.676:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e49e3ebe9 code=0x7ffc0000
[  258.212474][   T29] audit: type=1326 audit(1756066437.676:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.5.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e49e3ec23 code=0x7ffc0000
[  258.273932][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.308346][T12462] __nla_validate_parse: 3 callbacks suppressed
[  258.308366][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3048'.
[  258.348300][T12457] loop4: detected capacity change from 0 to 2048
[  258.370857][T12310] veth0_vlan: entered promiscuous mode
[  258.382283][T12457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.399113][T12457] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3047: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  258.420815][T12310] veth1_vlan: entered promiscuous mode
[  258.425834][T12457] EXT4-fs (loop4): Remounting filesystem read-only
[  258.440128][T12310] veth0_macvtap: entered promiscuous mode
[  258.448366][T12310] veth1_macvtap: entered promiscuous mode
[  258.461638][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.471210][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.482690][ T4019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.499673][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.512219][ T4019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.521160][ T4019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.530043][ T4019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.589659][T12476] loop4: detected capacity change from 0 to 512
[  258.603675][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3056'.
[  258.614551][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3054'.
[  258.639219][T12476] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  258.672838][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'.
[  258.681957][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'.
[  258.724312][T12492] loop5: detected capacity change from 0 to 256
[  258.759117][T12476] EXT4-fs (loop4): 1 truncate cleaned up
[  258.773940][T12476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.842353][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'.
[  258.866414][T12498] loop5: detected capacity change from 0 to 128
[  258.928332][T12478] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  258.947022][T12498] FAT-fs (loop5): Directory bread(block 32) failed
[  258.984389][T12478] SELinux: failed to load policy
[  258.985313][T12498] FAT-fs (loop5): Directory bread(block 33) failed
[  259.000623][T12498] FAT-fs (loop5): Directory bread(block 34) failed
[  259.007231][T12498] FAT-fs (loop5): Directory bread(block 35) failed
[  259.013799][T12498] FAT-fs (loop5): Directory bread(block 36) failed
[  259.020359][T12498] FAT-fs (loop5): Directory bread(block 37) failed
[  259.027045][T12498] FAT-fs (loop5): Directory bread(block 38) failed
[  259.033585][T12498] FAT-fs (loop5): Directory bread(block 39) failed
[  259.040204][T12498] FAT-fs (loop5): Directory bread(block 40) failed
[  259.046778][T12498] FAT-fs (loop5): Directory bread(block 41) failed
[  259.071823][T12490] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  259.090083][T12501] loop2: detected capacity change from 0 to 512
[  259.122302][T12490] SELinux: failed to load policy
[  259.167263][T12501] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  259.208809][T12498] FAT-fs (loop5): Filesystem has been set read-only
[  259.285385][T12501] EXT4-fs (loop2): 1 truncate cleaned up
[  259.298705][T12501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.319769][T12508] loop3: detected capacity change from 0 to 512
[  259.345334][T12508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.387629][T12508] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.489318][T12484] Set syz1 is full, maxelem 65536 reached
[  259.509422][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.534607][T12512] loop5: detected capacity change from 0 to 512
[  259.536891][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.559534][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.567695][T12514] loop0: detected capacity change from 0 to 512
[  259.577284][T12514] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  259.597246][T12512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.616537][T12514] EXT4-fs (loop0): 1 truncate cleaned up
[  259.635352][T12512] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.646820][T12514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.669935][T12520] FAULT_INJECTION: forcing a failure.
[  259.669935][T12520] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  259.683342][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.3.3067 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  259.683366][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  259.683379][T12520] Call Trace:
[  259.683386][T12520]  <TASK>
[  259.683395][T12520]  __dump_stack+0x1d/0x30
[  259.683418][T12520]  dump_stack_lvl+0xe8/0x140
[  259.683477][T12520]  dump_stack+0x15/0x1b
[  259.683492][T12520]  should_fail_ex+0x265/0x280
[  259.683514][T12520]  should_fail_alloc_page+0xf2/0x100
[  259.683543][T12520]  __alloc_frozen_pages_noprof+0xff/0x360
[  259.683625][T12520]  alloc_pages_mpol+0xb3/0x250
[  259.683713][T12520]  alloc_frozen_pages_noprof+0x90/0x110
[  259.683755][T12520]  ___kmalloc_large_node+0x52/0x100
[  259.683863][T12520]  __kmalloc_large_node_noprof+0x16/0xa0
[  259.683893][T12520]  __kmalloc_noprof+0x2ab/0x3e0
[  259.683920][T12520]  ? iovec_from_user+0x84/0x210
[  259.683952][T12520]  iovec_from_user+0x84/0x210
[  259.684050][T12520]  ? process_vm_rw+0x137/0x960
[  259.684076][T12520]  process_vm_rw+0x15b/0x960
[  259.684143][T12520]  ? _parse_integer+0x27/0x40
[  259.684162][T12520]  ? kstrtoull+0x111/0x140
[  259.684191][T12520]  ? __fget_files+0x184/0x1c0
[  259.684263][T12520]  ? fput+0x8f/0xc0
[  259.684311][T12520]  __x64_sys_process_vm_writev+0x78/0x90
[  259.684342][T12520]  x64_sys_call+0x2a7c/0x2ff0
[  259.684364][T12520]  do_syscall_64+0xd2/0x200
[  259.684446][T12520]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  259.684471][T12520]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  259.684498][T12520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.684520][T12520] RIP: 0033:0x7facfd67ebe9
[  259.684536][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.684647][T12520] RSP: 002b:00007facfc0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[  259.684678][T12520] RAX: ffffffffffffffda RBX: 00007facfd8a5fa0 RCX: 00007facfd67ebe9
[  259.684691][T12520] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000008c
[  259.684703][T12520] RBP: 00007facfc0e7090 R08: 000000000000023a R09: 0000000000000000
[  259.684717][T12520] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001
[  259.684739][T12520] R13: 00007facfd8a6038 R14: 00007facfd8a5fa0 R15: 00007fff5ae614f8
[  259.684757][T12520]  </TASK>
[  259.935772][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.971753][T12528] netlink: 'syz.3.3073': attribute type 13 has an invalid length.
[  259.986788][T12530] loop5: detected capacity change from 0 to 256
[  259.993693][T12527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3072'.
[  260.117119][T12536] loop5: detected capacity change from 0 to 512
[  260.131474][T12528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.166902][T12310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.176918][T12527] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  260.179528][T12536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.188208][T12527] SELinux: failed to load policy
[  260.203316][T12536] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.251436][T12544] netlink: 32 bytes leftover after parsing attributes in process `+}[@'.
[  260.264760][T12549] loop2: detected capacity change from 0 to 512
[  260.289868][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.316251][T12549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.331120][T12523] lo speed is unknown, defaulting to 1000
[  260.337067][T12549] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.386835][T12556] program syz.0.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  260.434958][T12523] chnl_net:caif_netlink_parms(): no params data found
[  260.443089][T12562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3083'.
[  260.461100][T12562] ip6tnl1: entered allmulticast mode
[  260.475188][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.511488][T12562] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  260.522651][T12568] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.540177][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3084'.
[  260.540328][T12568] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  260.559395][T12562] SELinux: failed to load policy
[  260.566208][T12568] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  260.666889][T12581] loop0: detected capacity change from 0 to 2048
[  260.718035][T12581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.734457][T12581] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3087: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  260.751680][T12581] EXT4-fs (loop0): Remounting filesystem read-only
[  260.763927][T12571] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  260.796131][T12571] SELinux: failed to load policy
[  260.813471][T12310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.849283][T12523] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.856437][T12523] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.865182][T12600] loop5: detected capacity change from 0 to 8192
[  260.883257][T12523] bridge_slave_0: entered allmulticast mode
[  260.889814][T12523] bridge_slave_0: entered promiscuous mode
[  260.896792][T12523] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.903928][T12523] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.941333][T12523] bridge_slave_1: entered allmulticast mode
[  260.978011][T12523] bridge_slave_1: entered promiscuous mode
[  260.984372][ T7349]  loop5: p1 p2 p4
[  260.988305][ T7349] loop5: p1 size 65536 extends beyond EOD, truncated
[  260.996720][ T7349] loop5: p2 start 861536256 is beyond EOD, truncated
[  261.003511][ T7349] loop5: p4 size 65536 extends beyond EOD, truncated
[  261.060583][T12613] siw: device registration error -23
[  261.068730][T12600]  loop5: p1 p2 p4
[  261.072651][T12600] loop5: p1 size 65536 extends beyond EOD, truncated
[  261.086164][T12600] loop5: p2 start 861536256 is beyond EOD, truncated
[  261.093025][T12600] loop5: p4 size 65536 extends beyond EOD, truncated
[  261.199215][T12626] loop5: detected capacity change from 0 to 512
[  261.226363][T12626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.245200][T12626] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.281617][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  261.292990][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  261.346024][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  261.357170][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  261.417794][T12583] Set syz1 is full, maxelem 65536 reached
[  261.425846][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.426170][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.446665][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  261.469345][T12523] team0: Port device team_slave_0 added
[  261.480911][T12523] team0: Port device team_slave_1 added
[  261.506943][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.514022][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.540013][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.570513][T12644] loop0: detected capacity change from 0 to 2048
[  261.579739][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.586765][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.612833][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.654447][T12649] program syz.5.3098 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  261.678990][ T3595] Alternate GPT is invalid, using primary GPT.
[  261.685468][ T3595]  loop0: p2 p3 p7
[  261.696117][T12644] Alternate GPT is invalid, using primary GPT.
[  261.702494][T12644]  loop0: p2 p3 p7
[  261.713081][T12523] hsr_slave_0: entered promiscuous mode
[  261.732816][T12523] hsr_slave_1: entered promiscuous mode
[  261.738833][T12523] debugfs: 'hsr0' already exists in 'hsr'
[  261.744738][T12523] Cannot create hsr debugfs directory
[  261.858569][T12663] loop5: detected capacity change from 0 to 1024
[  261.871169][T12663] EXT4-fs: Ignoring removed orlov option
[  261.903945][T12663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.948517][T12668] 9pnet_fd: Insufficient options for proto=fd
[  261.975819][T12670] program syz.3.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.040081][T12674] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  262.050527][T12674] SELinux: failed to load policy
[  262.133020][T12676] loop3: detected capacity change from 0 to 512
[  262.175461][T12676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.194400][T12523] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  262.206795][T12676] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.220287][T12523] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  262.232973][T12523] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  262.244335][T12523] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  262.294784][T12523] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.310270][T12523] 8021q: adding VLAN 0 to HW filter on device team0
[  262.323962][ T4019] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.331089][ T4019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.363112][ T4019] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.370395][ T4019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.455324][T12523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.668739][T12523] veth0_vlan: entered promiscuous mode
[  262.678647][T12523] veth1_vlan: entered promiscuous mode
[  262.701447][T12523] veth0_macvtap: entered promiscuous mode
[  262.716061][T12523] veth1_macvtap: entered promiscuous mode
[  262.730428][T12523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.757215][T12523] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.770313][   T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.791225][   T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.816517][   T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.830498][   T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.965126][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.020275][T11704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.084837][T12711] loop4: detected capacity change from 0 to 1024
[  263.116104][T12711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.129430][T12714] program syz.2.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.141155][   T29] kauditd_printk_skb: 136 callbacks suppressed
[  263.141170][   T29] audit: type=1326 audit(1756066442.726:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.2.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  263.171903][   T29] audit: type=1326 audit(1756066442.726:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.2.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  263.195580][   T29] audit: type=1326 audit(1756066442.726:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12712 comm="syz.2.3110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  263.281083][T12726] program syz.5.3115 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.304051][T12523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.323438][T12728] loop2: detected capacity change from 0 to 512
[  263.345170][T12728] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  263.367082][   T29] audit: type=1400 audit(1756066442.956:7909): avc:  denied  { mount } for  pid=12729 comm="syz.4.3116" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  263.410093][T12733] ------------[ cut here ]------------
[  263.412096][   T29] audit: type=1400 audit(1756066442.996:7910): avc:  denied  { unmount } for  pid=12523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  263.415742][T12733] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1)
[  263.453387][T12733] WARNING: CPU: 0 PID: 12733 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680
[  263.463961][T12733] Modules linked in:
[  263.467906][T12733] CPU: 0 UID: 0 PID: 12733 Comm: syz.5.3118 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  263.477775][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  263.487994][T12733] RIP: 0010:reg_bounds_sanity_check+0x673/0x680
[  263.494479][T12733] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90
[  263.505455][T12740] 9pnet_fd: Insufficient options for proto=fd
[  263.514308][T12733] RSP: 0018:ffffc900015ff440 EFLAGS: 00010292
[  263.526510][T12733] RAX: 8d6874eefd0a9700 RBX: ffff88813fb991a8 RCX: 0000000000080000
[  263.534592][T12733] RDX: ffffc90019222000 RSI: 0000000000052906 RDI: 0000000000052907
[  263.542615][T12733] RBP: 000000000000001f R08: 0001c900015ff27f R09: 0000000000000000
[  263.550616][T12733] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88813fb99168
[  263.558644][T12733] R13: ffff888165138000 R14: ffff888165138000 R15: ffff88813fb991a0
[  263.566675][T12733] FS:  00007f4e488a76c0(0000) GS:ffff8882aee43000(0000) knlGS:0000000000000000
[  263.575783][T12733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  263.582675][T12733] CR2: 000000110c2afb01 CR3: 000000013fb96000 CR4: 00000000003506f0
[  263.590750][T12733] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000002
[  263.591195][T12728] EXT4-fs (loop2): 1 truncate cleaned up
[  263.598879][T12733] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  263.612502][T12733] Call Trace:
[  263.612541][T12728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.615786][T12733]  <TASK>
[  263.615806][T12733]  reg_set_min_max+0x1c1/0x260
[  263.635530][T12733]  check_cond_jmp_op+0x1080/0x16e0
[  263.640669][T12733]  do_check+0x332a/0x7a10
[  263.645198][T12733]  do_check_common+0xc3a/0x12a0
[  263.650091][T12733]  bpf_check+0x942b/0xd9e0
[  263.654571][T12733]  ? __rcu_read_unlock+0x4f/0x70
[  263.659541][T12733]  ? __alloc_frozen_pages_noprof+0x188/0x360
[  263.665735][T12733]  ? alloc_pages_bulk_noprof+0x4b8/0x540
[  263.671454][T12733]  ? __vmap_pages_range_noflush+0xbb3/0xbd0
[  263.677509][T12733]  ? pcpu_block_update+0x377/0x3b0
[  263.682712][T12733]  ? _find_next_zero_bit+0x64/0xa0
[  263.688170][T12733]  ? pcpu_block_update+0x232/0x3b0
[  263.693391][T12733]  ? pcpu_block_refresh_hint+0x157/0x170
[  263.699074][T12733]  ? pcpu_block_update_hint_alloc+0x63d/0x660
[  263.705237][T12733]  ? css_rstat_updated+0xb7/0x240
[  263.710296][T12733]  ? __rcu_read_unlock+0x4f/0x70
[  263.715269][T12733]  ? pcpu_memcg_post_alloc_hook+0xf1/0x150
[  263.721149][T12733]  ? should_fail_ex+0x30/0x280
[  263.725971][T12733]  ? selinux_bpf_prog_load+0x36/0xf0
[  263.731280][T12733]  ? should_failslab+0x8c/0xb0
[  263.736154][T12733]  ? __kmalloc_cache_noprof+0x189/0x320
[  263.741822][T12733]  ? selinux_bpf_prog_load+0xbf/0xf0
[  263.747188][T12733]  ? security_bpf_prog_load+0x2c/0xa0
[  263.752624][T12733]  bpf_prog_load+0xedd/0x1070
[  263.757407][T12733]  ? security_bpf+0x2b/0x90
[  263.762000][T12733]  __sys_bpf+0x462/0x7b0
[  263.766283][T12733]  __x64_sys_bpf+0x41/0x50
[  263.770702][T12733]  x64_sys_call+0x2aea/0x2ff0
[  263.775421][T12733]  do_syscall_64+0xd2/0x200
[  263.780012][T12733]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  263.786137][T12733]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  263.791942][T12733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.797869][T12733] RIP: 0033:0x7f4e49e3ebe9
[  263.802325][T12733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.822059][T12733] RSP: 002b:00007f4e488a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  263.830476][T12733] RAX: ffffffffffffffda RBX: 00007f4e4a065fa0 RCX: 00007f4e49e3ebe9
[  263.838532][T12733] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  263.846552][T12733] RBP: 00007f4e49ec1e19 R08: 0000000000000000 R09: 0000000000000000
[  263.854557][T12733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.862550][T12733] R13: 00007f4e4a066038 R14: 00007f4e4a065fa0 R15: 00007ffc747a6768
[  263.870534][T12733]  </TASK>
[  263.873590][T12733] ---[ end trace 0000000000000000 ]---
[  263.879382][   T29] audit: type=1400 audit(1756066443.466:7911): avc:  denied  { unmount } for  pid=12523 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  263.921403][T12744] FAULT_INJECTION: forcing a failure.
[  263.921403][T12744] name failslab, interval 1, probability 0, space 0, times 0
[  263.934166][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.0.3123 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  263.934203][T12744] Tainted: [W]=WARN
[  263.934212][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  263.934226][T12744] Call Trace:
[  263.934234][T12744]  <TASK>
[  263.934311][T12744]  __dump_stack+0x1d/0x30
[  263.934332][T12744]  dump_stack_lvl+0xe8/0x140
[  263.934350][T12744]  dump_stack+0x15/0x1b
[  263.934378][T12744]  should_fail_ex+0x265/0x280
[  263.934399][T12744]  should_failslab+0x8c/0xb0
[  263.934422][T12744]  kmem_cache_alloc_node_noprof+0x57/0x320
[  263.934449][T12744]  ? __alloc_skb+0x101/0x320
[  263.934467][T12744]  __alloc_skb+0x101/0x320
[  263.934488][T12744]  netlink_alloc_large_skb+0xba/0xf0
[  263.934526][T12744]  netlink_sendmsg+0x3cf/0x6b0
[  263.934610][T12744]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.934632][T12744]  __sock_sendmsg+0x145/0x180
[  263.934676][T12744]  ____sys_sendmsg+0x31e/0x4e0
[  263.934702][T12744]  ___sys_sendmsg+0x17b/0x1d0
[  263.934794][T12744]  __x64_sys_sendmsg+0xd4/0x160
[  263.934832][T12744]  x64_sys_call+0x191e/0x2ff0
[  263.934870][T12744]  do_syscall_64+0xd2/0x200
[  263.934897][T12744]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  263.934932][T12744]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  263.934958][T12744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.934980][T12744] RIP: 0033:0x7f4fe871ebe9
[  263.934995][T12744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.935013][T12744] RSP: 002b:00007f4fe7187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.935031][T12744] RAX: ffffffffffffffda RBX: 00007f4fe8945fa0 RCX: 00007f4fe871ebe9
[  263.935043][T12744] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  263.935055][T12744] RBP: 00007f4fe7187090 R08: 0000000000000000 R09: 0000000000000000
[  263.935067][T12744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.935079][T12744] R13: 00007f4fe8946038 R14: 00007f4fe8945fa0 R15: 00007ffdf62195f8
[  263.935122][T12744]  </TASK>
[  263.945904][T12746] program syz.4.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.009250][   T29] audit: type=1326 audit(1756066443.596:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe871ebe9 code=0x7ffc0000
[  264.184747][   T29] audit: type=1326 audit(1756066443.626:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe871ebe9 code=0x7ffc0000
[  264.208319][   T29] audit: type=1326 audit(1756066443.626:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4fe871ebe9 code=0x7ffc0000
[  264.232039][   T29] audit: type=1326 audit(1756066443.626:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12747 comm="syz.0.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fe871ebe9 code=0x7ffc0000
[  264.259770][T12751] program syz.5.3126 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.262287][T11891] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.280647][T12752] program syz.3.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.315420][T12757] program syz.4.3129 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.335058][  T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.350539][T12765] FAULT_INJECTION: forcing a failure.
[  264.350539][T12765] name failslab, interval 1, probability 0, space 0, times 0
[  264.351990][  T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.363469][T12765] CPU: 0 UID: 0 PID: 12765 Comm: syz.2.3127 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  264.363513][T12765] Tainted: [W]=WARN
[  264.363522][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  264.363539][T12765] Call Trace:
[  264.363548][T12765]  <TASK>
[  264.363624][T12765]  __dump_stack+0x1d/0x30
[  264.363716][T12765]  dump_stack_lvl+0xe8/0x140
[  264.363740][T12765]  dump_stack+0x15/0x1b
[  264.363760][T12765]  should_fail_ex+0x265/0x280
[  264.363786][T12765]  should_failslab+0x8c/0xb0
[  264.363876][T12765]  kmem_cache_alloc_node_noprof+0x57/0x320
[  264.363961][T12765]  ? __alloc_skb+0x101/0x320
[  264.363987][T12765]  __alloc_skb+0x101/0x320
[  264.364012][T12765]  netlink_alloc_large_skb+0xba/0xf0
[  264.364057][T12765]  netlink_sendmsg+0x3cf/0x6b0
[  264.364089][T12765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.364156][T12765]  __sock_sendmsg+0x145/0x180
[  264.364194][T12765]  ____sys_sendmsg+0x31e/0x4e0
[  264.364235][T12765]  ___sys_sendmsg+0x17b/0x1d0
[  264.364290][T12765]  __x64_sys_sendmsg+0xd4/0x160
[  264.364325][T12765]  x64_sys_call+0x191e/0x2ff0
[  264.364407][T12765]  do_syscall_64+0xd2/0x200
[  264.364448][T12765]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  264.364562][T12765]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  264.364587][T12765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.364642][T12765] RIP: 0033:0x7fef3c37ebe9
[  264.364662][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.364686][T12765] RSP: 002b:00007fef3addf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.364709][T12765] RAX: ffffffffffffffda RBX: 00007fef3c5a5fa0 RCX: 00007fef3c37ebe9
[  264.364726][T12765] RDX: 0000000020048004 RSI: 00002000000007c0 RDI: 0000000000000006
[  264.364743][T12765] RBP: 00007fef3addf090 R08: 0000000000000000 R09: 0000000000000000
[  264.364803][T12765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.364820][T12765] R13: 00007fef3c5a6038 R14: 00007fef3c5a5fa0 R15: 00007ffc12e97c78
[  264.364871][T12765]  </TASK>
[  264.421060][T12760] loop5: detected capacity change from 0 to 8192
[  264.432531][  T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.536947][T12760] bio_check_eod: 6077 callbacks suppressed
[  264.536995][T12760] syz.5.3131: attempt to access beyond end of device
[  264.536995][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.571207][T12768] loop0: detected capacity change from 0 to 512
[  264.576399][T12760] buffer_io_error: 6077 callbacks suppressed
[  264.576415][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.641672][T12775] __nla_validate_parse: 12 callbacks suppressed
[  264.641728][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3134'.
[  264.658072][T12760] syz.5.3131: attempt to access beyond end of device
[  264.658072][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.658105][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.667906][T12768] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3132: corrupted in-inode xattr: invalid ea_ino
[  264.668102][T12768] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3132: couldn't read orphan inode 15 (err -117)
[  264.670386][  T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.674027][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674027][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674063][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674265][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674265][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674294][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674337][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674337][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674406][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674440][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674440][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674467][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674528][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674528][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674552][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674578][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674578][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674600][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674686][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674686][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674714][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.674878][T12760] syz.5.3131: attempt to access beyond end of device
[  264.674878][T12760] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  264.674906][T12760] Buffer I/O error on dev loop5, logical block 57847, async page read
[  264.676488][T12768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.245127][T12783] 9pnet_fd: Insufficient options for proto=fd
[  265.255570][T12784] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3132'.
[  265.317649][T12787] loop5: detected capacity change from 0 to 256
[  265.415665][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'.
[  265.444529][T12796] loop5: detected capacity change from 0 to 512
[  265.445133][T12796] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  265.446118][T12796] EXT4-fs (loop5): 1 truncate cleaned up
[  265.446573][T12796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.511102][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.567688][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'.
[  265.602179][T12803] netlink: 32 bytes leftover after parsing attributes in process `+}[@'.
[  265.672297][T12802] program syz.3.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.688069][T12792] lo speed is unknown, defaulting to 1000
[  265.754596][T12807] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  265.822576][T12807] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  265.987750][T12811] loop4: detected capacity change from 0 to 128
[  266.015506][T12811] FAT-fs (loop4): Directory bread(block 32) failed
[  266.023272][T12811] FAT-fs (loop4): Directory bread(block 33) failed
[  266.029849][T12811] FAT-fs (loop4): Directory bread(block 34) failed
[  266.039330][T12813] loop5: detected capacity change from 0 to 512
[  266.051181][T12811] FAT-fs (loop4): Directory bread(block 35) failed
[  266.125968][T12813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.155755][T12813] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.169819][T12811] FAT-fs (loop4): Directory bread(block 36) failed
[  266.192152][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'.
[  266.211275][T12811] FAT-fs (loop4): Directory bread(block 37) failed
[  266.233550][T12142] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.252007][T12811] FAT-fs (loop4): Directory bread(block 38) failed
[  266.266046][T12811] FAT-fs (loop4): Directory bread(block 39) failed
[  266.293684][T12811] FAT-fs (loop4): Directory bread(block 40) failed
[  266.300226][T12811] FAT-fs (loop4): Directory bread(block 41) failed
[  266.362432][T12811] FAT-fs (loop4): Filesystem has been set read-only
[  266.392987][T12827] loop3: detected capacity change from 0 to 512
[  266.416200][T12827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.456274][T12827] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.525899][T12832] loop4: detected capacity change from 0 to 1024
[  266.547578][T12832] EXT4-fs: Ignoring removed orlov option
[  267.194301][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3155'.
[  267.267635][T12847] loop3: detected capacity change from 0 to 512
[  267.287534][T12846] loop5: detected capacity change from 0 to 256
[  267.314257][T12847] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.379785][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3158'.
[  267.625451][T12855] loop5: detected capacity change from 0 to 128
[  267.661014][T12855] FAT-fs (loop5): Directory bread(block 32) failed
[  267.679043][T12855] FAT-fs (loop5): Directory bread(block 33) failed
[  267.692627][T12855] FAT-fs (loop5): Directory bread(block 34) failed
[  267.720545][T12855] FAT-fs (loop5): Directory bread(block 35) failed
[  267.749455][T12855] FAT-fs (loop5): Directory bread(block 36) failed
[  267.776947][T12855] FAT-fs (loop5): Directory bread(block 37) failed
[  267.796353][T12855] FAT-fs (loop5): Directory bread(block 38) failed
[  267.803384][T12859] loop4: detected capacity change from 0 to 2048
[  267.815114][T12855] FAT-fs (loop5): Directory bread(block 39) failed
[  267.833955][T12855] FAT-fs (loop5): Directory bread(block 40) failed
[  267.847079][T12855] FAT-fs (loop5): Directory bread(block 41) failed
[  267.855641][T12859] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.3162: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  267.892519][T12859] EXT4-fs (loop4): Remounting filesystem read-only
[  267.907123][T12855] FAT-fs (loop5): Filesystem has been set read-only
[  268.086887][T12871] loop3: detected capacity change from 0 to 512
[  268.126046][T12871] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  268.187691][T12876] loop0: detected capacity change from 0 to 512
[  268.204515][T12871] EXT4-fs (loop3): 1 truncate cleaned up
[  268.226638][T12876] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.239138][T12881] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  268.257702][T12881] SELinux: failed to load policy
[  268.263462][T12876] __quota_error: 186 callbacks suppressed
[  268.263475][T12876] Quota error (device loop0): do_check_range: Getting block 4128768 out of range 0-5
[  268.351480][T12886] loop2: detected capacity change from 0 to 1024
[  268.458290][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'.
[  268.533718][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3168'.
[  268.582738][T12886] 8021q: adding VLAN 0 to HW filter on device bond1
[  268.839576][T12888] bond1 (unregistering): Released all slaves
[  268.995382][T12894] loop3: detected capacity change from 0 to 8192
[  269.183995][T12864] Set syz1 is full, maxelem 65536 reached
[  269.193096][T12896] netlink: 'syz.5.3170': attribute type 13 has an invalid length.
[  269.207145][T12891] siw: device registration error -23
[  269.221800][T12894]  loop3: p1 p2 p4
[  269.232154][T12894] loop3: p1 size 65536 extends beyond EOD, truncated
[  269.243861][   T29] audit: type=1400 audit(1756066448.836:8100): avc:  denied  { compute_member } for  pid=12899 comm="syz.0.3171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  269.272473][T12894] loop3: p2 start 861536256 is beyond EOD, truncated
[  269.279224][T12894] loop3: p4 size 65536 extends beyond EOD, truncated
[  269.281094][   T29] audit: type=1400 audit(1756066448.866:8101): avc:  denied  { ioctl } for  pid=12899 comm="syz.0.3171" path="socket:[37727]" dev="sockfs" ino=37727 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  269.371055][T12908] loop2: detected capacity change from 0 to 512
[  269.377989][   T29] audit: type=1326 audit(1756066448.956:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.401631][   T29] audit: type=1326 audit(1756066448.956:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.425162][   T29] audit: type=1326 audit(1756066448.956:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.448949][   T29] audit: type=1326 audit(1756066448.956:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.472537][   T29] audit: type=1326 audit(1756066448.956:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.473437][T12906] SELinux:  policydb table sizes (830110067,0) do not match mine (8,7)
[  269.496235][   T29] audit: type=1326 audit(1756066448.956:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.528068][   T29] audit: type=1326 audit(1756066448.956:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.2.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c37ebe9 code=0x7ffc0000
[  269.531000][T12906] SELinux: failed to load policy
[  269.557365][T12896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.573543][T12908] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3175: corrupted in-inode xattr: invalid ea_ino
[  269.574653][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  269.591143][ T7349] udevd[7349]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  269.609108][T12908] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3175: couldn't read orphan inode 15 (err -117)
[  269.629095][T12901] ip6tnl1: entered allmulticast mode
[  269.699404][T12920] loop0: detected capacity change from 0 to 2048
[  269.730938][T12923] 9pnet_fd: Insufficient options for proto=fd
[  269.757646][T12920] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.3178: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  269.802225][T12920] EXT4-fs (loop0): Remounting filesystem read-only
[  269.806097][T12930] SELinux:  Context Ü is not valid (left unmapped).
[  269.839372][T12930] SELinux:  Context GPL is not valid (left unmapped).
[  269.850248][T12937] __nla_validate_parse: 2 callbacks suppressed
[  269.850286][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3184'.
[  269.856964][T12936] loop3: detected capacity change from 0 to 1024
[  269.888868][T12310] ==================================================================
[  269.896992][T12310] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  269.904729][T12310] 
[  269.907083][T12310] read-write to 0xffff888237d26f50 of 8 bytes by task 12936 on cpu 1:
[  269.915410][T12310]  find_get_block_common+0x4f0/0x960
[  269.920706][T12310]  bdev_getblk+0x59/0x3b0
[  269.925048][T12310]  ext4_sb_breadahead_unmovable+0x45/0x180
[  269.930872][T12310]  __ext4_get_inode_loc+0x709/0x930
[  269.936089][T12310]  __ext4_iget+0x2ea/0x2240
[  269.940613][T12310]  ext4_fill_super+0x27cf/0x35d0
[  269.945564][T12310]  get_tree_bdev_flags+0x291/0x300
[  269.950684][T12310]  get_tree_bdev+0x1f/0x30
[  269.955109][T12310]  ext4_get_tree+0x1c/0x30
[  269.959553][T12310]  vfs_get_tree+0x54/0x1d0
[  269.963977][T12310]  do_new_mount+0x207/0x5e0
[  269.968491][T12310]  path_mount+0x4a4/0xb20
[  269.972829][T12310]  __se_sys_mount+0x28f/0x2e0
[  269.977513][T12310]  __x64_sys_mount+0x67/0x80
[  269.982117][T12310]  x64_sys_call+0x2b4d/0x2ff0
[  269.986803][T12310]  do_syscall_64+0xd2/0x200
[  269.991321][T12310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.997220][T12310] 
[  269.999560][T12310] read to 0xffff888237d26f50 of 8 bytes by task 12310 on cpu 0:
[  270.007196][T12310]  has_bh_in_lru+0x35/0x1f0
[  270.011724][T12310]  smp_call_function_many_cond+0x2a9/0xc60
[  270.017545][T12310]  on_each_cpu_cond_mask+0x3c/0x80
[  270.022663][T12310]  invalidate_bh_lrus+0x2a/0x30
[  270.027523][T12310]  blkdev_flush_mapping+0x9a/0x1a0
[  270.032645][T12310]  bdev_release+0x2bf/0x3d0
[  270.037163][T12310]  blkdev_release+0x15/0x20
[  270.041683][T12310]  __fput+0x298/0x650
[  270.045685][T12310]  ____fput+0x1c/0x30
[  270.049697][T12310]  task_work_run+0x131/0x1a0
[  270.054336][T12310]  exit_to_user_mode_loop+0xe4/0x100
[  270.059629][T12310]  do_syscall_64+0x1d6/0x200
[  270.064235][T12310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.070135][T12310] 
[  270.072480][T12310] value changed: 0xffff88811999c548 -> 0xffff88811999c410
[  270.079592][T12310] 
[  270.081919][T12310] Reported by Kernel Concurrency Sanitizer on:
[  270.088083][T12310] CPU: 0 UID: 0 PID: 12310 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  270.099639][T12310] Tainted: [W]=WARN
[  270.103444][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  270.113507][T12310] ==================================================================
[  270.169169][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'.
[  270.182518][T12939] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3175'.
[  270.235945][T12936] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.275031][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'.
[  270.289260][T12936] bond1 (unregistering): Released all slaves
[  278.702358][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!