last executing test programs:

1m43.858350406s ago: executing program 2 (id=37):
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x8000000)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, r3, 0x0, 0x46)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socket$nl_route(0x10, 0x3, 0x0)
r5 = gettid()
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000053040137c4b18115580a4a000500000a14000066"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000)
r6 = socket(0x40000000015, 0x5, 0x0)
recvmmsg(r6, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000300))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

1m42.992489649s ago: executing program 2 (id=47):
timer_create(0x2, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")

1m42.029805213s ago: executing program 2 (id=58):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = getpgrp(0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r6, 0x0, 0x3, 0x1}}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={<r7=>r0, 0xffffffff, 0xfffffffffffffffc, 0x3ff})
syz_clone3(&(0x7f0000000540)={0x12008200, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240), {0x25}, &(0x7f0000000300)=""/43, 0x2b, &(0x7f0000000340), &(0x7f00000004c0)=[r4, 0x0], 0x2, {r7}}, 0x58)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1m41.814644506s ago: executing program 2 (id=60):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x1, 0x7fff0080}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x1, 0x7fff0080}]})
ptrace(0x10, r2)
wait4(0x0, 0x0, 0x80000000, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x3}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}]}}]}, 0x48}}, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
creat(&(0x7f00000000c0)='./file0\x00', 0x20) (async)
r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
dup2(r6, r6) (async)
r7 = dup2(r6, r6)
ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40106614, 0x0)

1m41.655070008s ago: executing program 2 (id=62):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m40.401321446s ago: executing program 2 (id=79):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_setup(0x2278, &(0x7f0000000180)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r8, 0x0, 0x0, 0x5}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10000, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe6, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x5, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x4, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b00)={0x2, 0x8, @start={0x0, 0x0, "d9c72a4268dc54e1fe35b39f9accad5b27f02b40a77f2ccdd9f7e8a38c11382b900c498e6c0cb376503579717cdb2e2c1dcd69e289de353670f6b5a386337fb1566556e40dfefedba3b517104d10566e5c2eece01b6f5176707b47abe4e0bba67ce0bfe9d9d24fc3b7f2eb983cefac1bb98cb1a2c0a9fe55e5a64917bcced16605c56861a402c09de7edf6a2ded7dce26bf6acce64580b0f6649b1f16d25dd5c64dd82dd0af0da3114f1d7a007e6dc16457325d6c06947d98131173d8c0fca3ab91db2894bb1341cb33975c5e546586373690248e97638068e2f67d3e5b30cbe08472339f77bb0674353af0c9d8f184bb2cd96b3e728007476460dd7012f8b8c5d2e9b9b56ce4df8820b70ddae6acc3137c99adc918cea1e784b59feffc8c5c986fdb8d96ac390e5e483432c533069253d832ce8dfe234750641a816ffd2ac1595c3d0bfcc6dd93f6a884a01c5103ac5577f6a79999bce9808a8646aa499e2d1beb184f64b6ccbb69e3493011616afeecbd4d566a5f72cbdc058883997290cd72544441edf88ec6e4f105d4f78f664878b06f0c36a54e3cc8a0346219463848bca39a65d663ec2ee5442a269278f8ef9eba940764e3ce4a570e2d5d049a0aebe84718f70f2d48cec6596cfed3097826ee75a114e0de97327e73611ba6e3fc7c272f5b553998e1137c9a3733ffc1649a43b012237a39edd011502eaa6101d09df4808854de9ff36757b34d89244459bb175aa4245a522ba7b2a1d4b1c216ae0573cf03857e70a51e83a5909c5646b6caec7a5ec509841639c5cb2aba83e5015fd72be74b5bf8a4d3dc469d89bd93054724005328a0a26592ea49ef965e45ad3148d82c1d255ed7dcdcebc47fe3751f50ac2eaf12c75773aa5ad86d720134e423ffa15624273596e7df339c90414c5552aa58f27cdfc15bf5d6404b4e483f7a7baece2ebfdc2692f8681a1149332ebd2e1b9b71ac1ccb8b432699ced874ae2360adaaa9219489e009c985b7a11c0f5bb684a35134f19f1297293aead8cbb01fd883450bbb651ce875b15ddd8ef914a2233b91fc31aaba59d78807b94e165da72ae82bddf2c287dd0f1f2eca2f28ded344f526dde46b630d8b7a6937164a10e8055cf27348ef6d93f6db4a0e2316279ce54c13e3921ce2011df17a12dee78702a75f6ebdee3cc49a8a7f00bbe4938569cc8ca09715cddbfffc484d141daca65bcb1a0dca08958571edb3a147ba8cfb18c0add285f535e400cf51827bb46c7fd1a7b077bc45cef065c1f29f0b32a517d7480c326fd4124a8ce74be9c50c8d7c0dbeaee754ef33ad65529e5af0679f4bebcff3a565c84999101382ee60cb82c14bd90923ead662e986e5367fd9e039df9d001deb0113810745bc0f42094123bcccce1ad8e54f3d8065f7882f0fe25822089898e2414260a349a115e5bfe6d5215d5ed6d", "596e93f2ba23e5bc70f3d35e57c2342e680d2340d4c7bdeb923babb8c0e1ddd01a431d3e4d7681a1fb247c67afe07542786a0126a3c55a51702a3c40497691d2b0df57db838ae02a05c214657718238281aa4abeaadab2cf674135e5d050565a5c13357af85c64851f6517325be32145ab13d249f985319d12b008c8fa157f465eb029464f22ec1fb234abe220f3cc5c9d53a2b9d1d598f17b677ae73e38dbbccb72e693de963729f92b321bef2000591a9404f9c8de14ead4c7d24982fb29b272175ed0f576e4430a211e807b836b23de693e1bda3e1db152e039cb1741f284917ff14ff9bd24a9d790f67170d45c50089763c47d37d4811d2adb766c7922d78f3abb1bb372ef315925f68fa4872149e20ea1fd8ea8aa2f9ea7fdae09eadb7ccc68a9bb9c4fd97de14ea4f6eed330f7c244b5b0ecfb033da3f9acb1b86b97c710ffc516037cb4eb9b935df65f0d913d784d58d856186c46047871962356444cff519b3cab4dcd3fbc9b918752ae960d8b34cbdb0e6ac005939fbbe65a9072171fea8086e9dbb69316e004c90733374e666f9040e77d11658fdca9a1cdffd698a646fa92c4901ed047182f45f0af95b97ccb366a651f70018eb6dcd3f78faa59b0396f3e0e4486e39b60d1af71e14f88f27e0c77f8b0bdac40259d26fb3fe05a293b88680c8d696e2ec760fcf11482172c60f3b0eb4986fc6ab27ae4e7bfc896265dc1497383b0c93fd92a15ccc8fdbc689172ea01bf2b1c4617b689ce52ee50e2516108fb2cab48296fa9dc5e1a22ecf128299ddb31611449ad2f518442c708fd21bd38a1ea21865d2c823ad6cd91a1fbaa10247202ea07017180ca56dc37eaac0c3f13fb3cd4dc39d8d6c9595784ad5922926f046938607b68535269307fb150a87318528f0cbc2910076ac7d0d2ea812011244b442d27be52214d409906e72ebe4a13cbc8a71628a44120baf1815743f005a46d766085127dfdff95470af1ccb1452ec6c9a59067a6e838b718d5556c838268c43fe19994a429ccc5f128ad381bc55c99e4cf70e0ec07bd19c79c7daecbf45a3da47ee5d5a9ae9f34cdd14e8912f3d24722737f279dce6a05e718e22a2b578a28876e84911123ac11f67b6fd3c7626761e602363e6597310d3975ccb9206c3c4718defe29623bc01d519eb46be377225b00da39a4401ea026e193cfa061e63a6f766c3eb038a2efb3f8a421dbb6c6c3976234442cf801255277251af84d0acebba66b73843786dfb334d3511602dd2ebedde619ae1f5e42269a2741f505595f1455ccafb5d5c1c0d65e97e2ea473715a10030c9bb1c48815bd2d77f358696a02b370eac8f993b6577ff3d81a9de2db0f13ab61d21a4054fae2b549526988d549987ce3830228c43c82a30f540ed0a6c447bd2f779986e3100fc3f8f1cc85cacd9ab4a5f4c8a8dd5bdef6042c3"}, [0x81, 0xd7a5, 0x2, 0x200000000005, 0x8, 0x7, 0x8, 0x41, 0x3, 0xdb3, 0x1, 0xfffffffffffffff7, 0x200, 0x8, 0x3, 0x1, 0x9, 0xb, 0x5, 0x2, 0x7, 0x7fff, 0x8, 0x80000000, 0x800, 0x0, 0x100, 0x1, 0x2, 0x80000001, 0x7fffffff, 0x1, 0xe, 0x7, 0xffff, 0x9, 0x9, 0x8, 0x6, 0x7, 0x4, 0x200, 0x8, 0x5, 0x10, 0x9, 0x2, 0x5, 0x1, 0x1000000, 0x42b898c2, 0x847, 0x32c7, 0x7fffffff, 0x4, 0x5, 0xfffffffffffffffd, 0x4, 0x5, 0x5a6, 0x1000, 0xfff, 0x7, 0x2253]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0)
flistxattr(r11, &(0x7f0000000200)=""/5, 0x5)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000380)={'geneve1\x00', @local})

1m40.317225767s ago: executing program 32 (id=79):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_setup(0x2278, &(0x7f0000000180)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5, r8, 0x0, 0x0, 0x5}])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={0x0, 0x9, 0x0, [0x10000, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe6, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x5, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x4, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000b00)={0x2, 0x8, @start={0x0, 0x0, "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", "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"}, [0x81, 0xd7a5, 0x2, 0x200000000005, 0x8, 0x7, 0x8, 0x41, 0x3, 0xdb3, 0x1, 0xfffffffffffffff7, 0x200, 0x8, 0x3, 0x1, 0x9, 0xb, 0x5, 0x2, 0x7, 0x7fff, 0x8, 0x80000000, 0x800, 0x0, 0x100, 0x1, 0x2, 0x80000001, 0x7fffffff, 0x1, 0xe, 0x7, 0xffff, 0x9, 0x9, 0x8, 0x6, 0x7, 0x4, 0x200, 0x8, 0x5, 0x10, 0x9, 0x2, 0x5, 0x1, 0x1000000, 0x42b898c2, 0x847, 0x32c7, 0x7fffffff, 0x4, 0x5, 0xfffffffffffffffd, 0x4, 0x5, 0x5a6, 0x1000, 0xfff, 0x7, 0x2253]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040, 0x0)
flistxattr(r11, &(0x7f0000000200)=""/5, 0x5)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000380)={'geneve1\x00', @local})

1m26.543174107s ago: executing program 1 (id=237):
r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

1m26.542816477s ago: executing program 1 (id=238):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
syz_io_uring_setup(0x964, &(0x7f0000000000)={0x0, 0x9f3c, 0x800, 0x1, 0x39}, &(0x7f0000000100), &(0x7f00000001c0)=<r0=>0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000002c0)=""/17, &(0x7f0000000300)=0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x3, r2}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
fstatfs(0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000f05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, &(0x7f00000013c0)}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000080)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1)

1m26.511576538s ago: executing program 1 (id=239):
mkdir(&(0x7f0000000540)='./control\x00', 0x60)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) (fail_nth: 4)

1m26.252676721s ago: executing program 1 (id=240):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x98, r0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff914}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2908}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbaf4}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd75d}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4051)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140))
socket$nl_audit(0x10, 0x3, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = epoll_create(0x3ff)
r3 = epoll_create1(0x80000)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x9, 0x0, 0x4, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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")
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r6 = getpid()
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="080008000700000000031400000045f0003afffe0000002f9078ac1414bbffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800004adcda08f6e8272aa00e133f88a8349f246e"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xff7d, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010002000000000000000200000a14000000090a010400000000000000000000fffe0000034000000080140000001000010000000000000000000700000a276de154ded50be1931cdc2018f0c907adace96c2c7806704ff2fbd3f801dc687d9345b2e00cf1cb448e0ba73a8051c3c472673746bfc39fadb2d569decbd5f233698347ba105e916fd4ecb5440889baaf4f285299e617695a26992e429be3"], 0x3c}}, 0x800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='workqueue_activate_work\x00', r9, 0x0, 0x400000000}, 0x18)

1m26.074504754s ago: executing program 1 (id=242):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0xc2, 0x0)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)

1m25.788161648s ago: executing program 1 (id=248):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")

1m25.744431399s ago: executing program 33 (id=248):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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")

2.490610165s ago: executing program 6 (id=1643):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vlan0\x00', <r0=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x80)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x25, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3)
time(&(0x7f0000000040))
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0xfffe, 0x5, 0xcc, 0x2}, {0x1, 0x0, 0x6, 0x1}, {0x6, 0x4, 0x0, 0x80}, {0x1, 0xde, 0x2, 0x8}]}, 0x10)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0xfb, 0x0, 0x8001, 0x3114, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x8, 0x1, 0x1, 0x8, 0x20005, 0x12b, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
migrate_pages(0x0, 0x4, 0x0, 0x0)
gettid()
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x10d00, 0x0)

2.417359036s ago: executing program 4 (id=1645):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vlan0\x00', <r0=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x80)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x25, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x23)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3)
time(&(0x7f0000000040))
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0xfffe, 0x5, 0xcc, 0x2}, {0x1, 0x0, 0x6, 0x1}, {0x6, 0x4, 0x0, 0x80}, {0x1, 0xde, 0x2, 0x8}]}, 0x10)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0xfb, 0x0, 0x8001, 0x3114, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x8, 0x1, 0x1, 0x8, 0x20005, 0x12b, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
migrate_pages(0x0, 0x4, 0x0, 0x0)
gettid()
r6 = fcntl$dupfd(r5, 0x406, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
splice(r7, 0x0, r8, 0x0, 0x10d00, 0x0)

2.017742392s ago: executing program 3 (id=1651):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x28}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2)
write$binfmt_script(r8, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
kexec_load(0x4, 0xa, 0x0, 0x0)

1.917828713s ago: executing program 3 (id=1654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}})
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000300)={0x3, 0xc, 0xfffffff9, 0x4, 0xa})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0xc, @void}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
socket(0x11, 0x80a, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.802036995s ago: executing program 5 (id=1655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000172, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat(0xffffffffffffff9c, 0x0, 0x200000, 0x91)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15)
r7 = dup(r6)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r10], 0x20}}, 0x0)
write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
creat(&(0x7f0000000040)='./file0\x00', 0x0)

1.747112345s ago: executing program 0 (id=1656):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000006df8484f97e50efd782900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000005454d42a00f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r3, 0x26, 0x0)
syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwjAYBeBXa2h7cwTX8NSbGziZW3hwQEEiobW4gIjwfZeXP7wQ/vBTY6YW+4+r6zO7JENKUkrr3E+Zk/RrYZ6S2iddG47l/e68xDZn6PPoluMhZftjXLPWXG7f3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sUrAAD//zeOCM0=")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r3)
r9 = socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32], 0x3c}}, 0x4000010)
sendmmsg$inet(r9, &(0x7f00000017c0), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.733998336s ago: executing program 3 (id=1657):
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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")
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r3, 0x0, 0x80001}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r5=>0x0})
r6 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={<r7=>0x0, 0x0, <r8=>0x0}, &(0x7f0000000140)=0xc)
chown(&(0x7f0000000040)='./file0\x00', 0x0, r8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000c80)={<r9=>0x0, <r10=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1, {<r11=>0xee00, <r12=>0x0}}, './file0\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, <r13=>0x0, <r14=>0x0}, 0x4000)
r15 = syz_clone3(&(0x7f0000000fc0)={0x60001000, &(0x7f0000000e00), &(0x7f0000000e40)=<r16=>0x0, &(0x7f0000000e80)=<r17=>0x0, {0x19}, &(0x7f0000000ec0)=""/79, 0x4f, &(0x7f0000000f40)=""/8, &(0x7f0000000f80)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@private0}, 0x0, @in=@dev}}, &(0x7f0000001040)=0xe8)
r19 = socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000001400)=ANY=[@ANYRESOCT=r19, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r3, @ANYRESOCT=r16, @ANYRESOCT=r3, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r10, @ANYBLOB="000000000002000000", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r11, @ANYRESHEX, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES16=r7, @ANYBLOB="53344eb9", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x4004000}}, {{&(0x7f0000000400)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000880)="5a9bc676f25d3b1a1bcd861984c451a957b5a54ee914e13323b19680c70bcf990a778091cc54fed238176f0142c6a1bae3bb58e989a042161e1ebf015511544f2afa47acffa0811c3f1614ffb6eb8af9334afb77cba24c207cf0eae6d1296718f2f6ce25c741afb8b630918d4b41e6eca86e9aefe9a11d50989073e41cb52473adcc92ac292ed548f6038b40dd75c1909ab36e283dc328e89f09fdc529d408efe231c08732ca5fab3cfefd6d0e9cb691eaeb", 0xb2}, {&(0x7f0000000940)="09a5468fd142e6dd7d0b1e2a537d1ed8c392e36656ec08e209ff5d28f3dd39066e4ed8b9945db521e10a2d1f1de673202cca265687e41c7c23c2342c6c4fa5af86f9018023441701a3e713be5186a5074c6aeb9277153085e9b6215f9e99baa2ad6691d29eedc96c239acd5b68ecaadb4f5b7847638395fef23e8e236447318bd761f09f2ab8f697f18cea135d202804251c", 0x92}], 0x2, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r15, r13, r14}}}], 0x38, 0x81}}], 0x2, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRESHEX=r13, @ANYRES64=0x0, @ANYRES16=r2], 0x20000600}, 0x1, 0x0, 0x0, 0x400d1}, 0x40000)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

1.578079288s ago: executing program 6 (id=1658):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="33000000000000cfa5abc4477ac174ee36000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x33, 0x0, 0x401, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0]}, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='cq_schedule\x00', r7, 0x0, 0x3ff}, 0x3b)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000ddffffffffffffff18110000", @ANYBLOB="18140913593c37d736f96e749e9112e23aa76337af5911a48f65e645b6907a670aa4cf107240debe593b5361580f24c44756ebc40dd8b84856891b5f1bbf629dfa12816a5433e7fa57daf61c193cc433efd449fb24bf2e5fba393b826eb2a72cc616ff064c3b2c11eaeacf3b11f043303d82d7a017bd33b0f30539260b", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48)
sendto$packet(r1, &(0x7f00000012c0)="6f63f7f720cb08669a386ca02aec2444a77d058f6cce5c8220fb04bb481c88de2c3b168a30b968e3bdd201991c9eb6d634b00e19286aa61f1bbd59d1bfb1ad55a7e6cf1d97ab55a851a24e7c679fe679e6f5fefbd9224a9ee50b3dc2ba44cbe623170980feae5739a5e438080428c367c965db03a9a24215aeb015171a9fe1aa12cb286192146ac04d2a2b1037ccf9701830a8c48e975a887bacdb547b807da70472f4f7cbeac655caab4c7e62456a93ba414395d87faebacb3e", 0xba, 0x4000, &(0x7f0000000580)={0x11, 0x3, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18)
unshare(0x26000400)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

1.573215828s ago: executing program 5 (id=1659):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7fff}, &(0x7f0000000000)=0x100000000, 0x0, 0x80000000, 0x3, 0x8001, 0x9, 0x4c, 0x100000001}}], 0x58}, 0x200000000000000) (fail_nth: 3)

1.537637608s ago: executing program 4 (id=1660):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)={0x114, 0x30, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x8, 0x28, 0x0, 0x0, @fd}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.176500564s ago: executing program 5 (id=1661):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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")
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.160004544s ago: executing program 4 (id=1662):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
umount2(&(0x7f0000000580)='./file0\x00', 0x3)

1.114370525s ago: executing program 4 (id=1663):
timer_create(0x2, 0x0, 0x0)
timer_create(0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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")

1.007131756s ago: executing program 3 (id=1664):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x28}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2)
write$binfmt_script(r8, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
kexec_load(0x4, 0xa, 0x0, 0x0)

971.849907ms ago: executing program 0 (id=1665):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}})

949.784917ms ago: executing program 3 (id=1666):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0x9, 0x5, 0x9}, 0x10) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000800240002"], 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x4)
msgctl$IPC_RMID(0x0, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
ioprio_get$pid(0x3, 0xffffffffffffffff) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
gettid() (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r4, 0x0, 0x6}, 0x18)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000100)={'veth1\x00', 0x400})

799.308929ms ago: executing program 0 (id=1667):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, r2}}, 0x48)

695.079101ms ago: executing program 3 (id=1668):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x4}, 0x20000}}, {{0xa, 0x4e22, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x200}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={<r3=>0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xd, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r3, @ANYBLOB="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"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000006c0)=@gcm_128={{0x304}, "9ebff600f053cee9", "235960d65e43a814259b64c30fa540a9", "8500", "9040027a1b17374c"}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r4, r5, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="465d6b632d8785101a3eb064e22df8974a46b76a426f83c0ac330cb6ee2c091a90b3df0f70992c8487595223cb44c87abaa52a1bbe23d6116735ad79f93432d36e78bb651c825c6dc42f7f9275ad699251dcd61a964fa917a8cb4db2e6c613457a3270ed8204331a06fcec7d8aa52f309881f919d3552550bb55827ec7c73b34aa51ea3576dbbfce27b6d98a5361bd4e10ee599085deff3f4348ec21923a695e3142a0798aa75e057985ef659db44cc14f61e5e2a942a8610190d494853c8aeb227aed6b110de5f7979eb57e868415c036a01574ba78589c6cc7bed26fa5b4d1be6933f8b7011c2a5447cf28a28265d5e1e07bff73e6c7656425e38058d94afe0c004fee97827dbdc4f92b5b33f1814eb136a5f7e89cb334500de08b28332f6edc82b1f424dc5385628911a7281d4d822af5ab0b67bb5cf8", 0x138}, {0x0}], 0x2, &(0x7f0000000180)=ANY=[], 0x20, 0x2400e044}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x3, 0x0, 0xb, 0x6, 0xff, 0x3, 0x5, r7}, &(0x7f0000000380)=0x20)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r7, 0x8}, &(0x7f0000000080)=0x8)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0xffa8)
getsockopt$MRT(r9, 0x0, 0xcf, &(0x7f00000003c0), &(0x7f0000000440)=0x4)

694.550681ms ago: executing program 0 (id=1669):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
pipe2(&(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

685.894311ms ago: executing program 0 (id=1670):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000070000000000000000000018", @ANYRES32=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000d1d153abfa6fe3340e4d41d2f04a94e0b831a2"])
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50000004)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000240)='%pS    \x00'}, 0x20)
close_range(r1, 0xffffffffffffffff, 0x0)

644.296912ms ago: executing program 5 (id=1671):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

587.154742ms ago: executing program 6 (id=1672):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x18)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

582.586042ms ago: executing program 0 (id=1673):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = getpgrp(0x0)
r5 = syz_clone(0x24000, &(0x7f0000000380)="8db64b2a9f66a8", 0x7, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="221130fa01b8d0f344dd0875d62facd3583960f73ee546a4ed279e79cc7700f32c8fc8d1fbf14f3ab4d1274005f7b61f2ac5f73403503d36c08f32ac1d6d22929fd1")
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r7, 0x0, 0x3, 0x1}}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000500)={<r8=>r0, 0xffffffff, 0xfffffffffffffffc, 0x3ff})
syz_clone3(&(0x7f0000000540)={0x12008200, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240), {0x25}, &(0x7f0000000300)=""/43, 0x2b, &(0x7f0000000340), &(0x7f00000004c0)=[r4, r5], 0x2, {r8}}, 0x58)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

560.854712ms ago: executing program 6 (id=1674):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = gettid()
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x80, 0x1, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
recvmmsg(r3, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x20000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', <r5=>0x0, 0x29, 0x4, 0x61, 0x6, 0x4, @remote, @loopback, 0x20, 0x700, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r6=>0x0, 0x29, 0x4, 0x6, 0x3, 0x54, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x10, 0x52b, 0x9}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@private1, <r7=>0x0}, &(0x7f0000000600)=0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='\b\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf251900000060000180080003000000000008000100", @ANYRES32=r5, @ANYBLOB="14000200697036746e6c30000000000000000000140002006970366772653000000000000000000008000300020000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r6, @ANYBLOB="1800018014000200736974300000000000000000000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000140002006d6163766c616e310000000000000000140002007665746830000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x4c085}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = gettid()
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r12}, 0x10)
sendmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000140000000000", @ANYRES32=r8, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r13}, 0x10)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$tipc(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0)
recvmsg(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd)

506.928893ms ago: executing program 5 (id=1675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000006df8484f97e50efd782900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000005454d42a00f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r3, 0x26, 0x0)
syz_read_part_table(0x104c, &(0x7f0000000000)="$eJzsz8EJwjAYBeBXa2h7cwTX8NSbGziZW3hwQEEiobW4gIjwfZeXP7wQ/vBTY6YW+4+r6zO7JENKUkrr3E+Zk/RrYZ6S2iddG47l/e68xDZn6PPoluMhZftjXLPWXG7f3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sUrAAD//zeOCM0=")
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r3)
r9 = socket$inet6(0xa, 0x2, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32], 0x3c}}, 0x4000010)
sendmmsg$inet(r9, &(0x7f00000017c0), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

394.703925ms ago: executing program 6 (id=1676):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='tlb_flush\x00'}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa000000a})
finit_module(0xffffffffffffffff, 0x0, 0x7)
r2 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r2, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x29, 0x8, {0x0, @empty, @multicast2}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000300)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
timer_delete(r3)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

324.275286ms ago: executing program 4 (id=1677):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

118.812939ms ago: executing program 5 (id=1678):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100052, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001d700)=ANY=[@ANYBLOB="340000001800010000c30000fedbdf250200000000000000000001001500010000000001"], 0x34}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r2, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"], 0x2, 0x2ba, &(0x7f0000000240)="$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")
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r6, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xf}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x1, 0x20, 0x1, {0x0, r10}})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0xa, 0x0, r10)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

91.305079ms ago: executing program 4 (id=1679):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f00001500000000000000"], 0xa8}}, 0x40080)

0s ago: executing program 6 (id=1680):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="5802009400140091d491323b478925458db45602117fffefd7ff81000e226c1add024bf752e31ad096339c5e74a48d52a4", 0x31}], 0x1)
signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0)
pidfd_send_signal(r2, 0x3e, &(0x7f0000000240)={0x8, 0x10000, 0x8}, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64])
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x80080, 0x23)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x200022, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000002700)="$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")
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r6, 0x0, 0x0, 0x1001f0)
fallocate(r6, 0x3, 0x9, 0x10000)
copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0xb51, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000640)=""/4132, &(0x7f0000000140)=0x1024)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000340)="2608c64131eeffebacc39f2f675d43ae9d8eb7de2a6de792ebb3a1cbeb85f5433009edb618225760392bca4109e1de5fc2d4b698db4625e37a41add2c1011bb90958c1ed47464f4f60e54e26ee434181f04e5f4e1eb27a3c2667b944c392ab6b7caff3324a1e750ea927bbd3a37ff0102f4f7564aed31541ff9ce0bcc9e29902635cb01334124265b7ac6e462eac9288378483e02153d9f4fc8c9c1ead44129051cd61b19f03574f39a65bf93a18b8924567306ee5bd30c1eae5feb31c35e93a247b701e1c437df234791c7de834", &(0x7f0000000580)=""/80, &(0x7f0000001680)="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", &(0x7f0000002680)="8f8b7917e042c3580787e922f8d71aec3f8c704545e5fe894155b15fed147c71ce1ae6674ddd565a276ee9784d92dd90ec29dfe28fef32585bcb65f2f29305c2db8b6a2fe6f798ece60759ee4d", 0x8606, r5, 0x4}, 0x38)

kernel console output (not intermixed with test programs):

538
[  113.701230][ T7098]  </TASK>
[  113.721464][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1139'.
[  113.757795][ T7060] EXT4-fs (loop5): 1 orphan inode deleted
[  113.880122][ T7094] loop3: detected capacity change from 0 to 8192
[  113.998830][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'.
[  114.055612][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'.
[  114.068306][ T7060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.119808][ T7109] SELinux: failed to load policy
[  114.134292][ T3762]  loop3: p1 < > p2 < p5 > p3 p4
[  114.146758][ T3762] loop3: p3 start 83890176 is beyond EOD, truncated
[  114.153521][ T3762] loop3: p4 size 16776960 extends beyond EOD, truncated
[  114.176830][ T7060] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.200087][ T3762] loop3: p5 size 16776960 extends beyond EOD, truncated
[  114.249570][ T7094]  loop3: p1 < > p2 < p5 > p3 p4
[  114.286749][ T7094] loop3: p3 start 83890176 is beyond EOD, truncated
[  114.293435][ T7094] loop3: p4 size 16776960 extends beyond EOD, truncated
[  114.338402][ T7114] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  114.349342][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1146'.
[  114.364083][ T7094] loop3: p5 size 16776960 extends beyond EOD, truncated
[  114.413518][ T7114] SELinux: failed to load policy
[  114.556082][ T7123] loop5: detected capacity change from 0 to 512
[  114.563325][ T7125] FAULT_INJECTION: forcing a failure.
[  114.563325][ T7125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.576658][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.6.1151 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  114.576695][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  114.576711][ T7125] Call Trace:
[  114.576720][ T7125]  <TASK>
[  114.576729][ T7125]  __dump_stack+0x1d/0x30
[  114.576822][ T7125]  dump_stack_lvl+0xe8/0x140
[  114.576847][ T7125]  dump_stack+0x15/0x1b
[  114.576863][ T7125]  should_fail_ex+0x265/0x280
[  114.576991][ T7125]  should_fail+0xb/0x20
[  114.577027][ T7125]  should_fail_usercopy+0x1a/0x20
[  114.577078][ T7125]  _copy_to_user+0x20/0xa0
[  114.577118][ T7125]  simple_read_from_buffer+0xb5/0x130
[  114.577152][ T7125]  proc_fail_nth_read+0x100/0x140
[  114.577172][ T7125]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  114.577269][ T7125]  vfs_read+0x1a0/0x6f0
[  114.577305][ T7125]  ? __rcu_read_unlock+0x4f/0x70
[  114.577326][ T7125]  ? __fget_files+0x184/0x1c0
[  114.577348][ T7125]  ksys_read+0xda/0x1a0
[  114.577441][ T7125]  __x64_sys_read+0x40/0x50
[  114.577535][ T7125]  x64_sys_call+0x2d77/0x2fb0
[  114.577564][ T7125]  do_syscall_64+0xd2/0x200
[  114.577586][ T7125]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  114.577621][ T7125]  ? clear_bhb_loop+0x40/0x90
[  114.577682][ T7125]  ? clear_bhb_loop+0x40/0x90
[  114.577754][ T7125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.577775][ T7125] RIP: 0033:0x7f667337d33c
[  114.577790][ T7125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  114.577816][ T7125] RSP: 002b:00007f66719e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  114.577888][ T7125] RAX: ffffffffffffffda RBX: 00007f66735a5fa0 RCX: 00007f667337d33c
[  114.577904][ T7125] RDX: 000000000000000f RSI: 00007f66719e70a0 RDI: 0000000000000004
[  114.577921][ T7125] RBP: 00007f66719e7090 R08: 0000000000000000 R09: 0000000000000000
[  114.577937][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.577953][ T7125] R13: 0000000000000000 R14: 00007f66735a5fa0 R15: 00007fffd33bcfa8
[  114.577972][ T7125]  </TASK>
[  114.895125][ T7123] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  114.903333][ T7123] EXT4-fs (loop5): orphan cleanup on readonly fs
[  114.923925][ T7123] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  115.103500][ T3393] usb 9-1: enqueue for inactive port 0
[  115.123953][ T3393] usb 9-1: enqueue for inactive port 0
[  115.133951][ T7123] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  115.158594][ T7123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1150: bg 0: block 40: padding at end of block bitmap is not set
[  115.194003][ T7123] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  115.203319][ T7123] EXT4-fs (loop5): 1 truncate cleaned up
[  115.209520][ T7123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.223099][ T3393] vhci_hcd: vhci_device speed not set
[  115.278387][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.410928][ T7150] loop5: detected capacity change from 0 to 512
[  115.435081][ T7150] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  115.489070][ T7165] loop4: detected capacity change from 0 to 512
[  115.549469][ T7150] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6
[  115.554185][ T7168] SELinux: failed to load policy
[  115.567131][ T7171] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  115.585265][ T7165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.603215][ T7171] SELinux: failed to load policy
[  115.633827][ T7165] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  115.704507][ T7160] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1163: corrupted inode contents
[  115.705961][ T7160] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1163: mark_inode_dirty error
[  115.717922][ T7181] loop0: detected capacity change from 0 to 512
[  115.744303][ T7160] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1163: corrupted inode contents
[  115.758086][ T7160] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1163: corrupted inode contents
[  115.758305][ T7160] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1163: mark_inode_dirty error
[  115.760119][ T7160] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1163: corrupted inode contents
[  115.768525][ T7160] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1163: mark_inode_dirty error
[  115.848155][ T7181] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  115.871279][ T7160] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1163: corrupted inode contents
[  115.871446][ T7160] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1163: mark_inode_dirty error
[  115.888661][ T7181] EXT4-fs (loop0): orphan cleanup on readonly fs
[  115.895051][ T7181] __quota_error: 107 callbacks suppressed
[  115.895072][ T7181] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  115.895195][ T7181] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  115.897862][ T7181] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  115.898320][ T7181] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1169: bg 0: block 40: padding at end of block bitmap is not set
[  115.898988][ T7181] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  115.900308][ T7181] EXT4-fs (loop0): 1 truncate cleaned up
[  115.900726][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.952552][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.994016][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.125678][ T7183] loop3: detected capacity change from 0 to 1024
[  116.155948][ T7183] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  116.211409][ T7198] FAULT_INJECTION: forcing a failure.
[  116.211409][ T7198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.224571][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.0.1174 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  116.224601][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  116.224613][ T7198] Call Trace:
[  116.224620][ T7198]  <TASK>
[  116.224628][ T7198]  __dump_stack+0x1d/0x30
[  116.224652][ T7198]  dump_stack_lvl+0xe8/0x140
[  116.224671][ T7198]  dump_stack+0x15/0x1b
[  116.224686][ T7198]  should_fail_ex+0x265/0x280
[  116.224782][ T7198]  should_fail+0xb/0x20
[  116.224809][ T7198]  should_fail_usercopy+0x1a/0x20
[  116.224906][ T7198]  _copy_from_user+0x1c/0xb0
[  116.224931][ T7198]  proc_do_submiturb+0x1b44/0x1d00
[  116.224959][ T7198]  proc_submiturb+0x7b/0xa0
[  116.224997][ T7198]  usbdev_ioctl+0xcc2/0x1710
[  116.225112][ T7198]  ? __pfx_usbdev_ioctl+0x10/0x10
[  116.225182][ T7198]  __se_sys_ioctl+0xce/0x140
[  116.225211][ T7198]  __x64_sys_ioctl+0x43/0x50
[  116.225237][ T7198]  x64_sys_call+0x19a8/0x2fb0
[  116.225259][ T7198]  do_syscall_64+0xd2/0x200
[  116.225277][ T7198]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  116.225345][ T7198]  ? clear_bhb_loop+0x40/0x90
[  116.225367][ T7198]  ? clear_bhb_loop+0x40/0x90
[  116.225465][ T7198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.225491][ T7198] RIP: 0033:0x7f1ac7dfe929
[  116.225509][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.225527][ T7198] RSP: 002b:00007f1ac6467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.225545][ T7198] RAX: ffffffffffffffda RBX: 00007f1ac8025fa0 RCX: 00007f1ac7dfe929
[  116.225593][ T7198] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000006
[  116.225605][ T7198] RBP: 00007f1ac6467090 R08: 0000000000000000 R09: 0000000000000000
[  116.225618][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.225630][ T7198] R13: 0000000000000000 R14: 00007f1ac8025fa0 R15: 00007fff9b1f0f58
[  116.225679][ T7198]  </TASK>
[  116.431922][ T7183] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.1170: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.455531][ T7183] Quota error (device loop3): write_blk: dquota write failed
[  116.464501][ T7183] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  116.475913][ T7183] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1170: Failed to acquire dquot type 0
[  116.502441][ T7183] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1170: Freeing blocks not in datazone - block = 0, count = 4096
[  116.530211][ T7183] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1170: Invalid inode bitmap blk 0 in block_group 0
[  116.548333][ T4408] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[  116.563509][ T7183] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  116.580386][ T7183] EXT4-fs (loop3): 1 orphan inode deleted
[  116.589348][ T4408] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  116.597919][ T4408] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0
[  116.627650][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.667948][ T7183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.682081][ T7207] loop5: detected capacity change from 0 to 8192
[  116.724867][ T3762]  loop5: p1 < > p2 < p5 > p3 p4
[  116.738848][ T3762] loop5: p3 start 83890176 is beyond EOD, truncated
[  116.745682][ T3762] loop5: p4 size 16776960 extends beyond EOD, truncated
[  116.763992][ T3762] loop5: p5 size 16776960 extends beyond EOD, truncated
[  116.775938][ T7216] loop3: detected capacity change from 0 to 512
[  116.792131][ T7207]  loop5: p1 < > p2 < p5 > p3 p4
[  116.804935][ T7207] loop5: p3 start 83890176 is beyond EOD, truncated
[  116.811605][ T7207] loop5: p4 size 16776960 extends beyond EOD, truncated
[  116.821466][ T7216] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  116.829770][ T7207] loop5: p5 size 16776960 extends beyond EOD, truncated
[  116.832664][ T7216] EXT4-fs (loop3): orphan cleanup on readonly fs
[  116.849309][ T7216] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  116.860605][ T7216] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  116.876141][ T7216] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  116.886375][ T7216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1181: bg 0: block 40: padding at end of block bitmap is not set
[  116.901138][ T7216] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  116.911979][ T7216] EXT4-fs (loop3): 1 truncate cleaned up
[  116.930230][ T7216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.034546][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  117.035100][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  117.047605][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  117.055246][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  117.074268][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.119628][   T29] audit: type=1400 audit(1750443981.048:3785): avc:  denied  { read } for  pid=7222 comm="syz.5.1182" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  117.153371][   T29] audit: type=1400 audit(1750443981.048:3786): avc:  denied  { open } for  pid=7222 comm="syz.5.1182" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  117.177292][   T29] audit: type=1400 audit(1750443981.048:3787): avc:  denied  { ioctl } for  pid=7222 comm="syz.5.1182" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  117.203482][ T7231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  117.210039][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  117.217776][ T7231] vhci_hcd vhci_hcd.0: Device attached
[  117.270231][ T7236] netlink: 'syz.5.1182': attribute type 10 has an invalid length.
[  117.278472][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.285757][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.305981][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.313112][ T7236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.320544][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.327679][ T7236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.349833][ T7236] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  117.366116][ T7231] SELinux: failed to load policy
[  117.372241][ T7233] vhci_hcd: connection closed
[  117.372451][ T4408] vhci_hcd: stop threads
[  117.381992][ T4408] vhci_hcd: release socket
[  117.386481][ T4408] vhci_hcd: disconnect device
[  117.403772][    T9] vhci_hcd: vhci_device speed not set
[  117.453371][ T7246] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  117.470893][ T7246] SELinux: failed to load policy
[  117.493204][ T7244] loop6: detected capacity change from 0 to 1024
[  117.515670][ T7244] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  117.545655][ T7244] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.1188: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.560642][ T7252] __nla_validate_parse: 6 callbacks suppressed
[  117.560658][ T7252] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1193'.
[  117.561032][ T7244] Quota error (device loop6): write_blk: dquota write failed
[  117.583851][ T7244] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  117.588114][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'.
[  117.594078][ T7244] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1188: Failed to acquire dquot type 0
[  117.623915][ T7244] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1188: Freeing blocks not in datazone - block = 0, count = 4096
[  117.637687][ T7244] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1188: Invalid inode bitmap blk 0 in block_group 0
[  117.639374][ T7257] loop0: detected capacity change from 0 to 512
[  117.657399][ T4417] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.678943][ T7244] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  117.692095][ T7244] EXT4-fs (loop6): 1 orphan inode deleted
[  117.694685][ T4417] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0
[  117.698485][ T7244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.761815][ T7259] loop5: detected capacity change from 0 to 2048
[  117.778395][ T4529] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.790382][ T7262] loop3: detected capacity change from 0 to 256
[  117.798166][ T7257] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  117.806823][ T7257] EXT4-fs (loop0): orphan cleanup on readonly fs
[  117.818838][ T3762] Alternate GPT is invalid, using primary GPT.
[  117.825262][ T3762]  loop5: p1 p2 p3
[  117.833847][ T7262] FAT-fs (loop3): Directory bread(block 1285) failed
[  117.846380][ T7257] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  117.872137][ T7262] FAT-fs (loop3): Directory bread(block 1285) failed
[  117.910611][ T7259] Alternate GPT is invalid, using primary GPT.
[  117.917021][ T7259]  loop5: p1 p2 p3
[  117.943830][ T7262] FAT-fs (loop3): FAT read failed (blocknr 1281)
[  117.963128][ T7257] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  117.989018][ T2994] Alternate GPT is invalid, using primary GPT.
[  117.995617][ T2994]  loop5: p1 p2 p3
[  118.011117][ T7257] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1194: bg 0: block 40: padding at end of block bitmap is not set
[  118.038922][ T7257] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  118.073013][ T7257] EXT4-fs (loop0): 1 truncate cleaned up
[  118.102597][ T7257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  118.119321][ T7270] 9pnet_fd: Insufficient options for proto=fd
[  118.128915][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1200'.
[  118.157093][ T7280] netlink: 'syz.3.1201': attribute type 1 has an invalid length.
[  118.164911][ T7280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1201'.
[  118.179122][ T7282] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1195'.
[  118.208028][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.416550][ T7286] SELinux: failed to load policy
[  118.421271][ T7296] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1208'.
[  118.439470][ T7295] loop4: detected capacity change from 0 to 1024
[  118.456065][ T7295] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  118.466613][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1208'.
[  118.503070][ T7295] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1207: lblock 1 mapped to illegal pblock 1 (length 1)
[  118.519275][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  118.525920][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  118.533719][ T7298] vhci_hcd vhci_hcd.0: Device attached
[  118.569522][ T7305] loop5: detected capacity change from 0 to 256
[  118.600419][ T7305] FAT-fs (loop5): Directory bread(block 1285) failed
[  118.639452][ T7295] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1207: Failed to acquire dquot type 0
[  118.671853][ T7305] FAT-fs (loop5): Directory bread(block 1285) failed
[  118.700951][ T7305] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  118.731821][ T7295] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1207: Freeing blocks not in datazone - block = 0, count = 4096
[  118.771592][ T3386] vhci_hcd: vhci_device speed not set
[  118.784816][ T7309] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  118.795667][ T7295] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1207: Invalid inode bitmap blk 0 in block_group 0
[  118.819258][ T7312] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1214'.
[  118.828905][ T4417] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1)
[  118.853760][ T3386] usb 7-1: new full-speed USB device number 4 using vhci_hcd
[  118.858479][ T7309] SELinux: failed to load policy
[  118.866446][ T4417] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0
[  118.884039][ T7295] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  118.948453][ T7300] vhci_hcd: connection reset by peer
[  118.973982][ T4408] vhci_hcd: stop threads
[  118.978371][ T4408] vhci_hcd: release socket
[  118.982814][ T4408] vhci_hcd: disconnect device
[  118.999220][ T7295] EXT4-fs (loop4): 1 orphan inode deleted
[  119.008901][ T7326] netlink: 'syz.0.1220': attribute type 9 has an invalid length.
[  119.027652][ T7295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.055657][ T7326] netlink: 'syz.0.1220': attribute type 9 has an invalid length.
[  119.065043][ T7329] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1221'.
[  119.083816][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1221'.
[  119.094124][ T7326] random: crng reseeded on system resumption
[  119.163515][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.292976][ T7344] loop6: detected capacity change from 0 to 2048
[  119.322788][ T7352] netlink: 'syz.0.1232': attribute type 9 has an invalid length.
[  119.331477][ T7349] loop4: detected capacity change from 0 to 1024
[  119.341439][ T7341] netlink: 'syz.5.1228': attribute type 1 has an invalid length.
[  119.360439][ T7349] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  119.371200][ T7352] netlink: 'syz.0.1232': attribute type 9 has an invalid length.
[  119.391991][ T7344] Alternate GPT is invalid, using primary GPT.
[  119.398507][ T7344]  loop6: p2 p3 p7
[  119.404929][ T7352] random: crng reseeded on system resumption
[  119.524013][ T7360] netlink: 'syz.5.1236': attribute type 9 has an invalid length.
[  119.539114][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  119.539632][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  119.564803][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  119.565461][ T7360] netlink: 'syz.5.1236': attribute type 9 has an invalid length.
[  119.615747][ T7360] random: crng reseeded on system resumption
[  119.633369][ T7368] loop3: detected capacity change from 0 to 256
[  119.674189][ T7349] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1223: lblock 1 mapped to illegal pblock 1 (length 1)
[  119.699073][ T7368] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  119.708377][ T7368] FAT-fs (loop3): bogus number of directory entries (1)
[  119.715532][ T7368] FAT-fs (loop3): Can't find a valid FAT filesystem
[  119.794217][ T7349] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1223: Failed to acquire dquot type 0
[  119.814947][ T7349] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1223: Freeing blocks not in datazone - block = 0, count = 4096
[  119.899213][ T7349] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1223: Invalid inode bitmap blk 0 in block_group 0
[  119.925431][ T4411] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[  119.951209][ T4411] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0
[  119.982462][ T7349] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  120.016981][ T7349] EXT4-fs (loop4): 1 orphan inode deleted
[  120.023635][ T7349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.038526][ T7395] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  120.038795][ T7396] netlink: 'syz.5.1244': attribute type 1 has an invalid length.
[  120.045069][ T7395] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  120.045182][ T7395] vhci_hcd vhci_hcd.0: Device attached
[  120.141207][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.185040][ T7406] netlink: 'syz.0.1248': attribute type 10 has an invalid length.
[  120.193156][ T7406] bridge0: port 3(team0) entered disabled state
[  120.199681][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.206934][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.227469][ T7406] bridge0: port 3(team0) entered blocking state
[  120.233869][ T7406] bridge0: port 3(team0) entered forwarding state
[  120.240528][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.243742][    T9] vhci_hcd: vhci_device speed not set
[  120.247735][ T7406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.260476][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.267643][ T7406] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.287396][ T7406] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  120.306265][    T9] usb 13-1: new full-speed USB device number 3 using vhci_hcd
[  120.308626][ T7413] SELinux: failed to load policy
[  120.330974][ T7397] vhci_hcd: connection reset by peer
[  120.336886][ T4417] vhci_hcd: stop threads
[  120.341211][ T4417] vhci_hcd: release socket
[  120.345771][ T4417] vhci_hcd: disconnect device
[  120.359916][ T7415] netlink: 'syz.5.1254': attribute type 9 has an invalid length.
[  120.408090][ T7415] random: crng reseeded on system resumption
[  120.439240][ T7417] loop0: detected capacity change from 0 to 2048
[  120.491616][ T7421] FAULT_INJECTION: forcing a failure.
[  120.491616][ T7421] name failslab, interval 1, probability 0, space 0, times 0
[  120.504295][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.5.1257 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  120.504351][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.504366][ T7421] Call Trace:
[  120.504372][ T7421]  <TASK>
[  120.504379][ T7421]  __dump_stack+0x1d/0x30
[  120.504404][ T7421]  dump_stack_lvl+0xe8/0x140
[  120.504455][ T7421]  dump_stack+0x15/0x1b
[  120.504469][ T7421]  should_fail_ex+0x265/0x280
[  120.504497][ T7421]  ? __pfx_ip6_dst_gc+0x10/0x10
[  120.504605][ T7421]  should_failslab+0x8c/0xb0
[  120.504639][ T7421]  kmem_cache_alloc_noprof+0x50/0x310
[  120.504706][ T7421]  ? dst_alloc+0xbd/0x100
[  120.504846][ T7421]  ? __pfx_ip6_dst_gc+0x10/0x10
[  120.504871][ T7421]  dst_alloc+0xbd/0x100
[  120.504968][ T7421]  ip6_pol_route+0x6bf/0xb40
[  120.505032][ T7421]  ? ip6_pol_route+0x389/0xb40
[  120.505080][ T7421]  ip6_pol_route_input+0x42/0x60
[  120.505157][ T7421]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  120.505185][ T7421]  fib6_rule_lookup+0x32c/0x470
[  120.505206][ T7421]  ? __pfx_ip6_pol_route_input+0x10/0x10
[  120.505318][ T7421]  ip6_route_input+0x412/0x4e0
[  120.505340][ T7421]  ip6_rcv_finish+0x1c1/0x330
[  120.505441][ T7421]  ipv6_rcv+0x72/0x150
[  120.505506][ T7421]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  120.505586][ T7421]  __netif_receive_skb+0x9e/0x270
[  120.505606][ T7421]  ? tun_rx_batched+0xc7/0x430
[  120.505629][ T7421]  netif_receive_skb+0x4b/0x2e0
[  120.505647][ T7421]  ? tun_rx_batched+0xc7/0x430
[  120.505723][ T7421]  tun_rx_batched+0xfc/0x430
[  120.505748][ T7421]  tun_get_user+0x1e5a/0x2500
[  120.505776][ T7421]  ? ref_tracker_alloc+0x1f2/0x2f0
[  120.505875][ T7421]  tun_chr_write_iter+0x15e/0x210
[  120.505899][ T7421]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  120.505921][ T7421]  vfs_write+0x4a0/0x8e0
[  120.506035][ T7421]  ksys_write+0xda/0x1a0
[  120.506113][ T7421]  __x64_sys_write+0x40/0x50
[  120.506128][ T7421]  x64_sys_call+0x2cdd/0x2fb0
[  120.506147][ T7421]  do_syscall_64+0xd2/0x200
[  120.506163][ T7421]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  120.506186][ T7421]  ? clear_bhb_loop+0x40/0x90
[  120.506217][ T7421]  ? clear_bhb_loop+0x40/0x90
[  120.506236][ T7421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.506254][ T7421] RIP: 0033:0x7fc8e09ad3df
[  120.506268][ T7421] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  120.506342][ T7421] RSP: 002b:00007fc8df017000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  120.506430][ T7421] RAX: ffffffffffffffda RBX: 00007fc8e0bd5fa0 RCX: 00007fc8e09ad3df
[  120.506441][ T7421] RDX: 00000000000000d2 RSI: 0000200000000d00 RDI: 00000000000000c8
[  120.506452][ T7421] RBP: 00007fc8df017090 R08: 0000000000000000 R09: 0000000000000000
[  120.506462][ T7421] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001
[  120.506473][ T7421] R13: 0000000000000000 R14: 00007fc8e0bd5fa0 R15: 00007ffcc9edead8
[  120.506489][ T7421]  </TASK>
[  120.509054][ T3762] Alternate GPT is invalid, using primary GPT.
[  120.648029][ T7430] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  120.649912][ T3762]  loop0: p2 p3 p7
[  120.654731][ T7430] SELinux: failed to load policy
[  120.727240][ T7417] loop_reread_partitions: partition scan of loop0 () failed (rc=-16)
[  120.873879][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  120.887823][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  120.907833][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  120.942858][ T7444] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.950159][ T7444] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.962751][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.969975][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.977403][ T7444] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.984528][ T7444] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.994492][ T7444] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  121.008604][ T7442] SELinux: failed to load policy
[  121.033536][   T29] kauditd_printk_skb: 74 callbacks suppressed
[  121.033552][   T29] audit: type=1326 audit(1750443984.958:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.066064][   T29] audit: type=1326 audit(1750443984.958:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.089837][   T29] audit: type=1326 audit(1750443984.968:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.113325][   T29] audit: type=1326 audit(1750443984.968:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.136874][   T29] audit: type=1326 audit(1750443984.968:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.160418][   T29] audit: type=1326 audit(1750443984.968:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.184143][   T29] audit: type=1326 audit(1750443984.968:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.208047][   T29] audit: type=1326 audit(1750443984.968:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.231622][   T29] audit: type=1326 audit(1750443984.968:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.241629][ T7451] program syz.6.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.255219][   T29] audit: type=1326 audit(1750443984.998:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.6.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  121.328919][ T7451] serio: Serial port ttyS3
[  121.495515][ T7475] loop4: detected capacity change from 0 to 256
[  121.508957][ T7475] FAT-fs (loop4): Directory bread(block 1285) failed
[  121.522020][ T7475] FAT-fs (loop4): Directory bread(block 1285) failed
[  121.528943][ T7475] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  121.596041][ T7479] loop4: detected capacity change from 0 to 8192
[  121.634595][ T3762]  loop4: p1 < > p2 < p5 > p3 p4
[  121.640977][ T3762] loop4: p3 start 83890176 is beyond EOD, truncated
[  121.647672][ T3762] loop4: p4 size 16776960 extends beyond EOD, truncated
[  121.657140][ T3762] loop4: p5 size 16776960 extends beyond EOD, truncated
[  121.667886][ T7479]  loop4: p1 < > p2 < p5 > p3 p4
[  121.676465][ T7479] loop4: p3 start 83890176 is beyond EOD, truncated
[  121.683207][ T7479] loop4: p4 size 16776960 extends beyond EOD, truncated
[  121.701033][ T7479] loop4: p5 size 16776960 extends beyond EOD, truncated
[  121.859414][ T7485] random: crng reseeded on system resumption
[  122.135558][ T7497] loop5: detected capacity change from 0 to 128
[  122.157339][ T7497] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.196295][ T7497] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.253270][ T3752] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.391515][ T7506] program syz.0.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.461647][ T7510] bridge0: port 3(team0) entered disabled state
[  122.468139][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.475390][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.688003][ T7522] loop0: detected capacity change from 0 to 1024
[  122.713064][ T7522] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  122.728377][ T7528] loop4: detected capacity change from 0 to 512
[  122.762210][ T7522] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.1297: lblock 1 mapped to illegal pblock 1 (length 1)
[  122.789178][ T7522] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1297: Failed to acquire dquot type 0
[  122.801044][ T7522] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1297: Freeing blocks not in datazone - block = 0, count = 4096
[  122.801715][ T7528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.816578][ T7522] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1297: Invalid inode bitmap blk 0 in block_group 0
[  122.840103][ T4403] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1)
[  122.853855][ T7528] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.900562][ T4403] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0
[  122.912180][ T7522] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  122.928476][ T7534] SELinux: failed to load policy
[  122.933003][ T7522] EXT4-fs (loop0): 1 orphan inode deleted
[  122.939953][ T7522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.966965][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.082147][ T7539] __nla_validate_parse: 15 callbacks suppressed
[  123.082164][ T7539] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1302'.
[  123.128436][ T7541] program syz.0.1303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.139696][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.217277][ T7549] loop4: detected capacity change from 0 to 512
[  123.245724][ T7549] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  123.254740][ T7549] EXT4-fs (loop4): orphan cleanup on readonly fs
[  123.261312][ T7553] loop0: detected capacity change from 0 to 2048
[  123.261304][ T7549] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  123.261520][ T7549] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  123.289524][ T7549] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1307: bg 0: block 40: padding at end of block bitmap is not set
[  123.304089][ T7549] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  123.305625][ T7553] Alternate GPT is invalid, using primary GPT.
[  123.313123][ T7549] EXT4-fs (loop4): 1 truncate cleaned up
[  123.319338][ T7553]  loop0: p2 p3 p7
[  123.408310][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  123.420444][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  123.432075][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  123.574291][ T7563] loop6: detected capacity change from 0 to 1024
[  123.606798][ T7563] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  123.660754][ T7563] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.1312: lblock 1 mapped to illegal pblock 1 (length 1)
[  123.680477][ T7563] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1312: Failed to acquire dquot type 0
[  123.696022][ T7563] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1312: Freeing blocks not in datazone - block = 0, count = 4096
[  123.737560][ T7563] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1312: Invalid inode bitmap blk 0 in block_group 0
[  123.754721][ T4416] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1)
[  123.806539][ T4416] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0
[  123.830985][ T7563] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  123.849142][ T7573] SELinux: failed to load policy
[  123.855181][ T7563] EXT4-fs (loop6): 1 orphan inode deleted
[  123.894360][ T3386] usb 7-1: enqueue for inactive port 0
[  123.905423][ T3386] usb 7-1: enqueue for inactive port 0
[  123.983877][ T3386] vhci_hcd: vhci_device speed not set
[  124.030049][ T7586] validate_nla: 6 callbacks suppressed
[  124.030069][ T7586] netlink: 'syz.6.1320': attribute type 1 has an invalid length.
[  124.043449][ T7586] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1320'.
[  124.285026][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  124.305523][ T7593] netlink: 'syz.6.1323': attribute type 10 has an invalid length.
[  124.313649][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.320833][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.446646][ T7605] loop0: detected capacity change from 0 to 2048
[  124.468694][ T7609] loop6: detected capacity change from 0 to 256
[  124.484145][ T7609] FAT-fs (loop6): Directory bread(block 1285) failed
[  124.503443][ T7609] FAT-fs (loop6): Directory bread(block 1285) failed
[  124.519594][ T7609] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  124.527432][ T7611] FAULT_INJECTION: forcing a failure.
[  124.527432][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.540642][ T7611] CPU: 1 UID: 0 PID: 7611 Comm: syz.5.1330 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  124.540676][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.540767][ T7611] Call Trace:
[  124.540774][ T7611]  <TASK>
[  124.540782][ T7611]  __dump_stack+0x1d/0x30
[  124.540803][ T7611]  dump_stack_lvl+0xe8/0x140
[  124.540827][ T7611]  dump_stack+0x15/0x1b
[  124.540876][ T7611]  should_fail_ex+0x265/0x280
[  124.540916][ T7611]  should_fail+0xb/0x20
[  124.540979][ T7611]  should_fail_usercopy+0x1a/0x20
[  124.541020][ T7611]  _copy_from_iter+0xcf/0xe40
[  124.541129][ T7611]  ? __build_skb_around+0x1a0/0x200
[  124.541211][ T7611]  ? __alloc_skb+0x223/0x320
[  124.541251][ T7611]  netlink_sendmsg+0x471/0x6b0
[  124.541332][ T7611]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.541355][ T7611]  __sock_sendmsg+0x145/0x180
[  124.541384][ T7611]  ____sys_sendmsg+0x31e/0x4e0
[  124.541502][ T7611]  ___sys_sendmsg+0x17b/0x1d0
[  124.541561][ T7611]  __x64_sys_sendmsg+0xd4/0x160
[  124.541608][ T7611]  x64_sys_call+0x2999/0x2fb0
[  124.541647][ T7611]  do_syscall_64+0xd2/0x200
[  124.541665][ T7611]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  124.541689][ T7611]  ? clear_bhb_loop+0x40/0x90
[  124.541713][ T7611]  ? clear_bhb_loop+0x40/0x90
[  124.541809][ T7611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.541836][ T7611] RIP: 0033:0x7fc8e09ae929
[  124.541855][ T7611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.541886][ T7611] RSP: 002b:00007fc8df017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.541904][ T7611] RAX: ffffffffffffffda RBX: 00007fc8e0bd5fa0 RCX: 00007fc8e09ae929
[  124.541916][ T7611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  124.541929][ T7611] RBP: 00007fc8df017090 R08: 0000000000000000 R09: 0000000000000000
[  124.541944][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.541959][ T7611] R13: 0000000000000000 R14: 00007fc8e0bd5fa0 R15: 00007ffcc9edead8
[  124.541983][ T7611]  </TASK>
[  124.806517][ T7616] program syz.6.1332 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.812833][ T7605] Alternate GPT is invalid, using primary GPT.
[  124.822354][ T7605]  loop0: p2 p3 p7
[  125.035578][ T7614] loop5: detected capacity change from 0 to 1024
[  125.061039][ T7614] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  125.104651][ T7614] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.1331: lblock 1 mapped to illegal pblock 1 (length 1)
[  125.125036][ T7614] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1331: Failed to acquire dquot type 0
[  125.143769][ T7614] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1331: Freeing blocks not in datazone - block = 0, count = 4096
[  125.171418][ T7614] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1331: Invalid inode bitmap blk 0 in block_group 0
[  125.187696][ T7614] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  125.188553][ T4403] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1)
[  125.214618][ T7614] EXT4-fs (loop5): 1 orphan inode deleted
[  125.268329][ T7637] loop0: detected capacity change from 0 to 8192
[  125.276210][ T4403] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0
[  125.319351][ T3762]  loop0: p1 < > p2 < p5 > p3 p4
[  125.334189][    T9] usb 13-1: enqueue for inactive port 0
[  125.339870][    T9] usb 13-1: enqueue for inactive port 0
[  125.346427][ T3762] loop0: p3 start 83890176 is beyond EOD, truncated
[  125.350170][ T7639] SELinux: failed to load policy
[  125.353082][ T3762] loop0: p4 size 16776960 extends beyond EOD, truncated
[  125.369245][ T7643] loop3: detected capacity change from 0 to 512
[  125.374661][ T7641] program syz.6.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.394748][ T3762] loop0: p5 size 16776960 extends beyond EOD, truncated
[  125.434596][    T9] vhci_hcd: vhci_device speed not set
[  125.442929][ T7637]  loop0: p1 < > p2 < p5 > p3 p4
[  125.475345][ T7643] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  125.483456][ T7643] EXT4-fs (loop3): orphan cleanup on readonly fs
[  125.492653][ T7637] loop0: p3 start 83890176 is beyond EOD, truncated
[  125.499393][ T7637] loop0: p4 size 16776960 extends beyond EOD, truncated
[  125.510410][ T7643] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  125.554971][ T7654] loop4: detected capacity change from 0 to 2048
[  125.563553][ T7637] loop0: p5 size 16776960 extends beyond EOD, truncated
[  125.572815][ T7643] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  125.581930][ T7643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1344: bg 0: block 40: padding at end of block bitmap is not set
[  125.605427][ T7653] netlink: 'syz.6.1345': attribute type 10 has an invalid length.
[  125.625725][ T5295] Alternate GPT is invalid, using primary GPT.
[  125.632252][ T5295]  loop4: p2 p3 p7
[  125.632426][ T7650] netlink: 'syz.5.1346': attribute type 1 has an invalid length.
[  125.643963][ T7650] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1346'.
[  125.665564][ T7643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  125.677782][ T7643] EXT4-fs (loop3): 1 truncate cleaned up
[  125.696833][ T7654] Alternate GPT is invalid, using primary GPT.
[  125.703278][ T7654]  loop4: p2 p3 p7
[  125.710283][ T7659] netlink: 'syz.5.1349': attribute type 9 has an invalid length.
[  125.728522][ T7659] netlink: 'syz.5.1349': attribute type 9 has an invalid length.
[  125.775443][ T3505] udevd[3505]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  125.790560][ T6595] udevd[6595]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  125.801716][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  125.827731][ T7667] FAULT_INJECTION: forcing a failure.
[  125.827731][ T7667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.840911][ T7667] CPU: 0 UID: 0 PID: 7667 Comm: syz.6.1352 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  125.840980][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.840997][ T7667] Call Trace:
[  125.841006][ T7667]  <TASK>
[  125.841015][ T7667]  __dump_stack+0x1d/0x30
[  125.841041][ T7667]  dump_stack_lvl+0xe8/0x140
[  125.841066][ T7667]  dump_stack+0x15/0x1b
[  125.841087][ T7667]  should_fail_ex+0x265/0x280
[  125.841125][ T7667]  should_fail+0xb/0x20
[  125.841323][ T7667]  should_fail_usercopy+0x1a/0x20
[  125.841362][ T7667]  _copy_from_iter+0xcf/0xe40
[  125.841386][ T7667]  ? __rcu_read_unlock+0x4f/0x70
[  125.841414][ T7667]  ? mntput_no_expire+0x6f/0x3c0
[  125.841562][ T7667]  ping_common_sendmsg+0x9f/0x240
[  125.841604][ T7667]  ping_v6_sendmsg+0xea/0xa50
[  125.841637][ T7667]  ? avc_has_perm+0xd3/0x150
[  125.841743][ T7667]  ? _raw_spin_unlock+0x26/0x50
[  125.841770][ T7667]  ? ping_get_port+0x40e/0x4c0
[  125.841803][ T7667]  ? _raw_spin_unlock_bh+0x36/0x40
[  125.841829][ T7667]  ? release_sock+0x116/0x150
[  125.841871][ T7667]  ? __pfx_ping_v6_sendmsg+0x10/0x10
[  125.841976][ T7667]  inet_sendmsg+0xc5/0xd0
[  125.841992][ T7667]  __sock_sendmsg+0x102/0x180
[  125.842036][ T7667]  __sys_sendto+0x268/0x330
[  125.842079][ T7667]  __x64_sys_sendto+0x76/0x90
[  125.842172][ T7667]  x64_sys_call+0x2eb6/0x2fb0
[  125.842193][ T7667]  do_syscall_64+0xd2/0x200
[  125.842215][ T7667]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  125.842249][ T7667]  ? clear_bhb_loop+0x40/0x90
[  125.842320][ T7667]  ? clear_bhb_loop+0x40/0x90
[  125.842341][ T7667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.842363][ T7667] RIP: 0033:0x7f667337e929
[  125.842378][ T7667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.842395][ T7667] RSP: 002b:00007f66719e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  125.842473][ T7667] RAX: ffffffffffffffda RBX: 00007f66735a5fa0 RCX: 00007f667337e929
[  125.842486][ T7667] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000004
[  125.842500][ T7667] RBP: 00007f66719e7090 R08: 0000200000000040 R09: 000000000000001c
[  125.842515][ T7667] R10: 000000002004c080 R11: 0000000000000246 R12: 0000000000000001
[  125.842530][ T7667] R13: 0000000000000000 R14: 00007f66735a5fa0 R15: 00007fffd33bcfa8
[  125.842595][ T7667]  </TASK>
[  125.867827][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  125.934507][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'.
[  125.942187][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  125.953430][ T7659] random: crng reseeded on system resumption
[  125.957438][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  126.160301][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  126.213784][ T7677] loop4: detected capacity change from 0 to 1024
[  126.259358][ T7684] program syz.3.1355 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  126.372070][   T29] kauditd_printk_skb: 371 callbacks suppressed
[  126.372088][   T29] audit: type=1326 audit(1750443990.298:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724131e929 code=0x7ffc0000
[  126.414976][ T7680] loop5: detected capacity change from 0 to 1024
[  126.456065][ T7697] loop3: detected capacity change from 0 to 512
[  126.462730][ T7697] EXT4-fs: Ignoring removed oldalloc option
[  126.464650][   T29] audit: type=1326 audit(1750443990.328:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f724131e929 code=0x7ffc0000
[  126.492326][   T29] audit: type=1326 audit(1750443990.328:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724131e929 code=0x7ffc0000
[  126.506202][ T7697] EXT4-fs (loop3): 1 truncate cleaned up
[  126.557402][ T7697] FAULT_INJECTION: forcing a failure.
[  126.557402][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  126.570655][ T7697] CPU: 1 UID: 0 PID: 7697 Comm: syz.3.1362 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  126.570734][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  126.570759][ T7697] Call Trace:
[  126.570767][ T7697]  <TASK>
[  126.570776][ T7697]  __dump_stack+0x1d/0x30
[  126.570805][ T7697]  dump_stack_lvl+0xe8/0x140
[  126.570825][ T7697]  dump_stack+0x15/0x1b
[  126.570913][ T7697]  should_fail_ex+0x265/0x280
[  126.570999][ T7697]  should_fail+0xb/0x20
[  126.571113][ T7697]  should_fail_usercopy+0x1a/0x20
[  126.571165][ T7697]  _copy_to_user+0x20/0xa0
[  126.571250][ T7697]  simple_read_from_buffer+0xb5/0x130
[  126.571282][ T7697]  proc_fail_nth_read+0x100/0x140
[  126.571302][ T7697]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  126.571376][ T7697]  vfs_read+0x1a0/0x6f0
[  126.571480][ T7697]  ? __rcu_read_unlock+0x4f/0x70
[  126.571503][ T7697]  ? __fget_files+0x184/0x1c0
[  126.571531][ T7697]  ksys_read+0xda/0x1a0
[  126.571572][ T7697]  __x64_sys_read+0x40/0x50
[  126.571659][ T7697]  x64_sys_call+0x2d77/0x2fb0
[  126.571685][ T7697]  do_syscall_64+0xd2/0x200
[  126.571709][ T7697]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  126.571736][ T7697]  ? clear_bhb_loop+0x40/0x90
[  126.571757][ T7697]  ? clear_bhb_loop+0x40/0x90
[  126.571884][ T7697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.571904][ T7697] RIP: 0033:0x7f79fb11d33c
[  126.571923][ T7697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  126.571945][ T7697] RSP: 002b:00007f79f9787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  126.571969][ T7697] RAX: ffffffffffffffda RBX: 00007f79fb345fa0 RCX: 00007f79fb11d33c
[  126.572063][ T7697] RDX: 000000000000000f RSI: 00007f79f97870a0 RDI: 0000000000000005
[  126.572077][ T7697] RBP: 00007f79f9787090 R08: 0000000000000000 R09: 0000000000000000
[  126.572091][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  126.572181][ T7697] R13: 0000000000000000 R14: 00007f79fb345fa0 R15: 00007ffd717ef468
[  126.572205][ T7697]  </TASK>
[  126.794273][ T7680] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  126.865529][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  126.906980][ T7680] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #3: block 1: comm syz.5.1357: lblock 1 mapped to illegal pblock 1 (length 1)
[  126.931366][ T7708] netlink: 'syz.4.1365': attribute type 10 has an invalid length.
[  126.939482][ T7711] loop6: detected capacity change from 0 to 512
[  126.947426][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.954771][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.992890][ T7680] Quota error (device loop5): write_blk: dquota write failed
[  127.003106][ T7680] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  127.026014][ T7708] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.033167][ T7708] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.040632][ T7708] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.047763][ T7708] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.055711][ T7711] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  127.064066][ T7711] EXT4-fs (loop6): orphan cleanup on readonly fs
[  127.074442][ T7711] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  127.085478][ T7680] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1357: Failed to acquire dquot type 0
[  127.103740][ T7711] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  127.119295][ T7708] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.152949][ T7711] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  127.163326][ T7680] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.1357: Freeing blocks not in datazone - block = 0, count = 4096
[  127.194570][ T7723] netlink: 'syz.3.1367': attribute type 9 has an invalid length.
[  127.194675][ T7711] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1366: bg 0: block 40: padding at end of block bitmap is not set
[  127.217052][ T7711] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  127.222377][ T7721] netlink: 'syz.3.1367': attribute type 9 has an invalid length.
[  127.235465][ T7680] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.1357: Invalid inode bitmap blk 0 in block_group 0
[  127.249569][ T7711] EXT4-fs (loop6): 1 truncate cleaned up
[  127.255343][ T4411] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[  127.271882][ T7721] random: crng reseeded on system resumption
[  127.280095][ T4411] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  127.288638][ T4411] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0
[  127.294904][ T7680] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  127.320630][ T7680] EXT4-fs (loop5): 1 orphan inode deleted
[  127.365765][ T7729] xt_hashlimit: size too large, truncated to 1048576
[  127.365785][   T29] audit: type=1400 audit(1750443991.298:4227): avc:  denied  { append } for  pid=7730 comm="syz.4.1371" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  127.418332][   T29] audit: type=1400 audit(1750443991.348:4228): avc:  denied  { ioctl } for  pid=7728 comm="syz.6.1369" path="socket:[19117]" dev="sockfs" ino=19117 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.443105][   T29] audit: type=1326 audit(1750443991.348:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7728 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667337e929 code=0x7ffc0000
[  127.493361][ T7734] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1370'.
[  127.540678][ T7736] loop3: detected capacity change from 0 to 512
[  127.588435][ T7736] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  127.596660][ T7736] EXT4-fs (loop3): orphan cleanup on readonly fs
[  127.621149][ T7736] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  127.705697][ T7736] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  127.713476][ T7736] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1372: bg 0: block 40: padding at end of block bitmap is not set
[  127.794082][ T7736] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  127.804071][ T7752] program syz.6.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.832578][ T7736] EXT4-fs (loop3): 1 truncate cleaned up
[  127.845282][ T7753] netlink: 'syz.5.1379': attribute type 10 has an invalid length.
[  127.853295][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.860562][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.877136][ T7757] program syz.6.1380 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.919808][ T7761] loop5: detected capacity change from 0 to 256
[  127.953202][ T7761] FAT-fs (loop5): Directory bread(block 1285) failed
[  127.994459][ T7761] FAT-fs (loop5): Directory bread(block 1285) failed
[  128.004908][ T7761] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  128.061424][ T7770] SELinux: failed to load policy
[  128.127063][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.134625][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.157030][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.164612][ T7774] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.175681][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1387'.
[  128.176065][ T7776] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  128.205874][ T7776] SELinux: failed to load policy
[  128.239492][ T7780] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  128.269344][ T7782] program syz.4.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.344579][ T7786] loop3: detected capacity change from 0 to 512
[  128.367447][ T7786] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  128.387673][ T7786] EXT4-fs (loop3): orphan cleanup on readonly fs
[  128.407782][ T7786] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  128.432855][ T7791] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  128.439262][ T7786] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  128.451552][ T7786] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1393: bg 0: block 40: padding at end of block bitmap is not set
[  128.453961][ T7791] SELinux: failed to load policy
[  128.467481][ T7786] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  128.480332][ T7786] EXT4-fs (loop3): 1 truncate cleaned up
[  128.592527][ T7800] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1396'.
[  128.676126][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1399'.
[  128.786711][ T7818] loop3: detected capacity change from 0 to 512
[  128.818543][ T7820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1404'.
[  128.832715][ T7818] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.872655][ T7824] loop6: detected capacity change from 0 to 512
[  128.925474][ T7824] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  128.940337][ T7824] EXT4-fs (loop6): orphan cleanup on readonly fs
[  128.950452][ T7824] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  128.974765][ T7832] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1408'.
[  129.006536][ T7824] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  129.029601][ T7824] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1405: bg 0: block 40: padding at end of block bitmap is not set
[  129.098640][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1411'.
[  129.110738][ T7824] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  129.130127][ T7824] EXT4-fs (loop6): 1 truncate cleaned up
[  129.208287][ T7848] loop6: detected capacity change from 0 to 512
[  129.231328][ T7848] EXT4-fs: Ignoring removed oldalloc option
[  129.262004][ T7848] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.352808][ T7848] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1414: bg 0: block 217: padding at end of block bitmap is not set
[  129.382240][ T7860] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  129.409120][ T7861] loop0: detected capacity change from 0 to 256
[  129.423164][ T7860] SELinux: failed to load policy
[  129.438079][ T7861] FAT-fs (loop0): Directory bread(block 1285) failed
[  129.496682][ T7861] FAT-fs (loop0): Directory bread(block 1285) failed
[  129.554852][ T7861] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  129.604057][ T7867] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1420'.
[  130.031881][ T7871] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  130.058170][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1423'.
[  130.262954][ T7881] loop0: detected capacity change from 0 to 256
[  130.340532][ T7883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1428'.
[  130.374686][ T7885] program syz.5.1429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.414741][ T7877] loop4: detected capacity change from 0 to 1024
[  130.471397][ T7889] loop5: detected capacity change from 0 to 512
[  130.518931][ T7877] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  130.552199][ T7889] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  130.572994][ T7889] EXT4-fs (loop5): orphan cleanup on readonly fs
[  130.582258][ T7889] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  130.604550][ T7889] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  130.641201][ T7889] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1431: bg 0: block 40: padding at end of block bitmap is not set
[  130.666766][ T7897] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1433'.
[  130.690085][ T7877] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1425: lblock 1 mapped to illegal pblock 1 (length 1)
[  130.714019][ T7889] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  130.723225][ T7889] EXT4-fs (loop5): 1 truncate cleaned up
[  130.767324][ T7903] netlink: 'syz.0.1436': attribute type 9 has an invalid length.
[  130.767498][ T7901] SELinux: failed to load policy
[  130.794473][ T7903] netlink: 'syz.0.1436': attribute type 9 has an invalid length.
[  130.805228][ T7877] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1425: Failed to acquire dquot type 0
[  130.825511][ T7903] random: crng reseeded on system resumption
[  130.856109][ T7877] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1425: Freeing blocks not in datazone - block = 0, count = 4096
[  130.914958][ T7877] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1425: Invalid inode bitmap blk 0 in block_group 0
[  130.937840][ T4408] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[  130.975891][ T7909] netlink: 'syz.5.1438': attribute type 1 has an invalid length.
[  130.984470][ T4408] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0
[  131.010643][ T7877] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  131.030646][ T7877] EXT4-fs (loop4): 1 orphan inode deleted
[  131.201815][ T7916] program syz.5.1441 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.226912][ T7918] loop6: detected capacity change from 0 to 2048
[  131.295621][ T5295] Alternate GPT is invalid, using primary GPT.
[  131.302085][ T5295]  loop6: p2 p3 p7
[  131.332739][ T7924] loop5: detected capacity change from 0 to 512
[  131.352623][ T7918] Alternate GPT is invalid, using primary GPT.
[  131.359292][ T7918]  loop6: p2 p3 p7
[  131.377112][ T7924] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  131.393943][ T7924] EXT4-fs (loop5): orphan cleanup on readonly fs
[  131.416245][ T7924] __quota_error: 195 callbacks suppressed
[  131.416298][ T7924] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  131.439394][ T7924] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  131.457107][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  131.459499][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  131.474894][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  131.497285][ T7924] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  131.504927][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  131.516349][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory
[  131.527577][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  131.545157][ T7924] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1445: bg 0: block 40: padding at end of block bitmap is not set
[  131.571172][ T7937] netlink: 'syz.4.1449': attribute type 10 has an invalid length.
[  131.573765][ T7924] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  131.579448][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.589067][ T7924] EXT4-fs (loop5): 1 truncate cleaned up
[  131.594952][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.601321][ T7924] EXT4-fs mount: 30 callbacks suppressed
[  131.601339][ T7924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.659315][ T7940] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  131.659315][ T7940]    program syz.3.1450 not setting count and/or reply_len properly
[  131.683050][ T7945] loop6: detected capacity change from 0 to 256
[  131.703847][ T7943] SELinux: failed to load policy
[  131.712699][ T7945] FAT-fs (loop6): Directory bread(block 1285) failed
[  131.728109][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.739429][ T7945] FAT-fs (loop6): Directory bread(block 1285) failed
[  131.762149][ T7945] FAT-fs (loop6): FAT read failed (blocknr 1281)
[  131.836498][   T29] audit: type=1326 audit(1750443995.768:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.860716][ T7958] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  131.869078][   T29] audit: type=1326 audit(1750443995.778:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.892620][   T29] audit: type=1326 audit(1750443995.778:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.916136][   T29] audit: type=1326 audit(1750443995.778:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.940083][   T29] audit: type=1326 audit(1750443995.798:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.963589][   T29] audit: type=1326 audit(1750443995.798:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  131.987264][   T29] audit: type=1326 audit(1750443995.798:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  132.010752][   T29] audit: type=1326 audit(1750443995.798:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  132.034274][   T29] audit: type=1326 audit(1750443995.798:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7954 comm="syz.3.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  132.101511][ T7966] veth0_macvtap: left promiscuous mode
[  132.134967][ T7969] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  132.145422][ T7969] SELinux: failed to load policy
[  132.216797][ T7976] xt_hashlimit: max too large, truncated to 1048576
[  132.217644][ T7974] netlink: 'syz.6.1463': attribute type 10 has an invalid length.
[  132.237119][ T7974] team0: Port device dummy0 added
[  132.250962][ T7974] netlink: 'syz.6.1463': attribute type 10 has an invalid length.
[  132.259505][ T7974] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  132.271458][ T7974] team0: Failed to send options change via netlink (err -105)
[  132.279102][ T7974] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  132.289973][ T7974] team0: Port device dummy0 removed
[  132.298663][ T7974] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  132.435129][ T7985] loop6: detected capacity change from 0 to 1024
[  132.461323][ T7985] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  132.511850][ T7985] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #3: block 1: comm syz.6.1466: lblock 1 mapped to illegal pblock 1 (length 1)
[  132.580531][ T7985] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1466: Failed to acquire dquot type 0
[  132.599820][ T7985] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1466: Freeing blocks not in datazone - block = 0, count = 4096
[  132.637993][ T7994] bond0: (slave bond_slave_0): Releasing backup interface
[  132.652106][ T7985] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1466: Invalid inode bitmap blk 0 in block_group 0
[  132.666128][ T4416] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1)
[  132.683184][ T4416] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:36: Failed to release dquot type 0
[  132.696322][ T7985] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  132.756516][ T7985] EXT4-fs (loop6): 1 orphan inode deleted
[  132.771536][ T7999] FAULT_INJECTION: forcing a failure.
[  132.771536][ T7999] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  132.784887][ T7999] CPU: 1 UID: 0 PID: 7999 Comm: syz.0.1471 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  132.784929][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  132.784945][ T7999] Call Trace:
[  132.784951][ T7999]  <TASK>
[  132.785040][ T7999]  __dump_stack+0x1d/0x30
[  132.785066][ T7999]  dump_stack_lvl+0xe8/0x140
[  132.785090][ T7999]  dump_stack+0x15/0x1b
[  132.785112][ T7999]  should_fail_ex+0x265/0x280
[  132.785219][ T7999]  should_fail_alloc_page+0xf2/0x100
[  132.785252][ T7999]  __alloc_frozen_pages_noprof+0xff/0x360
[  132.785300][ T7999]  alloc_pages_mpol+0xb3/0x250
[  132.785367][ T7999]  vma_alloc_folio_noprof+0x1aa/0x300
[  132.785410][ T7999]  do_wp_page+0x673/0x2400
[  132.785508][ T7999]  ? __rcu_read_lock+0x37/0x50
[  132.785531][ T7999]  handle_mm_fault+0x77d/0x2be0
[  132.785555][ T7999]  ? __rcu_read_unlock+0x4f/0x70
[  132.785593][ T7999]  do_user_addr_fault+0x3fe/0x1090
[  132.785701][ T7999]  exc_page_fault+0x62/0xa0
[  132.785746][ T7999]  asm_exc_page_fault+0x26/0x30
[  132.785772][ T7999] RIP: 0010:__put_user_4+0xd/0x20
[  132.785813][ T7999] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 77 01 00 90 90 90 90 90 90 90 90 90 90
[  132.785887][ T7999] RSP: 0018:ffffc90013213e28 EFLAGS: 00050202
[  132.785907][ T7999] RAX: 0000000000000012 RBX: 0000000000000000 RCX: 000020000000018c
[  132.785949][ T7999] RDX: ffff8881191ca080 RSI: 0000000000000012 RDI: 0000000000000000
[  132.785964][ T7999] RBP: 0000200000000180 R08: 0001888114d9c0d7 R09: 0000000000000000
[  132.785980][ T7999] R10: 0001c90013213e58 R11: 0001c90013213e67 R12: ffff8881036226c0
[  132.785996][ T7999] R13: ffff888114d9c0c0 R14: ffff8881036226c0 R15: 0000200000000180
[  132.786051][ T7999]  mon_bin_ioctl+0x63f/0x930
[  132.786090][ T7999]  ? __fget_files+0x184/0x1c0
[  132.786118][ T7999]  ? __pfx_mon_bin_ioctl+0x10/0x10
[  132.786155][ T7999]  __se_sys_ioctl+0xce/0x140
[  132.786185][ T7999]  __x64_sys_ioctl+0x43/0x50
[  132.786242][ T7999]  x64_sys_call+0x19a8/0x2fb0
[  132.786269][ T7999]  do_syscall_64+0xd2/0x200
[  132.786290][ T7999]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  132.786323][ T7999]  ? clear_bhb_loop+0x40/0x90
[  132.786425][ T7999]  ? clear_bhb_loop+0x40/0x90
[  132.786449][ T7999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.786493][ T7999] RIP: 0033:0x7f1ac7dfe929
[  132.786511][ T7999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.786604][ T7999] RSP: 002b:00007f1ac6467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  132.786627][ T7999] RAX: ffffffffffffffda RBX: 00007f1ac8025fa0 RCX: 00007f1ac7dfe929
[  132.786642][ T7999] RDX: 0000200000000180 RSI: 00000000c0109207 RDI: 0000000000000004
[  132.786653][ T7999] RBP: 00007f1ac6467090 R08: 0000000000000000 R09: 0000000000000000
[  132.786668][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  132.786683][ T7999] R13: 0000000000000000 R14: 00007f1ac8025fa0 R15: 00007fff9b1f0f58
[  132.786707][ T7999]  </TASK>
[  132.791262][ T7985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.209454][ T7985] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.242991][ T8013] netlink: 'syz.5.1477': attribute type 9 has an invalid length.
[  133.258215][ T8013] netlink: 'syz.5.1477': attribute type 9 has an invalid length.
[  133.273618][ T8008] loop0: detected capacity change from 0 to 8192
[  133.279945][ T8013] random: crng reseeded on system resumption
[  133.300744][ T5295]  loop0: p1 < > p2 < p5 > p3 p4
[  133.302081][ T5295] loop0: p3 start 83890176 is beyond EOD, truncated
[  133.302100][ T5295] loop0: p4 size 16776960 extends beyond EOD, truncated
[  133.302673][ T5295] loop0: p5 size 16776960 extends beyond EOD, truncated
[  133.361764][ T8008]  loop0: p1 < > p2 < p5 > p3 p4
[  133.364046][ T8008] loop0: p3 start 83890176 is beyond EOD, truncated
[  133.364071][ T8008] loop0: p4 size 16776960 extends beyond EOD, truncated
[  133.367366][ T8008] loop0: p5 size 16776960 extends beyond EOD, truncated
[  133.375727][ T2994]  loop0: p1 < > p2 < p5 > p3 p4
[  133.377138][ T2994] loop0: p3 start 83890176 is beyond EOD, truncated
[  133.377160][ T2994] loop0: p4 size 16776960 extends beyond EOD, truncated
[  133.377749][ T2994] loop0: p5 size 16776960 extends beyond EOD, truncated
[  133.381258][ T8008] __nla_validate_parse: 6 callbacks suppressed
[  133.381271][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1474'.
[  133.382634][ T8018] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  133.543609][ T8029] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1483'.
[  133.586901][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  133.589900][ T5295] udevd[5295]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  133.598012][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  133.625647][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  133.691800][ T8032] xt_hashlimit: max too large, truncated to 1048576
[  133.698837][ T8034] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  133.698837][ T8034]    program syz.6.1485 not setting count and/or reply_len properly
[  133.777251][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1487'.
[  133.813584][ T8037] netlink: 'syz.3.1486': attribute type 10 has an invalid length.
[  133.822298][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.829588][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.846873][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.854079][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.861479][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.868625][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.878566][ T8037] bridge0: entered promiscuous mode
[  133.884520][ T8037] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link
[  133.893855][ T8047] loop6: detected capacity change from 0 to 1024
[  133.925915][ T8047] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1488: Failed to acquire dquot type 0
[  133.939282][ T8047] EXT4-fs (loop6): 1 truncate cleaned up
[  133.948909][ T8047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.002509][ T4529] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.096324][ T8051] loop3: detected capacity change from 0 to 1024
[  134.136495][ T8051] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  134.154943][ T8055] netlink: 'syz.4.1491': attribute type 10 has an invalid length.
[  134.185079][ T8051] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.1489: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.242969][ T8051] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1489: Failed to acquire dquot type 0
[  134.279722][ T8051] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.1489: Freeing blocks not in datazone - block = 0, count = 4096
[  134.312751][ T8051] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1489: Invalid inode bitmap blk 0 in block_group 0
[  134.328149][ T4411] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1)
[  134.352421][ T8051] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  134.373848][ T4411] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0
[  134.393306][ T8051] EXT4-fs (loop3): 1 orphan inode deleted
[  134.426915][ T8075] loop4: detected capacity change from 0 to 256
[  134.439599][ T8051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.465646][ T8075] FAT-fs (loop4): Directory bread(block 1285) failed
[  134.488017][ T8075] FAT-fs (loop4): Directory bread(block 1285) failed
[  134.496519][ T8051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.508488][ T8075] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  134.572946][ T8079] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  134.593953][ T8082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  134.600569][ T8082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  134.608347][ T8082] vhci_hcd vhci_hcd.0: Device attached
[  134.671337][ T8085] SELinux: failed to load policy
[  134.789709][ T8093] IPv6: Can't replace route, no match found
[  134.795722][ T3400] vhci_hcd: vhci_device speed not set
[  134.853012][ T8082] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  134.854616][ T3400] usb 9-1: new full-speed USB device number 7 using vhci_hcd
[  134.874355][ T8082] SELinux: failed to load policy
[  134.930019][ T8083] vhci_hcd: connection reset by peer
[  134.944846][ T4411] vhci_hcd: stop threads
[  134.949241][ T4411] vhci_hcd: release socket
[  134.953812][ T4411] vhci_hcd: disconnect device
[  135.047377][ T8106] xt_hashlimit: max too large, truncated to 1048576
[  135.089565][ T8112] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  135.096157][ T8112] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  135.103908][ T8112] vhci_hcd vhci_hcd.0: Device attached
[  135.206661][ T8119] SELinux:  policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c
[  135.229348][ T8119] SELinux: failed to load policy
[  135.300441][ T8113] vhci_hcd: connection closed
[  135.300617][ T4417] vhci_hcd: stop threads
[  135.303781][ T3472] vhci_hcd: vhci_device speed not set
[  135.305425][ T4417] vhci_hcd: release socket
[  135.319586][ T4417] vhci_hcd: disconnect device
[  135.363806][ T3472] usb 13-1: new full-speed USB device number 4 using vhci_hcd
[  135.371474][ T3472] usb 13-1: enqueue for inactive port 0
[  135.378216][ T3472] usb 13-1: enqueue for inactive port 0
[  135.384100][ T3472] usb 13-1: enqueue for inactive port 0
[  135.474086][ T3472] vhci_hcd: vhci_device speed not set
[  135.571028][ T8124] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1514'.
[  135.718725][ T8130] loop4: detected capacity change from 0 to 8192
[  135.776624][ T8130]  loop4: p1 < > p2 < p5 > p3 p4
[  135.792728][ T8130] loop4: p3 start 83890176 is beyond EOD, truncated
[  135.799433][ T8130] loop4: p4 size 16776960 extends beyond EOD, truncated
[  135.823865][ T8130] loop4: p5 size 16776960 extends beyond EOD, truncated
[  135.850696][ T8130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1517'.
[  135.952858][ T8136] program syz.6.1519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  136.100297][ T8145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  136.106986][ T8145] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  136.114796][ T8145] vhci_hcd vhci_hcd.0: Device attached
[  136.156174][ T8140] validate_nla: 1 callbacks suppressed
[  136.156193][ T8140] netlink: 'syz.6.1523': attribute type 10 has an invalid length.
[  136.370660][ T8166] xt_hashlimit: max too large, truncated to 1048576
[  136.394719][ T8167] syz.6.1529 uses obsolete (PF_INET,SOCK_PACKET)
[  136.423859][   T29] kauditd_printk_skb: 468 callbacks suppressed
[  136.423876][   T29] audit: type=1326 audit(1750444000.358:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.426457][ T8145] SELinux: failed to load policy
[  136.430365][   T29] audit: type=1326 audit(1750444000.358:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.481959][   T29] audit: type=1326 audit(1750444000.358:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.509733][   T29] audit: type=1326 audit(1750444000.438:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.533190][ T8146] vhci_hcd: connection closed
[  136.534275][   T29] audit: type=1326 audit(1750444000.468:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.534758][ T4403] vhci_hcd: stop threads
[  136.539062][   T29] audit: type=1326 audit(1750444000.468:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.562552][ T4403] vhci_hcd: release socket
[  136.562645][ T4403] vhci_hcd: disconnect device
[  136.570734][   T29] audit: type=1326 audit(1750444000.498:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.623099][   T29] audit: type=1326 audit(1750444000.498:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.646622][   T29] audit: type=1326 audit(1750444000.498:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.670237][   T29] audit: type=1326 audit(1750444000.528:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.5.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8e09ae929 code=0x7ffc0000
[  136.764737][ T8182] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  136.764737][ T8182]    program syz.0.1532 not setting count and/or reply_len properly
[  136.833562][ T8190] loop0: detected capacity change from 0 to 1024
[  136.842791][ T8190] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1535: Failed to acquire dquot type 0
[  136.854962][ T8190] EXT4-fs (loop0): 1 truncate cleaned up
[  136.861194][ T8190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.882395][ T8192] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[  136.892231][ T8192] SELinux: failed to load policy
[  136.897985][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.917989][ T8194] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in;
[  136.917989][ T8194]    program syz.0.1537 not setting count and/or reply_len properly
[  136.972842][ T8199] loop0: detected capacity change from 0 to 256
[  136.980079][ T8199] FAT-fs (loop0): Directory bread(block 1285) failed
[  136.987508][ T8199] FAT-fs (loop0): Directory bread(block 1285) failed
[  136.994388][ T8199] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  137.070146][ T8207] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  137.164745][ T8209] loop4: detected capacity change from 0 to 1024
[  137.190749][ T8209] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  137.230076][ T8217] netlink: 'syz.0.1545': attribute type 1 has an invalid length.
[  137.237946][ T8217] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1545'.
[  137.250930][ T8209] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1543: lblock 1 mapped to illegal pblock 1 (length 1)
[  137.275747][ T8209] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1543: Failed to acquire dquot type 0
[  137.293044][ T8219] loop3: detected capacity change from 0 to 2048
[  137.305067][ T8209] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1543: Freeing blocks not in datazone - block = 0, count = 4096
[  137.345657][ T8219] Alternate GPT is invalid, using primary GPT.
[  137.352106][ T8219]  loop3: p2 p3 p7
[  137.352966][ T8209] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1543: Invalid inode bitmap blk 0 in block_group 0
[  137.375210][ T4417] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1)
[  137.415298][ T8225] loop5: detected capacity change from 0 to 256
[  137.416209][ T4417] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0
[  137.453523][ T8209] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  137.481928][ T8225] FAT-fs (loop5): Directory bread(block 1285) failed
[  137.483316][ T8209] EXT4-fs (loop4): 1 orphan inode deleted
[  137.499876][ T8225] FAT-fs (loop5): Directory bread(block 1285) failed
[  137.513320][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.522042][ T8225] FAT-fs (loop5): FAT read failed (blocknr 1281)
[  137.552584][ T8209] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.589070][ T8235] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  137.589070][ T8235]    program syz.3.1555 not setting count and/or reply_len properly
[  137.616896][ T8237] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  137.616896][ T8237]    program syz.5.1556 not setting count and/or reply_len properly
[  137.683430][ T8239] xt_hashlimit: max too large, truncated to 1048576
[  137.766039][ T8260] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1561'.
[  137.870182][ T8267] loop4: detected capacity change from 0 to 256
[  137.879389][ T8267] FAT-fs (loop4): Directory bread(block 1285) failed
[  137.879876][ T8267] FAT-fs (loop4): Directory bread(block 1285) failed
[  137.879974][ T8267] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  138.590882][ T8275] loop0: detected capacity change from 0 to 1024
[  138.613946][ T8277] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  138.613946][ T8277]    program syz.3.1570 not setting count and/or reply_len properly
[  138.625200][ T8275] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  138.666692][ T8275] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #3: block 1: comm syz.0.1569: lblock 1 mapped to illegal pblock 1 (length 1)
[  138.683245][ T8282] FAULT_INJECTION: forcing a failure.
[  138.683245][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  138.683281][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.5.1572 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  138.683315][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  138.683339][ T8282] Call Trace:
[  138.683346][ T8282]  <TASK>
[  138.683355][ T8282]  __dump_stack+0x1d/0x30
[  138.683381][ T8282]  dump_stack_lvl+0xe8/0x140
[  138.683437][ T8282]  dump_stack+0x15/0x1b
[  138.683458][ T8282]  should_fail_ex+0x265/0x280
[  138.683498][ T8282]  should_fail+0xb/0x20
[  138.683614][ T8282]  should_fail_usercopy+0x1a/0x20
[  138.683661][ T8282]  _copy_from_user+0x1c/0xb0
[  138.683694][ T8282]  do_fcntl+0x5a3/0xdf0
[  138.683731][ T8282]  ? selinux_file_fcntl+0x1cb/0x1e0
[  138.683844][ T8282]  __se_sys_fcntl+0xb1/0x120
[  138.683907][ T8282]  __x64_sys_fcntl+0x43/0x50
[  138.683948][ T8282]  x64_sys_call+0x1f1d/0x2fb0
[  138.683979][ T8282]  do_syscall_64+0xd2/0x200
[  138.684082][ T8282]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  138.684235][ T8282]  ? clear_bhb_loop+0x40/0x90
[  138.684264][ T8282]  ? clear_bhb_loop+0x40/0x90
[  138.684294][ T8282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.684323][ T8282] RIP: 0033:0x7fc8e09ae929
[  138.684352][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.684457][ T8282] RSP: 002b:00007fc8df017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  138.684481][ T8282] RAX: ffffffffffffffda RBX: 00007fc8e0bd5fa0 RCX: 00007fc8e09ae929
[  138.684498][ T8282] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003
[  138.684515][ T8282] RBP: 00007fc8df017090 R08: 0000000000000000 R09: 0000000000000000
[  138.684533][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  138.684612][ T8282] R13: 0000000000000000 R14: 00007fc8e0bd5fa0 R15: 00007ffcc9edead8
[  138.684638][ T8282]  </TASK>
[  138.934542][ T8283] SELinux: failed to load policy
[  138.979626][ T8275] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1569: Failed to acquire dquot type 0
[  138.989489][ T8296] netlink: 'syz.4.1577': attribute type 9 has an invalid length.
[  139.010274][ T8296] netlink: 'syz.4.1577': attribute type 9 has an invalid length.
[  139.022752][ T8275] EXT4-fs error (device loop0): ext4_free_blocks:6587: comm syz.0.1569: Freeing blocks not in datazone - block = 0, count = 4096
[  139.045038][ T8296] random: crng reseeded on system resumption
[  139.045169][ T8275] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1569: Invalid inode bitmap blk 0 in block_group 0
[  139.067461][ T4417] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1)
[  139.068304][ T8275] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  139.091068][ T8300] loop3: detected capacity change from 0 to 1024
[  139.106974][ T4417] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:37: Failed to release dquot type 0
[  139.126195][ T8300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.136025][ T8275] EXT4-fs (loop0): 1 orphan inode deleted
[  139.140023][ T8300] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1579: bg 0: block 88: padding at end of block bitmap is not set
[  139.166812][ T8275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.185710][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.196092][ T8298] vhci_hcd: invalid port number 23
[  139.220402][ T8310] FAULT_INJECTION: forcing a failure.
[  139.220402][ T8310] name failslab, interval 1, probability 0, space 0, times 0
[  139.231261][ T8307] bridge0: entered allmulticast mode
[  139.233169][ T8310] CPU: 0 UID: 0 PID: 8310 Comm: syz.3.1581 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  139.233269][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.233286][ T8310] Call Trace:
[  139.233294][ T8310]  <TASK>
[  139.233305][ T8310]  __dump_stack+0x1d/0x30
[  139.233333][ T8310]  dump_stack_lvl+0xe8/0x140
[  139.233360][ T8310]  dump_stack+0x15/0x1b
[  139.233384][ T8310]  should_fail_ex+0x265/0x280
[  139.233536][ T8310]  should_failslab+0x8c/0xb0
[  139.233568][ T8310]  kmem_cache_alloc_noprof+0x50/0x310
[  139.233619][ T8310]  ? alloc_vfsmnt+0x2d/0x360
[  139.233695][ T8310]  alloc_vfsmnt+0x2d/0x360
[  139.233730][ T8310]  clone_mnt+0x41/0x750
[  139.233767][ T8310]  copy_tree+0xb7/0x820
[  139.233881][ T8310]  ? proc_alloc_inum+0x4f/0x70
[  139.233914][ T8310]  copy_mnt_ns+0x120/0x5e0
[  139.234064][ T8310]  ? kmem_cache_alloc_noprof+0x220/0x310
[  139.234145][ T8310]  ? create_new_namespaces+0x3c/0x3d0
[  139.234189][ T8310]  create_new_namespaces+0x83/0x3d0
[  139.234233][ T8310]  unshare_nsproxy_namespaces+0xe8/0x120
[  139.234297][ T8310]  ksys_unshare+0x3d0/0x6d0
[  139.234335][ T8310]  ? ksys_write+0x15f/0x1a0
[  139.234362][ T8310]  __x64_sys_unshare+0x1f/0x30
[  139.234425][ T8310]  x64_sys_call+0x2d4b/0x2fb0
[  139.234455][ T8310]  do_syscall_64+0xd2/0x200
[  139.234481][ T8310]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  139.234517][ T8310]  ? clear_bhb_loop+0x40/0x90
[  139.234567][ T8310]  ? clear_bhb_loop+0x40/0x90
[  139.234597][ T8310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.234627][ T8310] RIP: 0033:0x7f79fb11e929
[  139.234649][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.234719][ T8310] RSP: 002b:00007f79f9787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  139.234745][ T8310] RAX: ffffffffffffffda RBX: 00007f79fb345fa0 RCX: 00007f79fb11e929
[  139.234762][ T8310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  139.234776][ T8310] RBP: 00007f79f9787090 R08: 0000000000000000 R09: 0000000000000000
[  139.234792][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.234806][ T8310] R13: 0000000000000000 R14: 00007f79fb345fa0 R15: 00007ffd717ef468
[  139.234833][ T8310]  </TASK>
[  139.288200][ T8275] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.298339][ T8312] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  139.298339][ T8312]    program syz.3.1584 not setting count and/or reply_len properly
[  139.608091][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.618887][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.642364][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.661707][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.720159][ T8329] loop4: detected capacity change from 0 to 2048
[  139.752210][ T8329] EXT4-fs: Ignoring removed nobh option
[  139.782865][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.815891][ T8329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.818375][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.837071][ T8341] netlink: 'syz.0.1590': attribute type 9 has an invalid length.
[  139.846120][ T8341] netlink: 'syz.0.1590': attribute type 9 has an invalid length.
[  139.865770][ T8341] random: crng reseeded on system resumption
[  139.866035][ T8325] vhci_hcd: invalid port number 96
[  139.877048][ T8325] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  139.940139][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'.
[  139.964988][ T3400] usb 9-1: enqueue for inactive port 0
[  139.973409][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.977270][ T3400] usb 9-1: enqueue for inactive port 0
[  140.095511][ T3400] vhci_hcd: vhci_device speed not set
[  140.193139][ T8353] 9p: Unknown access argument 18446744073709551615: -34
[  140.217941][ T8357] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  140.217941][ T8357]    program syz.3.1597 not setting count and/or reply_len properly
[  140.263519][ T8354] SELinux: failed to load policy
[  140.315384][ T8362] netlink: 'syz.5.1598': attribute type 1 has an invalid length.
[  140.323264][ T8362] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1598'.
[  140.465496][ T8369] xt_socket: unknown flags 0xd0
[  140.492739][ T8375] program syz.5.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  140.538216][ T8376] netlink: 'syz.0.1601': attribute type 3 has an invalid length.
[  140.701041][ T8386] loop6: detected capacity change from 0 to 8192
[  140.754460][ T3762]  loop6: p1 < > p2 < p5 > p3 p4
[  140.767324][ T3762] loop6: p3 start 83890176 is beyond EOD, truncated
[  140.774053][ T3762] loop6: p4 size 16776960 extends beyond EOD, truncated
[  140.794183][ T3762] loop6: p5 size 16776960 extends beyond EOD, truncated
[  140.838053][ T8386]  loop6: p1 < > p2 < p5 > p3 p4
[  140.850022][ T8386] loop6: p3 start 83890176 is beyond EOD, truncated
[  140.856772][ T8386] loop6: p4 size 16776960 extends beyond EOD, truncated
[  140.873417][ T8386] loop6: p5 size 16776960 extends beyond EOD, truncated
[  141.036101][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  141.067964][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  141.074984][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  141.080562][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  141.202689][ T8409] FAULT_INJECTION: forcing a failure.
[  141.202689][ T8409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.215864][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.4.1616 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  141.215901][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.215924][ T8409] Call Trace:
[  141.216009][ T8409]  <TASK>
[  141.216019][ T8409]  __dump_stack+0x1d/0x30
[  141.216045][ T8409]  dump_stack_lvl+0xe8/0x140
[  141.216106][ T8409]  dump_stack+0x15/0x1b
[  141.216190][ T8409]  should_fail_ex+0x265/0x280
[  141.216229][ T8409]  should_fail+0xb/0x20
[  141.216270][ T8409]  should_fail_usercopy+0x1a/0x20
[  141.216305][ T8409]  _copy_to_user+0x20/0xa0
[  141.216352][ T8409]  simple_read_from_buffer+0xb5/0x130
[  141.216404][ T8409]  proc_fail_nth_read+0x100/0x140
[  141.216429][ T8409]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  141.216489][ T8409]  vfs_read+0x1a0/0x6f0
[  141.216522][ T8409]  ? kmem_cache_free+0xdf/0x300
[  141.216547][ T8409]  ? __rcu_read_unlock+0x4f/0x70
[  141.216645][ T8409]  ? __fget_files+0x184/0x1c0
[  141.216674][ T8409]  ksys_read+0xda/0x1a0
[  141.216713][ T8409]  __x64_sys_read+0x40/0x50
[  141.216782][ T8409]  x64_sys_call+0x2d77/0x2fb0
[  141.216809][ T8409]  do_syscall_64+0xd2/0x200
[  141.216827][ T8409]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  141.216890][ T8409]  ? clear_bhb_loop+0x40/0x90
[  141.216917][ T8409]  ? clear_bhb_loop+0x40/0x90
[  141.216941][ T8409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.216968][ T8409] RIP: 0033:0x7f724131d33c
[  141.216982][ T8409] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  141.216997][ T8409] RSP: 002b:00007f723f987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  141.217014][ T8409] RAX: ffffffffffffffda RBX: 00007f7241545fa0 RCX: 00007f724131d33c
[  141.217040][ T8409] RDX: 000000000000000f RSI: 00007f723f9870a0 RDI: 0000000000000007
[  141.217051][ T8409] RBP: 00007f723f987090 R08: 0000000000000000 R09: 0000000000000000
[  141.217061][ T8409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.217093][ T8409] R13: 0000000000000000 R14: 00007f7241545fa0 R15: 00007ffef3bef538
[  141.217110][ T8409]  </TASK>
[  141.466166][ T8413] FAULT_INJECTION: forcing a failure.
[  141.466166][ T8413] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  141.469717][   T29] kauditd_printk_skb: 251 callbacks suppressed
[  141.469736][   T29] audit: type=1326 audit(1750444005.398:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.479331][ T8413] CPU: 0 UID: 0 PID: 8413 Comm: syz.5.1619 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  141.479372][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.479390][ T8413] Call Trace:
[  141.479398][ T8413]  <TASK>
[  141.479410][ T8413]  __dump_stack+0x1d/0x30
[  141.479439][ T8413]  dump_stack_lvl+0xe8/0x140
[  141.479527][ T8413]  dump_stack+0x15/0x1b
[  141.479549][ T8413]  should_fail_ex+0x265/0x280
[  141.479593][ T8413]  should_fail+0xb/0x20
[  141.479658][ T8413]  should_fail_usercopy+0x1a/0x20
[  141.479703][ T8413]  _copy_from_user+0x1c/0xb0
[  141.479732][ T8413]  memdup_user+0x5e/0xd0
[  141.479806][ T8413]  strndup_user+0x68/0xb0
[  141.479893][ T8413]  __se_sys_mount+0x4d/0x2e0
[  141.479961][ T8413]  ? fput+0x8f/0xc0
[  141.479996][ T8413]  ? ksys_write+0x192/0x1a0
[  141.480021][ T8413]  __x64_sys_mount+0x67/0x80
[  141.480081][ T8413]  x64_sys_call+0xd36/0x2fb0
[  141.480111][ T8413]  do_syscall_64+0xd2/0x200
[  141.480136][ T8413]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  141.480253][ T8413]  ? clear_bhb_loop+0x40/0x90
[  141.480345][ T8413]  ? clear_bhb_loop+0x40/0x90
[  141.480375][ T8413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.480405][ T8413] RIP: 0033:0x7fc8e09ae929
[  141.480426][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.480479][ T8413] RSP: 002b:00007fc8df017038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  141.480515][ T8413] RAX: ffffffffffffffda RBX: 00007fc8e0bd5fa0 RCX: 00007fc8e09ae929
[  141.480557][ T8413] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0
[  141.480574][ T8413] RBP: 00007fc8df017090 R08: 0000200000000040 R09: 0000000000000000
[  141.480591][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  141.480608][ T8413] R13: 0000000000000000 R14: 00007fc8e0bd5fa0 R15: 00007ffcc9edead8
[  141.480635][ T8413]  </TASK>
[  141.546093][ T8415] program syz.4.1617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.547837][   T29] audit: type=1326 audit(1750444005.408:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.609001][ T8417] loop5: detected capacity change from 0 to 8192
[  141.611584][   T29] audit: type=1326 audit(1750444005.408:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.667147][ T8419] netlink: 'syz.4.1621': attribute type 9 has an invalid length.
[  141.670038][   T29] audit: type=1326 audit(1750444005.408:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.686306][ T8419] netlink: 'syz.4.1621': attribute type 9 has an invalid length.
[  141.694234][   T29] audit: type=1326 audit(1750444005.408:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.694290][   T29] audit: type=1326 audit(1750444005.408:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.854963][   T29] audit: type=1326 audit(1750444005.408:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.878375][   T29] audit: type=1326 audit(1750444005.408:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.901897][   T29] audit: type=1326 audit(1750444005.408:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.925574][   T29] audit: type=1326 audit(1750444005.408:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8411 comm="syz.3.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79fb11e929 code=0x7ffc0000
[  141.951158][ T8419] random: crng reseeded on system resumption
[  141.984819][ T8417]  loop5: p1 < > p2 < p5 > p3 p4
[  142.005403][ T8417] loop5: p3 start 83890176 is beyond EOD, truncated
[  142.012077][ T8417] loop5: p4 size 16776960 extends beyond EOD, truncated
[  142.020027][ T8417] loop5: p5 size 16776960 extends beyond EOD, truncated
[  142.031857][ T8425] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  142.031857][ T8425]    program syz.0.1624 not setting count and/or reply_len properly
[  142.124860][ T8433] loop6: detected capacity change from 0 to 512
[  142.177523][ T8441] netlink: 'syz.0.1630': attribute type 1 has an invalid length.
[  142.177637][ T8433] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  142.185378][ T8441] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1630'.
[  142.204945][ T8444] program syz.4.1631 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.245113][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  142.245264][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  142.261034][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  142.267453][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  142.275915][ T8433] EXT4-fs (loop6): orphan cleanup on readonly fs
[  142.301446][ T8433] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  142.319157][ T8433] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  142.335871][ T8433] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1627: bg 0: block 40: padding at end of block bitmap is not set
[  142.388200][ T8433] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  142.427152][ T8448] infiniband syz!: set active
[  142.431923][ T8448] infiniband syz!: added team_slave_0
[  142.441600][ T8433] EXT4-fs (loop6): 1 truncate cleaned up
[  142.448208][ T8433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  142.474172][ T8448] RDS/IB: syz!: added
[  142.478857][ T8462] netlink: 'syz.3.1635': attribute type 9 has an invalid length.
[  142.483745][ T8448] smc: adding ib device syz! with port count 1
[  142.497011][ T8456] netlink: 'syz.3.1635': attribute type 9 has an invalid length.
[  142.503307][ T8448] smc:    ib device syz! port 1 has pnetid 
[  142.519142][ T4529] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.571901][ T8456] random: crng reseeded on system resumption
[  142.639396][ T8464] loop6: detected capacity change from 0 to 2048
[  142.648400][ T8466] loop4: detected capacity change from 0 to 8192
[  142.706730][ T3762] Alternate GPT is invalid, using primary GPT.
[  142.713267][ T3762]  loop6: p2 p3 p7
[  142.724385][ T5295]  loop4: p1 < > p2 < p5 > p3 p4
[  142.732369][ T5295] loop4: p3 start 83890176 is beyond EOD, truncated
[  142.739099][ T5295] loop4: p4 size 16776960 extends beyond EOD, truncated
[  142.759379][ T8464] Alternate GPT is invalid, using primary GPT.
[  142.765865][ T8464]  loop6: p2 p3 p7
[  142.775081][ T5295] loop4: p5 size 16776960 extends beyond EOD, truncated
[  142.789996][ T8466]  loop4: p1 < > p2 < p5 > p3 p4
[  142.823539][ T8466] loop4: p3 start 83890176 is beyond EOD, truncated
[  142.830461][ T8466] loop4: p4 size 16776960 extends beyond EOD, truncated
[  142.853947][ T8466] loop4: p5 size 16776960 extends beyond EOD, truncated
[  142.871245][ T8472] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  142.871245][ T8472]    program syz.6.1640 not setting count and/or reply_len properly
[  142.940696][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  142.945487][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  143.079633][ T8482] loop3: detected capacity change from 0 to 512
[  143.146447][ T8486] netlink: 'syz.5.1649': attribute type 9 has an invalid length.
[  143.157133][ T8482] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  143.186663][ T8486] netlink: 'syz.5.1649': attribute type 9 has an invalid length.
[  143.196954][ T8482] EXT4-fs (loop3): orphan cleanup on readonly fs
[  143.210157][ T8490] loop0: detected capacity change from 0 to 512
[  143.222062][ T8482] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  143.240466][ T8486] random: crng reseeded on system resumption
[  143.263466][ T8490] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  143.280003][ T8482] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  143.302781][ T8482] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1646: bg 0: block 40: padding at end of block bitmap is not set
[  143.340485][ T8482] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  143.350501][ T8490] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  143.360091][ T8482] EXT4-fs (loop3): 1 truncate cleaned up
[  143.367119][ T8490] EXT4-fs (loop0): orphan cleanup on readonly fs
[  143.374179][ T8482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  143.399521][ T8490] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1648: invalid indirect mapped block 2185560079 (level 1)
[  143.437568][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.449449][ T8490] EXT4-fs (loop0): Remounting filesystem read-only
[  143.456530][ T8490] EXT4-fs (loop0): 1 truncate cleaned up
[  143.462655][ T8490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  143.522482][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  143.653986][ T8500] netlink: 'syz.3.1654': attribute type 10 has an invalid length.
[  143.665127][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.672469][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.762432][ T8514] loop3: detected capacity change from 0 to 512
[  143.801886][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.845877][ T8514] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.864112][ T8511] loop0: detected capacity change from 0 to 8192
[  143.925760][ T3762]  loop0: p1 < > p2 < p5 > p3 p4
[  143.936712][ T3762] loop0: p3 start 83890176 is beyond EOD, truncated
[  143.943399][ T3762] loop0: p4 size 16776960 extends beyond EOD, truncated
[  143.953022][ T8529] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1660'.
[  143.971222][ T8527] loop6: detected capacity change from 0 to 512
[  143.991052][ T3762] loop0: p5 size 16776960 extends beyond EOD, truncated
[  143.994137][ T8533] FAULT_INJECTION: forcing a failure.
[  143.994137][ T8533] name failslab, interval 1, probability 0, space 0, times 0
[  144.010921][ T8533] CPU: 1 UID: 0 PID: 8533 Comm: syz.5.1659 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  144.010964][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  144.010978][ T8533] Call Trace:
[  144.010983][ T8533]  <TASK>
[  144.010992][ T8533]  __dump_stack+0x1d/0x30
[  144.011018][ T8533]  dump_stack_lvl+0xe8/0x140
[  144.011043][ T8533]  dump_stack+0x15/0x1b
[  144.011064][ T8533]  should_fail_ex+0x265/0x280
[  144.011122][ T8533]  should_failslab+0x8c/0xb0
[  144.011208][ T8533]  __kmalloc_noprof+0xa5/0x3e0
[  144.011241][ T8533]  ? sock_kmalloc+0x85/0xc0
[  144.011264][ T8533]  ? iovec_from_user+0x5e/0x210
[  144.011329][ T8533]  sock_kmalloc+0x85/0xc0
[  144.011353][ T8533]  ____sys_sendmsg+0xf8/0x4e0
[  144.011398][ T8533]  ___sys_sendmsg+0x17b/0x1d0
[  144.011452][ T8533]  __x64_sys_sendmsg+0xd4/0x160
[  144.011565][ T8533]  x64_sys_call+0x2999/0x2fb0
[  144.011654][ T8533]  do_syscall_64+0xd2/0x200
[  144.011675][ T8533]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  144.011709][ T8533]  ? clear_bhb_loop+0x40/0x90
[  144.011762][ T8533]  ? clear_bhb_loop+0x40/0x90
[  144.011850][ T8533]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.011886][ T8533] RIP: 0033:0x7fc8e09ae929
[  144.011927][ T8533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.011946][ T8533] RSP: 002b:00007fc8df017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.011969][ T8533] RAX: ffffffffffffffda RBX: 00007fc8e0bd5fa0 RCX: 00007fc8e09ae929
[  144.011985][ T8533] RDX: 0200000000000000 RSI: 0000200000000740 RDI: 0000000000000006
[  144.012000][ T8533] RBP: 00007fc8df017090 R08: 0000000000000000 R09: 0000000000000000
[  144.012016][ T8533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  144.012038][ T8533] R13: 0000000000000000 R14: 00007fc8e0bd5fa0 R15: 00007ffcc9edead8
[  144.012057][ T8533]  </TASK>
[  144.249482][ T8538] loop5: detected capacity change from 0 to 512
[  144.257214][ T8527] EXT4-fs (loop6): too many log groups per flexible block group
[  144.270742][ T8527] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  144.307701][ T8511]  loop0: p1 < > p2 < p5 > p3 p4
[  144.316036][ T8527] EXT4-fs (loop6): mount failed
[  144.323137][ T8511] loop0: p3 start 83890176 is beyond EOD, truncated
[  144.329868][ T8511] loop0: p4 size 16776960 extends beyond EOD, truncated
[  144.338874][ T8511] loop0: p5 size 16776960 extends beyond EOD, truncated
[  144.414261][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.415560][ T8538] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  144.457721][ T8527] netlink: 'syz.6.1658': attribute type 1 has an invalid length.
[  144.484231][ T8538] EXT4-fs (loop5): orphan cleanup on readonly fs
[  144.510140][ T8549] xt_hashlimit: size too large, truncated to 1048576
[  144.520578][ T8538] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  144.572413][ T8542] loop4: detected capacity change from 0 to 1024
[  144.587658][ T8538] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  144.609278][ T8542] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  144.628704][ T8538] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1661: bg 0: block 40: padding at end of block bitmap is not set
[  144.671352][ T8538] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  144.689885][ T8538] EXT4-fs (loop5): 1 truncate cleaned up
[  144.696411][ T8538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.755548][ T8542] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.1663: lblock 1 mapped to illegal pblock 1 (length 1)
[  144.782459][ T8564] program syz.0.1670 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.793099][ T8542] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1663: Failed to acquire dquot type 0
[  144.808638][ T3752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.827235][ T8567] IPv6: Can't replace route, no match found
[  144.834617][ T8542] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1663: Freeing blocks not in datazone - block = 0, count = 4096
[  144.894895][ T8566] SELinux: failed to load policy
[  144.913589][ T8542] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1663: Invalid inode bitmap blk 0 in block_group 0
[  144.927886][ T4406] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1)
[  144.942675][ T8542] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  144.955364][ T4406] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0
[  144.967956][ T8542] EXT4-fs (loop4): 1 orphan inode deleted
[  144.999578][ T8542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.033079][ T8542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.066741][ T8576] loop5: detected capacity change from 0 to 8192
[  145.111794][ T8580] vhci_hcd: invalid port number 96
[  145.117053][ T8580] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  145.134783][ T5295]  loop5: p1 < > p2 < p5 > p3 p4
[  145.144503][ T5295] loop5: p3 start 83890176 is beyond EOD, truncated
[  145.151264][ T5295] loop5: p4 size 16776960 extends beyond EOD, truncated
[  145.169115][ T8582] loop4: detected capacity change from 0 to 1024
[  145.182294][ T8582] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1677: Failed to acquire dquot type 0
[  145.201283][ T5295] loop5: p5 size 16776960 extends beyond EOD, truncated
[  145.229540][ T8576]  loop5: p1 < > p2 < p5 > p3 p4
[  145.246139][ T8582] EXT4-fs (loop4): 1 truncate cleaned up
[  145.252571][ T8576] loop5: p3 start 83890176 is beyond EOD, truncated
[  145.259285][ T8576] loop5: p4 size 16776960 extends beyond EOD, truncated
[  145.260085][ T8582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.279177][ T8576] loop5: p5 size 16776960 extends beyond EOD, truncated
[  145.345325][ T8588] netlink: 'syz.5.1678': attribute type 1 has an invalid length.
[  145.363224][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.386813][ T8588] loop5: detected capacity change from 0 to 256
[  145.422696][ T3504] ==================================================================
[  145.430850][ T3504] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_unlink
[  145.437929][ T3504] 
[  145.440273][ T3504] write to 0xffff8881033bb25c of 4 bytes by task 3294 on cpu 0:
[  145.447930][ T3504]  shmem_unlink+0x13c/0x170
[  145.452473][ T3504]  vfs_unlink+0x26c/0x420
[  145.456936][ T3504]  do_unlinkat+0x28e/0x4c0
[  145.461409][ T3504]  __x64_sys_unlink+0x2e/0x40
[  145.466133][ T3504]  x64_sys_call+0x22a6/0x2fb0
[  145.470833][ T3504]  do_syscall_64+0xd2/0x200
[  145.475355][ T3504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.481269][ T3504] 
[  145.483604][ T3504] read to 0xffff8881033bb25c of 4 bytes by task 3504 on cpu 1:
[  145.491161][ T3504]  fill_mg_cmtime+0x5b/0x260
[  145.495770][ T3504]  generic_fillattr+0x24a/0x340
[  145.500641][ T3504]  shmem_getattr+0x181/0x200
[  145.505249][ T3504]  vfs_getattr_nosec+0x146/0x1e0
[  145.510204][ T3504]  vfs_statx+0x113/0x390
[  145.514467][ T3504]  vfs_fstatat+0x115/0x170
[  145.518919][ T3504]  __se_sys_newfstatat+0x55/0x260
[  145.523967][ T3504]  __x64_sys_newfstatat+0x55/0x70
[  145.529014][ T3504]  x64_sys_call+0x2c22/0x2fb0
[  145.533709][ T3504]  do_syscall_64+0xd2/0x200
[  145.538242][ T3504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.544169][ T3504] 
[  145.546508][ T3504] value changed: 0x1583a6b5 -> 0x158c7819
[  145.552247][ T3504] 
[  145.554581][ T3504] Reported by Kernel Concurrency Sanitizer on:
[  145.560746][ T3504] CPU: 1 UID: 0 PID: 3504 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) 
[  145.572741][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  145.582812][ T3504] ==================================================================
[  145.622554][ T8593] program syz.6.1680 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.650628][ T8593] loop6: detected capacity change from 0 to 1024