last executing test programs:

32.496494661s ago: executing program 1 (id=344):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syncfs(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5d2, &(0x7f00000005c0)="$eJzs3MFuG8cZAOBZW4ppBTUKBG0cx0A2Tg7uwQpJ1TKE9GB2tZI2IbnELhXIpyKopdSolABNCzS5FL6kDdCip56LXHroE/Sl8gwqllzJpGSLtmxVKvJ9gLRD7s+Zf0aLGZHgbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQpSsNputKHSz/uZW/GzJapH3Tjh/UN9/pg5T5id+hyiEqPoJjUa4Pn7q+htPYn9S/boV3hw/ejM0qkMjfP36T3/84Rtzl6oXzkdROCGhV+Lq9MMvLo3zOXziy6++/u2nu7vbvzvrRC6o9bSflXnW66yncVbm8crycvODjbUyXsu6afmgHKa9OCnSzjAv4tvJ/RDCylKcLj7IN/vrq51uGt9Ofha3Vlbu3Wk3m8vxR4uDtFOUef+DjxbLZCPrdrP++iimOn2n/U64V12IH2fDeJg2enG882h3e2lWklVQ63mC2rOC2s12u9Vqt1vLd1fu3ms2G+PL4V+HT8w1jwhHXzJ39hctF85rYWLiOJjjXntVczic1n7y96efuPy/zgQAAAA4K9HoM/Zo9Ln89VFpLeumzamY/ejqueUHAAAAvLwojL5fF9VfzLseouPv/yf4zgoAAAD8H/rLiXvsQhSFcnAlOnjbP9h6P9rrVKXOXr1B4Ng+geHajehaXcnosDxXP0rSm9Fb46C3DqK/rw8703nMh6N5REUxHz0+dQJV1Fz4a7gxjrnxcHx8WMfVOxIX1rJuupjk3Q9bodO5dmmYbg3/8PmjP4ZQFPuXv+33rkVh59Hu9uKvv9h9OMrlcVXL471oXF10ci5XwpPBCL8/3PdYj/z96R7Pjz6IqXr9bb+3MG63Odn/ejPipef/A4RvwtvjmLcXxseF6f43qjZbi0/p/WQWrcHW+1fqxp6z50eyuDmOuXn7verw3u36zPxEFu1ZWbTr8f9TNf6nGotnZDE5FkuzsliavApOkQXAedk5ugodW/+PrbvHZ7nxnv4TZrmdk//LqBbnmav7b8KsVr4J745j3r0x92RFOjKjN2fN6M3nXNcP/0M5ksW/w61//iOEzXDrIPhZa2zV7t+mVtVo77vqBd8da7feaR7Kbnt/P4Sr9fL71eU7j/Y+/Wz7s+3P2+2l5ebPm8277TA/6kZ9ePp4XQ7WHoAftLT4PloY/jkqimzwq9bKSqsz3EjjIk8+jotsdT2Ns/4wLZKNTn89jQdFPsyTvFsVPslW0zIuNweDvBjGa3kRD/Iy2xrd+SWub/1Spr1Of5gl5aCbdso0TvL+sJMM49WsTOLB5i+7WbmRFqMXl4M0ydaypDPM8n5c5ptFki7GcZmmE4HZatofZmtZVezHgyLrdYoH8Sd5d7OXxqtpmRTZYJiPKzxoK+uv5UVvVO3ieQ82AFwQX4b6DnaHt7J74UJozIg57z4CANOOrtJXnhnpHgAAAAAAAAAAAAAAAHBeJrfr/aK+pc9L7wg8KDReUT0zCo3pZ+6//rTgd848jRcqhBDmXlWFB3diugj9evlCFEK4AGmcfI2dVaEx4085X58/bRPV4M4O/lEVcx6zEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc7L8BAAD///dxiQU=")
chdir(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='sched_kthread_work_execute_end\x00', r2, 0x0, 0x400}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0xfffffe51)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000069117e0000000000c6"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
pselect6(0x40, &(0x7f00000004c0)={0x0, 0x0, 0x100000000000002, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r6, 0x0, 0x800000000000002}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r7 = io_uring_setup(0x6c4, &(0x7f0000000400)={0x0, 0x4071, 0x20, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0)

31.557433983s ago: executing program 1 (id=350):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff"])

31.377639241s ago: executing program 1 (id=351):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aa60800000001000ff20010000040000000000000000000000fe8000000000000000000000000000bb0601020000000000c2040005d3ff8800"/70], 0x0)
r2 = socket(0x10, 0x803, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00')
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x26}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x9) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000feffffffffffffff0951000001000000090000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000100014000e"], 0x104}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44080) (async)
r11 = io_uring_setup(0x6b9a, &(0x7f0000000100)={0x0, 0xceb7, 0x800, 0x1, 0x4200159})
r12 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r12, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r12, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
close_range(r11, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)

30.958480372s ago: executing program 1 (id=354):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x8001}}, './file0\x00'})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59e, &(0x7f00000016c0)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c101, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r7, 0x0, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000100)={0x1b, "3c0751c54b97f0cbb904a938e120ff5a452e8b2e09a6f330d1213b0f10e65a2a467dd1ff69d78135d570cca9ae442b76264ef24eeb4c451e9101d000e8cc302fe608e6c4a92046769cf36b38f7c6dcdf5726ce99fb4f2900cc67624193a1d2810b937d36b3af333597d2cec4f3460b21d9a0f64ffd5d2686b3e1da0f1287f360"})
listen(r7, 0x4)
recvmmsg(r7, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r10}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0)

30.420850495s ago: executing program 1 (id=359):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='xprtrdma_post_send_err\x00', r0, 0x0, 0xfffffffffffffff7}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000004980)='test_pages_isolated\x00', r0}, 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001440)={'\x00', 0x400, 0x10, 0x2, 0x0, 0xcca2, 0xffffffffffffffff})
getuid()
r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r4)
getpeername$packet(r4, &(0x7f00000016c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001700)=0x14)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001740)={@rand_addr, @empty, <r7=>0x0}, &(0x7f0000001780)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000004940)={&(0x7f0000001640), 0xc, &(0x7f0000004900)={&(0x7f0000004880)={0x64, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2c00c8c0}, 0x14)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r10=>0x0}, 0x0)
fchownat(r4, &(0x7f00000001c0)='.\x00', 0x0, r10, 0x400)
gettid()
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r12, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0)

29.904810886s ago: executing program 1 (id=362):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r1, 0x0, 0x2, 0x17, 0x0, 0x0)

29.872307809s ago: executing program 32 (id=362):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348)
io_uring_enter(r1, 0x0, 0x2, 0x17, 0x0, 0x0)

3.389457647s ago: executing program 4 (id=802):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[{@user_xattr}, {@delalloc}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ad}}, {@stripe={'stripe', 0x3d, 0x24}}, {@noblock_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@bh}, {@delalloc}], [{@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}, {@dont_appraise}]}, 0x3, 0x583, &(0x7f0000000800)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @multicast1, @loopback, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @multicast1, 0x4, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff, 0xff000000, 0x0, 0x2, {@empty, {[0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x50, 0x5, 0x5, 0x0, 0x5b34, 0x8, 'veth0_to_batadv\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @loopback, @remote, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

3.117419653s ago: executing program 4 (id=807):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00 M\x1d\x00\x00Y\n\x9b\x86\xef\\\xcc\x89\av\x9f\xd6\xd1\x988\xc8\x18\x84^R\xb5\xfd\x92\xc2\x16\xaf#')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
mq_timedsend(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)

3.04854875s ago: executing program 4 (id=809):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100000959ce06598b4e8369387fdd276a4f7a6ca19cdad976117b5dfe7964164438ad217db8eee4cb295baad406ead4b2366b9aac1bc71810ad2d09b13a510c7708796a6270e039f5754f7a761ad2329ce993b593d4929f700e9c8305", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x15)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000001000600000000000400050000000000100008766a1e90a029158d0000000000"], 0x24, 0x2)
listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_read_part_table(0x5ff, &(0x7f0000002c40)="$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")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000080)=0x200ffff, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)

2.117108882s ago: executing program 4 (id=821):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x4, [{@broadcast}, {@loopback, 0x6}]}, @ssrr={0x89, 0xb, 0x98, [@multicast1, @private=0xa010102]}, @noop, @generic={0x82, 0x10, "6b1e243ae22c395dd70c4d15d5dd"}]}}}], 0x48}, 0x8000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c000000004b7e00000009ef553d5ae4f83866aba3360daf59e57058f3a8a101b0f27922ee90c87e9e4adf38af361682fe4a6ea89135f79245003f08b1c1175d7b09fc43bb6f081f53cac7640b23565aa24dfeee103e60c3eb014b202f5d6da47e98e25ce284cbcc9cfd4c1a981fec3ef1834cf7f8028c6714e8b7c3afc8a70924dc4ddde1b6094d3f4308848ace94e6d1ba2cffcc7f6cdb93253a87d1a675bc0cf1cafc25d88005348f506668312ac1442bc5be371bc200b1fa8d8a881237d1617ddcc7368f00000000", @ANYBLOB="000000dc0000"], 0x20)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a04", 0x8}], 0x1}, 0x48800)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@delqdisc={0x330, 0x25, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0xf, 0xc}, {0x8, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x2, 0x5, 0x2, 0x2, 0xff, 0x1}}, {0x6, 0x2, [0x1ff]}}, {{0x1c, 0x1, {0x9, 0x8, 0xfe00, 0xcb1, 0x3, 0x1, 0x5, 0x3}}, {0xa, 0x2, [0xd, 0x7ff, 0x0]}}, {{0x1c, 0x1, {0x9, 0xc0, 0x400, 0x8, 0x0, 0x3119, 0x8d32, 0x4}}, {0xc, 0x2, [0x28, 0x7f, 0xfff8, 0x5]}}, {{0x1c, 0x1, {0x64, 0x7, 0x2, 0x401, 0x1, 0x7ff, 0x7, 0x5}}, {0xe, 0x2, [0x400, 0x9, 0x4, 0x2, 0x31]}}, {{0x1c, 0x1, {0x80, 0x4, 0x6, 0x2d81, 0x0, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xc, 0x8, 0x6, 0x2, 0x3, 0x7, 0x1}}, {0x6, 0x2, [0xd517]}}, {{0x1c, 0x1, {0x9, 0xff, 0x8, 0x800, 0x0, 0x800, 0x4, 0x8}}, {0x14, 0x2, [0x4, 0xe, 0x4, 0x100, 0x7, 0xea79, 0xfbff, 0x7]}}, {{0x1c, 0x1, {0x8, 0x14, 0x7, 0x9, 0x2, 0x5, 0x101, 0x5}}, {0xe, 0x2, [0x3, 0xfffe, 0x6, 0x9, 0x1]}}, {{0x1c, 0x1, {0x16, 0x9, 0x6, 0x9, 0x2, 0x6, 0xa916, 0x1}}, {0x6, 0x2, [0x5c9]}}]}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf1, 0x6, 0xff, 0x2, 0x2, 0x3, 0x6, 0xa}}, {0x18, 0x2, [0x10, 0x0, 0xd9, 0x1, 0x7ba9, 0x5, 0x8, 0xfde9, 0x1, 0x2]}}, {{0x1c, 0x1, {0xe, 0x75, 0x8, 0x8, 0x1, 0x3, 0x401, 0x8}}, {0x14, 0x2, [0x1, 0x4, 0x8000, 0xd8, 0x2, 0x9, 0x8, 0x5]}}, {{0x1c, 0x1, {0xfa, 0x8, 0x5, 0x9, 0x1, 0x8, 0x3, 0x3}}, {0xa, 0x2, [0x7, 0xf800, 0x2]}}, {{0x1c, 0x1, {0xd, 0x6, 0x5, 0xfffffffa, 0x0, 0x7, 0x12000000, 0x3}}, {0xa, 0x2, [0x6, 0x5, 0x5]}}, {{0x1c, 0x1, {0x6, 0xed, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x5}}, {0xe, 0x2, [0xf9, 0x6, 0x6da4, 0x7, 0x0]}}, {{0x1c, 0x1, {0x5, 0x3, 0x8, 0x1, 0x1, 0x8, 0x3, 0x2}}, {0x8, 0x2, [0x8, 0x9]}}, {{0x1c, 0x1, {0x7, 0x3, 0x3, 0x9, 0x0, 0x7, 0x3, 0x4}}, {0xc, 0x2, [0x0, 0x401, 0x8, 0xf]}}, {{0x1c, 0x1, {0x8, 0x9, 0x6, 0x1, 0x1, 0x82b, 0x2, 0x7}}, {0x12, 0x2, [0x4, 0x8000, 0x8001, 0x7, 0x5, 0x3d, 0x2]}}, {{0x1c, 0x1, {0x2, 0x80, 0x3b, 0x5, 0x1, 0x4, 0x9, 0x2}}, {0x8, 0x2, [0xffff, 0x8001]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x330}}, 0x4010)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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")
r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r7])
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00'], 0x92280)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.659705917s ago: executing program 0 (id=831):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2$9p(0x0, 0x800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18)
r2 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
socket(0xa, 0x3, 0x3a)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
write$selinux_load(0xffffffffffffffff, 0x0, 0x65)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000002e80)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESDEC=r3], &(0x7f0000000600)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x4040600)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)

1.575485535s ago: executing program 0 (id=833):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64)
setreuid(0xee01, 0x0) (async)
ioprio_get$uid(0x3, 0xee01) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) (async, rerun: 32)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (rerun: 32)

1.456065747s ago: executing program 3 (id=837):
mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000500))

1.397405342s ago: executing program 0 (id=838):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000000000000", @ANYRES32, @ANYBLOB="0bc34d82824f4092aea6e8f383faaabfc01ef30e6d739da4c3bb116ca0d3d4245c638759838fb7d4f8cfe1616bab1d0cf07256f028cf76a7f85a0b377da1ab56a5ecad0d6b01726e7c1fe07a09deff2aa5b1ef28ddc7fbc779d45cdf2541ddf4a14c689d66faac5592b1f4f4f697fb4e0900000000000000297ac8929abe732e27c42497bfcf05bfb4a1e9108d313e2537521f6ce498781be24d9c9aea30c1230b5f875780e0e6c6", @ANYRES64=0x0], 0x20)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18)
r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x0, 0x18)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r9 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8})
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001200000003000000"])
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000000)={0x87f, 0x160000000, 0x3, 0x8ffffffffffffffe, 0x4, 0xc680})

1.370967085s ago: executing program 3 (id=840):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x44, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x3c}}, 0x0)
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000080)=""/51, 0x33}], 0x3, 0x401, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f00000003c0)='.\x00', 0x800, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.291625563s ago: executing program 3 (id=843):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x1, 0x2, 0x6, 0x0, 0x1, 0xfffffffd}})
fcntl$setsig(r0, 0xa, 0x13)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)="0565e4d21b26b842821f6146481d6733943ff3423c504d0431599612b55c2fa24b54732a7d9ba969170c07c9ec218e0a05ee0ada875586b70600000000000000d08662db737c0a700a890ba3d1d2d87bf2b75bc310324f16858fb15b3a8c515c7d516251d115536556d9539e663ae7f84a7056cb95187a08ebff409e8a531ac7fae81a090cd9e1bb", &(0x7f0000000240), 0x800, r2}, 0x38)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
splice(r2, &(0x7f0000000080)=0x5, r1, &(0x7f00000000c0)=0x80000000, 0x1, 0xc)
syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

1.233222599s ago: executing program 4 (id=844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r1 = epoll_create1(0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r10 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r11 = timerfd_create(0x0, 0x0)
readv(r11, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r12}, 0x10)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00')

829.377429ms ago: executing program 0 (id=850):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x2)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000000000000", @ANYRES32, @ANYBLOB="0bc34d82824f4092aea6e8f383faaabfc01ef30e6d739da4c3bb116ca0d3d4245c638759838fb7d4f8cfe1616bab1d0cf07256f028cf76a7f85a0b377da1ab56a5ecad0d6b01726e7c1fe07a09deff2aa5b1ef28ddc7fbc779d45cdf2541ddf4a14c689d66faac5592b1f4f4f697fb4e0900000000000000297ac8929abe732e27c42497bfcf05bfb4a1e9108d313e2537521f6ce498781be24d9c9aea30c1230b5f875780e0e6c6", @ANYRES64=0x0], 0x20)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18)
r7 = openat(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x18)
fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r8 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8})
ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000000)={0x87f, 0x160000000, 0x3, 0x8ffffffffffffffe, 0x4, 0xc680})

799.665381ms ago: executing program 2 (id=852):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x800, 0x10000, 0xfffffffe, 0x5, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0x401}, 0x11)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
sendto$inet6(r7, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, 0x0}, 0x400000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r10}, 0x10)
recvmmsg(r6, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/137, 0x89}, 0x5}], 0x1, 0x400105a8, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a000000050001000600000014000780080006"], 0x60}, 0x1, 0x0, 0x0, 0x24000084}, 0x0)
r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0)
poll(&(0x7f0000000140)=[{r11, 0x3087}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x2000}], 0x3, 0x7)
ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000240))
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)

569.092824ms ago: executing program 5 (id=854):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

512.49504ms ago: executing program 2 (id=855):
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x40000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)

512.07091ms ago: executing program 5 (id=856):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x1, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x2e72, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x914, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000280)=[0x800, 0x2, 0x3, 0x8, 0x5, 0x3, 0x5, 0x1])
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r4, r4, 0x0, 0x1000000201005)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0xf, 0xe}, {0x0, 0xfff1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000040}, 0x1)
sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)

510.58254ms ago: executing program 2 (id=857):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000000000000", @ANYRES32, @ANYBLOB="0bc34d82824f4092aea6e8f383faaabfc01ef30e6d739da4c3bb116ca0d3d4245c638759838fb7d4f8cfe1616bab1d0cf07256f028cf76a7f85a0b377da1ab56a5ecad0d6b01726e7c1fe07a09deff2aa5b1ef28ddc7fbc779d45cdf2541ddf4a14c689d66faac5592b1f4f4f697fb4e0900000000000000297ac8929abe732e27c42497bfcf05bfb4a1e9108d313e2537521f6ce498781be24d9c9aea30c1230b5f875780e0e6c6", @ANYRES64=0x0], 0x20)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18)
r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x0, 0x18)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r9 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8})
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001200000003000000"])
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000000)={0x87f, 0x160000000, 0x3, 0x8ffffffffffffffe, 0x4, 0xc680})

510.21691ms ago: executing program 5 (id=858):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
listen(r0, 0x100101)
accept4(r0, 0x0, 0x0, 0x80800)

489.554532ms ago: executing program 5 (id=859):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000380)={[{@noauto_da_alloc}, {@grpquota}, {@data_ordered}, {@barrier}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$eJzs3c9vFFUcAPDv7LalpWgLMSoepIkxkCgtLWCI8QBXQxr8ES8etNKCSIGG1mjRhJLgxcR4McbEkwfxv1AiVy7qyYMXT4aEKOFo4prd7pRuO7ttt+0OYT6fZOnMvB3ed7r97nsz+95sAIU1VP2nFLE3ImaSiIFkYamsK+qFQ4vPu3/v09PVRxKVyht/J5HUt6XPT+o/++s790bErz8nsae8ut7Z+SvnJ6anpy7X10fmLsyMzM5fOXjuwsTZqbNTF8deGjt29MjRY6OH2jquqxnbTl7/4KOBz8ff/v7bf5PRH/4YT+J4vFp/4vLj2CpDMVT7nSSri/qPbXVlOSnX/06Wv8RJV44BsSHp69cdEU/FQJTjwYs3EJ+9lmtwwLaqJBEVoKAS+Q8FlfYD0nP7lefBpVx6JUAn3D2xeAFgdf53LV4bjN7atYGd95NYflkniYj2rsw12hURt2+NXz9za/x6bNN1OCDbwrWIeDor/5Na/g9GbwzW8r/UkP/VfsGp+s/q9te3KJ618l9/BLbOYv73tsz/aJL/7y7L//farH/oweL7fQ3539fuIQEAAAAAAEBh3TwRES9mff5fWhr/Exnjf/oj4vgW1D+0Yn315/+lO1tQDZDh7omIVzLH/5bS0TaD5WVrg9GdnDk3PXUoIh6PiAPRvaO6PtqijoNf7PmmWdlQffxf+qjWf7s+FrAex52uHY37TE7MTWz2uIGIu9cinskc/5sstf9JRvtffS+YWWcde56/capZ2dr5D2yXyncR+zPb/wd3rUha359jpNYfGEl7Bas9+8mXPzarv938d4sJ2Lxq+7+zdf4PJsvv1zO78ToOz3dVmpW12//vSd6s3XKmp77t44m5ucujET3JyXJ1a8P2sY3HDI+iNB/SfKnm/4HnWl//y+r/90XEwor/O/mncU5x6sn/+v9sFo/+P+Snmv+TG2r/N74wdmPwp2b1p/mfNvHZ7f+RWlt/oL5lMuN+glBEX6dp2tO4PSMdu7KKOh0vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKShGxK5LS8NJyqTQ8HNEfEU/EztL0pdm5F85c+vDiZLWs9v3/pfSbfgcW15P0+/8Hl62PrVg/HBG7I+Krcl9tffj0penJvA8eAAAAAAAAAAAAAAAAAAAAHhL9Teb/V/1Vzjs6YNt15R0AkJuM/P8tjziAztP+Q3G1zP937nUuEKDj1tP+93YgDqDz9P+huOQ/FNfq/G/1yf+9SqWyreEAHaT9h+KS/wAAAAAA8EjZve/m70lELLzcV3tU9dTLunONDNhupbwDAHLjFj9QXIb+QHE5xweSNcozp/8n69mzlZnTm9gZAAAAAAAAAAAAAApn/17z/6GozP+H4jL/H4ornf+/L+c4gM5zjg/EGjP5V83/L69nLwAAAAAAAAAAAABgK83OXzk/MT09ddnCW23u/stjEbkH395CpVK5Wv0reFjieQgWdmxi93QofP5HkbmQzvVb3175vScBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACN/g8AAP//Z+EiqQ==")
chdir(0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ffc}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

482.455622ms ago: executing program 0 (id=860):
r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x240000, &(0x7f0000000a00)={[{@jqfmt_vfsv1}, {@nombcache}, {@oldalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@jqfmt_vfsold}, {@commit={'commit', 0x3d, 0x6}}, {@jqfmt_vfsv1}], [{@flag='lazytime'}, {@fowner_eq}]}, 0xff, 0x599, &(0x7f00000022c0)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000002c40)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000021000000000071120100f00d00008600000000002000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x80)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, 0x0, 0x25, 0x2, @void}, 0x10)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x1)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000002c0)=0x1, 0x4)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000000)={0x0, 0x300})
syz_open_procfs$namespace(r6, &(0x7f0000000300)='ns/ipc\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd')
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
ioperm(0x4, 0x1, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)

361.322245ms ago: executing program 4 (id=861):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x1)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000400000000000000", @ANYRES32, @ANYBLOB="0bc34d82824f4092aea6e8f383faaabfc01ef30e6d739da4c3bb116ca0d3d4245c638759838fb7d4f8cfe1616bab1d0cf07256f028cf76a7f85a0b377da1ab56a5ecad0d6b01726e7c1fe07a09deff2aa5b1ef28ddc7fbc779d45cdf2541ddf4a14c689d66faac5592b1f4f4f697fb4e0900000000000000297ac8929abe732e27c42497bfcf05bfb4a1e9108d313e2537521f6ce498781be24d9c9aea30c1230b5f875780e0e6c6", @ANYRES64=0x0], 0x20)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4e8881, 0x31, 0x2c}, 0x18)
r8 = openat(r7, &(0x7f0000000040)='./file0\x00', 0x0, 0x18)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x3)
r9 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40)
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8})
ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000001200000003000000"])
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000000)={0x87f, 0x160000000, 0x3, 0x8ffffffffffffffe, 0x4, 0xc680})

323.115209ms ago: executing program 3 (id=862):
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500))

286.527212ms ago: executing program 3 (id=863):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x18)
msgsnd(0x0, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
unshare(0x24040000)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x10411, 0x0, 0xfffffffd}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000001040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x200, 0x1})
io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0)

275.300863ms ago: executing program 0 (id=864):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r1}, 0x18) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000680)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23ad07caa", 0x6e}], 0x2}, 0x8000) (async)
recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async)
close(r5)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
socket$netlink(0x10, 0x3, 0x14) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000006d00673c24bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040000080000180034801400350070696d7265673000000000000000000014000300b261696630000000000000000000000078bdc88266140874157b869cb21e58f6a35de9610d6bfe1246498165e3ca670cbc45dff958d8b31de7fc31a462c68281aaa06d3a496630f9611eee598ca7e9"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r12 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xad, 0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x900000, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xfffffffffffffffd, r10, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r13}, 0x10)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r14}, 0x10) (async)
close(r12)

238.511457ms ago: executing program 5 (id=865):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$selinux_load(0xffffffffffffffff, 0x0, 0x65)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0)
unshare(0x20060400)

159.499744ms ago: executing program 2 (id=866):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000580)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r2}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r4}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000180081054e81f782db4cb904021d080006007c09c8fe55a10a0015800a00142603600e1208000f0000000406a80016c0080003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025d96306b1f569769ec483b9ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b", 0xd8}], 0x1}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x10000, 0x0, 0x0, 0x400}, {}, {0x0, 0x400, 0xfffffffc}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {0x0, 0x4, 0x0, 0x3}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x523e, 0xfffffffd}, {}, {0x4, 0x0, 0x0, 0x10}, {0x0, 0x800000, 0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x5}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

103.47041ms ago: executing program 5 (id=867):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000680)={0xc4, r4, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x84, 0x2, '\x00\x91P{5\x057\x97:\xf1\xa0\x9fj\n\"\xf8\xcf\\\xc6/\xed\xe9\xe3Z\x9c\x8bK(\v|\xc0!\xfe\x04\xa3)\xc2\xb4\xe0j\x9ej)\a\x83~\x0e\x13\xaaF\x00\x00\x00\x00\x00\x00\x00o\xfao\xfe\x18\xe2\xbf\x15Q\xe8W*\x85N\x80\t\xd2n\x87\xf1|%.\x94\xea^[\xf37\xab\x9a\xf0 \xd3\x94H\x05\x1a\n8\xe95w\a<y\x17p\x7f\xe9\xbc\xe1B\xb8\x97\x1a_+\xe0\xa4\xb07\xa8|X\xf5s\xde\xd7$\a'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0xc4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x29, &(0x7f0000000ac0)=""/111, &(0x7f0000000b40)=0x6f)
socket$inet6_udp(0xa, 0x2, 0x0)

21.153888ms ago: executing program 3 (id=868):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x46, "cce753f3edcca357790f8e035b0d4cfaf2ff3cee6b909a8d2c47b70ec46e03b4e4a736c6346993212c0c1e462fac1c2a6fcddaa002a8e3950298f95d00c5f7264e315d21dfa2"}}, 0x4c)
r1 = syz_pidfd_open(0xffffffffffffffff, 0x0)
preadv2(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/241, 0xf1}], 0x2, 0x3, 0x8, 0x1b)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', <r3=>0x0, 0x700, 0x80, 0xfffffffe, 0x7fffffff, {{0x13, 0x4, 0x0, 0x3e, 0x4c, 0x65, 0x0, 0x79, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0x1b, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x2a, [@local, @multicast1]}, @rr={0x7, 0xf, 0xd7, [@dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffa}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x4061)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r4, &(0x7f0000000540)=""/90, 0x5a, 0x10020, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f00000009c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x2ac, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xf3, 0x3, "0dea1865a1fa379317fb6db0c59c2d476bf0f70e50fe90fd01c0b34f60e551bd6423f8bfa0897b14644609bc3ea7f4dbf67f64c68b2445f2b632ba849b7afe2bf4dbb7843d7694b868d1b88b049e91477527f88170ee77939d684f8b508a5917875e08038f02c8e8d4c8791addd386e1bd9b0e47eb09e302a466833d52e08625091ac13cb9986b1eacd94d848a2804d666b437ec58b126b514679810bba7f03e8191be86ddd34ac010145c317bd68188158ffa0c1c3fd36c388ce0a3aac10007e7773f56625c88f7a4a9a73e2cb4ef658f58c229dfed94b687044eadf5baeb840d11f61ccf5b1ba953228748137132"}, @ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#*\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xed[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ')\\]\xf1\xbc-$^^\x82\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/uhid\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff33c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':(!^}@\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%+\xe9\'-\\$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0xc804)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000a80)=0x2)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r5)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r8, 0xb3d52b3804c22839, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x24000890)
mq_unlink(&(0x7f0000000c00)='/dev/net/tun\x00')
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r5)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4008811)
pidfd_send_signal(r5, 0x3b, &(0x7f0000000d80)={0x2e, 0x3, 0x7}, 0x0)
listen(r5, 0xffff)
mq_unlink(&(0x7f0000000e00)='mptcp_pm\x00')
r10 = add_key$keyring(&(0x7f0000000f00), &(0x7f0000000f40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(&(0x7f0000000e40)='trusted\x00', &(0x7f0000000e80)={'syz', 0x3}, &(0x7f0000000ec0)='\x00', r10)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000f80)=<r11=>0x0)
syz_open_procfs(r11, &(0x7f0000000fc0)='attr/sockcreate\x00')
mq_unlink(&(0x7f0000001000)='-\x00')

20.466748ms ago: executing program 2 (id=869):
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x40000)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8)

0s ago: executing program 2 (id=870):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x100101)
accept4(r0, 0x0, 0x0, 0x80800)

kernel console output (not intermixed with test programs):

it: type=1326 audit(1760879364.736:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.566384][ T4920] loop0: detected capacity change from 0 to 4096
[   60.574976][   T29] audit: type=1326 audit(1760879364.746:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.604656][   T29] audit: type=1326 audit(1760879364.746:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.628050][   T29] audit: type=1326 audit(1760879364.746:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.651480][   T29] audit: type=1326 audit(1760879364.746:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.674947][   T29] audit: type=1326 audit(1760879364.746:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   60.698381][   T29] audit: type=1326 audit(1760879364.746:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89497bf003 code=0x7ffc0000
[   60.721670][   T29] audit: type=1326 audit(1760879364.746:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.0.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89497bda7f code=0x7ffc0000
[   60.823480][ T4933] FAULT_INJECTION: forcing a failure.
[   60.823480][ T4933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.836719][ T4933] CPU: 1 UID: 0 PID: 4933 Comm: syz.4.326 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.836832][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   60.836848][ T4933] Call Trace:
[   60.836856][ T4933]  <TASK>
[   60.836863][ T4933]  __dump_stack+0x1d/0x30
[   60.836884][ T4933]  dump_stack_lvl+0xe8/0x140
[   60.836957][ T4933]  dump_stack+0x15/0x1b
[   60.836978][ T4933]  should_fail_ex+0x265/0x280
[   60.837022][ T4933]  should_fail+0xb/0x20
[   60.837063][ T4933]  should_fail_usercopy+0x1a/0x20
[   60.837090][ T4933]  _copy_to_user+0x20/0xa0
[   60.837146][ T4933]  simple_read_from_buffer+0xb5/0x130
[   60.837177][ T4933]  proc_fail_nth_read+0x10e/0x150
[   60.837216][ T4933]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   60.837300][ T4933]  vfs_read+0x1a8/0x770
[   60.837320][ T4933]  ? bpf_trace_run2+0x124/0x1c0
[   60.837419][ T4933]  ? __rcu_read_unlock+0x4f/0x70
[   60.837451][ T4933]  ? __fget_files+0x184/0x1c0
[   60.837514][ T4933]  ksys_read+0xda/0x1a0
[   60.837540][ T4933]  __x64_sys_read+0x40/0x50
[   60.837589][ T4933]  x64_sys_call+0x27c0/0x3000
[   60.837621][ T4933]  do_syscall_64+0xd2/0x200
[   60.837654][ T4933]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.837717][ T4933]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   60.837746][ T4933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.837959][ T4933] RIP: 0033:0x7ff21a7dd9dc
[   60.837983][ T4933] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   60.838039][ T4933] RSP: 002b:00007ff21923f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   60.838062][ T4933] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7dd9dc
[   60.838079][ T4933] RDX: 000000000000000f RSI: 00007ff21923f0a0 RDI: 0000000000000005
[   60.838095][ T4933] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000000
[   60.838112][ T4933] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[   60.838128][ T4933] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   60.838154][ T4933]  </TASK>
[   61.066897][ T4920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.187019][ T4937] loop3: detected capacity change from 0 to 1024
[   61.208305][ T4921] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.324: corrupted inode contents
[   61.236728][ T4937] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.243726][ T4921] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.324: mark_inode_dirty error
[   61.280813][ T4937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.288313][ T4921] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.324: corrupted inode contents
[   61.312797][ T4937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.325754][ T4921] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.324: mark_inode_dirty error
[   61.351797][ T4921] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.324: corrupted inode contents
[   61.367869][ T4921] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.324: mark_inode_dirty error
[   61.368004][ T4921] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.324: corrupted inode contents
[   61.368355][ T4921] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.324: mark_inode_dirty error
[   61.368517][ T4921] EXT4-fs error (device loop0): ext4_evict_inode:265: comm syz.0.324: couldn't truncate inode 15 (err -117)
[   61.371409][ T4950] FAULT_INJECTION: forcing a failure.
[   61.371409][ T4950] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   61.371496][ T4950] CPU: 1 UID: 0 PID: 4950 Comm: syz.4.329 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   61.371522][ T4950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   61.371537][ T4950] Call Trace:
[   61.371544][ T4950]  <TASK>
[   61.371552][ T4950]  __dump_stack+0x1d/0x30
[   61.371580][ T4950]  dump_stack_lvl+0xe8/0x140
[   61.371597][ T4950]  dump_stack+0x15/0x1b
[   61.371611][ T4950]  should_fail_ex+0x265/0x280
[   61.371683][ T4950]  should_fail_alloc_page+0xf2/0x100
[   61.371711][ T4950]  __alloc_frozen_pages_noprof+0xff/0x360
[   61.371754][ T4950]  alloc_pages_mpol+0xb3/0x260
[   61.371774][ T4950]  alloc_migration_target_by_mpol+0x11b/0x280
[   61.371813][ T4950]  migrate_pages_batch+0x349/0x1b60
[   61.371847][ T4950]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   61.371958][ T4950]  ? __walk_page_range+0x324/0x340
[   61.371994][ T4950]  ? __pfx_queue_pages_test_walk+0x10/0x10
[   61.372019][ T4950]  ? find_vma+0x6c/0xa0
[   61.372057][ T4950]  migrate_pages+0xf55/0x1760
[   61.372227][ T4950]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[   61.372266][ T4950]  __se_sys_mbind+0x975/0xac0
[   61.372317][ T4950]  __x64_sys_mbind+0x78/0x90
[   61.372366][ T4950]  x64_sys_call+0x2936/0x3000
[   61.372430][ T4950]  do_syscall_64+0xd2/0x200
[   61.372505][ T4950]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   61.372532][ T4950]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   61.372563][ T4950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.372590][ T4950] RIP: 0033:0x7ff21a7defc9
[   61.372608][ T4950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.372695][ T4950] RSP: 002b:00007ff21923f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[   61.372796][ T4950] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7defc9
[   61.372819][ T4950] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000
[   61.372834][ T4950] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000002
[   61.372927][ T4950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.372938][ T4950] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   61.372963][ T4950]  </TASK>
[   61.412288][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.482953][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.586605][ T4967] 9pnet_fd: Insufficient options for proto=fd
[   61.788350][ T4981] netlink: 'syz.3.339': attribute type 1 has an invalid length.
[   61.788370][ T4981] netlink: 224 bytes leftover after parsing attributes in process `syz.3.339'.
[   61.982792][ T4987] program syz.4.340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.034923][ T4992] program syz.4.340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.126437][ T4995] loop1: detected capacity change from 0 to 736
[   62.351520][ T5003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.368374][ T5003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.485095][ T5000] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.542434][ T5005] program syz.4.348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.552649][ T5007] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.592911][ T5015] program syz.4.348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.605213][ T5017] netlink: 'syz.2.345': attribute type 4 has an invalid length.
[   62.613038][ T5017] netlink: 17 bytes leftover after parsing attributes in process `syz.2.345'.
[   62.624800][ T5017] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.636412][ T5017] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   62.869978][ T5020] program syz.3.349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   62.919999][ T5023] program syz.3.349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   63.009430][ T5030] loop1: detected capacity change from 0 to 512
[   63.057858][ T5030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.101597][ T5030] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   63.186448][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.417748][ T5048] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[   63.470871][ T5048] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.552350][ T5056] loop0: detected capacity change from 0 to 512
[   63.586445][ T5056] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   63.596112][ T5056] EXT4-fs (loop0): orphan cleanup on readonly fs
[   63.617380][ T5056] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.352: corrupted inode contents
[   63.642147][ T5064] loop1: detected capacity change from 0 to 512
[   63.709432][ T5056] EXT4-fs (loop0): Remounting filesystem read-only
[   63.726071][ T5064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.754542][ T5056] EXT4-fs (loop0): 1 truncate cleaned up
[   63.767761][ T4220] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.778415][ T4220] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.816052][ T5064] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.870029][ T4220] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started
[   63.931497][ T5056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.964065][ T5081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.046201][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.065228][ T5084] loop3: detected capacity change from 0 to 1024
[   64.090314][ T5084] EXT4-fs: Ignoring removed nomblk_io_submit option
[   64.104849][ T5060] loop4: detected capacity change from 0 to 32768
[   64.128434][ T5084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   64.150644][ T5084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.235323][ T5098] lo speed is unknown, defaulting to 1000
[   64.334195][ T5060]  loop4: p1 p2 p3 < p5 p6 >
[   64.340205][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.377104][ T5060] loop4: p2 size 16775168 extends beyond EOD, truncated
[   64.386412][ T5091] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.400608][ T5060] loop4: p5 start 4294970168 is beyond EOD, truncated
[   64.688275][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.769180][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.801697][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   64.804807][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[   64.816009][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   64.825245][ T4493] udevd[4493]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   64.873280][ T3516] udevd[3516]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   64.884813][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[   64.896431][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   64.907325][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.909246][ T4493] udevd[4493]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   64.928349][ T5123] program syz.3.363 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   64.980142][ T5106] program syz.3.363 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.018093][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.131932][   T12] bridge_slave_1: left allmulticast mode
[   65.137681][   T12] bridge_slave_1: left promiscuous mode
[   65.143500][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.169549][   T12] bridge_slave_0: left allmulticast mode
[   65.175256][   T12] bridge_slave_0: left promiscuous mode
[   65.181115][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.336806][ T5155] program syz.4.366 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.348627][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   65.353437][ T5157] netlink: 'syz.3.372': attribute type 1 has an invalid length.
[   65.364974][ T5157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.372'.
[   65.378127][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   65.397603][   T12] bond0 (unregistering): Released all slaves
[   65.400592][ T5158] program syz.4.366 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.411816][   T12] bond1 (unregistering): Released all slaves
[   65.413695][ T5159] program syz.0.371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   65.448053][ T5115] lo speed is unknown, defaulting to 1000
[   65.474399][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   65.485456][   T12] hsr_slave_0: left promiscuous mode
[   65.491502][   T12] hsr_slave_1: left promiscuous mode
[   65.497729][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.505134][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.513311][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.520943][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.533527][   T12] veth1_macvtap: left promiscuous mode
[   65.539303][   T12] veth0_macvtap: left promiscuous mode
[   65.544958][   T12] veth1_vlan: left promiscuous mode
[   65.552638][   T12] veth0_vlan: left promiscuous mode
[   65.643258][   T12] team0 (unregistering): Port device team_slave_1 removed
[   65.653672][   T12] team0 (unregistering): Port device team_slave_0 removed
[   65.732966][ T3422] lo speed is unknown, defaulting to 1000
[   65.738845][ T3422] infiniband syz2: ib_query_port failed (-19)
[   65.817250][   T29] kauditd_printk_skb: 532 callbacks suppressed
[   65.817313][   T29] audit: type=1326 audit(1760879370.096:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a7defc9 code=0x7ffc0000
[   65.846951][   T29] audit: type=1326 audit(1760879370.096:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a7defc9 code=0x7ffc0000
[   65.875195][   T29] audit: type=1326 audit(1760879370.146:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   65.898757][   T29] audit: type=1326 audit(1760879370.146:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5148 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   65.938710][ T5115] chnl_net:caif_netlink_parms(): no params data found
[   66.056495][   T29] audit: type=1326 audit(1760879370.316:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   66.079929][   T29] audit: type=1326 audit(1760879370.316:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   66.103265][   T29] audit: type=1326 audit(1760879370.316:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   66.126606][   T29] audit: type=1326 audit(1760879370.316:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   66.149996][   T29] audit: type=1326 audit(1760879370.316:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5183 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f89497befc9 code=0x7ffc0000
[   66.230237][ T5191] loop2: detected capacity change from 0 to 128
[   66.253823][   T29] audit: type=1326 audit(1760879370.466:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5186 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d16efc9 code=0x7ffc0000
[   66.286909][ T5202] loop3: detected capacity change from 0 to 1024
[   66.297494][ T5202] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.307183][ T5202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.362811][ T5202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.385978][ T5191] syz.2.376: attempt to access beyond end of device
[   66.385978][ T5191] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128
[   66.404773][ T5208] netlink: 'syz.4.378': attribute type 1 has an invalid length.
[   66.412476][ T5208] netlink: 224 bytes leftover after parsing attributes in process `syz.4.378'.
[   66.440792][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.449382][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.456313][ T5191] syz.2.376: attempt to access beyond end of device
[   66.456313][ T5191] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128
[   66.467208][ T5115] bridge_slave_0: entered allmulticast mode
[   66.469782][ T5191] Buffer I/O error on dev loop2, logical block 79, lost async page write
[   66.477949][ T5115] bridge_slave_0: entered promiscuous mode
[   66.509332][ T5191] syz.2.376: attempt to access beyond end of device
[   66.509332][ T5191] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128
[   66.522699][ T5191] Buffer I/O error on dev loop2, logical block 80, lost async page write
[   66.523191][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.538495][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.564152][ T5115] bridge_slave_1: entered allmulticast mode
[   66.575686][ T5115] bridge_slave_1: entered promiscuous mode
[   66.607858][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.615993][ T5191] syz.2.376: attempt to access beyond end of device
[   66.615993][ T5191] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128
[   66.618549][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.657659][ T5191] syz.2.376: attempt to access beyond end of device
[   66.657659][ T5191] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128
[   66.665354][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.671345][ T5191] Buffer I/O error on dev loop2, logical block 83, lost async page write
[   66.707978][ T5191] syz.2.376: attempt to access beyond end of device
[   66.707978][ T5191] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128
[   66.721393][ T5191] Buffer I/O error on dev loop2, logical block 84, lost async page write
[   66.737508][ T5115] team0: Port device team_slave_0 added
[   66.744393][ T5115] team0: Port device team_slave_1 added
[   66.747180][ T5191] syz.2.376: attempt to access beyond end of device
[   66.747180][ T5191] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128
[   66.786278][ T5191] syz.2.376: attempt to access beyond end of device
[   66.786278][ T5191] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128
[   66.799699][ T5191] Buffer I/O error on dev loop2, logical block 95, lost async page write
[   66.815978][ T5191] syz.2.376: attempt to access beyond end of device
[   66.815978][ T5191] loop2: rw=2049, sector=192, nr_sectors = 2 limit=128
[   66.829459][ T5191] Buffer I/O error on dev loop2, logical block 96, lost async page write
[   66.851091][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.858122][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.884130][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.898505][ T5191] syz.2.376: attempt to access beyond end of device
[   66.898505][ T5191] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128
[   66.912473][ T5191] Buffer I/O error on dev loop2, logical block 99, lost async page write
[   66.935991][ T5191] Buffer I/O error on dev loop2, logical block 100, lost async page write
[   66.946556][ T5239] program syz.0.383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.959190][ T5191] Buffer I/O error on dev loop2, logical block 111, lost async page write
[   66.968358][ T5191] Buffer I/O error on dev loop2, logical block 112, lost async page write
[   66.988850][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.995820][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.022006][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.035815][ T5220] program syz.0.383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.037664][ T5244] program syz.3.385 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.098621][ T5115] hsr_slave_0: entered promiscuous mode
[   67.104791][ T5115] hsr_slave_1: entered promiscuous mode
[   67.392187][ T5251] program syz.4.387 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.418819][ T5115] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   67.442962][ T5258] program syz.4.387 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.457342][ T5115] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   67.480673][ T5115] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   67.511626][ T5115] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   67.586546][ T5264] program syz.0.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.636882][ T5273] program syz.0.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.750373][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.773406][ T5115] 8021q: adding VLAN 0 to HW filter on device team0
[   67.809229][ T1672] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.816388][ T1672] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.878588][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.885758][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.061039][ T5318] program syz.4.402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.126209][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.144116][ T5326] program syz.3.405 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.196485][ T5348] program syz.3.405 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.387934][ T5358] program syz.4.410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.439101][ T5369] program syz.4.410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.460256][ T5377] loop3: detected capacity change from 0 to 1024
[   68.487084][ T5377] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.497431][ T5377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.523623][ T5115] veth0_vlan: entered promiscuous mode
[   68.545721][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.551604][ T5115] veth1_vlan: entered promiscuous mode
[   68.641330][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.661551][ T5115] veth0_macvtap: entered promiscuous mode
[   68.680299][ T5385] program syz.2.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.702238][ T5115] veth1_macvtap: entered promiscuous mode
[   68.738632][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.767801][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.787967][ T5387] program syz.2.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.792986][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.837421][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.868818][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.918705][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.044349][ T5410] program syz.5.364 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.066349][ T5418] netlink: 'syz.3.423': attribute type 1 has an invalid length.
[   69.074091][ T5418] netlink: 224 bytes leftover after parsing attributes in process `syz.3.423'.
[   69.102914][ T5424] program syz.5.364 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.295295][ T5430] program syz.4.427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.350146][ T5439] program syz.4.427 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.381216][ T5432] program syz.2.430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.431926][ T5440] program syz.2.430 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   69.622121][ T5460] loop4: detected capacity change from 0 to 256
[   69.690776][ T5465] FAULT_INJECTION: forcing a failure.
[   69.690776][ T5465] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.693032][ T5460] vfat: Unknown parameter ''
[   69.704067][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.0.436 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   69.704103][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   69.704123][ T5465] Call Trace:
[   69.704131][ T5465]  <TASK>
[   69.704141][ T5465]  __dump_stack+0x1d/0x30
[   69.704222][ T5465]  dump_stack_lvl+0xe8/0x140
[   69.704249][ T5465]  dump_stack+0x15/0x1b
[   69.704272][ T5465]  should_fail_ex+0x265/0x280
[   69.704382][ T5465]  should_fail+0xb/0x20
[   69.704424][ T5465]  should_fail_usercopy+0x1a/0x20
[   69.704453][ T5465]  strncpy_from_user+0x25/0x230
[   69.704500][ T5465]  ? kmem_cache_alloc_noprof+0x242/0x480
[   69.704547][ T5465]  ? getname_flags+0x80/0x3b0
[   69.704586][ T5465]  getname_flags+0xae/0x3b0
[   69.704623][ T5465]  io_getxattr_prep+0x1ba/0x200
[   69.704733][ T5465]  io_submit_sqes+0x5ef/0x1060
[   69.704786][ T5465]  __se_sys_io_uring_enter+0x1c1/0x1b70
[   69.704828][ T5465]  ? 0xffffffff81000000
[   69.704844][ T5465]  ? __rcu_read_unlock+0x4f/0x70
[   69.704885][ T5465]  ? get_pid_task+0x96/0xd0
[   69.704914][ T5465]  ? proc_fail_nth_write+0x13b/0x160
[   69.705006][ T5465]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   69.705052][ T5465]  ? vfs_write+0x7e8/0x960
[   69.705102][ T5465]  ? __rcu_read_unlock+0x4f/0x70
[   69.705232][ T5465]  ? __fget_files+0x184/0x1c0
[   69.705280][ T5465]  ? fput+0x8f/0xc0
[   69.705321][ T5465]  __x64_sys_io_uring_enter+0x78/0x90
[   69.705364][ T5465]  x64_sys_call+0x2df0/0x3000
[   69.705403][ T5465]  do_syscall_64+0xd2/0x200
[   69.705436][ T5465]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   69.705472][ T5465]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   69.705504][ T5465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.705597][ T5465] RIP: 0033:0x7f89497befc9
[   69.705615][ T5465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.705639][ T5465] RSP: 002b:00007f8948227038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[   69.705671][ T5465] RAX: ffffffffffffffda RBX: 00007f8949a15fa0 RCX: 00007f89497befc9
[   69.705687][ T5465] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000008
[   69.705703][ T5465] RBP: 00007f8948227090 R08: 0000000000000000 R09: 0000000000000000
[   69.705718][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   69.705734][ T5465] R13: 00007f8949a16038 R14: 00007f8949a15fa0 R15: 00007ffdfa09fcc8
[   69.705759][ T5465]  </TASK>
[   70.164787][ T5482] program syz.3.440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.227279][ T5495] program syz.3.440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.270338][ T5486] program syz.5.442 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.312428][ T5489] program syz.2.443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.474140][ T5501] program syz.4.445 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.524898][ T5504] program syz.4.445 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.759030][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'.
[   70.838621][   T29] kauditd_printk_skb: 949 callbacks suppressed
[   70.838716][   T29] audit: type=1326 audit(1760879375.116:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   70.906439][ T5519] program syz.3.451 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.931280][ T5551] loop4: detected capacity change from 0 to 512
[   70.957286][ T5530] program syz.3.451 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.974143][   T29] audit: type=1326 audit(1760879375.146:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5518 comm="syz.3.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   70.997605][   T29] audit: type=1326 audit(1760879375.156:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.021230][   T29] audit: type=1326 audit(1760879375.156:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.044791][   T29] audit: type=1326 audit(1760879375.156:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.068374][   T29] audit: type=1326 audit(1760879375.156:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.091781][   T29] audit: type=1326 audit(1760879375.156:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.115148][   T29] audit: type=1326 audit(1760879375.156:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.138557][   T29] audit: type=1326 audit(1760879375.156:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.162010][   T29] audit: type=1326 audit(1760879375.156:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5537 comm="syz.5.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   71.171239][ T5551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.437346][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.484736][ T5600] loop3: detected capacity change from 0 to 512
[   71.575927][ T5600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.603598][ T5615] loop2: detected capacity change from 0 to 1024
[   71.612772][ T5571] program syz.0.460 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.666600][ T5600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.675616][ T5600] netlink: 108 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.676624][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.686480][ T5600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.700705][ T5600] netlink: 108 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.709837][ T5600] netlink: 84 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.718870][ T5587] program syz.0.460 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.764766][ T5615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.784459][ T5600] 9pnet_fd: Insufficient options for proto=fd
[   71.835176][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'.
[   71.849564][ T5615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.924994][ T5630] program syz.5.472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.947032][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.976015][ T5636] program syz.5.472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   71.998596][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.023716][ T5644] netlink: 'syz.4.474': attribute type 1 has an invalid length.
[   72.031432][ T5644] netlink: 224 bytes leftover after parsing attributes in process `syz.4.474'.
[   72.290406][ T5674] netlink: 'syz.3.485': attribute type 10 has an invalid length.
[   72.301971][ T5674] team0: Port device dummy0 added
[   72.317379][ T5674] netlink: 'syz.3.485': attribute type 10 has an invalid length.
[   72.349328][ T5674] team0: Failed to send options change via netlink (err -105)
[   72.357472][ T5674] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   72.372402][ T5679] loop5: detected capacity change from 0 to 1024
[   72.376368][ T5674] team0: Port device dummy0 removed
[   72.385588][ T5679] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.389733][ T5674] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   72.422960][ T5679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.456152][ T5679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.483569][ T5680] program syz.0.481 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.501015][ T5676] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.534763][ T5661] program syz.0.481 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.552215][ T5681] program syz.2.484 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.590277][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.641052][ T5683] program syz.3.487 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.692422][ T5686] program syz.3.487 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.731559][ T5701] loop2: detected capacity change from 0 to 512
[   72.748561][ T5701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.778013][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'.
[   72.820063][ T5700] program syz.5.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.871679][ T5709] program syz.5.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.905119][ T5714] loop3: detected capacity change from 0 to 512
[   72.917613][ T5717] 9pnet_fd: Insufficient options for proto=fd
[   72.954615][ T5714] EXT4-fs (loop3): 1 truncate cleaned up
[   72.978529][ T5714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.011579][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.012919][ T5714] FAULT_INJECTION: forcing a failure.
[   73.012919][ T5714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   73.033781][ T5714] CPU: 1 UID: 0 PID: 5714 Comm: syz.3.492 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.033813][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   73.033829][ T5714] Call Trace:
[   73.033835][ T5714]  <TASK>
[   73.033844][ T5714]  __dump_stack+0x1d/0x30
[   73.033929][ T5714]  dump_stack_lvl+0xe8/0x140
[   73.034018][ T5714]  dump_stack+0x15/0x1b
[   73.034037][ T5714]  should_fail_ex+0x265/0x280
[   73.034138][ T5714]  should_fail+0xb/0x20
[   73.034177][ T5714]  should_fail_usercopy+0x1a/0x20
[   73.034202][ T5714]  copy_folio_from_iter_atomic+0x278/0x11b0
[   73.034312][ T5714]  generic_perform_write+0x2c2/0x490
[   73.034344][ T5714]  ext4_buffered_write_iter+0x1ee/0x3c0
[   73.034365][ T5714]  ext4_file_write_iter+0x387/0xf60
[   73.034398][ T5714]  ? kstrtouint_from_user+0x9f/0xf0
[   73.034460][ T5714]  ? 0xffffffff81000000
[   73.034477][ T5714]  ? __rcu_read_unlock+0x4f/0x70
[   73.034509][ T5714]  ? avc_policy_seqno+0x15/0x30
[   73.034628][ T5714]  ? selinux_file_permission+0x1e4/0x320
[   73.034730][ T5714]  ? __pfx_ext4_file_write_iter+0x10/0x10
[   73.034766][ T5714]  vfs_write+0x52a/0x960
[   73.034795][ T5714]  __x64_sys_pwrite64+0xfd/0x150
[   73.034824][ T5714]  x64_sys_call+0xc4d/0x3000
[   73.034936][ T5714]  do_syscall_64+0xd2/0x200
[   73.034970][ T5714]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   73.034998][ T5714]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   73.035028][ T5714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.035060][ T5714] RIP: 0033:0x7f07833eefc9
[   73.035079][ T5714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.035102][ T5714] RSP: 002b:00007f0781e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[   73.035127][ T5714] RAX: ffffffffffffffda RBX: 00007f0783645fa0 RCX: 00007f07833eefc9
[   73.035143][ T5714] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005
[   73.035184][ T5714] RBP: 00007f0781e57090 R08: 0000000000000000 R09: 0000000000000000
[   73.035201][ T5714] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001
[   73.035217][ T5714] R13: 00007f0783646038 R14: 00007f0783645fa0 R15: 00007fffc05ac468
[   73.035242][ T5714]  </TASK>
[   73.100110][ T5714] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.492: bg 0: block 465: padding at end of block bitmap is not set
[   73.167575][ T5731] program syz.4.491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.182833][ T5714] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   73.253331][ T5735] program syz.4.491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.253814][ T5714] EXT4-fs (loop3): This should not happen!! Data will be lost
[   73.253814][ T5714] 
[   73.308552][ T5714] EXT4-fs (loop3): Total free blocks count 0
[   73.314546][ T5714] EXT4-fs (loop3): Free/Dirty block details
[   73.320503][ T5714] EXT4-fs (loop3): free_blocks=0
[   73.325465][ T5714] EXT4-fs (loop3): dirty_blocks=66
[   73.330623][ T5714] EXT4-fs (loop3): Block reservation details
[   73.336636][ T5714] EXT4-fs (loop3): i_reserved_data_blocks=66
[   73.385193][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.726654][ T5769] program syz.3.503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.777815][ T5785] program syz.3.503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.849805][ T5815] FAULT_INJECTION: forcing a failure.
[   73.849805][ T5815] name failslab, interval 1, probability 0, space 0, times 0
[   73.849914][ T5784] program syz.0.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.862558][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.4.501 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   73.862588][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   73.862606][ T5815] Call Trace:
[   73.862615][ T5815]  <TASK>
[   73.862624][ T5815]  __dump_stack+0x1d/0x30
[   73.862736][ T5815]  dump_stack_lvl+0xe8/0x140
[   73.862764][ T5815]  dump_stack+0x15/0x1b
[   73.862840][ T5815]  should_fail_ex+0x265/0x280
[   73.862898][ T5815]  ? u32_init+0x111/0x3d0
[   73.862929][ T5815]  should_failslab+0x8c/0xb0
[   73.862967][ T5815]  __kmalloc_cache_noprof+0x4c/0x4a0
[   73.863010][ T5815]  ? tcf_proto_create+0x44/0x1a0
[   73.863136][ T5815]  u32_init+0x111/0x3d0
[   73.863163][ T5815]  ? __pfx_u32_reoffload+0x10/0x10
[   73.863195][ T5815]  tcf_proto_create+0x130/0x1a0
[   73.863296][ T5815]  tc_new_tfilter+0x95c/0x10a0
[   73.863339][ T5815]  ? __rcu_read_unlock+0x4f/0x70
[   73.863401][ T5815]  ? ns_capable+0x7d/0xb0
[   73.863441][ T5815]  ? __pfx_tc_new_tfilter+0x10/0x10
[   73.863486][ T5815]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   73.863521][ T5815]  netlink_rcv_skb+0x123/0x220
[   73.863563][ T5815]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   73.863600][ T5815]  rtnetlink_rcv+0x1c/0x30
[   73.863623][ T5815]  netlink_unicast+0x5c0/0x690
[   73.863665][ T5815]  netlink_sendmsg+0x58b/0x6b0
[   73.863784][ T5815]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.863828][ T5815]  __sock_sendmsg+0x145/0x180
[   73.863973][ T5815]  ____sys_sendmsg+0x31e/0x4e0
[   73.864020][ T5815]  ___sys_sendmsg+0x17b/0x1d0
[   73.864175][ T5815]  __x64_sys_sendmsg+0xd4/0x160
[   73.864225][ T5815]  x64_sys_call+0x191e/0x3000
[   73.864294][ T5815]  do_syscall_64+0xd2/0x200
[   73.864330][ T5815]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   73.864369][ T5815]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   73.864402][ T5815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.864462][ T5815] RIP: 0033:0x7ff21a7defc9
[   73.864483][ T5815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.864509][ T5815] RSP: 002b:00007ff21921e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.864536][ T5815] RAX: ffffffffffffffda RBX: 00007ff21aa36090 RCX: 00007ff21a7defc9
[   73.864554][ T5815] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000005
[   73.864589][ T5815] RBP: 00007ff21921e090 R08: 0000000000000000 R09: 0000000000000000
[   73.864607][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.864624][ T5815] R13: 00007ff21aa36128 R14: 00007ff21aa36090 R15: 00007ffc0496fcc8
[   73.864651][ T5815]  </TASK>
[   73.944358][ T5798] loop5: detected capacity change from 0 to 1024
[   73.956268][ T5817] program syz.0.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.038791][ T5798] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.106906][ T5823] loop3: detected capacity change from 0 to 1024
[   74.154936][ T5798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.209869][ T5798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.222206][ T5823] EXT4-fs: Ignoring removed bh option
[   74.227905][ T5823] ext4: Unknown parameter 'smackfsroot'
[   74.278087][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.450153][ T5854] program syz.4.511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.482340][ T5865] program syz.0.517 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.502760][ T5860] program syz.4.511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.581925][ T5870] loop5: detected capacity change from 0 to 2048
[   74.752145][ T5884] loop0: detected capacity change from 0 to 1024
[   74.780200][ T5884] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.798220][ T5884] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.820411][ T5884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.835104][ T5877] program syz.3.521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.847822][ T5874] program syz.2.520 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.895077][ T5887] program syz.3.521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.921965][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.935582][ T5882] program syz.4.523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.991663][ T5886] program syz.4.523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.069245][ T5893] loop0: detected capacity change from 0 to 1024
[   75.097681][ T5893] EXT4-fs: Ignoring removed bh option
[   75.103132][ T5893] ext4: Unknown parameter 'smackfsroot'
[   75.175157][ T5891] program syz.5.526 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.226799][ T5896] program syz.5.526 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.372898][ T5913] netlink: 'syz.4.532': attribute type 1 has an invalid length.
[   75.380747][ T5913] __nla_validate_parse: 6 callbacks suppressed
[   75.380764][ T5913] netlink: 224 bytes leftover after parsing attributes in process `syz.4.532'.
[   75.561040][ T5920] program syz.3.535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.612122][ T5927] program syz.3.535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.636918][ T5918] program syz.2.534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.697175][ T5930] program syz.2.534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   75.795212][ T5934] loop5: detected capacity change from 0 to 1024
[   75.816372][ T5934] EXT4-fs: Ignoring removed bh option
[   75.821921][ T5934] ext4: Unknown parameter 'smackfsroot'
[   75.832951][ T5936] FAULT_INJECTION: forcing a failure.
[   75.832951][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   75.846190][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   75.846238][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   75.846254][ T5936] Call Trace:
[   75.846284][ T5936]  <TASK>
[   75.846293][ T5936]  __dump_stack+0x1d/0x30
[   75.846317][ T5936]  dump_stack_lvl+0xe8/0x140
[   75.846341][ T5936]  dump_stack+0x15/0x1b
[   75.846362][ T5936]  should_fail_ex+0x265/0x280
[   75.846414][ T5936]  should_fail+0xb/0x20
[   75.846444][ T5936]  should_fail_usercopy+0x1a/0x20
[   75.846463][ T5936]  _copy_from_user+0x1c/0xb0
[   75.846495][ T5936]  ___sys_sendmsg+0xc1/0x1d0
[   75.846560][ T5936]  __sys_sendmmsg+0x178/0x300
[   75.846731][ T5936]  __x64_sys_sendmmsg+0x57/0x70
[   75.846767][ T5936]  x64_sys_call+0x1c4a/0x3000
[   75.846797][ T5936]  do_syscall_64+0xd2/0x200
[   75.846821][ T5936]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   75.846853][ T5936]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   75.846998][ T5936]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.847021][ T5936] RIP: 0033:0x7f89497befc9
[   75.847035][ T5936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   75.847057][ T5936] RSP: 002b:00007f8948227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   75.847079][ T5936] RAX: ffffffffffffffda RBX: 00007f8949a15fa0 RCX: 00007f89497befc9
[   75.847120][ T5936] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000003
[   75.847134][ T5936] RBP: 00007f8948227090 R08: 0000000000000000 R09: 0000000000000000
[   75.847149][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   75.847161][ T5936] R13: 00007f8949a16038 R14: 00007f8949a15fa0 R15: 00007ffdfa09fcc8
[   75.847183][ T5936]  </TASK>
[   75.847232][   T29] kauditd_printk_skb: 1097 callbacks suppressed
[   75.847246][   T29] audit: type=1326 audit(1760879380.126:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d16efc9 code=0x7ffc0000
[   76.051341][   T29] audit: type=1326 audit(1760879380.126:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f139d16efc9 code=0x7ffc0000
[   76.116080][ T5941] netlink: 'syz.3.540': attribute type 1 has an invalid length.
[   76.123864][ T5941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.540'.
[   76.172070][ T5942] program syz.5.544 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.293398][   T29] audit: type=1326 audit(1760879380.296:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.316953][   T29] audit: type=1326 audit(1760879380.296:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.340342][   T29] audit: type=1326 audit(1760879380.296:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.363942][   T29] audit: type=1326 audit(1760879380.306:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.387388][   T29] audit: type=1326 audit(1760879380.306:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.411106][   T29] audit: type=1326 audit(1760879380.306:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.434529][   T29] audit: type=1326 audit(1760879380.306:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.457892][   T29] audit: type=1326 audit(1760879380.306:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.5.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   76.605568][ T5954] program syz.0.547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.659365][ T5948] program syz.0.547 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   76.693494][ T5957] loop5: detected capacity change from 0 to 1024
[   76.700835][ T5957] EXT4-fs: Ignoring removed nomblk_io_submit option
[   76.710618][ T5957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.788996][ T5957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.919861][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.972492][ T5971] loop2: detected capacity change from 0 to 512
[   76.983389][ T5972] tmpfs: Bad value for 'mpol'
[   77.024479][ T5977] loop5: detected capacity change from 0 to 1024
[   77.050061][ T5971] EXT4-fs (loop2): orphan cleanup on readonly fs
[   77.075798][ T5960] program syz.4.551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.092284][ T5977] EXT4-fs: Ignoring removed bh option
[   77.097838][ T5977] ext4: Unknown parameter 'smackfsroot'
[   77.109136][ T5971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.556: bg 0: block 248: padding at end of block bitmap is not set
[   77.131348][ T5966] program syz.4.551 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.195739][ T5974] program syz.0.557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.212958][ T5971] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.556: Failed to acquire dquot type 1
[   77.239375][ T5971] EXT4-fs (loop2): 1 truncate cleaned up
[   77.251038][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.264075][ T5980] program syz.0.557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.302211][ T5971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.330351][ T5991] netlink: 'syz.5.562': attribute type 1 has an invalid length.
[   77.338115][ T5991] netlink: 224 bytes leftover after parsing attributes in process `syz.5.562'.
[   77.357636][ T5971] syz.2.556 (5971) used greatest stack depth: 9200 bytes left
[   77.374574][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.397571][ T5996] loop4: detected capacity change from 0 to 1024
[   77.411539][ T6000] loop2: detected capacity change from 0 to 1024
[   77.416571][ T5996] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.428903][ T5996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.431384][ T6000] EXT4-fs: Ignoring removed nomblk_io_submit option
[   77.448233][ T6000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.480814][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.494572][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.518737][ T6007] loop0: detected capacity change from 0 to 512
[   77.533595][ T6009] loop3: detected capacity change from 0 to 1024
[   77.541161][ T6009] EXT4-fs: Ignoring removed bh option
[   77.546635][ T6009] ext4: Unknown parameter 'smackfsroot'
[   77.554725][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.573402][ T6007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.593057][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.602089][ T6007] netlink: 108 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.613698][ T6007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.614033][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.622701][ T6007] netlink: 108 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.622718][ T6007] netlink: 84 bytes leftover after parsing attributes in process `syz.0.568'.
[   77.639877][ T6014] bridge0: port 3(batadv1) entered blocking state
[   77.656122][ T6014] bridge0: port 3(batadv1) entered disabled state
[   77.667793][ T6014] batadv1: entered allmulticast mode
[   77.677115][ T6014] batadv1: entered promiscuous mode
[   77.686208][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[   77.686547][ T6007] 9pnet_fd: Insufficient options for proto=fd
[   77.694998][ T6014] netlink: 348 bytes leftover after parsing attributes in process `syz.3.572'.
[   77.812965][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.899871][ T6025] program syz.3.575 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.915408][ T6022] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.950004][ T6028] program syz.3.575 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   77.961935][ T6029] program syz.2.574 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.053732][ T6040] loop3: detected capacity change from 0 to 1024
[   78.060895][ T6040] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.070526][ T6040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.083700][ T6036] program syz.0.579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.083906][ T6040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.129890][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.146064][ T5804] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   78.155335][ T5804] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   78.167175][ T6047] program syz.0.579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.170653][ T6048] loop5: detected capacity change from 0 to 1024
[   78.189933][ T6048] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.198965][ T6048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.203397][ T6050] loop3: detected capacity change from 0 to 1024
[   78.215098][ T6050] EXT4-fs: Ignoring removed bh option
[   78.220663][ T6050] ext4: Unknown parameter 'smackfsroot'
[   78.228390][ T6048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.245043][ T6053] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[   78.304762][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.339165][ T6063] program syz.5.587 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.435646][ T6073] loop5: detected capacity change from 0 to 1024
[   78.449801][ T6065] program syz.0.591 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.459692][ T6073] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.474535][ T6073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.498424][ T6073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.511494][ T6077] program syz.0.591 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.531868][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.555444][ T6078] netlink: 'syz.3.595': attribute type 1 has an invalid length.
[   78.686148][ T6083] loop4: detected capacity change from 0 to 1024
[   78.693109][ T6083] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.700310][ T6083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.711705][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.726523][ T6085] loop0: detected capacity change from 0 to 1024
[   78.733806][ T6085] EXT4-fs: Ignoring removed bh option
[   78.739320][ T6085] ext4: Unknown parameter 'smackfsroot'
[   78.750688][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.872555][ T6090] program syz.0.600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.923225][ T6093] program syz.0.600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.939779][ T6092] program syz.4.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   78.989893][ T6094] program syz.4.601 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.033854][ T6098] loop0: detected capacity change from 0 to 512
[   79.056868][ T6098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.145131][ T6098] 9pnet_fd: Insufficient options for proto=fd
[   79.209859][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.392551][   T10] hid (null): global environment stack underflow
[   79.399080][   T10] hid (null): unknown global tag 0xd
[   79.404443][   T10] hid (null): unknown global tag 0xe
[   79.414373][   T10] hid (null): unknown global tag 0xd
[   79.424518][   T10] hid-generic 0003:0005:0003.0003: reserved main item tag 0xd
[   79.432173][   T10] hid-generic 0003:0005:0003.0003: global environment stack underflow
[   79.440478][   T10] hid-generic 0003:0005:0003.0003: item 0 1 1 11 parsing failed
[   79.454504][   T10] hid-generic 0003:0005:0003.0003: probe with driver hid-generic failed with error -22
[   79.466132][ T6119] loop0: detected capacity change from 0 to 1024
[   79.475565][ T6119] EXT4-fs: Ignoring removed bh option
[   79.481125][ T6119] ext4: Unknown parameter 'smackfsroot'
[   79.506468][ T6115] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[   79.602333][ T6117] program syz.3.609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.650238][ T6129] loop4: detected capacity change from 0 to 512
[   79.656933][ T6121] program syz.3.609 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.693128][ T6129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.832643][ T6129] 9pnet_fd: Insufficient options for proto=fd
[   79.843323][ T6152] program syz.5.617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.854429][ T6150] netlink: 'syz.0.620': attribute type 1 has an invalid length.
[   79.896101][ T6136] program syz.5.617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.924950][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.014446][ T6158] FAULT_INJECTION: forcing a failure.
[   80.014446][ T6158] name failslab, interval 1, probability 0, space 0, times 0
[   80.027270][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.4.622 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   80.027301][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   80.027316][ T6158] Call Trace:
[   80.027380][ T6158]  <TASK>
[   80.027389][ T6158]  __dump_stack+0x1d/0x30
[   80.027414][ T6158]  dump_stack_lvl+0xe8/0x140
[   80.027437][ T6158]  dump_stack+0x15/0x1b
[   80.027456][ T6158]  should_fail_ex+0x265/0x280
[   80.027565][ T6158]  should_failslab+0x8c/0xb0
[   80.027592][ T6158]  kmem_cache_alloc_noprof+0x50/0x480
[   80.027622][ T6158]  ? skb_clone+0x151/0x1f0
[   80.027650][ T6158]  skb_clone+0x151/0x1f0
[   80.027687][ T6158]  __netlink_deliver_tap+0x2c9/0x500
[   80.027741][ T6158]  netlink_unicast+0x66b/0x690
[   80.027770][ T6158]  netlink_sendmsg+0x58b/0x6b0
[   80.027809][ T6158]  ? __pfx_netlink_sendmsg+0x10/0x10
[   80.027846][ T6158]  __sock_sendmsg+0x145/0x180
[   80.027903][ T6158]  ____sys_sendmsg+0x31e/0x4e0
[   80.027933][ T6158]  ___sys_sendmsg+0x17b/0x1d0
[   80.028059][ T6158]  __x64_sys_sendmsg+0xd4/0x160
[   80.028098][ T6158]  x64_sys_call+0x191e/0x3000
[   80.028117][ T6158]  do_syscall_64+0xd2/0x200
[   80.028159][ T6158]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   80.028187][ T6158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.028214][ T6158] RIP: 0033:0x7ff21a7defc9
[   80.028255][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   80.028311][ T6158] RSP: 002b:00007ff21923f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   80.028329][ T6158] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7defc9
[   80.028340][ T6158] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000006
[   80.028352][ T6158] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000000
[   80.028366][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.028397][ T6158] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   80.028421][ T6158]  </TASK>
[   80.255651][ T6165] loop3: detected capacity change from 0 to 512
[   80.306582][ T6165] EXT4-fs (loop3): 1 truncate cleaned up
[   80.312758][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.364779][ T6170] loop5: detected capacity change from 0 to 1024
[   80.377004][ T6170] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.411561][ T6170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.432160][ T6170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.454518][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.482946][ T5115] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.692598][ T6186] program syz.3.635 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.730158][ T6196] loop5: detected capacity change from 0 to 256
[   80.743302][ T6201] program syz.3.635 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.773315][ T6204] loop4: detected capacity change from 0 to 1024
[   80.786872][ T6204] EXT4-fs: Ignoring removed nomblk_io_submit option
[   80.825667][ T6204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.856256][   T29] kauditd_printk_skb: 782 callbacks suppressed
[   80.856273][   T29] audit: type=1326 audit(1760879385.136:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   80.886004][   T29] audit: type=1326 audit(1760879385.136:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6185 comm="syz.3.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   80.931758][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.971210][ T6210] loop0: detected capacity change from 0 to 2048
[   80.979959][   T29] audit: type=1400 audit(1760879385.196:6344): avc:  denied  { execute } for  pid=6205 comm="syz.5.643" path="/48/file0" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   81.021044][ T6210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.048719][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.052990][ T6213] FAULT_INJECTION: forcing a failure.
[   81.052990][ T6213] name failslab, interval 1, probability 0, space 0, times 0
[   81.070570][ T6213] CPU: 1 UID: 0 PID: 6213 Comm: syz.3.645 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   81.070605][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   81.070621][ T6213] Call Trace:
[   81.070630][ T6213]  <TASK>
[   81.070701][ T6213]  __dump_stack+0x1d/0x30
[   81.070726][ T6213]  dump_stack_lvl+0xe8/0x140
[   81.070747][ T6213]  dump_stack+0x15/0x1b
[   81.070769][ T6213]  should_fail_ex+0x265/0x280
[   81.070896][ T6213]  should_failslab+0x8c/0xb0
[   81.070922][ T6213]  __kmalloc_noprof+0xa5/0x570
[   81.070953][ T6213]  ? iter_file_splice_write+0xf9/0xa60
[   81.071050][ T6213]  iter_file_splice_write+0xf9/0xa60
[   81.071079][ T6213]  ? copy_splice_read+0x623/0x660
[   81.071145][ T6213]  ? copy_splice_read+0x623/0x660
[   81.071170][ T6213]  ? __traceiter_kfree+0x2e/0x50
[   81.071255][ T6213]  ? copy_splice_read+0x623/0x660
[   81.071275][ T6213]  ? copy_splice_read+0x623/0x660
[   81.071304][ T6213]  ? __pfx_iter_file_splice_write+0x10/0x10
[   81.071333][ T6213]  direct_splice_actor+0x156/0x2a0
[   81.071354][ T6213]  ? splice_grow_spd+0xd1/0xe0
[   81.071372][ T6213]  splice_direct_to_actor+0x312/0x680
[   81.071422][ T6213]  ? __pfx_direct_splice_actor+0x10/0x10
[   81.071451][ T6213]  do_splice_direct+0xda/0x150
[   81.071484][ T6213]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   81.071512][ T6213]  do_sendfile+0x380/0x650
[   81.071553][ T6213]  __x64_sys_sendfile64+0x105/0x150
[   81.071618][ T6213]  x64_sys_call+0x2bb4/0x3000
[   81.071642][ T6213]  do_syscall_64+0xd2/0x200
[   81.071674][ T6213]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   81.071699][ T6213]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   81.071776][ T6213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.071880][ T6213] RIP: 0033:0x7f07833eefc9
[   81.071899][ T6213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.071922][ T6213] RSP: 002b:00007f0781e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   81.071946][ T6213] RAX: ffffffffffffffda RBX: 00007f0783645fa0 RCX: 00007f07833eefc9
[   81.071967][ T6213] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[   81.071980][ T6213] RBP: 00007f0781e57090 R08: 0000000000000000 R09: 0000000000000000
[   81.071995][ T6213] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000002
[   81.072009][ T6213] R13: 00007f0783646038 R14: 00007f0783645fa0 R15: 00007fffc05ac468
[   81.072029][ T6213]  </TASK>
[   81.076189][ T6210] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.314512][ T6223] netlink: 'syz.2.647': attribute type 1 has an invalid length.
[   81.340530][ T6223] __nla_validate_parse: 22 callbacks suppressed
[   81.340548][ T6223] netlink: 224 bytes leftover after parsing attributes in process `syz.2.647'.
[   81.374424][   T29] audit: type=1400 audit(1760879385.646:6345): avc:  denied  { connect } for  pid=6224 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   81.520844][ T5804] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:28: bg 0: block 345: padding at end of block bitmap is not set
[   81.561801][ T6237] 9pnet_fd: Insufficient options for proto=fd
[   81.568228][ T5804] EXT4-fs (loop0): Remounting filesystem read-only
[   81.575475][ T5801] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[   81.577762][ T6230] netlink: 84 bytes leftover after parsing attributes in process `syz.4.650'.
[   81.623238][ T6239] loop3: detected capacity change from 0 to 512
[   81.630964][   T29] audit: type=1400 audit(1760879385.896:6346): avc:  denied  { ioctl } for  pid=6238 comm="syz.3.653" path="socket:[12578]" dev="sockfs" ino=12578 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   81.657091][ T6233] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30
[   81.674917][ T6230] hsr_slave_0: left promiscuous mode
[   81.682236][ T6240] syz.4.650 uses obsolete (PF_INET,SOCK_PACKET)
[   81.688657][   T29] audit: type=1400 audit(1760879385.956:6347): avc:  denied  { lock } for  pid=6209 comm="syz.0.644" path="/131/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   81.711929][ T6230] hsr_slave_1: left promiscuous mode
[   81.717399][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.737833][ T6239] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   81.762310][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.785156][ T6244] netlink: 'syz.5.654': attribute type 1 has an invalid length.
[   81.793083][ T6244] netlink: 224 bytes leftover after parsing attributes in process `syz.5.654'.
[   81.806625][   T29] audit: type=1400 audit(1760879386.086:6348): avc:  denied  { create } for  pid=6238 comm="syz.3.653" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   81.829997][ T6247] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.3.653: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[   81.831296][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.655'.
[   81.850157][   T29] audit: type=1400 audit(1760879386.106:6349): avc:  denied  { rename } for  pid=6238 comm="syz.3.653" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.881342][   T29] audit: type=1400 audit(1760879386.106:6350): avc:  denied  { reparent } for  pid=6238 comm="syz.3.653" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.886847][ T6246] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.903687][   T29] audit: type=1400 audit(1760879386.106:6351): avc:  denied  { add_name } for  pid=6238 comm="syz.3.653" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   81.912371][ T6247] EXT4-fs (loop3): Remounting filesystem read-only
[   81.954148][ T6250] loop4: detected capacity change from 0 to 1024
[   81.962101][ T6250] EXT4-fs: Ignoring removed nomblk_io_submit option
[   81.972668][ T6250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   81.987715][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.988332][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.030289][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.118105][ T6260] loop2: detected capacity change from 0 to 2048
[   82.126161][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'.
[   82.142894][ T6263] bond0: Unable to set down delay as MII monitoring is disabled
[   82.160524][ T6260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.216604][ T6271] 9pnet_fd: Insufficient options for proto=fd
[   82.224046][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.241341][ T6257] program syz.4.659 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.287995][ T6274] loop2: detected capacity change from 0 to 512
[   82.291867][ T6272] program syz.4.659 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.322051][ T6265] program syz.3.661 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.323751][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.352998][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'.
[   82.362055][ T6274] netlink: 108 bytes leftover after parsing attributes in process `syz.2.665'.
[   82.376137][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'.
[   82.381833][ T6281] program syz.3.661 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.385210][ T6274] netlink: 108 bytes leftover after parsing attributes in process `syz.2.665'.
[   82.404118][ T6274] netlink: 84 bytes leftover after parsing attributes in process `syz.2.665'.
[   82.475593][ T6274] 9pnet_fd: Insufficient options for proto=fd
[   82.638544][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.684598][ T6299] program syz.3.672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.698739][ T6306] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[   82.735571][ T6309] program syz.3.672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.869621][ T6313] loop2: detected capacity change from 0 to 2048
[   82.917802][ T6313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.991908][ T6311] program syz.0.676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.036508][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.072012][ T6315] program syz.0.676 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.076241][ T6324] bond0: Unable to set down delay as MII monitoring is disabled
[   83.089858][ T6322] program syz.3.679 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.118978][ T6326] loop2: detected capacity change from 0 to 2048
[   83.194776][ T6333] netlink: 'syz.5.682': attribute type 1 has an invalid length.
[   83.368922][ T6343] loop3: detected capacity change from 0 to 1024
[   83.380966][ T6343] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.436577][ T6343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   83.467780][ T6343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.485624][ T6347] loop4: detected capacity change from 0 to 1024
[   83.506814][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.516780][ T6347] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.524006][ T6347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   83.556375][ T6347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.607053][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.645174][ T6353] 9pnet_fd: Insufficient options for proto=fd
[   83.655194][ T6351] program syz.3.690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.704300][ T6355] 9pnet_fd: Insufficient options for proto=fd
[   83.710639][ T6356] program syz.3.690 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.771541][ T6358] loop4: detected capacity change from 0 to 512
[   83.788167][ T6358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.801020][ T6358] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.833939][ T6358] FAULT_INJECTION: forcing a failure.
[   83.833939][ T6358] name failslab, interval 1, probability 0, space 0, times 0
[   83.846653][ T6358] CPU: 0 UID: 0 PID: 6358 Comm: syz.4.693 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   83.846680][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   83.846694][ T6358] Call Trace:
[   83.846703][ T6358]  <TASK>
[   83.846716][ T6358]  __dump_stack+0x1d/0x30
[   83.846801][ T6358]  dump_stack_lvl+0xe8/0x140
[   83.846822][ T6358]  dump_stack+0x15/0x1b
[   83.846886][ T6358]  should_fail_ex+0x265/0x280
[   83.846978][ T6358]  should_failslab+0x8c/0xb0
[   83.847007][ T6358]  kmem_cache_alloc_noprof+0x50/0x480
[   83.847034][ T6358]  ? ext4_init_io_end+0x31/0xb0
[   83.847080][ T6358]  ext4_init_io_end+0x31/0xb0
[   83.847191][ T6358]  ext4_do_writepages+0x6e3/0x2750
[   83.847244][ T6358]  ? xas_load+0x413/0x430
[   83.847272][ T6358]  ? xas_load+0x413/0x430
[   83.847298][ T6358]  ? xa_load+0xb1/0xe0
[   83.847352][ T6358]  ? obj_cgroup_charge_account+0x122/0x1a0
[   83.847397][ T6358]  ? should_fail_ex+0x30/0x280
[   83.847434][ T6358]  ? __rcu_read_unlock+0x4f/0x70
[   83.847488][ T6358]  ? avc_has_perm_noaudit+0x1b1/0x200
[   83.847543][ T6358]  ext4_writepages+0x176/0x300
[   83.847572][ T6358]  ? __pfx_ext4_writepages+0x10/0x10
[   83.847720][ T6358]  do_writepages+0x1c6/0x310
[   83.847749][ T6358]  ? mntput+0x4b/0x80
[   83.847851][ T6358]  ? _raw_spin_unlock+0x26/0x50
[   83.847889][ T6358]  ? wbc_attach_and_unlock_inode+0x91/0x2b0
[   83.847928][ T6358]  filemap_write_and_wait_range+0x144/0x340
[   83.848023][ T6358]  ext4_insert_range+0x1c1/0x650
[   83.848056][ T6358]  ext4_fallocate+0x2bc/0x2f0
[   83.848164][ T6358]  vfs_fallocate+0x3b6/0x400
[   83.848192][ T6358]  __x64_sys_fallocate+0x7a/0xd0
[   83.848228][ T6358]  x64_sys_call+0x2518/0x3000
[   83.848308][ T6358]  do_syscall_64+0xd2/0x200
[   83.848347][ T6358]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   83.848429][ T6358]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   83.848457][ T6358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.848484][ T6358] RIP: 0033:0x7ff21a7defc9
[   83.848558][ T6358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.848580][ T6358] RSP: 002b:00007ff21923f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[   83.848604][ T6358] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7defc9
[   83.848620][ T6358] RDX: 0000000000002000 RSI: 0000000000000020 RDI: 000000000000000c
[   83.848636][ T6358] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000000
[   83.848727][ T6358] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001
[   83.848740][ T6358] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   83.848759][ T6358]  </TASK>
[   84.161603][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.198341][ T6372] loop0: detected capacity change from 0 to 1024
[   84.256272][ T6379] netlink: 'syz.2.699': attribute type 1 has an invalid length.
[   84.266019][ T6372] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.293290][ T6372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.314664][ T6372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.338602][ T6383] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   84.360099][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.396626][ T6376] program syz.5.702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.410145][ T6378] program syz.3.703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.445945][ T6384] program syz.5.702 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.460894][ T6386] program syz.3.703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.490336][ T6389] program syz.0.705 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.557065][ T6394] loop5: detected capacity change from 0 to 1024
[   84.564394][ T6394] EXT4-fs: Ignoring removed nobh option
[   84.570056][ T6394] EXT4-fs: Ignoring removed bh option
[   84.581501][ T6393] program syz.0.705 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.595014][ T6395] netlink: 'syz.3.707': attribute type 1 has an invalid length.
[   84.685925][ T6403] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt.
[   84.730634][ T6403] EXT4-fs (loop5): Remounting filesystem read-only
[   84.743121][ T6405] loop0: detected capacity change from 0 to 2048
[   84.763332][ T6403] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[   84.769897][ T6403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   84.777542][ T6403] vhci_hcd vhci_hcd.0: Device attached
[   84.798287][ T6407] vhci_hcd: connection closed
[   84.798466][ T5802] vhci_hcd: stop threads
[   84.807508][ T5802] vhci_hcd: release socket
[   84.811980][ T5802] vhci_hcd: disconnect device
[   84.947678][ T6410] macvtap0: refused to change device tx_queue_len
[   84.969330][ T6410] loop0: detected capacity change from 0 to 2048
[   84.986840][ T6410] EXT4-fs (loop0): failed to initialize system zone (-117)
[   84.996723][ T6410] EXT4-fs (loop0): mount failed
[   85.170250][ T6422] loop4: detected capacity change from 0 to 1024
[   85.187442][ T6422] EXT4-fs: Ignoring removed bh option
[   85.192899][ T6422] ext4: Unknown parameter 'smackfsroot'
[   85.308736][ T6431] IPVS: length: 111 != 24
[   85.336615][ T6433] lo speed is unknown, defaulting to 1000
[   85.338361][ T6427] program syz.2.716 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.342562][ T6433] lo speed is unknown, defaulting to 1000
[   85.357884][ T6433] lo speed is unknown, defaulting to 1000
[   85.364657][ T6433] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98
[   85.386473][ T6433] lo speed is unknown, defaulting to 1000
[   85.394076][ T6433] lo speed is unknown, defaulting to 1000
[   85.415416][ T6433] lo speed is unknown, defaulting to 1000
[   85.421729][ T6433] lo speed is unknown, defaulting to 1000
[   85.423851][ T6432] program syz.2.716 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.427934][ T6433] lo speed is unknown, defaulting to 1000
[   85.500409][ T6435] program syz.5.719 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.530554][ T6441] loop3: detected capacity change from 0 to 512
[   85.551231][ T6446] program syz.5.719 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.595325][ T6450] netlink: 'syz.4.722': attribute type 1 has an invalid length.
[   85.609929][ T6452] loop2: detected capacity change from 0 to 512
[   85.619210][ T6452] EXT4-fs (loop2): orphan cleanup on readonly fs
[   85.643271][ T6441] 9pnet_fd: Insufficient options for proto=fd
[   85.688585][ T6457] loop5: detected capacity change from 0 to 512
[   85.696257][ T6452] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.724: ea_inode file size=4 entry size=6
[   85.719180][ T6452] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   85.719989][ T6457] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.745651][ T6452] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.724: corrupted inode contents
[   85.767907][ T6452] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.724: mark_inode_dirty error
[   85.790672][ T6452] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.724: corrupted inode contents
[   85.803415][ T6452] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.724: mark_inode_dirty error
[   85.843762][ T6452] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.724: mark inode dirty (error -117)
[   85.882740][ T6452] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[   85.934748][ T6452] EXT4-fs (loop2): 1 orphan inode deleted
[   85.973605][   T29] kauditd_printk_skb: 621 callbacks suppressed
[   85.973623][   T29] audit: type=1400 audit(1760879390.246:6973): avc:  denied  { write } for  pid=6451 comm="syz.2.724" name="tcp" dev="proc" ino=4026532667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   86.008681][   T29] audit: type=1400 audit(1760879390.246:6974): avc:  denied  { read } for  pid=6451 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   86.257516][ T6475] netlink: 'syz.2.731': attribute type 1 has an invalid length.
[   86.646062][   T29] audit: type=1326 audit(1760879390.896:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.669595][   T29] audit: type=1326 audit(1760879390.896:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.692995][   T29] audit: type=1326 audit(1760879390.896:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.716420][   T29] audit: type=1326 audit(1760879390.896:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.739829][   T29] audit: type=1326 audit(1760879390.896:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.763356][   T29] audit: type=1326 audit(1760879390.896:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.786742][   T29] audit: type=1326 audit(1760879390.896:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.810133][   T29] audit: type=1326 audit(1760879390.896:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6481 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07833eefc9 code=0x7ffc0000
[   86.937136][ T6482] program syz.3.734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.991826][ T6483] program syz.3.734 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.025672][ T6487] hub 9-0:1.0: USB hub found
[   87.048208][ T6487] hub 9-0:1.0: 8 ports detected
[   87.064781][ T6491] loop2: detected capacity change from 0 to 1024
[   87.090970][ T6491] EXT4-fs: Ignoring removed bh option
[   87.096572][ T6491] ext4: Unknown parameter 'smackfsroot'
[   87.109675][ T6485] program syz.4.735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.165265][ T6499] program syz.4.735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.253685][ T6511] netlink: 'syz.3.742': attribute type 1 has an invalid length.
[   87.261403][ T6511] __nla_validate_parse: 17 callbacks suppressed
[   87.261417][ T6511] netlink: 224 bytes leftover after parsing attributes in process `syz.3.742'.
[   87.264963][ T6509] loop5: detected capacity change from 0 to 2048
[   87.341689][ T6521] Illegal XDP return value 4294967274 on prog  (id 570) dev N/A, expect packet loss!
[   87.378093][ T6524] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.389753][ T6524] netlink: 'syz.4.747': attribute type 6 has an invalid length.
[   87.397516][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'.
[   87.488172][ T6532] loop4: detected capacity change from 0 to 1024
[   87.495238][ T6532] EXT4-fs: Ignoring removed bh option
[   87.500866][ T6532] ext4: Unknown parameter 'smackfsroot'
[   87.501618][ T6530] loop5: detected capacity change from 0 to 1024
[   87.536800][ T6530] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   87.554211][ T6530] EXT4-fs (loop5): revision level too high, forcing read-only mode
[   87.563474][ T6530] EXT4-fs (loop5): orphan cleanup on readonly fs
[   87.570441][ T6530] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   87.585303][ T6530] EXT4-fs (loop5): Cannot turn on quotas: error -117
[   87.592342][ T6530] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.751: Freeing blocks not in datazone - block = 0, count = 4096
[   87.599108][ T6534] program syz.4.753 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.611462][ T6530] EXT4-fs (loop5): 1 orphan inode deleted
[   87.628464][ T6530] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.650122][ T6536] program syz.4.753 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   87.680462][ T6530] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.719614][ T6530] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.780244][ T6530] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.843893][ T5850] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.862073][ T5836] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.870859][ T5836] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.888980][ T5836] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.981785][ T6546] loop4: detected capacity change from 0 to 128
[   87.999760][ T6546] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   88.084026][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   88.095896][ T6552] loop5: detected capacity change from 0 to 2048
[   88.137257][ T6555] bond0: Unable to set up delay as MII monitoring is disabled
[   88.308273][ T6579] loop0: detected capacity change from 0 to 1024
[   88.321949][ T6579] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.329016][ T6579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.402780][ T6571] program syz.4.766 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.466023][ T6584] program syz.4.766 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.610785][ T6591] FAULT_INJECTION: forcing a failure.
[   88.610785][ T6591] name failslab, interval 1, probability 0, space 0, times 0
[   88.623624][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.4.775 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.623704][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   88.623720][ T6591] Call Trace:
[   88.623727][ T6591]  <TASK>
[   88.623737][ T6591]  __dump_stack+0x1d/0x30
[   88.623766][ T6591]  dump_stack_lvl+0xe8/0x140
[   88.623785][ T6591]  dump_stack+0x15/0x1b
[   88.623804][ T6591]  should_fail_ex+0x265/0x280
[   88.623908][ T6591]  should_failslab+0x8c/0xb0
[   88.623936][ T6591]  __kmalloc_noprof+0xa5/0x570
[   88.623967][ T6591]  ? tcf_idr_create+0x41/0x4a0
[   88.623994][ T6591]  tcf_idr_create+0x41/0x4a0
[   88.624037][ T6591]  tcf_idr_create_from_flags+0x60/0x80
[   88.624104][ T6591]  tcf_pedit_init+0x27b/0x9a0
[   88.624145][ T6591]  ? should_fail_ex+0xdb/0x280
[   88.624233][ T6591]  tcf_action_init_1+0x36a/0x4a0
[   88.624271][ T6591]  tcf_action_init+0x267/0x6d0
[   88.624396][ T6591]  tc_ctl_action+0x291/0x830
[   88.624513][ T6591]  ? __pfx_tc_ctl_action+0x10/0x10
[   88.624542][ T6591]  rtnetlink_rcv_msg+0x65a/0x6d0
[   88.624575][ T6591]  netlink_rcv_skb+0x123/0x220
[   88.624668][ T6591]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   88.624694][ T6591]  rtnetlink_rcv+0x1c/0x30
[   88.624716][ T6591]  netlink_unicast+0x5c0/0x690
[   88.624808][ T6591]  netlink_sendmsg+0x58b/0x6b0
[   88.624852][ T6591]  ? __pfx_netlink_sendmsg+0x10/0x10
[   88.624929][ T6591]  __sock_sendmsg+0x145/0x180
[   88.624958][ T6591]  ____sys_sendmsg+0x31e/0x4e0
[   88.625002][ T6591]  ___sys_sendmsg+0x17b/0x1d0
[   88.625133][ T6591]  __x64_sys_sendmsg+0xd4/0x160
[   88.625243][ T6591]  x64_sys_call+0x191e/0x3000
[   88.625272][ T6591]  do_syscall_64+0xd2/0x200
[   88.625305][ T6591]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.625343][ T6591]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   88.625370][ T6591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.625444][ T6591] RIP: 0033:0x7ff21a7defc9
[   88.625465][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.625488][ T6591] RSP: 002b:00007ff21923f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   88.625513][ T6591] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7defc9
[   88.625586][ T6591] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[   88.625632][ T6591] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000000
[   88.625643][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.625655][ T6591] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   88.625674][ T6591]  </TASK>
[   88.906238][ T6588] FAULT_INJECTION: forcing a failure.
[   88.906238][ T6588] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   88.919634][ T6588] CPU: 0 UID: 0 PID: 6588 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.919716][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   88.919730][ T6588] Call Trace:
[   88.919738][ T6588]  <TASK>
[   88.919747][ T6588]  __dump_stack+0x1d/0x30
[   88.919772][ T6588]  dump_stack_lvl+0xe8/0x140
[   88.919796][ T6588]  dump_stack+0x15/0x1b
[   88.919815][ T6588]  should_fail_ex+0x265/0x280
[   88.919906][ T6588]  should_fail_alloc_page+0xf2/0x100
[   88.919948][ T6588]  __alloc_frozen_pages_noprof+0xff/0x360
[   88.919994][ T6588]  alloc_pages_mpol+0xb3/0x260
[   88.920018][ T6588]  vma_alloc_folio_noprof+0x1aa/0x300
[   88.920045][ T6588]  do_wp_page+0xf60/0x2510
[   88.920143][ T6588]  ? __rcu_read_lock+0x37/0x50
[   88.920173][ T6588]  ? css_rstat_updated+0xb7/0x240
[   88.920215][ T6588]  ? __rcu_read_lock+0x37/0x50
[   88.920248][ T6588]  handle_mm_fault+0x77d/0x2be0
[   88.920350][ T6588]  ? __rcu_read_unlock+0x4f/0x70
[   88.920376][ T6588]  ? mt_find+0x208/0x320
[   88.920483][ T6588]  do_user_addr_fault+0x3fe/0x1080
[   88.920509][ T6588]  exc_page_fault+0x62/0xa0
[   88.920531][ T6588]  asm_exc_page_fault+0x26/0x30
[   88.920552][ T6588] RIP: 0010:__put_user_4+0xd/0x20
[   88.920631][ T6588] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[   88.920650][ T6588] RSP: 0018:ffffc90000f4bd18 EFLAGS: 00050206
[   88.920666][ T6588] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000006000
[   88.920680][ T6588] RDX: ffff888101626300 RSI: 00000000fffffff2 RDI: 0000000000000000
[   88.920693][ T6588] RBP: ffffc90000f4bec0 R08: 00018881044ac307 R09: 0000000000000000
[   88.920706][ T6588] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[   88.920752][ T6588] R13: 0000000000001800 R14: 0000000000000000 R15: 00000000fffffff2
[   88.920772][ T6588]  __se_sys_move_pages+0xa2f/0x1360
[   88.920808][ T6588]  ? get_pid_task+0x96/0xd0
[   88.920833][ T6588]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   88.920868][ T6588]  ? __fget_files+0x184/0x1c0
[   88.920945][ T6588]  ? fput+0x8f/0xc0
[   88.920976][ T6588]  ? ksys_write+0x192/0x1a0
[   88.921001][ T6588]  __x64_sys_move_pages+0x78/0x90
[   88.921080][ T6588]  x64_sys_call+0x2f87/0x3000
[   88.921137][ T6588]  do_syscall_64+0xd2/0x200
[   88.921168][ T6588]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.921228][ T6588]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   88.921256][ T6588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.921282][ T6588] RIP: 0033:0x7fbd911fefc9
[   88.921299][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.921377][ T6588] RSP: 002b:00007fbd8fc5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117
[   88.921396][ T6588] RAX: ffffffffffffffda RBX: 00007fbd91455fa0 RCX: 00007fbd911fefc9
[   88.921408][ T6588] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000
[   88.921419][ T6588] RBP: 00007fbd8fc5f090 R08: 0000200000000000 R09: 0000000000000000
[   88.921430][ T6588] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001
[   88.921441][ T6588] R13: 00007fbd91456038 R14: 00007fbd91455fa0 R15: 00007ffc0207e888
[   88.921459][ T6588]  </TASK>
[   89.358953][ T6605] SELinux:  Context � is not valid (left unmapped).
[   89.378062][ T6605] loop5: detected capacity change from 0 to 128
[   89.426300][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'.
[   89.505145][ T6612] lo speed is unknown, defaulting to 1000
[   89.568572][ T6615] bio_check_eod: 32 callbacks suppressed
[   89.568593][ T6615] syz.5.778: attempt to access beyond end of device
[   89.568593][ T6615] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[   89.615624][ T6615] syz.5.778: attempt to access beyond end of device
[   89.615624][ T6615] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128
[   89.692564][ T6608] program syz.3.781 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.764279][ T6616] program syz.3.781 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   89.825193][ T6615] syz.5.778: attempt to access beyond end of device
[   89.825193][ T6615] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128
[   89.839000][ T6615] syz.5.778: attempt to access beyond end of device
[   89.839000][ T6615] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128
[   89.852785][ T6615] syz.5.778: attempt to access beyond end of device
[   89.852785][ T6615] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128
[   89.866292][ T6615] syz.5.778: attempt to access beyond end of device
[   89.866292][ T6615] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128
[   89.880139][ T6615] syz.5.778: attempt to access beyond end of device
[   89.880139][ T6615] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128
[   89.893527][ T6615] syz.5.778: attempt to access beyond end of device
[   89.893527][ T6615] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128
[   89.907537][ T6615] syz.5.778: attempt to access beyond end of device
[   89.907537][ T6615] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128
[   89.925465][ T6615] syz.5.778: attempt to access beyond end of device
[   89.925465][ T6615] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128
[   90.094669][ T6630] loop5: detected capacity change from 0 to 512
[   90.171827][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.180846][ T6630] netlink: 108 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.193034][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.205480][ T6630] netlink: 108 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.214679][ T6630] netlink: 84 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.282435][ T6630] 9pnet_fd: Insufficient options for proto=fd
[   90.298435][ T6629] program syz.4.788 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.304543][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'.
[   90.346899][ T6647] FAULT_INJECTION: forcing a failure.
[   90.346899][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   90.357280][ T6642] program syz.2.792 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.360221][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.3.794 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.360308][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   90.360326][ T6647] Call Trace:
[   90.360336][ T6647]  <TASK>
[   90.360347][ T6647]  __dump_stack+0x1d/0x30
[   90.360498][ T6647]  dump_stack_lvl+0xe8/0x140
[   90.360525][ T6647]  dump_stack+0x15/0x1b
[   90.360548][ T6647]  should_fail_ex+0x265/0x280
[   90.360597][ T6647]  should_fail+0xb/0x20
[   90.360709][ T6647]  should_fail_usercopy+0x1a/0x20
[   90.360749][ T6647]  _copy_from_iter+0xd2/0xe80
[   90.360796][ T6647]  ? __build_skb_around+0x1ab/0x200
[   90.360835][ T6647]  ? __alloc_skb+0x223/0x320
[   90.360872][ T6647]  netlink_sendmsg+0x471/0x6b0
[   90.360927][ T6647]  ? __pfx_netlink_sendmsg+0x10/0x10
[   90.360968][ T6647]  __sock_sendmsg+0x145/0x180
[   90.361077][ T6647]  ____sys_sendmsg+0x31e/0x4e0
[   90.361122][ T6647]  ___sys_sendmsg+0x17b/0x1d0
[   90.361193][ T6647]  __x64_sys_sendmsg+0xd4/0x160
[   90.361306][ T6647]  x64_sys_call+0x191e/0x3000
[   90.361337][ T6647]  do_syscall_64+0xd2/0x200
[   90.361364][ T6647]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.361438][ T6647]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   90.361489][ T6647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.361521][ T6647] RIP: 0033:0x7f07833eefc9
[   90.361606][ T6647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.361633][ T6647] RSP: 002b:00007f0781e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   90.361662][ T6647] RAX: ffffffffffffffda RBX: 00007f0783645fa0 RCX: 00007f07833eefc9
[   90.361736][ T6647] RDX: 0000000020040054 RSI: 0000200000000000 RDI: 0000000000000007
[   90.361754][ T6647] RBP: 00007f0781e57090 R08: 0000000000000000 R09: 0000000000000000
[   90.361772][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   90.361790][ T6647] R13: 00007f0783646038 R14: 00007f0783645fa0 R15: 00007fffc05ac468
[   90.361819][ T6647]  </TASK>
[   90.437810][ T6652] program syz.2.792 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.543026][ T6635] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum
[   90.612309][ T6657] FAULT_INJECTION: forcing a failure.
[   90.612309][ T6657] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   90.625730][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   90.625761][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   90.625818][ T6657] Call Trace:
[   90.625831][ T6657]  <TASK>
[   90.625840][ T6657]  __dump_stack+0x1d/0x30
[   90.625868][ T6657]  dump_stack_lvl+0xe8/0x140
[   90.625892][ T6657]  dump_stack+0x15/0x1b
[   90.625913][ T6657]  should_fail_ex+0x265/0x280
[   90.625967][ T6657]  should_fail_alloc_page+0xf2/0x100
[   90.626006][ T6657]  __alloc_frozen_pages_noprof+0xff/0x360
[   90.626051][ T6657]  alloc_pages_mpol+0xb3/0x260
[   90.626076][ T6657]  folio_alloc_mpol_noprof+0x39/0x80
[   90.626106][ T6657]  shmem_get_folio_gfp+0x3cf/0xd60
[   90.626154][ T6657]  shmem_fault+0xf6/0x250
[   90.626189][ T6657]  __do_fault+0xbc/0x200
[   90.626255][ T6657]  handle_mm_fault+0xd69/0x2be0
[   90.626298][ T6657]  ? __rcu_read_lock+0x37/0x50
[   90.626332][ T6657]  ? __pte_offset_map_lock+0x1d4/0x230
[   90.626381][ T6657]  __get_user_pages+0x102a/0x1ed0
[   90.626422][ T6657]  faultin_page_range+0x107/0x4e0
[   90.626458][ T6657]  madvise_do_behavior+0x197/0x970
[   90.626493][ T6657]  ? 0xffffffff81000000
[   90.626506][ T6657]  ? __rcu_read_unlock+0x4f/0x70
[   90.626614][ T6657]  do_madvise+0x10e/0x190
[   90.626658][ T6657]  __x64_sys_madvise+0x64/0x80
[   90.626740][ T6657]  x64_sys_call+0x1f1a/0x3000
[   90.626766][ T6657]  do_syscall_64+0xd2/0x200
[   90.626797][ T6657]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   90.626900][ T6657]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   90.626976][ T6657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.627017][ T6657] RIP: 0033:0x7ff21a7defc9
[   90.627036][ T6657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.627058][ T6657] RSP: 002b:00007ff21923f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   90.627151][ T6657] RAX: ffffffffffffffda RBX: 00007ff21aa35fa0 RCX: 00007ff21a7defc9
[   90.627168][ T6657] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000
[   90.627185][ T6657] RBP: 00007ff21923f090 R08: 0000000000000000 R09: 0000000000000000
[   90.627202][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   90.627217][ T6657] R13: 00007ff21aa36038 R14: 00007ff21aa35fa0 R15: 00007ffc0496fcc8
[   90.627242][ T6657]  </TASK>
[   90.878466][ T6659] loop9: detected capacity change from 0 to 7
[   90.884775][ T6659] buffer_io_error: 18 callbacks suppressed
[   90.884792][ T6659] Buffer I/O error on dev loop9, logical block 0, async page read
[   90.991301][ T6659] Buffer I/O error on dev loop9, logical block 0, async page read
[   90.999304][ T6659]  loop9: unable to read partition table
[   91.017041][ T6659] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[   91.017041][ T6659] 
) failed (rc=-5)
[   91.031579][ T4493] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.040771][ T4493] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.049943][ T4493] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.060414][ T4493] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.069858][ T4493] Buffer I/O error on dev loop9, logical block 0, async page read
[   91.079581][   T29] kauditd_printk_skb: 454 callbacks suppressed
[   91.079599][   T29] audit: type=1326 audit(1760879395.356:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.147239][ T6668] loop4: detected capacity change from 0 to 1024
[   91.155028][ T6668] EXT4-fs: Ignoring removed bh option
[   91.160568][ T6668] ext4: Unknown parameter 'smackfsroot'
[   91.174884][   T29] audit: type=1326 audit(1760879395.386:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.198353][   T29] audit: type=1326 audit(1760879395.386:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.221986][   T29] audit: type=1326 audit(1760879395.396:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.245565][   T29] audit: type=1326 audit(1760879395.396:7440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.269082][   T29] audit: type=1326 audit(1760879395.396:7441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.292486][   T29] audit: type=1326 audit(1760879395.396:7442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd911fefc9 code=0x7ffc0000
[   91.312261][ T6679] loop3: detected capacity change from 0 to 736
[   91.316173][   T29] audit: type=1326 audit(1760879395.396:7443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd91200ee7 code=0x7ffc0000
[   91.345768][   T29] audit: type=1326 audit(1760879395.396:7444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbd91200e5c code=0x7ffc0000
[   91.350466][ T6676] program syz.5.799 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.369322][   T29] audit: type=1326 audit(1760879395.396:7445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6663 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbd91200d94 code=0x7ffc0000
[   91.413767][ T6677] netlink: 'syz.2.804': attribute type 1 has an invalid length.
[   91.428142][ T6684] loop0: detected capacity change from 0 to 512
[   91.464515][ T6679] netlink: 'syz.3.805': attribute type 13 has an invalid length.
[   91.529303][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.536643][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.542622][ T6692] loop4: detected capacity change from 0 to 2048
[   91.547523][ T6694] netlink: 'syz.0.808': attribute type 1 has an invalid length.
[   91.680448][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.691359][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.781328][   T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.793258][   T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.804496][   T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.813663][   T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.041633][ T6698] loop5: detected capacity change from 0 to 1024
[   92.070033][ T6698] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.114492][ T6698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   92.197070][ T6700] program syz.2.812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.231816][ T6712] loop5: detected capacity change from 0 to 512
[   92.238620][ T6712] EXT4-fs: Ignoring removed orlov option
[   92.245650][ T6712] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.817: inode has both inline data and extents flags
[   92.259030][ T6712] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.817: couldn't read orphan inode 15 (err -117)
[   92.268899][ T6714] program syz.2.812 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.318999][ T6716] loop3: detected capacity change from 0 to 512
[   92.344785][ T6716] __nla_validate_parse: 2 callbacks suppressed
[   92.344801][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.361109][ T6716] netlink: 108 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.379964][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.394291][ T6716] netlink: 108 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.403397][ T6716] netlink: 84 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.463846][ T6724] loop4: detected capacity change from 0 to 512
[   92.472329][ T6716] 9pnet_fd: Insufficient options for proto=fd
[   92.491769][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.818'.
[   92.509125][ T6724] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.821: EA inode hash validation failed
[   92.529180][ T6728] loop2: detected capacity change from 0 to 512
[   92.547715][ T6728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.573009][ T6724] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   92.587965][ T6728] EXT4-fs (loop2): 1 truncate cleaned up
[   92.594551][ T6728] FAULT_INJECTION: forcing a failure.
[   92.594551][ T6728] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   92.606126][ T6724] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.821: corrupted inode contents
[   92.607662][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.2.822 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   92.607737][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   92.607758][ T6728] Call Trace:
[   92.607766][ T6728]  <TASK>
[   92.607779][ T6728]  __dump_stack+0x1d/0x30
[   92.607810][ T6728]  dump_stack_lvl+0xe8/0x140
[   92.607838][ T6728]  dump_stack+0x15/0x1b
[   92.607861][ T6728]  should_fail_ex+0x265/0x280
[   92.607915][ T6728]  should_fail+0xb/0x20
[   92.607960][ T6728]  should_fail_usercopy+0x1a/0x20
[   92.607999][ T6728]  strncpy_from_user+0x25/0x230
[   92.608040][ T6728]  ? kmem_cache_alloc_noprof+0x242/0x480
[   92.608099][ T6728]  ? getname_flags+0x80/0x3b0
[   92.608142][ T6728]  getname_flags+0xae/0x3b0
[   92.608184][ T6728]  __x64_sys_renameat2+0x5f/0x90
[   92.608222][ T6728]  x64_sys_call+0x3f9/0x3000
[   92.608254][ T6728]  do_syscall_64+0xd2/0x200
[   92.608338][ T6728]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   92.608423][ T6728]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   92.608455][ T6728]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.608620][ T6728] RIP: 0033:0x7f139d16efc9
[   92.608643][ T6728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.608669][ T6728] RSP: 002b:00007f139bbcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[   92.608696][ T6728] RAX: ffffffffffffffda RBX: 00007f139d3c5fa0 RCX: 00007f139d16efc9
[   92.608715][ T6728] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000006
[   92.608732][ T6728] RBP: 00007f139bbcf090 R08: 0000000000000004 R09: 0000000000000000
[   92.608749][ T6728] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[   92.608807][ T6728] R13: 00007f139d3c6038 R14: 00007f139d3c5fa0 R15: 00007ffeb5fcb858
[   92.608835][ T6728]  </TASK>
[   92.806128][ T6724] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.821: mark_inode_dirty error
[   92.824742][ T6724] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.821: corrupted inode contents
[   92.841238][ T6724] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.821: mark_inode_dirty error
[   92.856365][ T6724] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.821: mark inode dirty (error -117)
[   92.870965][ T6724] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[   92.889388][ T6748] 9pnet_fd: Insufficient options for proto=fd
[   92.890368][ T6736] program syz.5.824 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.907542][ T6749] 9pnet_virtio: no channels available for device ./file0
[   92.915031][ T6724] EXT4-fs (loop4): 1 orphan inode deleted
[   92.948262][ T6753] batadv_slave_1: entered promiscuous mode
[   92.950746][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'.
[   92.965178][ T6753] batadv_slave_1: left promiscuous mode
[   93.063662][ T6756] netlink: 96 bytes leftover after parsing attributes in process `syz.0.833'.
[   93.073492][ T6756] netlink: 96 bytes leftover after parsing attributes in process `syz.0.833'.
[   93.082559][ T6756] netlink: 96 bytes leftover after parsing attributes in process `syz.0.833'.
[   93.122782][ T6724] loop4: detected capacity change from 0 to 512
[   93.174814][ T6724] program syz.4.821 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.242299][ T6767] program syz.0.838 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.296538][ T6780] program syz.0.838 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.354851][ T6784] FAULT_INJECTION: forcing a failure.
[   93.354851][ T6784] name failslab, interval 1, probability 0, space 0, times 0
[   93.367580][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.5.845 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   93.367654][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   93.367672][ T6784] Call Trace:
[   93.367680][ T6784]  <TASK>
[   93.367689][ T6784]  __dump_stack+0x1d/0x30
[   93.367714][ T6784]  dump_stack_lvl+0xe8/0x140
[   93.367804][ T6784]  dump_stack+0x15/0x1b
[   93.367824][ T6784]  should_fail_ex+0x265/0x280
[   93.367947][ T6784]  ? bpf_prog_alloc_no_stats+0xc4/0x3b0
[   93.367987][ T6784]  should_failslab+0x8c/0xb0
[   93.368022][ T6784]  __kmalloc_cache_noprof+0x4c/0x4a0
[   93.368110][ T6784]  bpf_prog_alloc_no_stats+0xc4/0x3b0
[   93.368152][ T6784]  bpf_prog_alloc+0x3c/0x150
[   93.368254][ T6784]  bpf_prog_load+0x506/0x1100
[   93.368329][ T6784]  ? security_bpf+0x2b/0x90
[   93.368389][ T6784]  __sys_bpf+0x469/0x7c0
[   93.368436][ T6784]  __x64_sys_bpf+0x41/0x50
[   93.368473][ T6784]  x64_sys_call+0x2aee/0x3000
[   93.368509][ T6784]  do_syscall_64+0xd2/0x200
[   93.368543][ T6784]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   93.368571][ T6784]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[   93.368598][ T6784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.368702][ T6784] RIP: 0033:0x7fbd911fefc9
[   93.368717][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.368792][ T6784] RSP: 002b:00007fbd8fc5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   93.368816][ T6784] RAX: ffffffffffffffda RBX: 00007fbd91455fa0 RCX: 00007fbd911fefc9
[   93.368832][ T6784] RDX: 00000000000000b6 RSI: 00002000000001c0 RDI: 0000000000000005
[   93.368867][ T6784] RBP: 00007fbd8fc5f090 R08: 0000000000000000 R09: 0000000000000000
[   93.368884][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.368899][ T6784] R13: 00007fbd91456038 R14: 00007fbd91455fa0 R15: 00007ffc0207e888
[   93.368946][ T6784]  </TASK>
[   93.369367][ T6781] delete_channel: no stack
[   93.757133][ T6791] program syz.5.848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.809525][ T6805] program syz.5.848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   93.859092][ T6801] program syz.0.850 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.024164][ T6815] netlink: 'syz.5.856': attribute type 4 has an invalid length.
[   94.086728][ T6824] loop0: detected capacity change from 0 to 1024
[   94.100591][ T6824] loop0: detected capacity change from 0 to 512
[   94.107323][ T6824] EXT4-fs: Ignoring removed oldalloc option
[   94.114457][ T6822] loop5: detected capacity change from 0 to 1024
[   94.126608][ T6822] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.157779][ T6822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   94.157993][ T6824] EXT4-fs (loop0): 1 truncate cleaned up
[   94.240815][ T6820] program syz.2.857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.280153][ T3322] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   94.300783][ T6834] program syz.2.857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.307435][ T6833] loop3: detected capacity change from 0 to 512
[   94.313863][ T3322] EXT4-fs (loop0): Remounting filesystem read-only
[   94.329959][ T6827] program syz.4.861 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.349670][ T6833] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   94.365772][ T6833] EXT4-fs (loop3): orphan cleanup on readonly fs
[   94.379969][ T6833] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.863: Block bitmap for bg 0 marked uninitialized
[   94.391483][ T6838] program syz.4.861 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.402848][ T6833] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[   94.442381][ T6833] EXT4-fs (loop3): 1 orphan inode deleted
[   94.491274][ T6840] netlink: 'syz.2.866': attribute type 21 has an invalid length.
[   94.570047][ T4493] ==================================================================
[   94.578188][ T4493] BUG: KCSAN: data-race in set_nlink / set_nlink
[   94.584554][ T4493] 
[   94.586895][ T4493] read to 0xffff888106d6f120 of 4 bytes by task 3003 on cpu 1:
[   94.594451][ T4493]  set_nlink+0x29/0xb0
[   94.598528][ T4493]  kernfs_iop_permission+0x1e2/0x220
[   94.603829][ T4493]  inode_permission+0x1ca/0x310
[   94.608693][ T4493]  link_path_walk+0x162/0x900
[   94.613505][ T4493]  path_lookupat+0x63/0x2a0
[   94.618083][ T4493]  filename_lookup+0x147/0x340
[   94.622880][ T4493]  vfs_statx+0x9d/0x390
[   94.627056][ T4493]  vfs_fstatat+0x115/0x170
[   94.631484][ T4493]  __se_sys_newfstatat+0x55/0x260
[   94.636529][ T4493]  __x64_sys_newfstatat+0x55/0x70
[   94.641599][ T4493]  x64_sys_call+0x135a/0x3000
[   94.646313][ T4493]  do_syscall_64+0xd2/0x200
[   94.650843][ T4493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.656755][ T4493] 
[   94.659090][ T4493] write to 0xffff888106d6f120 of 4 bytes by task 4493 on cpu 0:
[   94.666723][ T4493]  set_nlink+0x99/0xb0
[   94.670809][ T4493]  kernfs_iop_permission+0x1e2/0x220
[   94.676110][ T4493]  inode_permission+0x1ca/0x310
[   94.680975][ T4493]  link_path_walk+0x162/0x900
[   94.685726][ T4493]  path_openat+0x1de/0x2170
[   94.690243][ T4493]  do_filp_open+0x109/0x230
[   94.694788][ T4493]  do_sys_openat2+0xa6/0x110
[   94.699423][ T4493]  __x64_sys_openat+0xf2/0x120
[   94.704213][ T4493]  x64_sys_call+0x2eab/0x3000
[   94.708916][ T4493]  do_syscall_64+0xd2/0x200
[   94.713451][ T4493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.719378][ T4493] 
[   94.721712][ T4493] value changed: 0x00000009 -> 0x00000008
[   94.727524][ T4493] 
[   94.729863][ T4493] Reported by Kernel Concurrency Sanitizer on:
[   94.736206][ T4493] CPU: 0 UID: 0 PID: 4493 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.745520][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   94.755612][ T4493] ==================================================================
[   94.920281][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.969539][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.028857][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.079616][ T5801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.156872][ T5801] bridge_slave_1: left allmulticast mode
[   95.162695][ T5801] bridge_slave_1: left promiscuous mode
[   95.168596][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.177208][ T5801] bridge_slave_0: left allmulticast mode
[   95.182947][ T5801] bridge_slave_0: left promiscuous mode
[   95.188735][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.288945][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.304289][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.323137][ T5801] bond0 (unregistering): Released all slaves
[   95.381425][ T5801] hsr_slave_0: left promiscuous mode
[   95.387627][ T5801] hsr_slave_1: left promiscuous mode
[   95.393398][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.400878][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.408667][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.416154][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.427557][ T5801] veth1_macvtap: left promiscuous mode
[   95.435210][ T5801] veth0_macvtap: left promiscuous mode
[   95.440901][ T5801] veth1_vlan: left promiscuous mode
[   95.446382][ T5801] veth0_vlan: left promiscuous mode
[   95.520209][ T5801] team0 (unregistering): Port device team_slave_1 removed
[   95.530537][ T5801] team0 (unregistering): Port device team_slave_0 removed