Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts.
2023/12/19 07:12:44 fuzzer started
2023/12/19 07:12:44 dialing manager at 10.128.0.163:30015
[   25.880764][   T27] audit: type=1400 audit(1702969964.259:81): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   25.882032][ T3078] cgroup: Unknown subsys name 'net'
[   25.903582][   T27] audit: type=1400 audit(1702969964.259:82): avc:  denied  { mount } for  pid=3078 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.930969][   T27] audit: type=1400 audit(1702969964.279:83): avc:  denied  { unmount } for  pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   25.951007][   T27] audit: type=1400 audit(1702969964.279:84): avc:  denied  { read } for  pid=2761 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   26.091809][ T3078] cgroup: Unknown subsys name 'rlimit'
[   26.211879][   T27] audit: type=1400 audit(1702969964.589:85): avc:  denied  { mounton } for  pid=3078 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.236820][   T27] audit: type=1400 audit(1702969964.589:86): avc:  denied  { mount } for  pid=3078 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.246557][ T3079] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.260871][   T27] audit: type=1400 audit(1702969964.589:87): avc:  denied  { create } for  pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.291682][   T27] audit: type=1400 audit(1702969964.589:88): avc:  denied  { write } for  pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.312051][   T27] audit: type=1400 audit(1702969964.589:89): avc:  denied  { read } for  pid=3078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   26.332405][   T27] audit: type=1400 audit(1702969964.649:90): avc:  denied  { relabelto } for  pid=3079 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2023/12/19 07:12:44 syscalls: 2889
2023/12/19 07:12:44 code coverage: enabled
2023/12/19 07:12:44 comparison tracing: enabled
2023/12/19 07:12:44 extra coverage: enabled
2023/12/19 07:12:44 delay kcov mmap: enabled
2023/12/19 07:12:44 setuid sandbox: enabled
2023/12/19 07:12:44 namespace sandbox: enabled
2023/12/19 07:12:44 Android sandbox: enabled
2023/12/19 07:12:44 fault injection: enabled
2023/12/19 07:12:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2023/12/19 07:12:44 net packet injection: enabled
2023/12/19 07:12:44 net device setup: enabled
2023/12/19 07:12:44 concurrency sanitizer: enabled
2023/12/19 07:12:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/12/19 07:12:44 NIC VF setup: PCI device 0000:00:11.0 is not available
2023/12/19 07:12:44 USB emulation: /dev/raw-gadget does not exist
2023/12/19 07:12:44 hci packet injection: /dev/vhci does not exist
2023/12/19 07:12:44 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist
2023/12/19 07:12:44 802.15.4 emulation: enabled
2023/12/19 07:12:44 swap file: enabled
2023/12/19 07:12:44 suppressing KCSAN reports in functions: '__xa_clear_mark' 'do_sys_poll' 'ext4_da_write_end' 
2023/12/19 07:12:44 fetching corpus: 0, signal 0/2000 (executing program)
[   26.348686][ T3078] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2023/12/19 07:12:44 fetching corpus: 46, signal 16813/20213 (executing program)
2023/12/19 07:12:44 fetching corpus: 95, signal 25425/30085 (executing program)
2023/12/19 07:12:44 fetching corpus: 145, signal 36124/41624 (executing program)
2023/12/19 07:12:45 fetching corpus: 195, signal 41072/47515 (executing program)
2023/12/19 07:12:45 fetching corpus: 245, signal 45635/52975 (executing program)
2023/12/19 07:12:45 fetching corpus: 295, signal 49608/57672 (executing program)
2023/12/19 07:12:45 fetching corpus: 343, signal 53456/62171 (executing program)
2023/12/19 07:12:45 fetching corpus: 392, signal 56233/65558 (executing program)
2023/12/19 07:12:45 fetching corpus: 442, signal 58574/68505 (executing program)
2023/12/19 07:12:45 fetching corpus: 492, signal 61245/71708 (executing program)
2023/12/19 07:12:45 fetching corpus: 542, signal 63766/74633 (executing program)
2023/12/19 07:12:45 fetching corpus: 592, signal 65936/77192 (executing program)
2023/12/19 07:12:45 fetching corpus: 642, signal 68167/79701 (executing program)
2023/12/19 07:12:45 fetching corpus: 692, signal 69740/81663 (executing program)
2023/12/19 07:12:45 fetching corpus: 742, signal 71739/83906 (executing program)
2023/12/19 07:12:45 fetching corpus: 791, signal 74648/86736 (executing program)
2023/12/19 07:12:45 fetching corpus: 841, signal 75779/88244 (executing program)
2023/12/19 07:12:46 fetching corpus: 891, signal 77227/89903 (executing program)
2023/12/19 07:12:46 fetching corpus: 941, signal 78873/91627 (executing program)
2023/12/19 07:12:46 fetching corpus: 991, signal 80874/93532 (executing program)
2023/12/19 07:12:46 fetching corpus: 1041, signal 82088/94921 (executing program)
2023/12/19 07:12:46 fetching corpus: 1091, signal 83831/96547 (executing program)
2023/12/19 07:12:46 fetching corpus: 1141, signal 85359/97956 (executing program)
2023/12/19 07:12:46 fetching corpus: 1191, signal 86987/99389 (executing program)
2023/12/19 07:12:46 fetching corpus: 1241, signal 88190/100546 (executing program)
2023/12/19 07:12:46 fetching corpus: 1290, signal 89592/101764 (executing program)
2023/12/19 07:12:46 fetching corpus: 1340, signal 90462/102645 (executing program)
2023/12/19 07:12:46 fetching corpus: 1390, signal 92095/103850 (executing program)
2023/12/19 07:12:46 fetching corpus: 1440, signal 93189/104783 (executing program)
2023/12/19 07:12:46 fetching corpus: 1490, signal 93911/105552 (executing program)
2023/12/19 07:12:47 fetching corpus: 1540, signal 95396/106585 (executing program)
2023/12/19 07:12:47 fetching corpus: 1590, signal 96469/107401 (executing program)
2023/12/19 07:12:47 fetching corpus: 1640, signal 97180/107990 (executing program)
2023/12/19 07:12:47 fetching corpus: 1690, signal 98293/108754 (executing program)
2023/12/19 07:12:47 fetching corpus: 1739, signal 99294/109437 (executing program)
2023/12/19 07:12:47 fetching corpus: 1788, signal 100418/110117 (executing program)
2023/12/19 07:12:47 fetching corpus: 1838, signal 101671/110799 (executing program)
2023/12/19 07:12:47 fetching corpus: 1887, signal 102480/111306 (executing program)
2023/12/19 07:12:47 fetching corpus: 1937, signal 103682/111878 (executing program)
2023/12/19 07:12:47 fetching corpus: 1987, signal 104814/112399 (executing program)
2023/12/19 07:12:47 fetching corpus: 2037, signal 105438/112756 (executing program)
2023/12/19 07:12:47 fetching corpus: 2087, signal 106382/113185 (executing program)
2023/12/19 07:12:48 fetching corpus: 2137, signal 107424/113593 (executing program)
2023/12/19 07:12:48 fetching corpus: 2187, signal 108651/113997 (executing program)
2023/12/19 07:12:48 fetching corpus: 2237, signal 109735/114307 (executing program)
2023/12/19 07:12:48 fetching corpus: 2285, signal 110662/114588 (executing program)
2023/12/19 07:12:48 fetching corpus: 2335, signal 111484/114806 (executing program)
2023/12/19 07:12:48 fetching corpus: 2385, signal 112397/115027 (executing program)
2023/12/19 07:12:48 fetching corpus: 2435, signal 113347/115217 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115253 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115300 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115339 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115374 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115409 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115443 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115481 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115515 (executing program)
2023/12/19 07:12:48 fetching corpus: 2436, signal 113359/115515 (executing program)
[   31.154704][ T3072] ==================================================================
[   31.162862][ T3072] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk
[   31.170297][ T3072] 
[   31.172641][ T3072] write to 0xffff888100c75d00 of 8 bytes by task 3070 on cpu 1:
[   31.180500][ T3072]  mas_replace_node+0x1b5/0x430
[   31.185370][ T3072]  mas_wr_modify+0x287c/0x37d0
[   31.190239][ T3072]  mas_wr_store_entry+0x235/0x350
[   31.195655][ T3072]  mas_store_prealloc+0x155/0x2b0
[   31.200983][ T3072]  vma_complete+0x2a0/0x650
[   31.205880][ T3072]  __split_vma+0x596/0x5d0
[   31.210366][ T3072]  do_vmi_align_munmap+0x241/0x970
[   31.216031][ T3072]  do_vmi_munmap+0x1ea/0x230
[   31.221179][ T3072]  mmap_region+0x595/0x16e0
[   31.225811][ T3072]  do_mmap+0x67e/0xa90
[   31.230149][ T3072]  vm_mmap_pgoff+0x12e/0x240
[   31.234852][ T3072]  ksys_mmap_pgoff+0xc5/0x330
[   31.239656][ T3072]  do_syscall_64+0x44/0x110
[   31.244178][ T3072]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   31.250099][ T3072] 
[   31.252523][ T3072] read to 0xffff888100c75d00 of 8 bytes by task 3072 on cpu 0:
[   31.260258][ T3072]  mas_state_walk+0x267/0x5d0
[   31.264975][ T3072]  mas_walk+0x31/0x120
[   31.269241][ T3072]  lock_vma_under_rcu+0x8d/0x2a0
[   31.274205][ T3072]  exc_page_fault+0x164/0x6c0
[   31.279019][ T3072]  asm_exc_page_fault+0x26/0x30
[   31.283988][ T3072] 
[   31.286326][ T3072] value changed: 0xffff888103d10d06 -> 0xffff888100c75d00
[   31.293613][ T3072] 
[   31.295968][ T3072] Reported by Kernel Concurrency Sanitizer on:
[   31.302218][ T3072] CPU: 0 PID: 3072 Comm: syz-fuzzer Not tainted 6.7.0-rc6-syzkaller-00010-g2cf4f94d8e86 #0
[   31.312244][ T3072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   31.322306][ T3072] ==================================================================
07:12:50 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

2023/12/19 07:12:50 starting 6 fuzzer processes
07:12:50 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:50 executing program 1:
bpf$BPF_GET_MAP_INFO(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

07:12:50 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x1200040, &(0x7f0000000100)={[{@dots}, {@dots}]}, 0x7e, 0x1c2, &(0x7f0000000140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x45)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000040))

07:12:50 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4)

07:12:50 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0)

[   32.369461][   T27] kauditd_printk_skb: 3 callbacks suppressed
[   32.369475][   T27] audit: type=1400 audit(1702969970.719:94): avc:  denied  { execmem } for  pid=3084 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   32.396206][   T27] audit: type=1400 audit(1702969970.739:95): avc:  denied  { read } for  pid=3088 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.418034][   T27] audit: type=1400 audit(1702969970.739:96): avc:  denied  { open } for  pid=3088 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   32.441746][   T27] audit: type=1400 audit(1702969970.739:97): avc:  denied  { mounton } for  pid=3088 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   32.577374][   T27] audit: type=1400 audit(1702969970.819:98): avc:  denied  { module_request } for  pid=3091 comm="syz-executor.2" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   32.599878][   T27] audit: type=1400 audit(1702969970.839:99): avc:  denied  { sys_module } for  pid=3091 comm="syz-executor.2" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   32.621659][   T27] audit: type=1400 audit(1702969970.849:100): avc:  denied  { append } for  pid=2761 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.644394][   T27] audit: type=1400 audit(1702969970.849:101): avc:  denied  { open } for  pid=2761 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.667040][   T27] audit: type=1400 audit(1702969970.849:102): avc:  denied  { getattr } for  pid=2761 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   32.942338][ T3091] chnl_net:caif_netlink_parms(): no params data found
[   33.028828][ T3103] chnl_net:caif_netlink_parms(): no params data found
[   33.096516][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.103815][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.111119][ T3091] bridge_slave_0: entered allmulticast mode
[   33.117433][ T3091] bridge_slave_0: entered promiscuous mode
[   33.126688][ T3115] chnl_net:caif_netlink_parms(): no params data found
[   33.160333][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.170435][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.177754][ T3091] bridge_slave_1: entered allmulticast mode
[   33.184198][ T3091] bridge_slave_1: entered promiscuous mode
[   33.204938][ T3097] chnl_net:caif_netlink_parms(): no params data found
[   33.252192][ T3088] chnl_net:caif_netlink_parms(): no params data found
[   33.262449][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.278249][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.331198][ T3115] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.338297][ T3115] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.345565][ T3115] bridge_slave_0: entered allmulticast mode
[   33.352122][ T3115] bridge_slave_0: entered promiscuous mode
[   33.374522][ T3091] team0: Port device team_slave_0 added
[   33.380538][ T3115] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.387712][ T3115] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.395126][ T3115] bridge_slave_1: entered allmulticast mode
[   33.401636][ T3115] bridge_slave_1: entered promiscuous mode
[   33.407851][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.415201][ T3103] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.422977][ T3103] bridge_slave_0: entered allmulticast mode
[   33.429234][ T3103] bridge_slave_0: entered promiscuous mode
[   33.441387][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.448570][ T3097] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.456451][ T3097] bridge_slave_0: entered allmulticast mode
[   33.463181][ T3097] bridge_slave_0: entered promiscuous mode
[   33.473082][ T3091] team0: Port device team_slave_1 added
[   33.494468][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.501767][ T3103] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.508875][ T3103] bridge_slave_1: entered allmulticast mode
[   33.515439][ T3103] bridge_slave_1: entered promiscuous mode
[   33.526789][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.534029][ T3097] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.541345][ T3097] bridge_slave_1: entered allmulticast mode
[   33.547964][ T3097] bridge_slave_1: entered promiscuous mode
[   33.578206][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.585293][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.611323][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   33.623221][ T3115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.638889][ T3103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.648790][ T3098] chnl_net:caif_netlink_parms(): no params data found
[   33.663783][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.670948][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.678268][ T3088] bridge_slave_0: entered allmulticast mode
[   33.684919][ T3088] bridge_slave_0: entered promiscuous mode
[   33.691624][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1
[   33.698599][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   33.725049][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   33.737048][ T3115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.753470][ T3103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.773926][ T3097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.783165][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.790404][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.797561][ T3088] bridge_slave_1: entered allmulticast mode
[   33.804033][ T3088] bridge_slave_1: entered promiscuous mode
[   33.825315][ T3115] team0: Port device team_slave_0 added
[   33.846612][ T3097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.867690][ T3097] team0: Port device team_slave_0 added
[   33.880655][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   33.890864][ T3115] team0: Port device team_slave_1 added
[   33.897331][ T3103] team0: Port device team_slave_0 added
[   33.905092][ T3103] team0: Port device team_slave_1 added
[   33.924676][ T3097] team0: Port device team_slave_1 added
[   33.942268][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   33.991274][ T3097] batman_adv: batadv0: Adding interface: batadv_slave_0
[   33.998372][ T3097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.024633][ T3097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.042996][ T3088] team0: Port device team_slave_0 added
[   34.049035][ T3115] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.056199][ T3115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.082619][ T3115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.093525][ T3103] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.100554][ T3103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.126809][ T3103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.138078][ T3103] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.145153][ T3103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.171250][ T3103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.182343][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.189763][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.198330][ T3098] bridge_slave_0: entered allmulticast mode
[   34.204725][ T3098] bridge_slave_0: entered promiscuous mode
[   34.211577][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.218661][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.226007][ T3098] bridge_slave_1: entered allmulticast mode
[   34.233663][ T3098] bridge_slave_1: entered promiscuous mode
[   34.242147][ T3091] hsr_slave_0: entered promiscuous mode
[   34.248193][ T3091] hsr_slave_1: entered promiscuous mode
[   34.255975][ T3097] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.263203][ T3097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.289892][ T3097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.301656][ T3088] team0: Port device team_slave_1 added
[   34.313546][ T3115] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.320634][ T3115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.346731][ T3115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.388701][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.396076][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.422394][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.434479][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.441787][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.468733][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.486015][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.497106][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.531006][ T3115] hsr_slave_0: entered promiscuous mode
[   34.537391][ T3115] hsr_slave_1: entered promiscuous mode
[   34.543622][ T3115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.552919][ T3115] Cannot create hsr debugfs directory
[   34.576360][ T3098] team0: Port device team_slave_0 added
[   34.587408][ T3098] team0: Port device team_slave_1 added
[   34.595662][ T3103] hsr_slave_0: entered promiscuous mode
[   34.601765][ T3103] hsr_slave_1: entered promiscuous mode
[   34.607851][ T3103] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.610679][   T27] audit: type=1400 audit(1702969972.979:103): avc:  denied  { remove_name } for  pid=2761 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   34.616921][ T3103] Cannot create hsr debugfs directory
[   34.657719][ T3097] hsr_slave_0: entered promiscuous mode
[   34.664060][ T3097] hsr_slave_1: entered promiscuous mode
[   34.670099][ T3097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.677846][ T3097] Cannot create hsr debugfs directory
[   34.713336][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.720449][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.746556][ T3098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.764791][ T3088] hsr_slave_0: entered promiscuous mode
[   34.771361][ T3088] hsr_slave_1: entered promiscuous mode
[   34.777319][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.785325][ T3088] Cannot create hsr debugfs directory
[   34.794412][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.801754][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.827820][ T3098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.942104][ T3098] hsr_slave_0: entered promiscuous mode
[   34.948300][ T3098] hsr_slave_1: entered promiscuous mode
[   34.954555][ T3098] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   34.962332][ T3098] Cannot create hsr debugfs directory
[   34.974279][ T3091] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   34.984538][ T3091] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   35.003656][ T3091] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   35.013129][ T3091] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   35.053704][ T3115] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   35.063116][ T3115] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   35.080712][ T3115] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   35.101857][ T3115] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   35.134098][ T3097] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   35.146302][ T3097] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   35.156537][ T3097] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   35.166874][ T3097] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   35.207891][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   35.219866][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   35.228864][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   35.238857][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   35.263037][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.310201][ T3103] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   35.318914][ T3103] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   35.328635][ T3103] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   35.337996][ T3103] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   35.351222][ T3115] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.374861][ T3115] 8021q: adding VLAN 0 to HW filter on device team0
[   35.395722][ T3091] 8021q: adding VLAN 0 to HW filter on device team0
[   35.413317][ T3098] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   35.423528][ T3098] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   35.432930][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.440149][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.448858][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.456314][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.477737][ T3097] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.485951][ T3098] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   35.495749][ T3098] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   35.520632][ T3190] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.528732][ T3190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.538626][ T3190] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.545900][ T3190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.561697][ T3097] 8021q: adding VLAN 0 to HW filter on device team0
[   35.611056][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.619093][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.629397][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.636733][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.664040][ T3097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   35.674678][ T3097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   35.700782][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.722261][ T3088] 8021q: adding VLAN 0 to HW filter on device team0
[   35.749219][ T3103] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.760319][ T3186] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.767429][ T3186] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.788343][ T3187] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.795731][ T3187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.812198][ T3103] 8021q: adding VLAN 0 to HW filter on device team0
[   35.827880][ T3115] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.853812][ T3097] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.868645][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.913918][ T3098] 8021q: adding VLAN 0 to HW filter on device team0
[   35.934531][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0
[   35.959055][ T3192] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.966606][ T3192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.976611][ T3192] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.983857][ T3192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.994547][ T3192] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.001877][ T3192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.012306][ T3192] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.019373][ T3192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.089591][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.097474][ T3098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.117378][ T3103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.127819][ T3103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.219149][ T3115] veth0_vlan: entered promiscuous mode
[   36.273518][ T3103] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.289541][ T3098] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.308941][ T3115] veth1_vlan: entered promiscuous mode
[   36.359321][ T3091] veth0_vlan: entered promiscuous mode
[   36.384058][ T3088] veth0_vlan: entered promiscuous mode
[   36.396052][ T3115] veth0_macvtap: entered promiscuous mode
[   36.409612][ T3091] veth1_vlan: entered promiscuous mode
[   36.419717][ T3088] veth1_vlan: entered promiscuous mode
[   36.430235][ T3115] veth1_macvtap: entered promiscuous mode
[   36.441734][ T3097] veth0_vlan: entered promiscuous mode
[   36.458768][ T3091] veth0_macvtap: entered promiscuous mode
[   36.476310][ T3103] veth0_vlan: entered promiscuous mode
[   36.493034][ T3097] veth1_vlan: entered promiscuous mode
[   36.500981][ T3091] veth1_macvtap: entered promiscuous mode
[   36.517885][ T3088] veth0_macvtap: entered promiscuous mode
[   36.534088][ T3098] veth0_vlan: entered promiscuous mode
[   36.547452][ T3115] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.558290][ T3098] veth1_vlan: entered promiscuous mode
[   36.568761][ T3088] veth1_macvtap: entered promiscuous mode
[   36.577123][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.587818][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.599633][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.608958][ T3115] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.618875][ T3097] veth0_macvtap: entered promiscuous mode
[   36.626039][ T3103] veth1_vlan: entered promiscuous mode
[   36.643610][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.654232][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.664936][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.674270][ T3115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.683151][ T3115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.691946][ T3115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.700715][ T3115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.713818][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.724482][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.734586][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.745126][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.756302][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.764255][ T3097] veth1_macvtap: entered promiscuous mode
[   36.772410][ T3091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.782095][ T3091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.790969][ T3091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.799730][ T3091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.823756][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.834398][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.844529][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.855070][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.865914][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.875682][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.885120][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.894083][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.903073][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.921156][ T3098] veth0_macvtap: entered promiscuous mode
[   36.935466][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.946149][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.956489][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.966980][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.977271][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.987730][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.998698][ T3097] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.011282][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.022138][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.032136][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.042722][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.053846][ T3097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.064519][ T3097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.075442][ T3097] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.083971][ T3103] veth0_macvtap: entered promiscuous mode
[   37.091460][ T3098] veth1_macvtap: entered promiscuous mode
[   37.113804][ T3097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.122680][ T3097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.131535][ T3097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.140780][ T3097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.158919][ T3103] veth1_macvtap: entered promiscuous mode
07:12:55 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0)

07:12:55 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0)

[   37.197250][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.207980][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.217859][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.228459][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
07:12:55 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0)

[   37.238312][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.248974][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.260079][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.270724][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.282385][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.291318][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.302443][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.312388][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.322893][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.332778][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
07:12:55 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

07:12:55 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

07:12:55 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

[   37.343321][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.353699][ T3098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.364654][ T3098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.378496][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.426546][ T3098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.435498][ T3098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.446126][ T3098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.455329][ T3098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.473426][ T3290] loop2: detected capacity change from 0 to 256
[   37.476146][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.485614][ T3290] =======================================================
[   37.485614][ T3290] WARNING: The mand mount option has been deprecated and
[   37.485614][ T3290]          and is ignored by this kernel. Remove the mand
[   37.485614][ T3290]          option from the mount to silence this warning.
[   37.485614][ T3290] =======================================================
[   37.490257][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.490275][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.490293][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.490382][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.490403][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.537745][   T27] kauditd_printk_skb: 8 callbacks suppressed
[   37.537761][   T27] audit: type=1400 audit(1702969975.849:112): avc:  denied  { mounton } for  pid=3286 comm="syz-executor.2" path=2F726F6F742F73797A6B616C6C65722D74657374646972323334383233353236382F73797A6B616C6C65722E67556B66505A2F302F2E02 dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   37.547936][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.570297][   T27] audit: type=1400 audit(1702969975.949:113): avc:  denied  { mount } for  pid=3286 comm="syz-executor.2" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   37.579236][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.605977][   T27] audit: type=1400 audit(1702969975.959:114): avc:  denied  { create } for  pid=3286 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.617259][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.635037][   T27] audit: type=1400 audit(1702969975.999:115): avc:  denied  { getopt } for  pid=3286 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   37.650106][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.655921][ T3103] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.664054][   T27] audit: type=1400 audit(1702969976.029:116): avc:  denied  { unmount } for  pid=3091 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   37.793511][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.804233][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.814349][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.828258][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.838234][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.848727][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.859186][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.869778][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.879999][ T3103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.894611][ T3103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.908853][ T3103] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.922124][ T3103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.934222][ T3103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
07:12:56 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

[   37.943310][ T3103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.952681][ T3103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.000893][   T27] audit: type=1400 audit(1702969976.369:117): avc:  denied  { read write } for  pid=3293 comm="syz-executor.5" name="rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.025797][   T27] audit: type=1400 audit(1702969976.369:118): avc:  denied  { open } for  pid=3293 comm="syz-executor.5" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   38.051970][   T27] audit: type=1400 audit(1702969976.369:119): avc:  denied  { write } for  pid=3070 comm="syz-fuzzer" path="pipe:[738]" dev="pipefs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   38.082523][ T3297] loop7: detected capacity change from 0 to 16384
07:12:56 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0xc0)
close_range(r0, 0xffffffffffffffff, 0x0)

07:12:56 executing program 1:
bpf$BPF_GET_MAP_INFO(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

07:12:56 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x1200040, &(0x7f0000000100)={[{@dots}, {@dots}]}, 0x7e, 0x1c2, &(0x7f0000000140)="$eJzs3c9qE1EUB+CTWpPRjVkIgrgYcOMqqGvBilQQBwQlC10ptG5aEZrN6KqP4dP4ND6AdJXdFXNDYksUReaP7fdByIFfDjkzN9xd7ry59f5g78Ps3dcbn6MoBrG1EzsxH8Q4tiIWr4jjAADOk/lgWaSUTgVXOhkHAGjBPKX4lrKuZwEA2vHy1etnj6pq90VZFhEnx/W0nub3nD95Wu3eLRfG666Tup5eWuX3cl6ezi/H1WV+f2M+jDu3c/4je/y8OpOPYi/SqPk7AAAAAAAAAAAAAAAAAAAAAAAA7ZuUKxvP95lMfpXn6qfzgc6c37MdN7dbuwwAAAAAAAAAAAAAAAAAAAD4r80+fjp4e3i4f9SzIo3yfH2Zp8li+NvPFMuVamGedC1/VT9uyz8U5f7R7EsPfuGxKGIc8Vftw7zcDzd3Fe0Mf321R4xa3pMAAAAAAAAAAAAAAAAAAOCiWv/p9w8bHjQ8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0YP38/+aKrq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8+97AAAA//9kaSG/")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x45)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000040))

07:12:56 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

07:12:56 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4)

[   38.241555][ T3297] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   38.251871][ T3297] Buffer I/O error on dev loop7, logical block 320, async page read
07:12:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

07:12:56 executing program 1:
bpf$BPF_GET_MAP_INFO(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

07:12:56 executing program 5:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

07:12:56 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4)

07:12:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

07:12:56 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x1200040, &(0x7f0000000100)={[{@dots}, {@dots}]}, 0x7e, 0x1c2, &(0x7f0000000140)="$eJzs3c9qE1EUB+CTWpPRjVkIgrgYcOMqqGvBilQQBwQlC10ptG5aEZrN6KqP4dP4ND6AdJXdFXNDYksUReaP7fdByIFfDjkzN9xd7ry59f5g78Ps3dcbn6MoBrG1EzsxH8Q4tiIWr4jjAADOk/lgWaSUTgVXOhkHAGjBPKX4lrKuZwEA2vHy1etnj6pq90VZFhEnx/W0nub3nD95Wu3eLRfG666Tup5eWuX3cl6ezi/H1WV+f2M+jDu3c/4je/y8OpOPYi/SqPk7AAAAAAAAAAAAAAAAAAAAAAAA7ZuUKxvP95lMfpXn6qfzgc6c37MdN7dbuwwAAAAAAAAAAAAAAAAAAAD4r80+fjp4e3i4f9SzIo3yfH2Zp8li+NvPFMuVamGedC1/VT9uyz8U5f7R7EsPfuGxKGIc8Vftw7zcDzd3Fe0Mf321R4xa3pMAAAAAAAAAAAAAAAAAAOCiWv/p9w8bHjQ8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0YP38/+aKrq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8+97AAAA//9kaSG/")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x45)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000040))

[   38.300223][ T3310] loop2: detected capacity change from 0 to 256
07:12:56 executing program 5:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)

07:12:56 executing program 1:
bpf$BPF_GET_MAP_INFO(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

07:12:56 executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f00000000c0), 0x4)

07:12:56 executing program 1:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

[   38.386204][ T3325] loop7: detected capacity change from 0 to 16384
07:12:56 executing program 4:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 3:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 4:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

[   38.503004][   T10] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2
[   38.509778][ T3327] loop2: detected capacity change from 0 to 256
07:12:56 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x1200040, &(0x7f0000000100)={[{@dots}, {@dots}]}, 0x7e, 0x1c2, &(0x7f0000000140)="$eJzs3c9qE1EUB+CTWpPRjVkIgrgYcOMqqGvBilQQBwQlC10ptG5aEZrN6KqP4dP4ND6AdJXdFXNDYksUReaP7fdByIFfDjkzN9xd7ry59f5g78Ps3dcbn6MoBrG1EzsxH8Q4tiIWr4jjAADOk/lgWaSUTgVXOhkHAGjBPKX4lrKuZwEA2vHy1etnj6pq90VZFhEnx/W0nub3nD95Wu3eLRfG666Tup5eWuX3cl6ezi/H1WV+f2M+jDu3c/4je/y8OpOPYi/SqPk7AAAAAAAAAAAAAAAAAAAAAAAA7ZuUKxvP95lMfpXn6qfzgc6c37MdN7dbuwwAAAAAAAAAAAAAAAAAAAD4r80+fjp4e3i4f9SzIo3yfH2Zp8li+NvPFMuVamGedC1/VT9uyz8U5f7R7EsPfuGxKGIc8Vftw7zcDzd3Fe0Mf321R4xa3pMAAAAAAAAAAAAAAAAAAOCiWv/p9w8bHjQ8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0YP38/+aKrq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8+97AAAA//9kaSG/")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x45)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f0000000040))

07:12:56 executing program 1:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 5:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 3:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:56 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

[   38.576910][ T3352] loop7: detected capacity change from 0 to 16384
07:12:57 executing program 5:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:57 executing program 1:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:57 executing program 3:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:57 executing program 0:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x34)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000640))
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xcc02, 0x8)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r2, 0x4c01)

07:12:57 executing program 2:
r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@private0, <r1=>0x0}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', r1, 0x0, 0x7, 0x9, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @empty, {[@end, @timestamp_prespec={0x44, 0x1c, 0x85, 0x3, 0x7, [{@loopback, 0x9}, {@multicast1, 0x40000}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x2, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@multicast2, 0x5c}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}]}, @cipso={0x86, 0x2a, 0x1, [{0x0, 0x7, "0e6d5f07ee"}, {0x5, 0xa, "cde29f5903a8a7c2"}, {0x2, 0xc, "3d72e4c3794e1058aa4d"}, {0x0, 0x7, "dbe37ca6cb"}]}, @lsrr={0x83, 0x17, 0x41, [@dev={0xac, 0x14, 0x14, 0x23}, @remote, @remote, @empty, @multicast2]}, @end, @rr={0x7, 0x1b, 0x1f, [@private, @broadcast, @broadcast, @rand_addr=0x64010102, @loopback, @rand_addr]}]}}}}})
fsopen(&(0x7f0000000240)='configfs\x00', 0x0)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000340)={0x8}, 0x8)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0)
r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
pwritev(r0, 0x0, 0x0, 0x3, 0x81)
pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6)
sendfile(r2, r2, 0x0, 0x24002de8)
r7 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e40)={r8, 0x0, 0x0, 0x4}, 0x20)
fsmount(r8, 0x1, 0xf0)
fcntl$setsig(0xfffffffffff