last executing test programs:

2m51.715626145s ago: executing program 0 (id=276):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2m51.697767695s ago: executing program 0 (id=277):
pwrite64(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8000c61)
fallocate(0xffffffffffffffff, 0x3, 0x8000000, 0x8000c62)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000340), &(0x7f0000000240)=r1}, 0x36)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00')
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}}, 0x0)

2m51.658184785s ago: executing program 0 (id=278):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000200)={0xa0000004})

2m51.657394985s ago: executing program 0 (id=279):
r0 = syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r5}, 0x18)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2, 0x0)
ptrace$pokeuser(0x6, r0, 0x388, 0x2590f58a)
r7 = syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122f, &(0x7f0000001280)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85SJ48aCOdKetjV0Nktppy+dz2Yd95zs8784y8C77zv5Ln763uVFmG/kgWg+9HK2tiMnfU6RoxQ0fxfMvfvf9MxcvXzm/0m6vXkjp3MqlpRdSSnNnvnnzgy+f/XYw88ZXc19Pxd7CW/s/L/+0d2rv9P4fl97tlqlbpl5/kPJ0td8f5FeLTlrvlptZSq8XnbzspG6v7GwfGN8o+ltbw5T31ment7Y7ZZny3jBtdoZp0E+D7WHK38m7vZRlWZqdDo5i7Ytfq6qKqKpjcTyqqqoejuloxSMxG3MxHwvxaDwWj8fJeCJOxZPxVJweHdV03wAAAAAAAAAAAAAAAAAAAPBgGbf/f+a2/f+fRYzb/3+m4eYBAAAAAAAAAAAAAAAAAADgAXHx8pXzK+326oWUTkQUn+ys7azVr/X4ykZ0o4hOLMZ8/Baj3f+1uj4e7dXFNLIQHxe71/O7O2sTB/NLo8cJ3JY/92p7danOp4P5qZi+Nb8c83FyfH75b/mzo/yJeO7sLfks5uPHt6MfRazHtexf+Q+XUnrltfbN/A979dzXG7wuAAAAcCdl6aax6/cs+6fxOn/Y7wPX1teLY9f3k/H0ZLNzJ6Icvr+ZF0Vn+0jFL7P12Y5ynhsd1e/sRsQdaKzRohUR90Ab/1IcO/SYmQYa+3wm4gjxiQNfpHvic74fi8PuHBP/302Ju+b6RZ9qug8AAAAAAAAAAAD+m7vxd8Km5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//+aCxlo=")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e94000/0x1000)=nil, &(0x7f0000ecb000/0x3000)=nil, &(0x7f0000000080)="9ed3f0e5e103ddf8cfb56e6d2df69f3c693d7f", 0x13, r7}, 0x68)
r8 = openat(r7, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)
pwrite64(r8, &(0x7f00000001c0)="aaa42f2c4b4ecff8e25f02729e1cabc8aff5841a59ae12c2f9b2fc38197af7bbc2ae2e3498755778f9de687d161385330e57175c3ec927604954e46ba9ed20ffe8efecc7f2a56b0c9304eb092202d346a72ede219d8bf253957d06b7e861027c", 0x60, 0x4)
pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async)
socket$inet(0xa, 0x1, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) (async)
getpid() (async)
process_vm_readv(r6, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x2, 0x0) (async)
ptrace$pokeuser(0x6, r0, 0x388, 0x2590f58a) (async)
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122f, &(0x7f0000001280)="$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") (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e94000/0x1000)=nil, &(0x7f0000ecb000/0x3000)=nil, &(0x7f0000000080)="9ed3f0e5e103ddf8cfb56e6d2df69f3c693d7f", 0x13, r7}, 0x68) (async)
openat(r7, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) (async)
pwrite64(r8, &(0x7f00000001c0)="aaa42f2c4b4ecff8e25f02729e1cabc8aff5841a59ae12c2f9b2fc38197af7bbc2ae2e3498755778f9de687d161385330e57175c3ec927604954e46ba9ed20ffe8efecc7f2a56b0c9304eb092202d346a72ede219d8bf253957d06b7e861027c", 0x60, 0x4) (async)
pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async)

2m51.535999376s ago: executing program 0 (id=280):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94)
recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
syz_read_part_table(0x5be, &(0x7f00000005c0)="$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")
pipe2(&(0x7f0000001cc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}]}})

2m51.410927597s ago: executing program 0 (id=281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xec4}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
close(r0)

2m51.397190207s ago: executing program 32 (id=281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xec4}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
close(r0)

56.032138103s ago: executing program 1 (id=2433):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = fcntl$getown(r0, 0x9)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r6})
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)

55.828857974s ago: executing program 1 (id=2444):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0xf7, 0xfe, 0xc, 0x0, 0x100000000, 0x248, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x0, 0x6, 0x6, 0x9, 0x40, 0x32fd, 0xcc, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r3, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x80000000}], 0x68)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

54.84783043s ago: executing program 1 (id=2469):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

54.795509211s ago: executing program 1 (id=2472):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = pidfd_getfd(r5, r5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031b05bfe11850b716441386fe30217b1e6a12800b0001006d6179343f5fd4f40dd76dcdd01f0711650fcd8d87", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
setns(r6, 0x66020000)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00b200024000000c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r11, 0x0)
syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x3, 0x6, 0x0, 0x3, 0x1903, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x10000000, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
accept4$packet(r8, &(0x7f0000000380), &(0x7f0000000400)=0x14, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48)

54.597371882s ago: executing program 1 (id=2481):
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000008d", @ANYRES32=<r3=>r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r6, @ANYRES64=r0, @ANYRES8=r4, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
clock_gettime(0x0, &(0x7f00000003c0))
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

53.624568748s ago: executing program 1 (id=2498):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
madvise(&(0x7f000011e000/0x4000)=nil, 0x4018, 0x0)

38.586031947s ago: executing program 33 (id=2498):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
madvise(&(0x7f000011e000/0x4000)=nil, 0x4018, 0x0)

1.380048981s ago: executing program 3 (id=3584):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000185"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x9a167000)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x9, 0xf7, 0xfe, 0xc, 0x0, 0x100000000, 0x248, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x0, 0x6, 0x6, 0x9, 0x40, 0x32fd, 0xcc, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r3, 0x3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x80000000}], 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e3afd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c834810000000000", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

967.689254ms ago: executing program 3 (id=3595):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x5, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r9}, 0x18)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf25090002bd00797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40, 0x11c)
ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000000040)=0x5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r12}, 0x18)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)

943.999074ms ago: executing program 6 (id=3597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002a1fef3de63e6b62919010738785e37910578bf2066948d9b9f2527720f56c7405b11632c6f18692bedd2b14d87fd351c63ba4a5a5fb6b316c8181fa3c95a740dc3f364da977846c2035203efabab7", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10)
kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xb, 0x3a, ' ', 0x3a, '\x835\tplb\x11\xcd\xb0\x84\x89\xa5\xf1\xdb\x05\xc4\x91\xe0\xd8/as0i\x17\xb5U\xb5\xa6\xdd\xeb\x83\'\x8c4\xaf\xc5\xae(\x03\xab\x85\x91%', 0x3a, './file0', 0x3a, [0x46]}, 0x55)

887.769594ms ago: executing program 6 (id=3600):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18)
ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={0x0})

858.697344ms ago: executing program 3 (id=3601):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
tkill(0x0, 0x1b)

829.264194ms ago: executing program 3 (id=3602):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.nlink\x00')

790.271695ms ago: executing program 6 (id=3603):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r2, r5)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8)

790.043425ms ago: executing program 6 (id=3604):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000740), 0x75, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) (async)
r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c2, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1})
io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x43, 0x42, 0x1}, 0x50)

784.094445ms ago: executing program 3 (id=3606):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
syz_emit_ethernet(0x7b, &(0x7f0000000380)={@multicast, @empty, @void, {@generic={0xf6, "af5e48ab778aa6f35426c5417b6eca46ba63f12f25e0f04d798462ff2f852a8c4f0d7041be7132f8d023f59dfc91f6064226d50bdbe7d93ef5a40e1a5ce2e48a955d77c1131ae3e6b72c71a9caea3479167b339ed32eb851e1493410b1650c48b32464195727ca9304e4295525"}}}, 0x0) (async)
syz_emit_ethernet(0x7b, &(0x7f0000000380)={@multicast, @empty, @void, {@generic={0xf6, "af5e48ab778aa6f35426c5417b6eca46ba63f12f25e0f04d798462ff2f852a8c4f0d7041be7132f8d023f59dfc91f6064226d50bdbe7d93ef5a40e1a5ce2e48a955d77c1131ae3e6b72c71a9caea3479167b339ed32eb851e1493410b1650c48b32464195727ca9304e4295525"}}}, 0x0)

749.642305ms ago: executing program 6 (id=3607):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000340)={r0, 0x7, {0x0, 0x0, 0x0, 0x9, 0xa0d, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0x200, 0x6f]}})

699.675675ms ago: executing program 3 (id=3609):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgctl$IPC_SET(r3, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5)

683.334855ms ago: executing program 6 (id=3610):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = gettid()
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
tkill(r0, 0x1b)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)

653.457166ms ago: executing program 2 (id=3612):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
tkill(0x0, 0x1b)

643.459686ms ago: executing program 2 (id=3613):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (fail_nth: 3)

418.935027ms ago: executing program 2 (id=3614):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r2, r5)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8)

392.156048ms ago: executing program 5 (id=3616):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.nlink\x00')

367.059207ms ago: executing program 5 (id=3618):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ufshcd_auto_bkops_state\x00', 0xffffffffffffffff, 0x0, 0xffffffffff7ffffb}, 0x18)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r2], 0x2c}}, 0x0)

366.343808ms ago: executing program 2 (id=3619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
lseek(r2, 0x5, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x310008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00212abd7000ffdbdf2559000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff}]}, 0x10)
bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000f80)={0x24c, r8, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}, @TIPC_NLA_NODE_ID={0x13, 0x3, "96934c98e2e8ff1df1c95d8a813188"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x110, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x3, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe545}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa61}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x471}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6063}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6589}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000956}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000825011f7e04bcc13637dde0dcfbd266e744efb275f866224afc42fd7e94a2f0913c7fab387", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
syz_io_uring_setup(0x3d9f, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0x2bb, 0x0, r10}, &(0x7f00000003c0), &(0x7f0000000540))
pread64(r10, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)

299.238498ms ago: executing program 5 (id=3622):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, 0x0, &(0x7f00000003c0))
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x60}}, 0x0)

222.696498ms ago: executing program 4 (id=3626):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000016c0)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0], &(0x7f0000001500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r2, 0x1, 0x70bd29, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x6, &(0x7f00000014c0)=[{0xff, 0xa, 0x3, 0x5}, {0x1ff, 0x2, 0x48, 0x3}, {0x401, 0x6, 0x0, 0x3}, {0x4, 0x7, 0x3, 0x80}, {0xcc, 0x7, 0x4, 0x50}, {0x3, 0x45, 0x2, 0x7f}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1700000000003cd760e0eddfb9bd59e4168b4a84f177a3cd78101e05eb8a723ae5317fd5fc1a4d834e142a17ffb219bba5a6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff}, 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x118f, &(0x7f0000001700)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "a987b2", 0x1159, 0x2b, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, {[@hopopts={0x87, 0x21c, '\x00', [@generic={0x8, 0x8d, "2aa8aec6ccafa8497afeb89216a72521afa58e5c10c73af6b31b14daacefd9d6e18f70f896e0d1bb9d5b6858d88fd5f66c75ae4835057533e9ad980ace855243ea437389cef4a6a9a167c0783a86038587d27041c3950c01a30a680e5cd0cabfb337b92123fba9715ff6c59cb9551fa22a84770244368d55f893d0c737c0cceccacbeb9084ec4258878175cd12"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xe8, 0x1000, "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"}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x93, 0xf, [0x7, 0xc93, 0x200, 0x3, 0x1]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7f}}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, @srh={0x33, 0x6, 0x4, 0x3, 0xd9, 0x4c, 0x100, [@private1={0xfc, 0x1, '\x00', 0x1}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], "4c4305709c94374d62d3a46da37caac498bfef69731bd8fc16d7d9832ade53957b"}}}}}, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afa63530db6dd493f28fd98872219ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0db0a0000004413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466ffffffff0000000047778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fdc4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
preadv(r6, &(0x7f00000010c0)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x833, 0xffff)
fcntl$setlease(r5, 0x400, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)

141.591709ms ago: executing program 4 (id=3627):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = gettid()
tkill(r0, 0x1b)

128.968229ms ago: executing program 4 (id=3628):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.nlink\x00')

111.661459ms ago: executing program 4 (id=3629):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r2, r5)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="02"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000140)={r4, 0x2}, 0x8)

103.932969ms ago: executing program 2 (id=3630):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r0, &(0x7f0000004200)='t', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
writev(r2, &(0x7f0000001a40)=[{&(0x7f0000000080)="dfd2d837a8f524ee7b8e2a0f4c537c5d67060bcb6647b66d049eeb3fd679cad8cb49cb484de25cbbfbb68a4e71c8f5e9c1", 0x31}, {&(0x7f0000000740)="76b0d8e7b4fbe83b9a3a82e0bbf91c1680d1f0b00633f12efc58b563dbdcfe39385fa5f25b4f44f77855053cd2c70c4b2f93a03ac5065ae95772c490638e6f2609cd625dcb26a8342315a054d59e843d7acd6cf3c414d1cee5b36208364ca1fd503e7f9f9e7c8b9ab7985616d5283e56db010e1021e45a2452e8ddd7966b3c4232e6015e47ed174b11e6c81d085fc43b5c85fb84ae756ad048a44c6c84414d1e045a67447a237ff927f9ef158987745861cf8b330f7c234aff1499be56651be1c7", 0xc1}, {&(0x7f0000000100)="fb4ce835c4", 0x5}, {&(0x7f0000000240)="81dbd8b9e984f257ebb468f1bd35d8fe5d05b31b149bcd74", 0x18}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e66484e3ea487546cb1ba3256ab9644a389", 0x4c}, {&(0x7f0000000a40)="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", 0x265}], 0x6)
sendfile(r2, r1, 0x0, 0x7fffeff9)

78.644669ms ago: executing program 4 (id=3631):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x25, &(0x7f0000000000)) (async)
fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0, 0x0}, 0x20) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r6, 0x25, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r7, 0x8800000) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) (async)
setxattr$security_evm(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x2) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}, @in6={0xa, 0x4e21, 0x3400000, @dev={0xfe, 0x80, '\x00', 0x10}, 0xfffffffe}], 0x38) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg2\x00', <r9=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000006000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000019b7030000000000008500000083000000bf090000000000005509010000010000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x1, 0x1000, &(0x7f0000001dc0)=""/4096, 0x40f00, 0x0, '\x00', r9, 0x0, r4, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r5], &(0x7f0000000540)=[{0x5, 0x5, 0xb}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x5, 0x7, 0xc}, {0x4, 0x4, 0xb, 0x4}], 0x10, 0x8}, 0x94) (async)
sendmmsg$inet6(r8, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000040)=[{0x3ff, 0x3, 0x0, 0x9}, {0x401, 0x66, 0xe, 0x8}, {0xbec, 0x5, 0x8, 0xa}, {0x1, 0x3, 0x9, 0x80000000}, {0x7, 0x9, 0x77, 0x2}, {0x8, 0x1, 0xd}]}, 0x10) (async)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000200)={0x7, 'netdevsim0\x00', {0x5}})

78.212139ms ago: executing program 5 (id=3632):
r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]})
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000340)={0xffffffffffffffff, 0x7, {0x0, 0x0, 0x0, 0x9, 0xa0d, 0x0, 0x2, 0x12, 0x10, "dd3f69943eebef80e9574e512a76b415b58af03d88444ad31a3f9ea01c259a99e160f54a91298688cd5460884d46cc0c76c95039b4b23f611de83a86b3f04b8e", "35d42d1c52961cb58491048d190b2ab895d5bdf57430812e4db320c0dab2f4aed97a139b2563926931afecea2b83507e1e3a6dd1d91063f5750b209457b99efe", "b7b0d261e620e7c5ce3dad114bf61645ea5edba56ed7aa2c47ef95aea141ada2", [0x200, 0x6f]}})

12.0709ms ago: executing program 5 (id=3633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', r1, 0x4000, r2}, 0x18)

11.90655ms ago: executing program 5 (id=3634):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0x100000000}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

11.71242ms ago: executing program 4 (id=3635):
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x80)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
r7 = socket$inet6(0xa, 0x5, 0x0)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r9}, 0x18)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf25090002bd00797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010)
r11 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40, 0x11c)
ioctl$PPPIOCSMRU(r11, 0x40047452, &(0x7f0000000040)=0x5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r12}, 0x18)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18)

0s ago: executing program 2 (id=3636):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00')
pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)

kernel console output (not intermixed with test programs):

inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  189.596219][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.596822][T11529] veth1_macvtap: entered promiscuous mode
[  189.610794][T11132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.629081][T11529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.640646][T11529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.651078][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.665917][T11734] loop3: detected capacity change from 0 to 1024
[  189.666094][ T4204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.673299][T11734] ext3: Unknown parameter 'obj_type'
[  189.695814][T11732] lo speed is unknown, defaulting to 1000
[  189.703721][ T4204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.707016][T11734] blktrace: Concurrent blktraces are not allowed on loop6
[  189.746945][ T4204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.771931][T11738] loop6: detected capacity change from 0 to 2048
[  189.795308][ T4204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.810645][T11738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.938880][T11746] loop5: detected capacity change from 0 to 764
[  189.979998][T11746] __nla_validate_parse: 2 callbacks suppressed
[  189.980109][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2948'.
[  190.019762][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2948'.
[  190.020405][T11766] sd 0:0:1:0: device reset
[  190.044614][T11766] loop2: detected capacity change from 0 to 2048
[  190.078054][T11753] lo speed is unknown, defaulting to 1000
[  190.089214][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  190.089226][   T29] audit: type=1400 audit(1762231567.624:33465): avc:  denied  { mounton } for  pid=11744 comm="syz.5.2948" path="/545/file2/file0" dev="loop5" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1
[  190.123934][T11766] Alternate GPT is invalid, using primary GPT.
[  190.123985][T11773] loop4: detected capacity change from 0 to 128
[  190.130391][T11766]  loop2: p2 p3 p7
[  190.160677][T11766] FAULT_INJECTION: forcing a failure.
[  190.160677][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.173851][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.2.2953 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  190.173913][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  190.173929][T11766] Call Trace:
[  190.173979][T11766]  <TASK>
[  190.173988][T11766]  __dump_stack+0x1d/0x30
[  190.174102][T11766]  dump_stack_lvl+0xe8/0x140
[  190.174124][T11766]  dump_stack+0x15/0x1b
[  190.174140][T11766]  should_fail_ex+0x265/0x280
[  190.174157][T11766]  should_fail+0xb/0x20
[  190.174233][T11766]  should_fail_usercopy+0x1a/0x20
[  190.174257][T11766]  _copy_from_user+0x1c/0xb0
[  190.174344][T11766]  ___sys_sendmsg+0xc1/0x1d0
[  190.174376][T11766]  __x64_sys_sendmsg+0xd4/0x160
[  190.174401][T11766]  x64_sys_call+0x191e/0x3000
[  190.174486][T11766]  do_syscall_64+0xd2/0x200
[  190.174504][T11766]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  190.174607][T11766]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  190.174638][T11766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.174659][T11766] RIP: 0033:0x7fcaaf87f6c9
[  190.174674][T11766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.174729][T11766] RSP: 002b:00007fcaae2e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.174747][T11766] RAX: ffffffffffffffda RBX: 00007fcaafad5fa0 RCX: 00007fcaaf87f6c9
[  190.174778][T11766] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000008
[  190.174793][T11766] RBP: 00007fcaae2e7090 R08: 0000000000000000 R09: 0000000000000000
[  190.174806][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.174899][T11766] R13: 00007fcaafad6038 R14: 00007fcaafad5fa0 R15: 00007ffda84d22d8
[  190.174917][T11766]  </TASK>
[  190.231255][T11773] bio_check_eod: 98 callbacks suppressed
[  190.231297][T11773] syz.4.2954: attempt to access beyond end of device
[  190.231297][T11773] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128
[  190.267536][T11776] loop5: detected capacity change from 0 to 128
[  190.288879][T11773] syz.4.2954: attempt to access beyond end of device
[  190.288879][T11773] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128
[  190.297486][   T29] audit: type=1326 audit(1762231567.794:33466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  190.310332][T11773] syz.4.2954: attempt to access beyond end of device
[  190.310332][T11773] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128
[  190.314005][   T29] audit: type=1326 audit(1762231567.794:33467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.6.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  190.322051][T11773] syz.4.2954: attempt to access beyond end of device
[  190.322051][T11773] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128
[  190.336920][   T29] audit: type=1400 audit(1762231567.854:33468): avc:  denied  { module_request } for  pid=11753 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  190.339338][T11773] syz.4.2954: attempt to access beyond end of device
[  190.339338][T11773] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128
[  190.408126][T11776] syz.5.2955: attempt to access beyond end of device
[  190.408126][T11776] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128
[  190.412287][T11773] syz.4.2954: attempt to access beyond end of device
[  190.412287][T11773] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128
[  190.450527][T11776] syz.5.2955: attempt to access beyond end of device
[  190.450527][T11776] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128
[  190.462402][T11773] syz.4.2954: attempt to access beyond end of device
[  190.462402][T11773] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128
[  190.488196][T11753] chnl_net:caif_netlink_parms(): no params data found
[  190.508260][T11773] syz.4.2954: attempt to access beyond end of device
[  190.508260][T11773] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128
[  190.590622][T11132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.608649][T11753] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.615801][T11753] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.623479][T11753] bridge_slave_0: entered allmulticast mode
[  190.624260][T11785] loop6: detected capacity change from 0 to 1024
[  190.630028][T11753] bridge_slave_0: entered promiscuous mode
[  190.638134][T11785] ext3: Unknown parameter 'obj_type'
[  190.643484][T11753] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.654161][T11753] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.661609][T11753] bridge_slave_1: entered allmulticast mode
[  190.668130][T11753] bridge_slave_1: entered promiscuous mode
[  190.687260][ T4212] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.713729][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.733443][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.756749][   T29] audit: type=1326 audit(1762231568.294:33469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaf87f6c9 code=0x7ffc0000
[  190.780493][   T29] audit: type=1326 audit(1762231568.294:33470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fcaaf87f6c9 code=0x7ffc0000
[  190.804010][   T29] audit: type=1326 audit(1762231568.294:33471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11789 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaaf87f6c9 code=0x7ffc0000
[  190.840963][ T4212] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.855008][T11753] team0: Port device team_slave_0 added
[  190.862249][T11753] team0: Port device team_slave_1 added
[  190.880279][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.887289][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  190.913304][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.934585][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'.
[  190.948976][ T4212] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.963579][   T29] audit: type=1326 audit(1762231568.504:33472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.6.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  190.987227][   T29] audit: type=1326 audit(1762231568.504:33473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.6.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  191.010860][   T29] audit: type=1326 audit(1762231568.504:33474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11796 comm="syz.6.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  191.034889][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.041875][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  191.067849][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.103075][T11803] loop2: detected capacity change from 0 to 1024
[  191.109830][T11803] EXT4-fs: Ignoring removed orlov option
[  191.117290][ T4212] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.129979][T11803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.178189][T11810] loop5: detected capacity change from 0 to 512
[  191.187073][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.200664][T11753] hsr_slave_0: entered promiscuous mode
[  191.206725][T11753] hsr_slave_1: entered promiscuous mode
[  191.218122][T11753] debugfs: 'hsr0' already exists in 'hsr'
[  191.223940][T11753] Cannot create hsr debugfs directory
[  191.230835][T11810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.249588][T11810] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.263703][ T4212] bridge_slave_1: left allmulticast mode
[  191.269397][ T4212] bridge_slave_1: left promiscuous mode
[  191.275062][T11810] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2966: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  191.275081][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.298745][T11810] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  191.307931][T11810] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2966: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  191.308028][ T4212] bridge_slave_0: left promiscuous mode
[  191.325039][T11810] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  191.330253][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.347327][T11810] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2966: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  191.347810][T11827] loop6: detected capacity change from 0 to 128
[  191.364070][T11810] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  191.571028][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  191.580991][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.590692][ T4212] bond0 (unregistering): Released all slaves
[  191.599192][ T4212] bond1 (unregistering): Released all slaves
[  191.607454][ T4212] bond2 (unregistering): Released all slaves
[  191.617210][T11823] vlan2: entered allmulticast mode
[  191.637262][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.661578][ T4212] hsr_slave_0: left promiscuous mode
[  191.667349][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.675023][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.676769][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2972'.
[  191.691923][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.699501][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.710571][ T4212] veth1_macvtap: left promiscuous mode
[  191.716070][ T4212] veth0_macvtap: left promiscuous mode
[  191.721709][ T4212] veth1_vlan: left promiscuous mode
[  191.726936][ T4212] veth0_vlan: left promiscuous mode
[  191.772236][T11835] loop2: detected capacity change from 0 to 2048
[  191.791625][T11835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.805769][T11837] loop5: detected capacity change from 0 to 512
[  191.819259][ T4212] team0 (unregistering): Port device team_slave_1 removed
[  191.831442][T11837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.844461][ T4212] team0 (unregistering): Port device team_slave_0 removed
[  191.844463][T11837] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.846528][T11837] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2975: iget: bad i_size value: 2533274857506816
[  191.859339][T11843] loop4: detected capacity change from 0 to 512
[  191.919999][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2975'.
[  191.929263][T11843] EXT4-fs: Ignoring removed i_version option
[  191.935273][T11843] EXT4-fs: Ignoring removed bh option
[  191.967236][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2975'.
[  191.981782][T11843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.036688][T11843] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  192.160243][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'.
[  192.208645][T11853] loop6: detected capacity change from 0 to 512
[  192.230576][T11853] EXT4-fs (loop6): orphan cleanup on readonly fs
[  192.237432][T11853] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2978: bad orphan inode 13
[  192.275818][T11529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.286668][T11853] ext4_test_bit(bit=12, block=18) = 1
[  192.292103][T11853] is_bad_inode(inode)=0
[  192.296274][T11853] NEXT_ORPHAN(inode)=2130706432
[  192.301147][T11853] max_ino=32
[  192.304344][T11853] i_nlink=1
[  192.315679][T11853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.336194][T11856] loop4: detected capacity change from 0 to 128
[  192.351805][T11856] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.366047][T11753] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  192.375576][T11753] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  192.393629][T11132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.405546][T11856] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.418999][T11753] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  192.431275][T11753] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  192.455170][ T4204] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.490974][T11866] loop6: detected capacity change from 0 to 2048
[  192.502684][T11868] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  192.513979][T11868] bond1 (unregistering): Released all slaves
[  192.544944][T11753] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.558320][T11753] 8021q: adding VLAN 0 to HW filter on device team0
[  192.577915][T11753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.588369][T11753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.627031][T11874] loop4: detected capacity change from 0 to 2048
[  192.641228][T11874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.681963][ T4200] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.689074][ T4200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.709901][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.730389][ T4200] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.737539][ T4200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.764483][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.809998][T11892] netlink: 'syz.6.2989': attribute type 29 has an invalid length.
[  192.818424][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.828581][T11892] netlink: 'syz.6.2989': attribute type 29 has an invalid length.
[  192.837626][T11892] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2989'.
[  192.864677][T11753] veth0_vlan: entered promiscuous mode
[  192.901877][T11899] loop2: detected capacity change from 0 to 128
[  192.907025][T11753] veth1_vlan: entered promiscuous mode
[  192.955611][T11753] veth0_macvtap: entered promiscuous mode
[  192.999968][T11753] veth1_macvtap: entered promiscuous mode
[  193.035637][T11753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.059340][T11753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.081484][ T4214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.103242][ T4214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.115634][T11912] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  193.122217][T11912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  193.129738][T11912] vhci_hcd vhci_hcd.0: Device attached
[  193.135583][ T4214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.149616][ T4204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.170802][T11917] sd 0:0:1:0: device reset
[  193.188693][T11917] loop3: detected capacity change from 0 to 2048
[  193.210299][T11910] loop6: detected capacity change from 0 to 764
[  193.233038][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2994'.
[  193.244799][T11917] Alternate GPT is invalid, using primary GPT.
[  193.245253][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2994'.
[  193.251310][T11917]  loop3: p2 p3 p7
[  193.309410][ T3581] vhci_hcd: vhci_device speed not set
[  193.375177][T11920] loop3: detected capacity change from 0 to 2048
[  193.381766][ T3581] usb 11-1: new full-speed USB device number 2 using vhci_hcd
[  193.393002][T11922] vlan2: entered allmulticast mode
[  193.429134][T11920] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  193.438564][T11920] FAT-fs (loop3): Filesystem has been set read-only
[  193.465619][T11529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.516925][T11920] netlink: 'syz.3.2996': attribute type 12 has an invalid length.
[  193.524823][T11920] netlink: 'syz.3.2996': attribute type 29 has an invalid length.
[  193.524958][T11930] loop4: detected capacity change from 0 to 512
[  193.532676][T11920] netlink: 'syz.3.2996': attribute type 2 has an invalid length.
[  193.558604][T11930] EXT4-fs: Ignoring removed i_version option
[  193.564880][T11930] EXT4-fs: Ignoring removed bh option
[  193.577052][T11937] loop3: detected capacity change from 0 to 128
[  193.584309][T11937] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.597870][T11930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.610591][T11937] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.616474][T11930] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  193.633155][  T335] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.842299][T11957] loop6: detected capacity change from 0 to 764
[  193.936266][T11914] vhci_hcd: connection reset by peer
[  194.000293][ T4214] vhci_hcd: stop threads
[  194.004605][ T4214] vhci_hcd: release socket
[  194.009036][ T4214] vhci_hcd: disconnect device
[  194.071405][T11529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.239280][T11960] lo speed is unknown, defaulting to 1000
[  194.279077][T11978] vlan2: entered allmulticast mode
[  194.308106][T11960] chnl_net:caif_netlink_parms(): no params data found
[  194.337486][T11987] loop4: detected capacity change from 0 to 128
[  194.344385][T11987] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  194.356463][T11987] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  194.366361][T11960] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.373755][T11960] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.380930][  T335] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  194.381054][T11960] bridge_slave_0: entered allmulticast mode
[  194.396361][T11960] bridge_slave_0: entered promiscuous mode
[  194.403641][T11960] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.410848][T11960] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.417964][T11960] bridge_slave_1: entered allmulticast mode
[  194.424407][T11960] bridge_slave_1: entered promiscuous mode
[  194.444196][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.454502][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.476619][T11960] team0: Port device team_slave_0 added
[  194.483987][T11960] team0: Port device team_slave_1 added
[  194.503911][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.510951][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.513459][T11994] loop5: detected capacity change from 0 to 128
[  194.537000][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.540916][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.561015][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  194.586976][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.624384][T11960] hsr_slave_0: entered promiscuous mode
[  194.630732][T11960] hsr_slave_1: entered promiscuous mode
[  194.636734][T11960] debugfs: 'hsr0' already exists in 'hsr'
[  194.642539][T11960] Cannot create hsr debugfs directory
[  194.668770][T11997] loop3: detected capacity change from 0 to 1024
[  194.675747][T11997] EXT4-fs: Ignoring removed orlov option
[  194.692589][T11997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.720223][T12000] loop4: detected capacity change from 0 to 512
[  194.741227][T12000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.751037][T12007] loop5: detected capacity change from 0 to 512
[  194.760786][T12007] EXT4-fs: Ignoring removed i_version option
[  194.761255][T11960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.766813][T12007] EXT4-fs: Ignoring removed bh option
[  194.780642][T12000] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.795536][T12000] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3019: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  194.800305][T12007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.824745][T12000] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  194.825059][T12007] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  194.833931][T12000] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3019: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  194.872739][T12000] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  194.881869][T11960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.894179][T12000] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3019: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  194.910962][T12000] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  194.955347][T11960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.991128][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.002787][T11960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.014373][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.037294][T11529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.058636][T12020] loop4: detected capacity change from 0 to 128
[  195.065452][T12020] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  195.086117][T12020] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  195.098325][T12024] netlink: 'syz.3.3028': attribute type 29 has an invalid length.
[  195.126501][T12024] netlink: 'syz.3.3028': attribute type 29 has an invalid length.
[  195.140852][   T29] kauditd_printk_skb: 214 callbacks suppressed
[  195.140866][   T29] audit: type=1326 audit(1762231572.684:33689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.155235][T11960] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  195.170729][   T29] audit: type=1326 audit(1762231572.684:33690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.201045][   T29] audit: type=1326 audit(1762231572.684:33691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.224705][   T29] audit: type=1326 audit(1762231572.684:33692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.225384][T12024] __nla_validate_parse: 4 callbacks suppressed
[  195.225436][T12024] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3028'.
[  195.248506][   T29] audit: type=1326 audit(1762231572.684:33693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.287243][   T29] audit: type=1326 audit(1762231572.684:33694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12027 comm="syz.6.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  195.292588][   T29] audit: type=1326 audit(1762231572.684:33695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  195.311368][ T4214] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  195.334881][   T29] audit: type=1326 audit(1762231572.684:33696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  195.334926][   T29] audit: type=1326 audit(1762231572.684:33697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  195.391257][   T29] audit: type=1326 audit(1762231572.684:33698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  195.415578][T12028] loop6: detected capacity change from 0 to 128
[  195.417109][T11960] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  195.449581][T11960] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  195.458362][T11960] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  195.488177][T12042] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.504859][T12039] loop4: detected capacity change from 0 to 512
[  195.536416][T12052] loop5: detected capacity change from 0 to 512
[  195.548526][T12039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.559897][T11960] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.575638][T11960] 8021q: adding VLAN 0 to HW filter on device team0
[  195.583670][T12052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.584970][T12039] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.612312][T12052] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.624756][T12039] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  195.644906][T12042] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.656067][T12039] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  195.679658][T12039] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  195.705573][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.712669][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.724889][T12039] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  195.737988][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.745122][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.752810][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3041'.
[  195.754138][T12039] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3035: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  195.788378][T12039] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  195.800276][T12042] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.823961][T11960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.834473][T11960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.861361][T12067] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  195.870241][T12067] netlink: 'syz.3.3043': attribute type 29 has an invalid length.
[  195.879216][T12067] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3043'.
[  195.892608][T12042] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.929657][T11529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.955316][ T4212] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.974099][T12076] loop3: detected capacity change from 0 to 2048
[  195.983558][ T4212] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.004596][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.013220][ T4212] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.024257][ T4212] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.037295][T12076] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  196.046842][T12076] FAT-fs (loop3): Filesystem has been set read-only
[  196.079849][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.126703][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3049'.
[  196.151801][T11960] veth0_vlan: entered promiscuous mode
[  196.164811][T11960] veth1_vlan: entered promiscuous mode
[  196.191503][T11960] veth0_macvtap: entered promiscuous mode
[  196.204323][T11960] veth1_macvtap: entered promiscuous mode
[  196.206591][T12100] loop5: detected capacity change from 0 to 512
[  196.223835][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.236043][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.240111][T12100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.259789][ T4212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.270465][ T4212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.279535][T12100] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.293623][ T4212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.328828][ T4212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.345602][T12100] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  196.380500][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3054'.
[  196.389825][T12100] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  196.416867][T12116] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  196.433276][T12114] loop2: detected capacity change from 0 to 764
[  196.444407][T12100] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  196.466408][T12100] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  196.492763][T12100] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3053: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  196.500795][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  196.523796][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'.
[  196.529741][T12100] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  196.571788][T12122] loop6: detected capacity change from 0 to 128
[  196.578456][T12122] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  196.592148][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.601212][T12118] loop3: detected capacity change from 0 to 2048
[  196.602063][T12122] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.627816][T12118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.738828][ T4212] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.070483][T12144] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  197.077054][T12144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  197.084588][T12144] vhci_hcd vhci_hcd.0: Device attached
[  197.204336][T12141] lo speed is unknown, defaulting to 1000
[  197.269396][ T3404] vhci_hcd: vhci_device speed not set
[  197.309417][T12132] loop5: detected capacity change from 0 to 32768
[  197.341235][ T3404] usb 9-1: new full-speed USB device number 3 using vhci_hcd
[  197.344557][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3069'.
[  197.360713][T12132]  loop5: p1 p3 < >
[  197.391588][T12157] loop5: detected capacity change from 0 to 764
[  197.413840][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.450436][T12159] loop5: detected capacity change from 0 to 512
[  197.472320][T12159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.491154][T12159] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.504917][T12159] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3072: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  197.525464][T12159] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  197.534709][T12159] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3072: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  197.552566][T12159] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  197.563244][T12159] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3072: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  197.581008][T12159] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  197.587246][T12173] loop6: detected capacity change from 0 to 128
[  197.600721][T12172] loop2: detected capacity change from 0 to 1024
[  197.607940][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.609699][T12173] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.617515][T12172] EXT4-fs: Ignoring removed orlov option
[  197.629114][T12173] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.636499][T12172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.659995][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'.
[  197.688136][ T4214] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  197.848693][T12184] loop5: detected capacity change from 0 to 8192
[  197.856401][T11960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.885395][T12145] vhci_hcd: connection reset by peer
[  197.892137][  T271] vhci_hcd: stop threads
[  197.896392][  T271] vhci_hcd: release socket
[  197.901009][  T271] vhci_hcd: disconnect device
[  197.951487][T12190] loop2: detected capacity change from 0 to 1024
[  197.958306][T12190] EXT4-fs: Ignoring removed orlov option
[  197.972390][T12190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.155656][T11960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.356254][T12203] loop3: detected capacity change from 0 to 512
[  198.364353][T12203] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.384997][T12199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3084'.
[  198.409499][T12203] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3086: bad orphan inode 13
[  198.441036][T12203] ext4_test_bit(bit=12, block=18) = 1
[  198.446432][T12203] is_bad_inode(inode)=0
[  198.450789][T12203] NEXT_ORPHAN(inode)=2130706432
[  198.455633][T12203] max_ino=32
[  198.458822][T12203] i_nlink=1
[  198.459501][ T3581] usb 11-1: enqueue for inactive port 0
[  198.473585][ T3581] usb 11-1: enqueue for inactive port 0
[  198.483751][T12203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.499324][T12212] loop2: detected capacity change from 0 to 128
[  198.508709][T12212] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  198.522845][T12212] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  198.542561][T12203] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3086: deleted inode referenced: 12
[  198.553962][ T3581] vhci_hcd: vhci_device speed not set
[  198.567654][T12203] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3086: deleted inode referenced: 12
[  198.607559][T12203] vlan2: entered allmulticast mode
[  198.632008][T12216] loop4: detected capacity change from 0 to 128
[  198.713078][T12224] loop6: detected capacity change from 0 to 128
[  198.744861][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.778892][T12231] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  198.785440][T12231] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  198.792234][T12224] bio_check_eod: 418 callbacks suppressed
[  198.792250][T12224] syz.6.3094: attempt to access beyond end of device
[  198.792250][T12224] loop6: rw=2049, sector=185, nr_sectors = 16 limit=128
[  198.793087][T12231] vhci_hcd vhci_hcd.0: Device attached
[  198.798633][T12224] syz.6.3094: attempt to access beyond end of device
[  198.798633][T12224] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128
[  198.845715][T12224] syz.6.3094: attempt to access beyond end of device
[  198.845715][T12224] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128
[  198.860064][T12224] syz.6.3094: attempt to access beyond end of device
[  198.860064][T12224] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128
[  198.873716][T12224] syz.6.3094: attempt to access beyond end of device
[  198.873716][T12224] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128
[  198.887518][T12224] syz.6.3094: attempt to access beyond end of device
[  198.887518][T12224] loop6: rw=2049, sector=273, nr_sectors = 8 limit=128
[  198.905392][T12224] syz.6.3094: attempt to access beyond end of device
[  198.905392][T12224] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128
[  198.919555][T12224] syz.6.3094: attempt to access beyond end of device
[  198.919555][T12224] loop6: rw=2049, sector=305, nr_sectors = 8 limit=128
[  198.933537][T12224] syz.6.3094: attempt to access beyond end of device
[  198.933537][T12224] loop6: rw=2049, sector=321, nr_sectors = 8 limit=128
[  198.950895][T12244] loop3: detected capacity change from 0 to 512
[  198.957239][T12224] syz.6.3094: attempt to access beyond end of device
[  198.957239][T12224] loop6: rw=2049, sector=337, nr_sectors = 8 limit=128
[  198.971572][T12244] EXT4-fs: Ignoring removed i_version option
[  198.977620][T12244] EXT4-fs: Ignoring removed bh option
[  198.987744][T12242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  198.997277][T12242] binfmt_misc: register: failed to install interpreter file ./file0
[  199.006725][T12244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.026194][T12244] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.118006][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.136027][T12253] loop3: detected capacity change from 0 to 128
[  199.142964][T12253] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  199.154974][T12253] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  199.185570][T12255] loop3: detected capacity change from 0 to 512
[  199.210942][T12255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.223971][T12255] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.235782][T12255] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3104: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.252428][T12255] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.261529][T12255] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3104: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.278225][T12255] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.287639][T12255] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3104: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.304366][T12255] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.322727][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.366260][T12261] loop3: detected capacity change from 0 to 512
[  199.380819][T12261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.393471][T12261] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.406294][T12261] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3106: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.423212][T12261] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.432725][T12261] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3106: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.449469][T12261] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.459079][T12261] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.3106: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.488431][T12261] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  199.513900][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.528422][T12267] loop6: detected capacity change from 0 to 128
[  199.535366][T12269] loop2: detected capacity change from 0 to 1024
[  199.542335][T12269] EXT4-fs: Ignoring removed orlov option
[  199.550892][T12269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.560785][T12272] loop3: detected capacity change from 0 to 2048
[  199.595599][T12232] vhci_hcd: connection closed
[  199.615294][T12272] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  199.629499][T12272] FAT-fs (loop3): Filesystem has been set read-only
[  199.636123][ T4214] vhci_hcd: stop threads
[  199.640471][ T4214] vhci_hcd: release socket
[  199.644916][ T4214] vhci_hcd: disconnect device
[  199.663881][T12275] loop6: detected capacity change from 0 to 2048
[  199.724798][T12275] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  199.734290][T12275] FAT-fs (loop6): Filesystem has been set read-only
[  199.752627][T11960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.799380][T12283] loop6: detected capacity change from 0 to 512
[  199.811357][T12283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.811415][T12283] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.818552][T12283] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3115: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.851910][T12279] loop2: detected capacity change from 0 to 1024
[  199.855849][T12283] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  199.867673][T12283] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3115: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.885945][T12283] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  199.896020][T12279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.909196][T12283] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3115: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  199.926117][T12279] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.930446][T12283] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  200.021879][T12300] loop2: detected capacity change from 0 to 128
[  200.036181][T12303] loop5: detected capacity change from 0 to 1024
[  200.046134][T12304] loop3: detected capacity change from 0 to 2048
[  200.052351][T12303] EXT4-fs: Ignoring removed orlov option
[  200.059040][T11132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.060348][T12303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.107563][T12307] loop6: detected capacity change from 0 to 2048
[  200.179325][   T29] kauditd_printk_skb: 523 callbacks suppressed
[  200.179342][   T29] audit: type=1326 audit(1762231577.714:34222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.181760][T12307] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  200.218505][T12307] FAT-fs (loop6): Filesystem has been set read-only
[  200.220354][   T29] audit: type=1326 audit(1762231577.764:34223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.250876][T12311] loop2: detected capacity change from 0 to 128
[  200.268079][   T29] audit: type=1326 audit(1762231577.794:34224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.291767][   T29] audit: type=1326 audit(1762231577.794:34225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.294613][T12313] loop3: detected capacity change from 0 to 2048
[  200.315632][   T29] audit: type=1326 audit(1762231577.794:34226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.345403][   T29] audit: type=1326 audit(1762231577.794:34227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  200.369040][   T29] audit: type=1326 audit(1762231577.794:34228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f972c9df703 code=0x7ffc0000
[  200.392647][   T29] audit: type=1326 audit(1762231577.794:34229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f972c9de17f code=0x7ffc0000
[  200.416043][   T29] audit: type=1326 audit(1762231577.794:34230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f972c9df757 code=0x7ffc0000
[  200.439525][   T29] audit: type=1326 audit(1762231577.794:34231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.2.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f972c9ddf10 code=0x7ffc0000
[  200.473192][T12313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.499405][ T4338] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.529778][T12321] loop6: detected capacity change from 0 to 512
[  200.550248][T12330] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  200.566305][T12318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  200.575763][T12318] binfmt_misc: register: failed to install interpreter file ./file0
[  200.612639][T12329] siw: device registration error -23
[  200.618976][T12329] __nla_validate_parse: 9 callbacks suppressed
[  200.618993][T12329] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3133'.
[  200.635524][T12321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.644369][T12338] loop4: detected capacity change from 0 to 128
[  200.673922][T12329] lo speed is unknown, defaulting to 1000
[  200.680306][T12321] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.703685][T12321] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3130: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  200.726614][T12321] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  200.735688][T12321] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3130: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  200.752460][T12321] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  200.781349][T12342] loop5: detected capacity change from 0 to 2048
[  200.789481][T12321] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3130: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  200.809059][T12344] loop4: detected capacity change from 0 to 2048
[  200.809627][T12321] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  200.858105][T11132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.874146][T12344] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  200.883573][T12344] FAT-fs (loop4): Filesystem has been set read-only
[  200.951755][T12358] loop5: detected capacity change from 0 to 512
[  200.958376][T12358] EXT4-fs: Ignoring removed i_version option
[  200.964396][T12358] EXT4-fs: Ignoring removed bh option
[  200.975696][T12360] vlan2: entered allmulticast mode
[  200.984571][T12355] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  200.996342][T11753] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.010503][T12358] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  201.060528][T12367] loop3: detected capacity change from 0 to 2048
[  201.067468][T12370] FAULT_INJECTION: forcing a failure.
[  201.067468][T12370] name failslab, interval 1, probability 0, space 0, times 0
[  201.080200][T12370] CPU: 0 UID: 0 PID: 12370 Comm: syz.4.3149 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  201.080234][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.080246][T12370] Call Trace:
[  201.080253][T12370]  <TASK>
[  201.080261][T12370]  __dump_stack+0x1d/0x30
[  201.080285][T12370]  dump_stack_lvl+0xe8/0x140
[  201.080317][T12370]  dump_stack+0x15/0x1b
[  201.080395][T12370]  should_fail_ex+0x265/0x280
[  201.080415][T12370]  should_failslab+0x8c/0xb0
[  201.080468][T12370]  kmem_cache_alloc_noprof+0x50/0x480
[  201.080495][T12370]  ? getname_flags+0x80/0x3b0
[  201.080525][T12370]  getname_flags+0x80/0x3b0
[  201.080629][T12370]  user_path_at+0x28/0x130
[  201.080650][T12370]  __se_sys_mount+0x25b/0x2e0
[  201.080698][T12370]  ? fput+0x8f/0xc0
[  201.080716][T12370]  __x64_sys_mount+0x67/0x80
[  201.080795][T12370]  x64_sys_call+0x2b51/0x3000
[  201.080817][T12370]  do_syscall_64+0xd2/0x200
[  201.080835][T12370]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  201.080864][T12370]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  201.080893][T12370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.080977][T12370] RIP: 0033:0x7fd943aef6c9
[  201.080992][T12370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.081010][T12370] RSP: 002b:00007fd94254f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  201.081028][T12370] RAX: ffffffffffffffda RBX: 00007fd943d45fa0 RCX: 00007fd943aef6c9
[  201.081040][T12370] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000000
[  201.081066][T12370] RBP: 00007fd94254f090 R08: 0000000000000000 R09: 0000000000000000
[  201.081078][T12370] R10: 000000000082e424 R11: 0000000000000246 R12: 0000000000000001
[  201.081150][T12370] R13: 00007fd943d46038 R14: 00007fd943d45fa0 R15: 00007ffe2d3fdf48
[  201.081167][T12370]  </TASK>
[  201.111836][T12374] loop2: detected capacity change from 0 to 128
[  201.138611][T12377] loop6: detected capacity change from 0 to 2048
[  201.204705][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3146'.
[  201.298827][T12382] loop3: detected capacity change from 0 to 128
[  201.354985][T12384] siw: device registration error -23
[  201.355619][T12388] loop7: detected capacity change from 0 to 16384
[  201.360901][T12384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3155'.
[  201.393323][T12384] lo speed is unknown, defaulting to 1000
[  201.508922][T12396] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  201.529764][T12392] loop7: detected capacity change from 16384 to 0
[  201.536551][    C1] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  201.571014][T12399] loop4: detected capacity change from 0 to 2048
[  201.594448][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'.
[  201.710391][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3162'.
[  201.953899][T12410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3163'.
[  202.095832][T12423] loop3: detected capacity change from 0 to 1024
[  202.102586][T12423] EXT4-fs: Ignoring removed orlov option
[  202.316123][T12438] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  202.359556][T12441] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  202.389407][ T3404] usb 9-1: enqueue for inactive port 0
[  202.403985][ T3404] usb 9-1: enqueue for inactive port 0
[  202.479268][ T3404] vhci_hcd: vhci_device speed not set
[  202.500445][T12452] FAULT_INJECTION: forcing a failure.
[  202.500445][T12452] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  202.513748][T12452] CPU: 0 UID: 0 PID: 12452 Comm: syz.4.3179 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  202.513781][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  202.513794][T12452] Call Trace:
[  202.513799][T12452]  <TASK>
[  202.513806][T12452]  __dump_stack+0x1d/0x30
[  202.513946][T12452]  dump_stack_lvl+0xe8/0x140
[  202.513971][T12452]  dump_stack+0x15/0x1b
[  202.513989][T12452]  should_fail_ex+0x265/0x280
[  202.514010][T12452]  should_fail+0xb/0x20
[  202.514028][T12452]  should_fail_usercopy+0x1a/0x20
[  202.514053][T12452]  _copy_from_user+0x1c/0xb0
[  202.514173][T12452]  ___sys_sendmsg+0xc1/0x1d0
[  202.514210][T12452]  __x64_sys_sendmsg+0xd4/0x160
[  202.514236][T12452]  x64_sys_call+0x191e/0x3000
[  202.514262][T12452]  do_syscall_64+0xd2/0x200
[  202.514283][T12452]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  202.514333][T12452]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  202.514370][T12452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.514391][T12452] RIP: 0033:0x7fd943aef6c9
[  202.514407][T12452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.514485][T12452] RSP: 002b:00007fd94254f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.514507][T12452] RAX: ffffffffffffffda RBX: 00007fd943d45fa0 RCX: 00007fd943aef6c9
[  202.514522][T12452] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  202.514536][T12452] RBP: 00007fd94254f090 R08: 0000000000000000 R09: 0000000000000000
[  202.514564][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.514579][T12452] R13: 00007fd943d46038 R14: 00007fd943d45fa0 R15: 00007ffe2d3fdf48
[  202.514622][T12452]  </TASK>
[  202.568522][T12446] loop6: detected capacity change from 0 to 764
[  202.621092][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3181'.
[  202.698811][T12462] loop4: detected capacity change from 0 to 1024
[  202.744303][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3176'.
[  202.753606][T12464] loop5: detected capacity change from 0 to 128
[  202.757113][T12462] EXT4-fs: Ignoring removed orlov option
[  202.774880][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3176'.
[  202.816841][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3185'.
[  202.905457][T12474] loop3: detected capacity change from 0 to 2048
[  202.959600][T12474] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  202.969025][T12474] FAT-fs (loop3): Filesystem has been set read-only
[  203.069831][T12480] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  203.079936][T12482] netlink: 'syz.3.3192': attribute type 29 has an invalid length.
[  203.089494][T12482] netlink: 'syz.3.3192': attribute type 29 has an invalid length.
[  203.118908][T12480] binfmt_misc: register: failed to install interpreter file ./file0
[  203.194723][T12492] siw: device registration error -23
[  203.210885][T12494] binfmt_misc: register: failed to install interpreter file ./file0
[  203.230900][T12492] lo speed is unknown, defaulting to 1000
[  203.253242][T12496] loop4: detected capacity change from 0 to 512
[  203.282890][T12496] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.303326][T12490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.310756][T12490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.320995][T12496] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3197: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  203.341182][T12490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.348589][T12490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.361329][T12496] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  203.376651][T12496] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3197: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  203.379769][T12506] vlan2: entered allmulticast mode
[  203.403550][T12496] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  203.432140][T12496] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3197: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  203.450793][T12496] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  203.502965][T12512] loop6: detected capacity change from 0 to 1024
[  203.527622][T12515] netlink: 'syz.2.3202': attribute type 29 has an invalid length.
[  203.544768][T12515] netlink: 'syz.2.3202': attribute type 29 has an invalid length.
[  203.561806][T12512] EXT4-fs: Ignoring removed orlov option
[  203.614092][T12521] netlink: 'syz.4.3205': attribute type 29 has an invalid length.
[  203.624438][T12521] netlink: 'syz.4.3205': attribute type 29 has an invalid length.
[  203.797729][T12532] siw: device registration error -23
[  203.833388][T12532] lo speed is unknown, defaulting to 1000
[  203.927197][T12540] vlan2: entered allmulticast mode
[  203.953428][T12543] loop6: detected capacity change from 0 to 2048
[  203.967534][T12545] loop2: detected capacity change from 0 to 512
[  203.982376][T12545] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.996454][T12545] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3214: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  204.020937][T12545] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  204.037522][T12545] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3214: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  204.061138][T12545] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  204.062720][T12550] netlink: 'syz.3.3215': attribute type 29 has an invalid length.
[  204.098498][T12552] loop4: detected capacity change from 0 to 1024
[  204.105251][T12550] netlink: 'syz.3.3215': attribute type 29 has an invalid length.
[  204.119359][T12545] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3214: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  204.145674][T12552] journal_path: Lookup failure for './file0'
[  204.151710][T12552] EXT4-fs: error: could not find journal device path
[  204.172888][T12545] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  204.217793][T12551] delete_channel: no stack
[  204.269962][T12565] binfmt_misc: register: failed to install interpreter file ./file0
[  204.281058][T12564] siw: device registration error -23
[  204.304017][T12564] lo speed is unknown, defaulting to 1000
[  204.494409][T12574] loop2: detected capacity change from 0 to 1024
[  204.502662][T12578] netlink: 'syz.6.3227': attribute type 29 has an invalid length.
[  204.506710][T12574] EXT4-fs: Ignoring removed orlov option
[  204.554019][T12583] netlink: 'syz.6.3227': attribute type 29 has an invalid length.
[  204.659691][T12586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  204.666237][T12586] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  204.673760][T12586] vhci_hcd vhci_hcd.0: Device attached
[  204.711973][T12595] loop4: detected capacity change from 0 to 128
[  204.718845][T12595] EXT4-fs: Ignoring removed nobh option
[  204.726712][T12595] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  204.818780][T12608] loop5: detected capacity change from 0 to 128
[  204.859344][ T3379] vhci_hcd: vhci_device speed not set
[  204.866618][T12614] loop6: detected capacity change from 0 to 2048
[  204.918914][T12614] FAT-fs (loop6): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  204.928402][T12614] FAT-fs (loop6): Filesystem has been set read-only
[  204.929271][ T3379] usb 7-1: new full-speed USB device number 2 using vhci_hcd
[  205.077901][T12645] loop2: detected capacity change from 0 to 128
[  205.126098][T12648] loop6: detected capacity change from 0 to 8192
[  205.155992][T12643] loop5: detected capacity change from 0 to 8192
[  205.175073][T12648]  loop6: p2 p3 p4
[  205.187658][T12648] loop6: p2 start 2936012800 is beyond EOD, truncated
[  205.194623][T12648] loop6: p3 start 1912602624 is beyond EOD, truncated
[  205.201534][T12648] loop6: p4 size 656640 extends beyond EOD, truncated
[  205.228939][   T29] kauditd_printk_skb: 813 callbacks suppressed
[  205.228952][   T29] audit: type=1326 audit(1762231582.764:35045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  205.280172][T12655] vlan2: entered allmulticast mode
[  205.284789][   T29] audit: type=1326 audit(1762231582.774:35046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  205.308898][   T29] audit: type=1326 audit(1762231582.774:35047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  205.332525][   T29] audit: type=1326 audit(1762231582.774:35048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  205.356132][   T29] audit: type=1326 audit(1762231582.774:35049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.2.3256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f972c9df6c9 code=0x7ffc0000
[  205.357847][T12649] loop4: detected capacity change from 0 to 32768
[  205.379699][   T29] audit: type=1326 audit(1762231582.804:35050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.5.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  205.379768][   T29] audit: type=1326 audit(1762231582.804:35051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.5.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7378ef6c9 code=0x7ffc0000
[  205.379892][   T29] audit: type=1326 audit(1762231582.874:35052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.6.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  205.387491][T12658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  205.409820][   T29] audit: type=1326 audit(1762231582.874:35053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.6.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  205.464044][T12587] vhci_hcd: connection reset by peer
[  205.466461][   T29] audit: type=1326 audit(1762231582.874:35054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.6.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  205.502721][ T4213] vhci_hcd: stop threads
[  205.523267][ T4213] vhci_hcd: release socket
[  205.527666][ T4213] vhci_hcd: disconnect device
[  205.569883][T12649]  loop4: p2 p3
[  205.575196][T12649] loop4: p3 size 196608 extends beyond EOD, truncated
[  205.601576][T12663] loop2: detected capacity change from 0 to 2048
[  205.653307][T12666] loop4: detected capacity change from 0 to 2048
[  205.654148][T12663] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  205.669305][T12663] FAT-fs (loop2): Filesystem has been set read-only
[  205.754064][T12679] loop2: detected capacity change from 0 to 128
[  205.842851][T12685] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  205.851764][T12685] binfmt_misc: register: failed to install interpreter file ./file0
[  205.922260][T12689] vlan2: entered allmulticast mode
[  205.977868][T12692] __nla_validate_parse: 19 callbacks suppressed
[  205.977884][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'.
[  205.998075][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.005557][T12692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.014469][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.022042][T12692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.207753][T12696] lo speed is unknown, defaulting to 1000
[  206.411422][T12696] chnl_net:caif_netlink_parms(): no params data found
[  206.532015][T12696] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.539113][T12696] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.600565][T12696] bridge_slave_0: entered allmulticast mode
[  206.613301][T12715] loop6: detected capacity change from 0 to 512
[  206.620896][T12696] bridge_slave_0: entered promiscuous mode
[  206.632451][T12715] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.644284][T12696] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.651423][T12696] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.666799][T12715] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3275: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  206.685449][T12696] bridge_slave_1: entered allmulticast mode
[  206.693308][T12696] bridge_slave_1: entered promiscuous mode
[  206.699886][T12715] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  206.741760][T12715] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3275: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  206.760660][T12715] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  206.770534][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.781471][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.808231][T12696] team0: Port device team_slave_0 added
[  206.815188][T12696] team0: Port device team_slave_1 added
[  206.817973][T12715] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3275: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  206.843397][T12723] loop4: detected capacity change from 0 to 512
[  206.850282][T12723] EXT4-fs: Ignoring removed i_version option
[  206.856283][T12723] EXT4-fs: Ignoring removed bh option
[  206.859053][T12715] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  206.876833][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.883829][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.909806][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.923752][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.930731][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  206.956672][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.979778][T12723] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  207.007668][T12727] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  207.017678][T12733] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  207.024253][T12733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  207.029287][T12727] binfmt_misc: register: failed to install interpreter file ./file0
[  207.031958][T12733] vhci_hcd vhci_hcd.0: Device attached
[  207.058476][T12696] hsr_slave_0: entered promiscuous mode
[  207.069595][T12696] hsr_slave_1: entered promiscuous mode
[  207.075541][T12696] debugfs: 'hsr0' already exists in 'hsr'
[  207.081322][T12696] Cannot create hsr debugfs directory
[  207.119537][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'.
[  207.145522][T12740] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  207.184303][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'.
[  207.219340][ T3581] vhci_hcd: vhci_device speed not set
[  207.235248][T12750] loop3: detected capacity change from 0 to 1024
[  207.242007][T12750] EXT4-fs: Ignoring removed orlov option
[  207.242812][T12696] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.279264][ T3581] usb 13-1: new full-speed USB device number 2 using vhci_hcd
[  207.295543][T12756] loop4: detected capacity change from 0 to 128
[  207.303709][T12696] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.391918][T12696] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.405359][T12754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3289'.
[  207.450602][T12696] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.467979][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'.
[  207.528584][T12696] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  207.538581][T12696] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  207.549175][T12764] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  207.557957][T12764] binfmt_misc: register: failed to install interpreter file ./file0
[  207.576009][T12696] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  207.583352][T12762] loop2: detected capacity change from 0 to 764
[  207.592922][T12696] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  207.604272][T12766] loop3: detected capacity change from 0 to 2048
[  207.617183][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3291'.
[  207.671179][T12696] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.688465][T12776] SELinux:  Context @ is not valid (left unmapped).
[  207.691236][T12696] 8021q: adding VLAN 0 to HW filter on device team0
[  207.714706][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.721821][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.731657][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.738789][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.760908][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3297'.
[  207.792391][T12785] loop3: detected capacity change from 0 to 512
[  207.799111][T12785] EXT4-fs: Ignoring removed i_version option
[  207.805209][T12785] EXT4-fs: Ignoring removed bh option
[  207.805541][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.827576][T12785] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  207.844509][T12734] vhci_hcd: connection reset by peer
[  207.850185][ T4204] vhci_hcd: stop threads
[  207.854446][ T4204] vhci_hcd: release socket
[  207.858867][ T4204] vhci_hcd: disconnect device
[  207.895186][T12795] lo speed is unknown, defaulting to 1000
[  207.950468][T12696] veth0_vlan: entered promiscuous mode
[  207.957759][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3298'.
[  207.958899][T12696] veth1_vlan: entered promiscuous mode
[  207.980579][T12696] veth0_macvtap: entered promiscuous mode
[  207.993357][T12696] veth1_macvtap: entered promiscuous mode
[  208.005185][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.015815][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.027292][  T271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.037119][  T271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.046585][  T271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.058981][  T271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.112826][T12813] loop5: detected capacity change from 0 to 512
[  208.135716][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'.
[  208.146681][T12813] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.179550][T12813] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3271: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  208.186395][T12819] loop4: detected capacity change from 0 to 2048
[  208.201848][T12813] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  208.211962][T12813] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3271: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  208.228971][T12813] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  208.238261][T12823] loop3: detected capacity change from 0 to 128
[  208.238981][T12813] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3271: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  208.261414][T12813] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  208.295774][T12825] loop4: detected capacity change from 0 to 1024
[  208.303654][T12825] EXT4-fs: Ignoring removed orlov option
[  208.327106][T12830] FAULT_INJECTION: forcing a failure.
[  208.327106][T12830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.340317][T12830] CPU: 0 UID: 0 PID: 12830 Comm: syz.5.3309 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  208.340407][T12830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  208.340419][T12830] Call Trace:
[  208.340425][T12830]  <TASK>
[  208.340432][T12830]  __dump_stack+0x1d/0x30
[  208.340457][T12830]  dump_stack_lvl+0xe8/0x140
[  208.340477][T12830]  dump_stack+0x15/0x1b
[  208.340497][T12830]  should_fail_ex+0x265/0x280
[  208.340572][T12830]  should_fail+0xb/0x20
[  208.340590][T12830]  should_fail_usercopy+0x1a/0x20
[  208.340620][T12830]  _copy_from_user+0x1c/0xb0
[  208.340646][T12830]  ___sys_sendmsg+0xc1/0x1d0
[  208.340720][T12830]  __x64_sys_sendmsg+0xd4/0x160
[  208.340743][T12830]  x64_sys_call+0x191e/0x3000
[  208.340797][T12830]  do_syscall_64+0xd2/0x200
[  208.340814][T12830]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  208.340864][T12830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.340948][T12830] RIP: 0033:0x7fca1fa4f6c9
[  208.341007][T12830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.341099][T12830] RSP: 002b:00007fca1e4af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.341117][T12830] RAX: ffffffffffffffda RBX: 00007fca1fca5fa0 RCX: 00007fca1fa4f6c9
[  208.341129][T12830] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000006
[  208.341140][T12830] RBP: 00007fca1e4af090 R08: 0000000000000000 R09: 0000000000000000
[  208.341154][T12830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  208.341168][T12830] R13: 00007fca1fca6038 R14: 00007fca1fca5fa0 R15: 00007ffcc798ed68
[  208.341190][T12830]  </TASK>
[  208.648869][T12845] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  208.663085][T12845] binfmt_misc: register: failed to install interpreter file ./file0
[  208.687633][T12849] loop6: detected capacity change from 0 to 2048
[  208.732957][T12847] siw: device registration error -23
[  208.740268][T12847] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3317'.
[  208.780645][T12847] lo speed is unknown, defaulting to 1000
[  208.945238][T12858] loop4: detected capacity change from 0 to 512
[  208.993747][T12858] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.060945][T12858] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3320: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.223994][T12858] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  209.234056][T12863] loop5: detected capacity change from 0 to 1024
[  209.247794][T12863] EXT4-fs: Ignoring removed orlov option
[  209.256036][T12858] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3320: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.303741][T12858] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  209.322003][T12858] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.3320: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.367886][T12858] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop4 ino=15
[  209.410915][T12871] binfmt_misc: register: failed to install interpreter file ./file0
[  209.454726][T12868] loop3: detected capacity change from 0 to 764
[  209.459830][T12878] loop5: detected capacity change from 0 to 512
[  209.467747][T12878] EXT4-fs: Ignoring removed i_version option
[  209.473999][T12878] EXT4-fs: Ignoring removed bh option
[  209.506819][T12878] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  209.595463][T12885] loop3: detected capacity change from 0 to 764
[  209.618986][T12892] validate_nla: 8 callbacks suppressed
[  209.618999][T12892] netlink: 'syz.6.3332': attribute type 29 has an invalid length.
[  209.674414][T12892] netlink: 'syz.6.3332': attribute type 29 has an invalid length.
[  209.740993][T12900] loop5: detected capacity change from 0 to 512
[  209.755873][T12900] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.770813][T12900] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3335: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.788759][T12900] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  209.793446][T12897] xt_CT: You must specify a L4 protocol and not use inversions on it
[  209.798315][T12900] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3335: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.846924][T12900] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  209.862132][T12900] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3335: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  209.886579][T12900] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  209.916564][T12913] loop6: detected capacity change from 0 to 2048
[  209.951563][T12921] loop5: detected capacity change from 0 to 1024
[  209.958367][T12921] EXT4-fs: Ignoring removed orlov option
[  209.961033][T12923] netlink: 'syz.3.3342': attribute type 29 has an invalid length.
[  209.973480][T12923] netlink: 'syz.3.3342': attribute type 29 has an invalid length.
[  209.989370][ T3379] usb 7-1: enqueue for inactive port 0
[  209.995495][ T3379] usb 7-1: enqueue for inactive port 0
[  210.069269][ T3379] vhci_hcd: vhci_device speed not set
[  210.189742][T12936] netlink: 'syz.5.3345': attribute type 29 has an invalid length.
[  210.198112][T12936] netlink: 'syz.5.3345': attribute type 29 has an invalid length.
[  210.369554][   T29] kauditd_printk_skb: 444 callbacks suppressed
[  210.369572][   T29] audit: type=1326 audit(1762231587.914:35499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a3adf6c9 code=0x7ffc0000
[  210.399748][   T29] audit: type=1326 audit(1762231587.914:35500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a3adf6c9 code=0x7ffc0000
[  210.464380][T12947] FAULT_INJECTION: forcing a failure.
[  210.464380][T12947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  210.477489][T12947] CPU: 0 UID: 0 PID: 12947 Comm: syz.3.3350 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  210.477585][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  210.477597][T12947] Call Trace:
[  210.477603][T12947]  <TASK>
[  210.477611][T12947]  __dump_stack+0x1d/0x30
[  210.477712][T12947]  dump_stack_lvl+0xe8/0x140
[  210.477733][T12947]  dump_stack+0x15/0x1b
[  210.477749][T12947]  should_fail_ex+0x265/0x280
[  210.477768][T12947]  should_fail+0xb/0x20
[  210.477783][T12947]  should_fail_usercopy+0x1a/0x20
[  210.477821][T12947]  _copy_from_user+0x1c/0xb0
[  210.477917][T12947]  proc_ioctl_default+0x43/0xa0
[  210.477946][T12947]  usbdev_ioctl+0xe8b/0x1700
[  210.478049][T12947]  ? __pfx_usbdev_ioctl+0x10/0x10
[  210.478073][T12947]  __se_sys_ioctl+0xce/0x140
[  210.478093][T12947]  __x64_sys_ioctl+0x43/0x50
[  210.478112][T12947]  x64_sys_call+0x1816/0x3000
[  210.478169][T12947]  do_syscall_64+0xd2/0x200
[  210.478187][T12947]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  210.478287][T12947]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  210.478316][T12947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.478400][T12947] RIP: 0033:0x7fe4a3adf6c9
[  210.478414][T12947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.478432][T12947] RSP: 002b:00007fe4a2547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  210.478451][T12947] RAX: ffffffffffffffda RBX: 00007fe4a3d35fa0 RCX: 00007fe4a3adf6c9
[  210.478484][T12947] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000006
[  210.478555][T12947] RBP: 00007fe4a2547090 R08: 0000000000000000 R09: 0000000000000000
[  210.478567][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.478578][T12947] R13: 00007fe4a3d36038 R14: 00007fe4a3d35fa0 R15: 00007fff3e0d5e08
[  210.478597][T12947]  </TASK>
[  210.682819][T12951] loop5: detected capacity change from 0 to 512
[  210.701054][T12951] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.712803][T12951] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3352: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  210.730079][T12951] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  210.739055][T12951] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3352: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  210.756517][T12951] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  210.765982][T12951] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3352: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  210.785779][   T29] audit: type=1400 audit(1762231588.324:35501): avc:  denied  { ioctl } for  pid=12952 comm="syz.3.3353" path="socket:[43175]" dev="sockfs" ino=43175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  210.811662][T12951] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  210.829947][T12960] netlink: 'syz.4.3354': attribute type 29 has an invalid length.
[  210.841211][T12960] netlink: 'syz.4.3354': attribute type 29 has an invalid length.
[  210.871218][T12964] binfmt_misc: register: failed to install interpreter file ./file0
[  210.892232][   T29] audit: type=1326 audit(1762231588.434:35502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  210.919112][T12966] netlink: 'syz.5.3356': attribute type 29 has an invalid length.
[  210.921421][   T29] audit: type=1326 audit(1762231588.454:35503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  210.950770][   T29] audit: type=1326 audit(1762231588.454:35504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  210.974600][   T29] audit: type=1326 audit(1762231588.454:35505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  210.981846][T12966] netlink: 'syz.5.3356': attribute type 29 has an invalid length.
[  210.998237][   T29] audit: type=1326 audit(1762231588.454:35506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  210.998269][   T29] audit: type=1326 audit(1762231588.454:35507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  211.015170][T12966] __nla_validate_parse: 10 callbacks suppressed
[  211.015189][T12966] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3356'.
[  211.029967][   T29] audit: type=1326 audit(1762231588.454:35508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.4.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd943aef6c9 code=0x7ffc0000
[  211.124600][T12979] xt_hashlimit: max too large, truncated to 1048576
[  211.196537][T12991] loop4: detected capacity change from 0 to 2048
[  211.207370][T12987] loop6: detected capacity change from 0 to 2048
[  211.207877][T12989] siw: device registration error -23
[  211.222617][T12989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3365'.
[  211.248835][T12989] lo speed is unknown, defaulting to 1000
[  211.258720][T12999] loop5: detected capacity change from 0 to 128
[  211.270028][T12998] loop6: detected capacity change from 0 to 512
[  211.300962][T13003] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3369'.
[  211.322520][T12998] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.333066][T13007] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  211.333090][T13007] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  211.347059][T13007] vhci_hcd vhci_hcd.0: Device attached
[  211.357424][T13008] vhci_hcd: connection closed
[  211.357554][ T4214] vhci_hcd: stop threads
[  211.366505][ T4214] vhci_hcd: release socket
[  211.370963][ T4214] vhci_hcd: disconnect device
[  211.376044][T12998] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3368: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  211.392808][T12998] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  211.401936][T12998] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3368: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  211.418614][T12998] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  211.430598][T12998] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3368: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  211.447419][T12998] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  211.654116][T13015] loop6: detected capacity change from 0 to 2048
[  211.872712][T13020] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3373'.
[  211.909549][T13024] loop2: detected capacity change from 0 to 1024
[  211.916086][T13024] EXT4-fs: Ignoring removed orlov option
[  211.999024][T13035] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3380'.
[  212.038201][  T271] bio_check_eod: 204 callbacks suppressed
[  212.038217][  T271] kworker/u8:5: attempt to access beyond end of device
[  212.038217][  T271] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  212.061052][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'.
[  212.105336][T13042] loop5: detected capacity change from 0 to 512
[  212.112720][T13047] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  212.119246][T13047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  212.120866][T13042] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.126736][T13047] vhci_hcd vhci_hcd.0: Device attached
[  212.141053][T13042] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3381: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.160009][T13042] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  212.169035][T13042] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3381: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.185896][T13042] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  212.186361][T13042] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3381: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.196120][T13050] vhci_hcd: connection closed
[  212.213655][T13042] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  212.213898][ T4200] vhci_hcd: stop threads
[  212.223009][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'.
[  212.227456][ T4200] vhci_hcd: release socket
[  212.244849][ T4200] vhci_hcd: disconnect device
[  212.301986][ T3581] usb 13-1: enqueue for inactive port 0
[  212.313360][T13064] loop5: detected capacity change from 0 to 2048
[  212.317804][ T3581] usb 13-1: enqueue for inactive port 0
[  212.335148][T13067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  212.371858][T13071] loop2: detected capacity change from 0 to 2048
[  212.399306][ T3581] vhci_hcd: vhci_device speed not set
[  212.411531][T13075] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  212.547837][T13084] loop6: detected capacity change from 0 to 2048
[  212.605101][T13086] loop6: detected capacity change from 0 to 512
[  212.620800][T13086] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.632285][T13086] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.649031][T13086] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  212.658586][T13086] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.675159][T13086] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  212.684522][T13086] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  212.701260][T13086] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=15
[  212.774241][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'.
[  212.832488][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3402'.
[  212.843376][T13105] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3405'.
[  212.887879][T13111] loop3: detected capacity change from 0 to 2048
[  212.897414][T13113] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  212.903937][T13113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  212.911364][T13113] vhci_hcd vhci_hcd.0: Device attached
[  212.918457][T13114] vhci_hcd: connection closed
[  212.918563][ T4200] vhci_hcd: stop threads
[  212.927676][ T4200] vhci_hcd: release socket
[  212.932146][ T4200] vhci_hcd: disconnect device
[  213.157575][T13124] loop4: detected capacity change from 0 to 1024
[  213.164662][T13124] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  213.247664][T13130] binfmt_misc: register: failed to install interpreter file ./file0
[  213.312396][T13138] vlan2: entered allmulticast mode
[  213.391848][T13144] loop3: detected capacity change from 0 to 764
[  213.457971][T13157] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  213.495623][T13159] loop4: detected capacity change from 0 to 2048
[  213.598396][T13173] binfmt_misc: register: failed to install interpreter file ./file0
[  213.638561][T13180] loop3: detected capacity change from 0 to 128
[  213.648795][T13183] loop6: detected capacity change from 0 to 1024
[  213.655675][T13183] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  213.683667][T13186] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7)
[  213.690299][T13186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  213.697757][T13186] vhci_hcd vhci_hcd.0: Device attached
[  213.704984][T13187] vhci_hcd: connection closed
[  213.705119][ T4213] vhci_hcd: stop threads
[  213.714057][ T4213] vhci_hcd: release socket
[  213.718467][ T4213] vhci_hcd: disconnect device
[  213.992031][T13209] binfmt_misc: register: failed to install interpreter file ./file0
[  214.027738][T13213] loop2: detected capacity change from 0 to 2048
[  214.032890][T13215] loop3: detected capacity change from 0 to 128
[  214.102714][T13217] binfmt_misc: register: failed to install interpreter file ./file0
[  214.192398][T13227] loop3: detected capacity change from 0 to 2048
[  214.252004][T13227]  loop3: p2 p3 p7
[  214.286764][T13232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.294361][T13232] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.316514][T13232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.324020][T13232] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.384719][T13242] loop6: detected capacity change from 0 to 128
[  214.397941][T13243] loop4: detected capacity change from 0 to 2048
[  214.415633][T13245] binfmt_misc: register: failed to install interpreter file ./file0
[  214.522435][T13251] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  214.528983][T13251] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  214.536471][T13251] vhci_hcd vhci_hcd.0: Device attached
[  214.570907][T13252] vhci_hcd: connection closed
[  214.571155][ T4200] vhci_hcd: stop threads
[  214.580279][ T4200] vhci_hcd: release socket
[  214.584740][ T4200] vhci_hcd: disconnect device
[  214.763564][T13267] loop4: detected capacity change from 0 to 2048
[  214.796904][T13270] FAULT_INJECTION: forcing a failure.
[  214.796904][T13270] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.810214][T13270] CPU: 1 UID: 0 PID: 13270 Comm: syz.6.3472 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  214.810241][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  214.810252][T13270] Call Trace:
[  214.810260][T13270]  <TASK>
[  214.810317][T13270]  __dump_stack+0x1d/0x30
[  214.810339][T13270]  dump_stack_lvl+0xe8/0x140
[  214.810362][T13270]  dump_stack+0x15/0x1b
[  214.810382][T13270]  should_fail_ex+0x265/0x280
[  214.810405][T13270]  should_fail+0xb/0x20
[  214.810423][T13270]  should_fail_usercopy+0x1a/0x20
[  214.810510][T13270]  _copy_from_user+0x1c/0xb0
[  214.810539][T13270]  __copy_msghdr+0x244/0x300
[  214.810574][T13270]  ___sys_sendmsg+0x109/0x1d0
[  214.810602][T13270]  __sys_sendmmsg+0x178/0x300
[  214.810643][T13270]  __x64_sys_sendmmsg+0x57/0x70
[  214.810660][T13270]  x64_sys_call+0x1c4a/0x3000
[  214.810683][T13270]  do_syscall_64+0xd2/0x200
[  214.810705][T13270]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  214.810734][T13270]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  214.810885][T13270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.810910][T13270] RIP: 0033:0x7fd66248f6c9
[  214.810927][T13270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.810945][T13270] RSP: 002b:00007fd660eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  214.810967][T13270] RAX: ffffffffffffffda RBX: 00007fd6626e5fa0 RCX: 00007fd66248f6c9
[  214.811037][T13270] RDX: 0000000000000001 RSI: 0000200000005f40 RDI: 0000000000000006
[  214.811051][T13270] RBP: 00007fd660eef090 R08: 0000000000000000 R09: 0000000000000000
[  214.811066][T13270] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001
[  214.811078][T13270] R13: 00007fd6626e6038 R14: 00007fd6626e5fa0 R15: 00007ffc801897d8
[  214.811095][T13270]  </TASK>
[  215.047937][T13275] siw: device registration error -23
[  215.084242][T13275] lo speed is unknown, defaulting to 1000
[  215.227312][T13290] validate_nla: 20 callbacks suppressed
[  215.227401][T13290] netlink: 'syz.2.3478': attribute type 29 has an invalid length.
[  215.245562][T13290] netlink: 'syz.2.3478': attribute type 29 has an invalid length.
[  215.324678][T13299] loop2: detected capacity change from 0 to 128
[  215.357436][T13304] loop3: detected capacity change from 0 to 512
[  215.381453][T13304] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.395386][   T29] kauditd_printk_skb: 799 callbacks suppressed
[  215.395401][   T29] audit: type=1326 audit(1762231592.934:36308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13291 comm="syz.6.3477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd66248f6c9 code=0x7ffc0000
[  215.441342][   T29] audit: type=1400 audit(1762231592.974:36309): avc:  denied  { unlink } for  pid=11132 comm="syz-executor" name="file0" dev="tmpfs" ino=847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  215.464311][   T29] audit: type=1400 audit(1762231592.974:36310): avc:  denied  { unmount } for  pid=11753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  215.495568][T13311] loop2: detected capacity change from 0 to 512
[  215.505031][   T29] audit: type=1326 audit(1762231593.044:36311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.5.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fca1fa4f6c9 code=0x7ffc0000
[  215.528572][   T29] audit: type=1326 audit(1762231593.044:36312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.5.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  215.531325][T13311] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.552578][   T29] audit: type=1326 audit(1762231593.044:36313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.5.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fca1fa4f6c9 code=0x7ffc0000
[  215.592666][T13311] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3483: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  215.629576][T13318] lo speed is unknown, defaulting to 1000
[  215.630600][T13311] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  215.644835][T13311] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3483: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  215.661973][   T29] audit: type=1400 audit(1762231593.074:36314): avc:  denied  { mount } for  pid=13309 comm="syz.2.3483" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  215.684005][   T29] audit: type=1400 audit(1762231593.104:36315): avc:  denied  { read write } for  pid=13309 comm="syz.2.3483" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.708305][   T29] audit: type=1400 audit(1762231593.104:36316): avc:  denied  { open } for  pid=13309 comm="syz.2.3483" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.719575][T13311] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  215.732451][   T29] audit: type=1400 audit(1762231593.124:36317): avc:  denied  { ioctl } for  pid=11132 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  215.791137][T13311] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3483: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  215.804321][T13331] netlink: 'syz.4.3489': attribute type 29 has an invalid length.
[  215.815615][T13329] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  215.815845][T13311] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  215.822185][T13329] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  215.822396][T13329] vhci_hcd vhci_hcd.0: Device attached
[  215.839106][T13323] loop6: detected capacity change from 0 to 512
[  215.850500][T13331] netlink: 'syz.4.3489': attribute type 29 has an invalid length.
[  215.850973][T13332] vhci_hcd: connection closed
[  215.860611][  T271] vhci_hcd: stop threads
[  215.869592][  T271] vhci_hcd: release socket
[  215.874005][  T271] vhci_hcd: disconnect device
[  215.891251][T13323] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.928592][T13337] siw: device registration error -23
[  215.951747][T13337] lo speed is unknown, defaulting to 1000
[  216.142206][T13358] netlink: 'syz.6.3499': attribute type 29 has an invalid length.
[  216.143414][T13346] loop4: detected capacity change from 0 to 764
[  216.151052][T13358] netlink: 'syz.6.3499': attribute type 29 has an invalid length.
[  216.152508][T13358] __nla_validate_parse: 23 callbacks suppressed
[  216.152521][T13358] netlink: 500 bytes leftover after parsing attributes in process `syz.6.3499'.
[  216.200633][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'.
[  216.210533][T13360] netlink: 'syz.2.3500': attribute type 29 has an invalid length.
[  216.212244][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3494'.
[  216.228760][T13360] netlink: 'syz.2.3500': attribute type 29 has an invalid length.
[  216.249319][T13360] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3500'.
[  216.273894][T13367] loop5: detected capacity change from 0 to 1024
[  216.292545][T13367] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  216.303555][T13367] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  216.308599][T13371] netlink: 'syz.2.3505': attribute type 29 has an invalid length.
[  216.316239][T13367] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  216.329839][T13367] EXT4-fs (loop5): filesystem has both journal inode and journal device!
[  216.345698][T13371] netlink: 'syz.2.3505': attribute type 29 has an invalid length.
[  216.354509][T13371] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3505'.
[  216.510187][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3511'.
[  216.530323][T13396] binfmt_misc: register: failed to install interpreter file ./file0
[  216.582481][T13404] siw: device registration error -23
[  216.588483][T13404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3520'.
[  216.645236][T13411] loop4: detected capacity change from 0 to 2048
[  216.660490][T13404] lo speed is unknown, defaulting to 1000
[  216.734793][T13411] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  216.744274][T13411] FAT-fs (loop4): Filesystem has been set read-only
[  216.762701][T13400] loop5: detected capacity change from 0 to 764
[  216.801159][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3518'.
[  216.831124][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3518'.
[  216.845327][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3525'.
[  216.878523][T13426] loop2: detected capacity change from 0 to 512
[  216.888455][T13426] EXT4-fs: Ignoring removed i_version option
[  216.894548][T13426] EXT4-fs: Ignoring removed bh option
[  216.913708][T13423] vlan2: entered allmulticast mode
[  216.959830][T13426] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.982937][T13432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.990392][T13432] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.033216][T13438] binfmt_misc: register: failed to install interpreter file ./file0
[  217.051561][T13432] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.059107][T13432] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.136730][T13445] loop3: detected capacity change from 0 to 2048
[  217.197371][T13447] loop5: detected capacity change from 0 to 128
[  217.273195][T13459] loop4: detected capacity change from 0 to 1024
[  217.309620][T13459] EXT4-fs: Ignoring removed orlov option
[  217.433704][T13472] loop2: detected capacity change from 0 to 128
[  217.438173][T13469] binfmt_misc: register: failed to install interpreter file ./file0
[  217.472544][T13474] siw: device registration error -23
[  217.493903][T13476] loop5: detected capacity change from 0 to 512
[  217.497091][T13474] lo speed is unknown, defaulting to 1000
[  217.522176][T13476] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.534451][T13476] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.3546: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  217.552799][T13476] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop5 ino=15
[  217.695632][T13501] binfmt_misc: register: failed to install interpreter file ./file0
[  217.700350][T13498] loop6: detected capacity change from 0 to 512
[  217.711418][T13498] EXT4-fs: Ignoring removed i_version option
[  217.717848][T13498] EXT4-fs: Ignoring removed bh option
[  217.733243][T13498] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.777237][T13507] siw: device registration error -23
[  217.803026][T13507] lo speed is unknown, defaulting to 1000
[  217.835422][T13503] loop5: detected capacity change from 0 to 764
[  218.144637][T13540] FAULT_INJECTION: forcing a failure.
[  218.144637][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.157899][T13540] CPU: 0 UID: 0 PID: 13540 Comm: syz.4.3573 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  218.157964][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  218.157977][T13540] Call Trace:
[  218.157983][T13540]  <TASK>
[  218.158045][T13540]  __dump_stack+0x1d/0x30
[  218.158070][T13540]  dump_stack_lvl+0xe8/0x140
[  218.158138][T13540]  dump_stack+0x15/0x1b
[  218.158161][T13540]  should_fail_ex+0x265/0x280
[  218.158183][T13540]  should_fail+0xb/0x20
[  218.158200][T13540]  should_fail_usercopy+0x1a/0x20
[  218.158224][T13540]  _copy_from_user+0x1c/0xb0
[  218.158308][T13540]  ___sys_sendmsg+0xc1/0x1d0
[  218.158341][T13540]  __x64_sys_sendmsg+0xd4/0x160
[  218.158365][T13540]  x64_sys_call+0x191e/0x3000
[  218.158406][T13540]  do_syscall_64+0xd2/0x200
[  218.158425][T13540]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  218.158452][T13540]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  218.158483][T13540]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.158557][T13540] RIP: 0033:0x7fd943aef6c9
[  218.158574][T13540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.158595][T13540] RSP: 002b:00007fd94254f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.158616][T13540] RAX: ffffffffffffffda RBX: 00007fd943d45fa0 RCX: 00007fd943aef6c9
[  218.158629][T13540] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  218.158691][T13540] RBP: 00007fd94254f090 R08: 0000000000000000 R09: 0000000000000000
[  218.158704][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.158716][T13540] R13: 00007fd943d46038 R14: 00007fd943d45fa0 R15: 00007ffe2d3fdf48
[  218.158733][T13540]  </TASK>
[  218.344451][T13538] loop3: detected capacity change from 0 to 2048
[  218.394369][ T4200] kworker/u8:11: attempt to access beyond end of device
[  218.394369][ T4200] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[  218.400386][T13538] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  218.417407][T13538] FAT-fs (loop3): Filesystem has been set read-only
[  218.589205][T13564] binfmt_misc: register: failed to install interpreter file ./file0
[  218.609154][T13548] loop6: detected capacity change from 0 to 764
[  218.655428][T13575] FAULT_INJECTION: forcing a failure.
[  218.655428][T13575] name failslab, interval 1, probability 0, space 0, times 0
[  218.668094][T13575] CPU: 1 UID: 0 PID: 13575 Comm: syz.5.3587 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  218.668121][T13575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  218.668133][T13575] Call Trace:
[  218.668141][T13575]  <TASK>
[  218.668150][T13575]  __dump_stack+0x1d/0x30
[  218.668174][T13575]  dump_stack_lvl+0xe8/0x140
[  218.668254][T13575]  dump_stack+0x15/0x1b
[  218.668273][T13575]  should_fail_ex+0x265/0x280
[  218.668361][T13575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  218.668446][T13575]  should_failslab+0x8c/0xb0
[  218.668482][T13575]  kmem_cache_alloc_lru_noprof+0x55/0x490
[  218.668519][T13575]  ? sock_alloc_inode+0x34/0xa0
[  218.668551][T13575]  ? __pfx_sock_alloc_inode+0x10/0x10
[  218.668591][T13575]  sock_alloc_inode+0x34/0xa0
[  218.668708][T13575]  alloc_inode+0x40/0x170
[  218.668750][T13575]  __sock_create+0x122/0x5b0
[  218.668784][T13575]  __sys_socket+0xb0/0x180
[  218.668861][T13575]  __x64_sys_socket+0x3f/0x50
[  218.668893][T13575]  x64_sys_call+0x1147/0x3000
[  218.668922][T13575]  do_syscall_64+0xd2/0x200
[  218.668945][T13575]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  218.669054][T13575]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  218.669096][T13575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.669160][T13575] RIP: 0033:0x7fca1fa515e7
[  218.669179][T13575] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.669202][T13575] RSP: 002b:00007fca1e4adfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  218.669227][T13575] RAX: ffffffffffffffda RBX: 00007fca1fca5fa0 RCX: 00007fca1fa515e7
[  218.669243][T13575] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  218.669257][T13575] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  218.669272][T13575] R10: 0000200000000380 R11: 0000000000000286 R12: 0000000000000001
[  218.669285][T13575] R13: 00007fca1fca6038 R14: 00007fca1fca5fa0 R15: 00007ffcc798ed68
[  218.669317][T13575]  </TASK>
[  218.691371][T13566] loop3: detected capacity change from 0 to 128
[  218.692501][T13575] socket: no more sockets
[  218.896168][T13589] loop2: detected capacity change from 0 to 512
[  218.898735][T13591] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  218.908943][T13591] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  218.916442][T13591] vhci_hcd vhci_hcd.0: Device attached
[  218.921008][T13589] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.924228][T13592] vhci_hcd: connection closed
[  218.933074][ T4200] vhci_hcd: stop threads
[  218.937684][T13589] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.3593: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  218.937961][ T4200] vhci_hcd: release socket
[  218.953494][T13589] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop2 ino=15
[  218.958603][ T4200] vhci_hcd: disconnect device
[  219.012133][T13599] vlan2: entered allmulticast mode
[  219.036942][T13604] binfmt_misc: register: failed to install interpreter file ./file0
[  219.171069][T13607] loop2: detected capacity change from 0 to 764
[  219.306307][T13648] FAULT_INJECTION: forcing a failure.
[  219.306307][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  219.319471][T13648] CPU: 1 UID: 0 PID: 13648 Comm: syz.2.3613 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  219.319503][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  219.319515][T13648] Call Trace:
[  219.319521][T13648]  <TASK>
[  219.319530][T13648]  __dump_stack+0x1d/0x30
[  219.319599][T13648]  dump_stack_lvl+0xe8/0x140
[  219.319618][T13648]  dump_stack+0x15/0x1b
[  219.319638][T13648]  should_fail_ex+0x265/0x280
[  219.319659][T13648]  should_fail+0xb/0x20
[  219.319678][T13648]  should_fail_usercopy+0x1a/0x20
[  219.319702][T13648]  _copy_to_user+0x20/0xa0
[  219.319835][T13648]  simple_read_from_buffer+0xb5/0x130
[  219.319867][T13648]  proc_fail_nth_read+0x10e/0x150
[  219.319910][T13648]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  219.319944][T13648]  vfs_read+0x1a8/0x770
[  219.319966][T13648]  ? __rcu_read_unlock+0x4f/0x70
[  219.319990][T13648]  ? __fget_files+0x184/0x1c0
[  219.320055][T13648]  ksys_read+0xda/0x1a0
[  219.320152][T13648]  __x64_sys_read+0x40/0x50
[  219.320176][T13648]  x64_sys_call+0x27c0/0x3000
[  219.320202][T13648]  do_syscall_64+0xd2/0x200
[  219.320223][T13648]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  219.320329][T13648]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  219.320363][T13648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.320383][T13648] RIP: 0033:0x7f972c9de0dc
[  219.320400][T13648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  219.320440][T13648] RSP: 002b:00007f972b447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  219.320458][T13648] RAX: ffffffffffffffda RBX: 00007f972cc35fa0 RCX: 00007f972c9de0dc
[  219.320470][T13648] RDX: 000000000000000f RSI: 00007f972b4470a0 RDI: 0000000000000004
[  219.320559][T13648] RBP: 00007f972b447090 R08: 0000000000000000 R09: 0000000000000000
[  219.320572][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.320583][T13648] R13: 00007f972cc36038 R14: 00007f972cc35fa0 R15: 00007ffeb2598078
[  219.320601][T13648]  </TASK>
[  219.588482][T13660] loop2: detected capacity change from 0 to 512
[  219.595471][T13660] EXT4-fs: Ignoring removed i_version option
[  219.601652][T13660] EXT4-fs: Ignoring removed bh option
[  219.634841][T13660] EXT4-fs mount: 84 callbacks suppressed
[  219.634858][T13660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.670215][T13660] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.733271][T13671] loop5: detected capacity change from 0 to 764
[  219.843276][T11960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.870770][T13688] loop2: detected capacity change from 0 to 1024
[  219.877452][T13688] EXT4-fs: Ignoring removed orlov option
[  219.891168][T13688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.922062][T13702] vlan2: entered allmulticast mode
[  219.946438][T11960] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.956226][T11960] ==================================================================
[  219.964312][T11960] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru
[  219.971859][T11960] 
[  219.974185][T11960] read-write to 0xffff888237c25ee8 of 1 bytes by task 13700 on cpu 0:
[  219.982331][T11960]  folio_add_lru+0xa5/0x1f0
[  219.986846][T11960]  shmem_get_folio_gfp+0x7ab/0xd60
[  219.991978][T11960]  shmem_fault+0xf6/0x250
[  219.996314][T11960]  __do_fault+0xbc/0x200
[  220.000595][T11960]  handle_mm_fault+0xf78/0x2be0
[  220.005457][T11960]  __get_user_pages+0x102a/0x1ed0
[  220.010497][T11960]  __mm_populate+0x243/0x3a0
[  220.015095][T11960]  vm_mmap_pgoff+0x232/0x2e0
[  220.019694][T11960]  ksys_mmap_pgoff+0xc2/0x310
[  220.024370][T11960]  x64_sys_call+0x14a3/0x3000
[  220.029050][T11960]  do_syscall_64+0xd2/0x200
[  220.033546][T11960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.039436][T11960] 
[  220.041752][T11960] read to 0xffff888237c25ee8 of 1 bytes by task 11960 on cpu 1:
[  220.049380][T11960]  __lru_add_drain_all+0x17e/0x450
[  220.054493][T11960]  lru_add_drain_all+0x10/0x20
[  220.059255][T11960]  invalidate_bdev+0x47/0x70
[  220.063843][T11960]  ext4_put_super+0x624/0x7d0
[  220.068531][T11960]  generic_shutdown_super+0xe6/0x210
[  220.073828][T11960]  kill_block_super+0x2a/0x70
[  220.078522][T11960]  ext4_kill_sb+0x42/0x80
[  220.082853][T11960]  deactivate_locked_super+0x75/0x1c0
[  220.088228][T11960]  deactivate_super+0x97/0xa0
[  220.092904][T11960]  cleanup_mnt+0x269/0x2e0
[  220.097329][T11960]  __cleanup_mnt+0x19/0x20
[  220.101766][T11960]  task_work_run+0x131/0x1a0
[  220.106366][T11960]  exit_to_user_mode_loop+0xed/0x110
[  220.111665][T11960]  do_syscall_64+0x1d6/0x200
[  220.116257][T11960]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.122153][T11960] 
[  220.124474][T11960] value changed: 0x14 -> 0x18
[  220.129132][T11960] 
[  220.131441][T11960] Reported by Kernel Concurrency Sanitizer on:
[  220.137585][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[  220.147570][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  220.157629][T11960] ==================================================================