last executing test programs:

2m22.404161942s ago: executing program 1 (id=1960):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @random="442266eb5396", 'erspan0\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e)

2m22.335101695s ago: executing program 1 (id=1961):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000280)})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
lstat(0x0, 0x0)

2m22.204099811s ago: executing program 1 (id=1963):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
pipe2(&(0x7f0000001cc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"])

2m21.690718682s ago: executing program 1 (id=1972):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0)
setxattr$security_selinux(&(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0), &(0x7f0000000700)='system_u:object_r:modules_conf_t:s0\x00', 0x24, 0x3)
listen(r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x80000004, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000980)='9p_client_req\x00', r4}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428"], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x914a0042}, 0xc, &(0x7f0000000880)={&(0x7f0000000a00)=@gettaction={0xc8, 0x32, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1200}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4900}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}})
mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='tix,\x00\x00\x00\x00\x00\x00\x00\x00'])
close(r0)
accept(r0, &(0x7f00000000c0)=@caif=@util, &(0x7f0000000140)=0x80)

2m21.415933704s ago: executing program 1 (id=1978):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r7, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xd0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xd0f, 0x203, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaea12da1faaaaaaaaaaaa08004500001c00001000400290780e00004000011000907803ff00a30000"], 0x0)

2m21.261132451s ago: executing program 1 (id=1979):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

2m21.245656321s ago: executing program 32 (id=1979):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
fchdir(r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

39.556646761s ago: executing program 5 (id=3920):
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

39.472215095s ago: executing program 5 (id=3924):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) (fail_nth: 2)

38.8722914s ago: executing program 5 (id=3926):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

38.784710734s ago: executing program 5 (id=3929):
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00000000'])
close_range(r0, r0, 0x0)

38.551481994s ago: executing program 5 (id=3931):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000400)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000040)={0x65, 0x40, 0x8})

38.483971616s ago: executing program 5 (id=3934):
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

31.622108826s ago: executing program 4 (id=4010):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x6, 0x0, 0x0, 0x7, 0x1f0519, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fffffff, 0x80000001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0)
poll(&(0x7f0000000080)=[{r0, 0x5000}], 0x1, 0x10001)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)
r5 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0xcb}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1})
io_uring_enter(r5, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x200001ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x6adc1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r9, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0)
sendmsg$AUDIT_GET(r1, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004011)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r8, 0xc0a85322, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6d6163637972696c6c69632c756e695f786c6174653d302c696f636861727365743d757466382c757466383d302c7574ff0f3d462c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c74696d655f6f66667365743d3078666666666666666666666666666262322c00"], 0x1, 0x363, &(0x7f0000000280)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)

30.753234583s ago: executing program 4 (id=4020):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

30.638539298s ago: executing program 4 (id=4024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000000)

30.563167621s ago: executing program 4 (id=4027):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x32)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0xa, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1804000000000000000000000040000085000000080000001811", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x7, 0xc, 0x7, {{0x2c, 0x4, 0x3, 0x9, 0xb0, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x42, 0x2, [{0x5, 0x3, '\x00'}, {0x5, 0x4, "61d6"}, {0x7, 0x2}, {0x5, 0x6, "94d9e4da"}, {0x7, 0xd, "eaa16d35da9b5d0b5b69ea"}, {0x0, 0x7, "b2f741632d"}, {0x5, 0x2}, {0x0, 0xb, "a419e68c193f9120e7"}, {0x5, 0xc, "7a5dfd4e5166179aa13b"}]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0x1f, [@multicast1, @broadcast, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0x6, [{@remote, 0x80000001}, {@local, 0x1}, {@remote, 0xffffffff}]}, @timestamp={0x44, 0x8, 0x94, 0x0, 0x7, [0xc]}, @lsrr={0x83, 0x13, 0xb2, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @ssrr={0x89, 0xb, 0xb7, [@empty, @remote]}]}}}}})
socket$can_raw(0x1d, 0x3, 0x1)
ftruncate(r2, 0xee72)
sendfile(r1, r5, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0x19)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000a944a739a021ec8b258db08cb69827164fa0674f931b8bc7407077d2d4d3c247087d63b259bb4490f6519992d5b7b6ddbd268051fb1f452399c198e18306a0e6801c7677172ecff428d49ff4e07832a6b84feab04e74167137114bb808d83af338fa3de2f2b5", @ANYRES16=r7, @ANYBLOB="000125bd7000fcdbdf2505000000050007000300000014001f00fe8000000000000000000000000000bb08000a0004000000050021000100000006001a004e20000005000d0001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x204c005)

30.351428819s ago: executing program 4 (id=4033):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000f00f00004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200"/53], 0xffe)

29.351981632s ago: executing program 4 (id=4038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000080000000839ad6c5eaa6c410d1ab28f15120836bcfc03294eccb4d8d114a6668afb60600d095b371897545a6260bdd59511de3335fd9eafa7807e283b9697a7dc9b350af91ebda112fcc713ae931d9870fc501e9e30da4a87212d0634b725c5e926fc8a5e6d7e131336d1d4767b890274f8c694bc95001ae27a0e13249315f85916e2915a2c0266ba5ed00007b410a37a84db83a553b045abb981ebebd286d185dbc93e179a071131fdcba02a90", @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="5db5cf46523d70ecb61577c8e4ca61cb4fbc1e59b0c0a2a351cf495eb47c70f0345cda257377d7415663b1a47c3ab6e2e315c9b4ee937dd68e196871314b828e11d8683f88e48877dfe26cc6f214a172709d8709f11ec13cd649d762bfe67ab4e2dd043209efcd131b13fc0fe5ecfca7f6bd3bdeddc340dcad0e4492446bf5364fa24d049ead2c8e612aa578b75bf84b68430b6877fe6e8beddac70f628b", @ANYRESOCT, @ANYRES8=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)

29.351741532s ago: executing program 33 (id=4038):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000080000000839ad6c5eaa6c410d1ab28f15120836bcfc03294eccb4d8d114a6668afb60600d095b371897545a6260bdd59511de3335fd9eafa7807e283b9697a7dc9b350af91ebda112fcc713ae931d9870fc501e9e30da4a87212d0634b725c5e926fc8a5e6d7e131336d1d4767b890274f8c694bc95001ae27a0e13249315f85916e2915a2c0266ba5ed00007b410a37a84db83a553b045abb981ebebd286d185dbc93e179a071131fdcba02a90", @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="5db5cf46523d70ecb61577c8e4ca61cb4fbc1e59b0c0a2a351cf495eb47c70f0345cda257377d7415663b1a47c3ab6e2e315c9b4ee937dd68e196871314b828e11d8683f88e48877dfe26cc6f214a172709d8709f11ec13cd649d762bfe67ab4e2dd043209efcd131b13fc0fe5ecfca7f6bd3bdeddc340dcad0e4492446bf5364fa24d049ead2c8e612aa578b75bf84b68430b6877fe6e8beddac70f628b", @ANYRESOCT, @ANYRES8=0x0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10)

23.22245853s ago: executing program 34 (id=3934):
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

2.055413113s ago: executing program 0 (id=4452):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
r3 = socket(0x2, 0x80805, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x1, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sysinfo(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)

1.988066176s ago: executing program 3 (id=4453):
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), 0x0}, 0x20)

1.951523997s ago: executing program 3 (id=4454):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x3}, 0x10000, 0x10003, 0x6, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r0, 0x0, 0x40008003}, 0x18)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xc7}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r5}, 0x20)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0xc, 0x1}, 0x5, 0xa5, &(0x7f0000000240)="d35c3ee823c7fc2797376344bffb81bcf22a0e829e", 0x15, 0x889, 0x4, 0x0, 0x6, 0x9, &(0x7f0000000540)="c48e90d58c1315e802f260be08bdd177ab9cd4491a09643dbfc83d0f23476d3957c155a76a8b9ee75c6cb3cd533b44c6ac1a7cc962471293cdce82001bf82f62b772c5bc0a96d8f63379fc2130ad06189132134a0a2d70dd5f97bf3cbf29a87d09bfa9b0e6592e0d986fe19350154cb05a24"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000500)={[{@noinit_itable}, {@nobarrier}]}, 0x1, 0x79f, &(0x7f0000000a00)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

1.864520931s ago: executing program 7 (id=4455):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r3=>0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ff", 0x3, 0x0, 0x0, 0x2}])

1.639427091s ago: executing program 7 (id=4456):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x90, 0x7, 0x7, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8, 0x495e, 0x40}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2000000000000120, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000003c0)="10", 0x1, 0x20000080, &(0x7f0000000140)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @local}, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r6 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0xcd03}, 0x1c)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r7, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="4e7f98ffbbb4fed6666d830984951560b46535235cdb23c7535aba01570d82bf0ed07c26f975fc19b63db9b73df739e2833959cf76ac985f479ec6323180f5f1e5b941488ae24c181165ffc43dc49e892d9540f877d74b4ff0f29e0f9a04b5c02a78fde5e5070142ddeb81e194a85563f8d61c2d9f92e976bb5c35325adf11efa1aa566998de1a09b5a10b6d7475efb6897dc6a19499f6712cee496cc79c3d79c11e983aee01f0aa8b05a6dac92f1a4f67c5725fcf68b92d47908ccb13d50ab13c4e2fe2ac6e2255fc559586afb7bfe675b1736beba50270f71564", 0xdb}, {&(0x7f0000000800)="b83a4b722b0a4f278556143640d8ef9fd1ff1d0d48aaaaf1c791035a09b2722ff6bd01375dd674a98fb31aa3ba60d9ff8423d2103c5b6463cd34a161565b43353e519093b851f1fcba4f6fb720b429d26fb9bb15a6000000008d687f", 0x5c}, {&(0x7f00000000c0)="f1c85ed85c4f208033098d48d8fa13e54bb1a29ff3f600ef7ace523777426150", 0x20}, {&(0x7f0000000fc0)="13967a3f204fc5129cf02063d37c3fd02e7761d9003a3f77540ed5edc9815afbdfb9050bf69a4f2f98dece26136ddc40fd7e2196c861820bd435ec07855ad36bddaf8edc56fcbb46a61d48d786119e906f2fe6edc78a07dacd480a49d04fa4046ee89d3c9dc5f1d36692ccfea7411a04227cc827ad160c82b29b9f15c59e036d6db610cab3d707478f2284c6216f737d76bcbfb79f176e600767f4842ff8724a8e8b69458c326925deb17c207dcfb505f24ac473074b572bae3edea91e79d72d7a8287b21265dfc8fbdb", 0xca}, {&(0x7f0000000e00)="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", 0x1a4}, {&(0x7f00000005c0)="8bb4548cea3357a464a9483436d98f4b635ee8", 0x13}], 0x6)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000740)={0x0, 0xa02000, 0x1000, 0x400}, 0x20)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', <r10=>0x0, 0x7, 0x8, 0x8, 0x9, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0xc, [{@multicast2, 0xffe}]}, @ssrr={0x89, 0x7, 0xbc, [@private=0xa010102]}]}}}}})
bind$xdp(r6, &(0x7f0000000380)={0x2c, 0x9, r10, 0x1, r7}, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000640)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}], 0x2)
sendmsg$tipc(r1, 0x0, 0x20048800)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000002d303030303030435730303030303030303030303867ead744d81bf9af1695f4e589e5f7c653d1dac80e246cd1a6608cf0c9137133d7453b3d97f98f145213336652642982b1d9a4e7a01faac1"])

1.108133174s ago: executing program 0 (id=4462):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

1.077921465s ago: executing program 0 (id=4463):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r1}, 0x18)

1.057588695s ago: executing program 0 (id=4464):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r0, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
close_range(r0, r0, 0x0)

996.075348ms ago: executing program 3 (id=4466):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400004000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa14", @ANYRES32=0x0, @ANYBLOB="0300012edd32dd273fd540954a68934d19c500"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='Y', 0x1}], 0x1}, 0x40041)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r2, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
process_madvise(r3, 0x0, 0x0, 0xd, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x4}}, './file1\x00'})
r5 = open_tree(0xffffffffffffffff, &(0x7f0000000600)='./file1\x00', 0x80900)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x20080, 0x0)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
writev(r8, &(0x7f00000025c0)=[{&(0x7f00000000c0)="34ae", 0x2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="061900c55a4ada00181db733b0e675bee75c9f92d0a1932d110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000400000018110000", @ANYRES32, @ANYBLOB="00000000000000000147542807000000"], &(0x7f0000000440)='GPL\x00', 0x7fff, 0x8b, &(0x7f0000000480)=""/139, 0x41000, 0x10, '\x00', 0x0, @fallback=0x37, r2, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xa, 0x6, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x6, &(0x7f0000000680)=[r4, r5, r6, r7, r8], &(0x7f00000006c0)=[{0x4, 0x1, 0xa, 0x5}, {0x5, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x8, 0xa}, {0x3, 0x2, 0xc, 0x9}, {0x5, 0x2, 0xf, 0xa}, {0x0, 0x4, 0x6, 0x4}], 0x10, 0x5}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYRES32=r10, @ANYBLOB="040000000000000008003f006563"], 0x30}, 0x1, 0x0, 0x0, 0x19a93bd1b1da7c78}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0)
stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
setuid(r12)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="31040108"], 0x44}}, 0x0)

972.119279ms ago: executing program 0 (id=4467):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x90, 0x7, 0x7, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8, 0x495e, 0x40}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2000000000000120, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0xc, [{@multicast2, 0xffe}]}, @ssrr={0x89, 0x7, 0xbc, [@private=0xa010102]}]}}}}})

746.016949ms ago: executing program 7 (id=4473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
setpgid(0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0x800, r2, 0x0, 0x7a5b42d5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r3, 0x1)

699.480081ms ago: executing program 7 (id=4474):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xd0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
process_madvise(r7, 0x0, 0x0, 0xa, 0x0)

634.494714ms ago: executing program 7 (id=4478):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xd365f000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r0 = epoll_create1(0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mq_unlink(0x0)
epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f00000001c0)={[0x8001]}, 0x8)
r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x58ba}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94)
mbind(&(0x7f000052c000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x8, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xd365f000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async)
epoll_create1(0x80000) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
mq_unlink(0x0) (async)
epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f00000001c0)={[0x8001]}, 0x8) (async)
io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) (async)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x58ba}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94) (async)
mbind(&(0x7f000052c000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x8, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) (async)

467.65503ms ago: executing program 7 (id=4483):
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x90, 0x7, 0x7, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x8, 0x495e, 0x40}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x2000000000000120, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000380)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000003c0)="10", 0x1, 0x20000080, &(0x7f0000000140)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @local}, 0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
r6 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0xcd03}, 0x1c)
r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r7, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="4e7f98ffbbb4fed6666d830984951560b46535235cdb23c7535aba01570d82bf0ed07c26f975fc19b63db9b73df739e2833959cf76ac985f479ec6323180f5f1e5b941488ae24c181165ffc43dc49e892d9540f877d74b4ff0f29e0f9a04b5c02a78fde5e5070142ddeb81e194a85563f8d61c2d9f92e976bb5c35325adf11efa1aa566998de1a09b5a10b6d7475efb6897dc6a19499f6712cee496cc79c3d79c11e983aee01f0aa8b05a6dac92f1a4f67c5725fcf68b92d47908ccb13d50ab13c4e2fe2ac6e2255fc559586afb7bfe675b1736beba50270f71564", 0xdb}, {&(0x7f0000000800)="b83a4b722b0a4f278556143640d8ef9fd1ff1d0d48aaaaf1c791035a09b2722ff6bd01375dd674a98fb31aa3ba60d9ff8423d2103c5b6463cd34a161565b43353e519093b851f1fcba4f6fb720b429d26fb9bb15a6000000008d687f", 0x5c}, {&(0x7f00000000c0)="f1c85ed85c4f208033098d48d8fa13e54bb1a29ff3f600ef7ace523777426150", 0x20}, {&(0x7f0000000fc0)="13967a3f204fc5129cf02063d37c3fd02e7761d9003a3f77540ed5edc9815afbdfb9050bf69a4f2f98dece26136ddc40fd7e2196c861820bd435ec07855ad36bddaf8edc56fcbb46a61d48d786119e906f2fe6edc78a07dacd480a49d04fa4046ee89d3c9dc5f1d36692ccfea7411a04227cc827ad160c82b29b9f15c59e036d6db610cab3d707478f2284c6216f737d76bcbfb79f176e600767f4842ff8724a8e8b69458c326925deb17c207dcfb505f24ac473074b572bae3edea91e79d72d7a8287b21265dfc8fbdb", 0xca}, {&(0x7f0000000e00)="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", 0x1a4}, {&(0x7f00000005c0)="8bb4548cea3357a464a9483436d98f4b635ee8", 0x13}], 0x6)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000600))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000740)={0x0, 0xa02000, 0x1000, 0x400}, 0x20)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', <r10=>0x0, 0x7, 0x8, 0x8, 0x9, {{0xb, 0x4, 0x0, 0x2, 0x2c, 0x66, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0xc, [{@multicast2, 0xffe}]}, @ssrr={0x89, 0x7, 0xbc, [@private=0xa010102]}]}}}}})
bind$xdp(r6, &(0x7f0000000380)={0x2c, 0x9, r10, 0x1, r7}, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000640)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}], 0x2)
sendmsg$tipc(r1, 0x0, 0x20048800)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="000000002d303030303030435730303030303030303030303867ead744d81bf9af1695f4e589e5f7c653d1dac80e246cd1a6608cf0c9137133d7453b3d97f98f145213336652642982b1d9a4e7a01faac1"])

467.410791ms ago: executing program 2 (id=4484):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], <r6=>0x0, 0xc0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x639}, [@ldst={0x2, 0x2, 0x0, 0x1, 0x8, 0x30}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x6a, &(0x7f0000000300)=""/106, 0x100, 0x24, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x5}, 0x10, r6, 0x0, 0x9, 0x0, &(0x7f00000006c0)=[{0x2, 0x1, 0x9, 0x7}, {0x0, 0x4, 0x0, 0x8}, {0x1, 0x1, 0x5, 0x5}, {0x3, 0x3, 0xf, 0xf}, {0x4, 0x4, 0x2, 0xa}, {0x1, 0x2, 0x10, 0x4}, {0x4, 0x1, 0x3, 0xb}, {0x0, 0x5, 0xa, 0x9}, {0x0, 0x5, 0x6, 0x7}], 0x10, 0x3}, 0x94)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, 0x0, &(0x7f0000000080))

358.999145ms ago: executing program 2 (id=4487):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

358.529765ms ago: executing program 2 (id=4488):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f00000006c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4f0, &(0x7f0000000c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
memfd_create(&(0x7f0000000680)='!-@-:\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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")
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="22e9ba3e1690ea26b05dc3746b176a036fe84b6b512aaad5c61d730436464b013e720bdf6f77c2fc83782465dab4fdd7306b46a5f9dadfb8766979259ccb48083f6e6a564967f33f7c13823afba5786d8cae6209edb5b6a2cbd771aa7ae9b54e3da21204fc5dcf13903d0954cff0196ffe1be6c795b46de28c2eb54c1489c1bafe624dfe95c95917ea3002849d46b0b2ca293d60a343a998521f2c4808ace977311ae98fac3ef524e5e16aeae23887c5aef06a31e17e0cf64420ce5a5bf32bde3cac2bd0a007d479ba4e4286481addd5821f1a39038eb0af2b0e", 0xda}, {&(0x7f00000003c0)="33bb6bf9823a8ea4610beecd144e889204b724b0fdb9af1131ad2ebd169acba369549022d9322cb4111b2601ac7564eea6cc3927f3e4efed456a9178f763c9a65b233c0162f36642cf93b0c189514c0d13a67c722cba19d0e1dd3b625f73747a4c117d66dfbd72a83792db27fc355524f5918a10799ceec041fb830336e6abaad8da2671be3b9a5e9d813daee1ea", 0x8e}], 0x2}}], 0x1, 0x20000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)

325.287736ms ago: executing program 2 (id=4489):
r0 = socket(0x10, 0x4, 0x2)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x14}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000400000008000000010000008000000087a138295fd88d9bd5eab65b8315573d36d745751eb1dbbffb71b7545ba2b0612b11f53f818d369b2b752d0f7788b3510a4f24baca8ae08de3a31612d9caf957631b731e65f598100d29a126846bd4cbeea458345bc54dd778ccc3ca430d8d32754cb839ddb6e8b6e36e81c4867da6650b40009d9ffe590f449812fbd73ce101ab3a012ad7c8cef0f0ae1d9659fd062b8d43b5bb347fc79a0114bdd74a25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r2, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'})
socket(0x1e, 0x5, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = syz_io_uring_setup(0x4175, &(0x7f0000000500)={0x0, 0x5f2f, 0x10000, 0x2, 0x313}, &(0x7f0000000280), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x2, {0xa, 0xfffffffffffffff8}, 0x1}, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={r6, @in={{0x2, 0x4e22, @empty}}}, 0x90)
io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14})

292.007688ms ago: executing program 6 (id=4491):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)=0x23)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_emit_ethernet(0x0, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)

226.838241ms ago: executing program 6 (id=4492):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

226.66979ms ago: executing program 6 (id=4493):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}, {&(0x7f0000000340)="6a814b35320a00aa58dcc6117a310d8cb31b8da54fc4bf172b7eb002ab702b1f1b1339475153ff5e4690fbb48f7370d4ad265c429dbb0078bc702891abc0cfb1c94f2af2da49a51786c9", 0x4a}, {&(0x7f0000000280)="58848e89b6f24538bc2c6e8a8ec71955d34dbff7ef38cd59989e0974f665eb2dc7f0245f76c12d5569f5", 0x2a}], 0x3)

226.13792ms ago: executing program 6 (id=4494):
creat(&(0x7f0000000040)='./file0\x00', 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@response={0x2, 0x2, 0x1, "50b1b5177b5c5289895daa3b9e7411d1d20a9f902db77f2abe732c7a47066295", "b87cd91930758466bba7ae4bb54c8926", {"8d4447cf4055590763db00b8d7cf5742", "6315cbbf30501fbfdb3d21af62c4f7e1"}}}}}}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x40010, 0x0)

151.928874ms ago: executing program 2 (id=4495):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000700000003000000020000060400000005002d6171a078ab04810e037af800000400000007000000ff010000000000002e2e00"], &(0x7f0000000340)=""/2, 0x3b, 0x2, 0x1, 0x47}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0}, 0x94)
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000640)={[{@abort}, {@i_version}, {@nobarrier}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt}]}, 0x1, 0x620, &(0x7f0000001680)="$eJzs3c9rXNUeAPDvnUnSpM17aR+Px2t4DwMuWpCmSS1W3djWhV0ULNiFiIuGJqmh0x80KdhaaAsuFBRE3Bbpxn/AvXTvTgR151qoIhUFLRm5d+6kk+ROk6admaT384GZOffcO3POd05P77n35swNoLTG0qdKxO6IxVNJxEjLuuForBzLt7v367XT6SOJev2NX5JI8rzm9ov56470KYkYjIhvjkb8q7q63PkrV89O1eoN1yP2L5y7uH/+ytV9c+emzsycmTk/eeDFg4cmXpo8OPlE4tyRvx47/vr/Pn7/nRdmv63tS+JwnOx/bzpWxLEB9aQgcyzGYjEPsTW/LyIOpYmC72WrWVcI2zpfDzammv977I+I/8RIVLOlhpGY+6inlQM6ql6NqAMllej/UFLNcUDz2H59x8EnOzwq6Z67RxoHQKvj72ucG4nB7Nho+72k5ciocW5j5xMoPy3j/rXRW+kjlp2H+GOpdfqeQDnt3LgZEf8tij/J6rYzizSNvxKVlveldZqIiIE8/eoGim4mWs+dPOZ5mEevxCPE39oO6XdxOH9N849usPyxFcvdjh+AcrpzJN+RZ3vjB/u/dOzRHP9EwfhnuGDftRG93v+1H/819/eD2TnyyopxWDpmOVH8kf0rM3788Nin7cpvHf/dv5Zk9WiOBbvh7s2I0RXxf5AN9JKl9k8K2j/d5NTh9ZXx2nc/H2u3bnn8o7e6HX/9dsSewuOfB6PSNPWQ65P7Z+dqMxON58Iyvvr67S/ald/r+NP2394m/pb2r6x8X/qdXFxnGV+euH1uoM264TXjr/w0kDSON5uf8e7UwsKlyYiB5Hi+SUv+gYfXpblN8zPS+Pc+W9z/l/37v7n8c4ZaD2DWcPHNs/fardtI+7dcTF6sr7MO7aTxT6/d/qv6f5r3yTrL+P2ty/9vt64g/og8/qHHCQwAAAAAAABKqJJdg00q40vpSmV8vDFf9t+xvVK7ML/w3OyFy+enI/Zmfw/ZX2le6R5pLCfp8mT+97DN5QMrlp+PiF0R8Vl1KFseP32hNt3r4AEAAAAAAAAAAAAAAAAAAGCT2JHP/2/ep/q3amP+P1ASnbzBHLC56f9QXln/X3WLJ6AM7P+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAp9KuZ+78kETEjZeHskdqIF9X7WnNgE7rL8irX+9BRYCus4+H8lq69G/6P5RO0fh/lT/zHwfsfHWAHkiKMrPBQf3hnf9O4TsBAAAAAAAAAAAAgA7Ys7v9/P91zQ0AtizT/qC8HmP+v58OgC3OT/9DeTnGB9aaxT/YboX5/wAAAAAAAAAAAADQNcPZI6mM53OBh6NSGR+P+EdE7Iz+ZHauNjMREf+MiO+r/dvS5cleVxoAAAAAAAAAAAAAAAAAAACeMvNXrp6dqtVmLrUm/lqV83QnmndB7UJZr8QjviuS7n8tQxHR80bpWKKvJSeJuJG2/Kao2KX52BzVyBI9/o8JAAAAAAAAAAAAAAAAAABKqGXucbHRz7tcIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovgf3/+9cotcxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb098BAAD///yqQiE=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup(r4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306010100f64e000000000000000100000a050042bd426bf68d7d837901010700"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0)

151.638853ms ago: executing program 6 (id=4496):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

138.066434ms ago: executing program 3 (id=4497):
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000"], 0x50)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
mq_open(0x0, 0x40, 0x6, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8f0, &(0x7f0000002400)=<r5=>0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

114.465125ms ago: executing program 2 (id=4498):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000dc0)={@private, @dev, <r5=>0x0}, &(0x7f0000001040)=0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
lseek(r6, 0x1, 0x0)
getdents(r6, 0x0, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000002000100000000008000000085200000010000001838000004000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000d80)='syzkaller\x00', 0x8, 0x4a, &(0x7f0000000fc0)=""/74, 0x41000, 0x2a, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001080)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0x2, 0x5, 0x7ff}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001100)=[{0x1, 0x3, 0xd, 0xa}, {0x0, 0x1, 0x10, 0x5}, {0x1, 0x5, 0x3, 0x1c}, {0x0, 0x1, 0x8, 0x5}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000019c0))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x8810)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00'})
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000001ec0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_continue}, {@nomblk_io_submit}]}, 0xee, 0x482, &(0x7f0000001a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x0, 0x61)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff040000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r8}, 0x10)
r9 = io_uring_setup(0x836, &(0x7f0000000080)={0x0, 0x8ce7, 0x1, 0xfffffffc})
open(0x0, 0x64842, 0x86)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x11, &(0x7f00000002c0), 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x18)
r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r10, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0)

98.032376ms ago: executing program 0 (id=4499):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f00000006c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4f0, &(0x7f0000000c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
memfd_create(&(0x7f0000000680)='!-@-:\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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")
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="22e9ba3e1690ea26b05dc3746b176a036fe84b6b512aaad5c61d730436464b013e720bdf6f77c2fc83782465dab4fdd7306b46a5f9dadfb8766979259ccb48083f6e6a564967f33f7c13823afba5786d8cae6209edb5b6a2cbd771aa7ae9b54e3da21204fc5dcf13903d0954cff0196ffe1be6c795b46de28c2eb54c1489c1bafe624dfe95c95917ea3002849d46b0b2ca293d60a343a998521f2c4808ace977311ae98fac3ef524e5e16aeae23887c5aef06a31e17e0cf64420ce5a5bf32bde3cac2bd0a007d479ba4e4286481addd5821f1a39038eb0af2b0e", 0xda}, {&(0x7f00000003c0)="33bb6bf9823a8ea4610beecd144e889204b724b0fdb9af1131ad2ebd169acba369549022d9322cb4111b2601ac7564eea6cc3927f3e4efed456a9178f763c9a65b233c0162f36642cf93b0c189514c0d13a67c722cba19d0e1dd3b625f73747a4c117d66dfbd72a83792db27fc355524f5918a10799ceec041fb830336e6abaad8da2671be3b9a5e9d813daee1ea", 0x8e}], 0x2}}], 0x1, 0x20000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0)

66.496737ms ago: executing program 6 (id=4500):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
clock_gettime(0x1, &(0x7f0000000000))
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

36.799389ms ago: executing program 3 (id=4501):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16)

0s ago: executing program 3 (id=4502):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)

kernel console output (not intermixed with test programs):

1024
[  267.863940][T13991] EXT4-fs: Ignoring removed orlov option
[  267.889676][T13991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.929150][ T1655] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.932667][T13999] loop0: detected capacity change from 0 to 512
[  267.945024][T13999] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  267.945349][ T2558] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.958352][T13999] EXT4-fs (loop0): invalid journal inode
[  267.972318][T13999] EXT4-fs (loop0): can't get journal size
[  267.978207][ T2558] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.987966][ T2558] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.996887][T13999] EXT4-fs (loop0): 1 truncate cleaned up
[  268.003255][T13999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.018949][T14002] loop5: detected capacity change from 0 to 512
[  268.025714][T14002] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  268.034950][T14002] EXT4-fs (loop5): invalid journal inode
[  268.040830][T14002] EXT4-fs (loop5): can't get journal size
[  268.052039][T14002] EXT4-fs (loop5): 1 truncate cleaned up
[  268.058700][T14005] loop4: detected capacity change from 0 to 512
[  268.070590][T14005] EXT4-fs: Ignoring removed i_version option
[  268.076597][T14005] EXT4-fs: Ignoring removed bh option
[  268.085243][T14002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  268.103169][T14005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.132123][T11864] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.657056][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.840655][T14020] __nla_validate_parse: 6 callbacks suppressed
[  268.840669][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3783'.
[  268.856647][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3783'.
[  268.987536][T14032] loop5: detected capacity change from 0 to 512
[  268.994496][T14032] EXT4-fs: Ignoring removed i_version option
[  269.000570][T14032] EXT4-fs: Ignoring removed bh option
[  269.307043][T14067] SELinux: failed to load policy
[  269.311555][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3801'.
[  269.536057][T14076] loop5: detected capacity change from 0 to 1024
[  269.561398][T14076] EXT4-fs (loop5): re-mounted 00000000-0000-0006-0000-000000000000 ro.
[  269.579027][   T29] kauditd_printk_skb: 380 callbacks suppressed
[  269.579039][   T29] audit: type=1400 audit(269.565:10569): avc:  denied  { module_request } for  pid=14082 comm="syz.4.3811" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  269.650573][T14091] loop5: detected capacity change from 0 to 512
[  269.661878][T14091] EXT4-fs: Ignoring removed i_version option
[  269.667952][T14091] EXT4-fs: Ignoring removed bh option
[  269.688661][   T29] audit: type=1400 audit(269.665:10570): avc:  denied  { execmem } for  pid=14094 comm="syz.4.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  269.784169][   T29] audit: type=1400 audit(269.765:10571): avc:  denied  { tracepoint } for  pid=14103 comm="syz.3.3819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  269.788197][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3818'.
[  269.823432][   T29] audit: type=1400 audit(269.765:10572): avc:  denied  { create } for  pid=14102 comm="syz.4.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  269.842417][   T29] audit: type=1400 audit(269.765:10573): avc:  denied  { write } for  pid=14102 comm="syz.4.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  269.884753][   T29] audit: type=1400 audit(269.855:10574): avc:  denied  { setopt } for  pid=14103 comm="syz.3.3819" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  269.915954][   T29] audit: type=1400 audit(269.895:10575): avc:  denied  { setopt } for  pid=14108 comm="syz.5.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  269.951631][T14112] loop5: detected capacity change from 0 to 512
[  269.958848][T14112] EXT4-fs: Ignoring removed i_version option
[  269.964869][T14112] EXT4-fs: Ignoring removed bh option
[  269.987239][   T29] audit: type=1400 audit(269.965:10576): avc:  denied  { create } for  pid=14113 comm="syz.4.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  270.014771][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'.
[  270.029297][   T29] audit: type=1326 audit(270.015:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  270.068848][   T29] audit: type=1326 audit(270.015:10578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14113 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  270.076984][T14114] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  270.120584][T14119] loop0: detected capacity change from 0 to 2048
[  270.279692][T14134] 9pnet_virtio: no channels available for device 127.0.0.1
[  270.317511][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3824'.
[  270.326845][T14135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3824'.
[  270.371412][T14143] loop4: detected capacity change from 0 to 512
[  270.384152][T14143] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.3832: iget: bad extra_isize 90 (inode size 256)
[  270.403456][T14143] EXT4-fs (loop4): Remounting filesystem read-only
[  270.418180][T14143] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[  270.427535][T14143] EXT4-fs (loop4): 1 orphan inode deleted
[  270.434507][T14152] loop2: detected capacity change from 0 to 512
[  270.441348][T14152] EXT4-fs: Ignoring removed i_version option
[  270.447371][T14152] EXT4-fs: Ignoring removed bh option
[  270.527082][T14164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3839'.
[  270.545019][T14164] loop2: detected capacity change from 0 to 256
[  270.613743][T14170] 9pnet_fd: Insufficient options for proto=fd
[  270.657269][T14174] 9pnet_fd: p9_fd_create_tcp (14174): problem connecting socket to 127.0.0.1
[  270.732048][T14191] loop4: detected capacity change from 0 to 512
[  270.738549][T14191] EXT4-fs: Ignoring removed i_version option
[  270.744579][T14191] EXT4-fs: Ignoring removed bh option
[  270.794546][T14198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3852'.
[  270.815700][T14198] loop2: detected capacity change from 0 to 256
[  270.819505][T14200] loop0: detected capacity change from 0 to 512
[  270.845037][T14200] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.3854: iget: bad extra_isize 90 (inode size 256)
[  270.883310][T14200] EXT4-fs (loop0): Remounting filesystem read-only
[  270.903274][T14202] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3853'.
[  270.912899][T14200] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  270.922156][T14200] EXT4-fs (loop0): 1 orphan inode deleted
[  270.986921][T14202] loop4: detected capacity change from 0 to 512
[  270.997745][T14202] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.3853: iget: bad extra_isize 90 (inode size 256)
[  271.035620][T14216] 9pnet_fd: p9_fd_create_tcp (14216): problem connecting socket to 127.0.0.1
[  271.059011][T14202] EXT4-fs (loop4): Remounting filesystem read-only
[  271.070979][T14202] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30)
[  271.098628][T14202] EXT4-fs (loop4): 1 orphan inode deleted
[  271.168041][T14227] loop4: detected capacity change from 0 to 512
[  271.194392][T14227] EXT4-fs: Ignoring removed i_version option
[  271.200506][T14227] EXT4-fs: Ignoring removed bh option
[  271.269462][T14243] FAULT_INJECTION: forcing a failure.
[  271.269462][T14243] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  271.282777][T14243] CPU: 0 UID: 0 PID: 14243 Comm: syz.0.3871 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  271.282807][T14243] Tainted: [W]=WARN
[  271.282814][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  271.282865][T14243] Call Trace:
[  271.282870][T14243]  <TASK>
[  271.282876][T14243]  __dump_stack+0x1d/0x30
[  271.282894][T14243]  dump_stack_lvl+0xe8/0x140
[  271.282916][T14243]  dump_stack+0x15/0x1b
[  271.282931][T14243]  should_fail_ex+0x265/0x280
[  271.283008][T14243]  should_fail_alloc_page+0xf2/0x100
[  271.283028][T14243]  alloc_pages_bulk_noprof+0xef/0x530
[  271.283050][T14243]  copy_splice_read+0xf3/0x660
[  271.283118][T14243]  ? __pfx_copy_splice_read+0x10/0x10
[  271.283146][T14243]  splice_direct_to_actor+0x26f/0x680
[  271.283172][T14243]  ? __pfx_direct_splice_actor+0x10/0x10
[  271.283280][T14243]  do_splice_direct+0xda/0x150
[  271.283308][T14243]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  271.283330][T14243]  do_sendfile+0x380/0x650
[  271.283417][T14243]  __x64_sys_sendfile64+0x105/0x150
[  271.283436][T14243]  x64_sys_call+0x2db1/0x3000
[  271.283557][T14243]  do_syscall_64+0xd8/0x2a0
[  271.283580][T14243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.283664][T14243] RIP: 0033:0x7fbaebe0f749
[  271.283676][T14243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.283690][T14243] RSP: 002b:00007fbaea877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  271.283705][T14243] RAX: ffffffffffffffda RBX: 00007fbaec065fa0 RCX: 00007fbaebe0f749
[  271.283715][T14243] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000007
[  271.283728][T14243] RBP: 00007fbaea877090 R08: 0000000000000000 R09: 0000000000000000
[  271.283741][T14243] R10: 000000000000bc44 R11: 0000000000000246 R12: 0000000000000001
[  271.283811][T14243] R13: 00007fbaec066038 R14: 00007fbaec065fa0 R15: 00007ffde8ea7b08
[  271.283828][T14243]  </TASK>
[  272.046734][T14265] lo speed is unknown, defaulting to 1000
[  272.085005][T14265] lo speed is unknown, defaulting to 1000
[  272.117038][T14265] lo speed is unknown, defaulting to 1000
[  272.157478][T14266] loop0: detected capacity change from 0 to 512
[  272.191261][T14265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  272.235472][T14265] lo speed is unknown, defaulting to 1000
[  272.249351][T14277] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  272.266317][T14265] lo speed is unknown, defaulting to 1000
[  272.275358][T14266] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.3877: iget: bad extra_isize 90 (inode size 256)
[  272.295199][T14265] lo speed is unknown, defaulting to 1000
[  272.313590][T14265] lo speed is unknown, defaulting to 1000
[  272.324610][T14284] loop2: detected capacity change from 0 to 512
[  272.331142][T14266] EXT4-fs (loop0): Remounting filesystem read-only
[  272.340089][T14265] lo speed is unknown, defaulting to 1000
[  272.350174][T14266] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  272.364531][T14265] lo speed is unknown, defaulting to 1000
[  272.372322][T14284] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3884: EA inode hash validation failed
[  272.405033][T14265] lo speed is unknown, defaulting to 1000
[  272.412667][T14266] EXT4-fs (loop0): 1 orphan inode deleted
[  272.455427][T14288] FAULT_INJECTION: forcing a failure.
[  272.455427][T14288] name failslab, interval 1, probability 0, space 0, times 0
[  272.468111][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.5.3885 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  272.468137][T14288] Tainted: [W]=WARN
[  272.468143][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  272.468209][T14288] Call Trace:
[  272.468214][T14288]  <TASK>
[  272.468221][T14288]  __dump_stack+0x1d/0x30
[  272.468239][T14288]  dump_stack_lvl+0xe8/0x140
[  272.468303][T14288]  dump_stack+0x15/0x1b
[  272.468321][T14288]  should_fail_ex+0x265/0x280
[  272.468402][T14288]  should_failslab+0x8c/0xb0
[  272.468423][T14288]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  272.468446][T14288]  ? __alloc_skb+0x101/0x320
[  272.468468][T14288]  __alloc_skb+0x101/0x320
[  272.468529][T14288]  ? audit_log_start+0x342/0x720
[  272.468588][T14288]  audit_log_start+0x3a0/0x720
[  272.468607][T14288]  ? __se_sys_process_madvise+0x654/0x6a0
[  272.468628][T14288]  audit_seccomp+0x48/0x100
[  272.468669][T14288]  ? __seccomp_filter+0x82d/0x1250
[  272.468686][T14288]  __seccomp_filter+0x83e/0x1250
[  272.468712][T14288]  __secure_computing+0x82/0x150
[  272.468730][T14288]  syscall_trace_enter+0xcf/0x1e0
[  272.468762][T14288]  do_syscall_64+0xb2/0x2a0
[  272.468830][T14288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.468848][T14288] RIP: 0033:0x7fc97901e15c
[  272.468863][T14288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  272.468880][T14288] RSP: 002b:00007fc977a7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  272.468899][T14288] RAX: ffffffffffffffda RBX: 00007fc979275fa0 RCX: 00007fc97901e15c
[  272.468911][T14288] RDX: 000000000000000f RSI: 00007fc977a7f0a0 RDI: 0000000000000007
[  272.468979][T14288] RBP: 00007fc977a7f090 R08: 0000000000000000 R09: 0000000000000000
[  272.468988][T14288] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  272.468998][T14288] R13: 00007fc979276038 R14: 00007fc979275fa0 R15: 00007ffd4f8cd1f8
[  272.469013][T14288]  </TASK>
[  272.528334][T14284] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.3884: corrupted inode contents
[  272.700377][T14284] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #15: comm syz.2.3884: mark_inode_dirty error
[  272.722966][T14284] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.3884: corrupted inode contents
[  272.757086][T14303] loop5: detected capacity change from 0 to 512
[  272.766375][T14284] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3884: mark_inode_dirty error
[  272.780918][T14303] EXT4-fs: Ignoring removed i_version option
[  272.787047][T14303] EXT4-fs: Ignoring removed bh option
[  272.793668][T14284] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3884: mark inode dirty (error -117)
[  272.807068][T14284] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  272.816328][T14284] EXT4-fs (loop2): 1 orphan inode deleted
[  272.838437][T14313] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  272.864136][T14284] syzkaller0: entered promiscuous mode
[  272.869765][T14284] syzkaller0: entered allmulticast mode
[  272.881881][T14313] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  272.994938][T14323] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  273.007208][T14323] netlink: 'syz.0.3897': attribute type 6 has an invalid length.
[  273.086993][T14326] loop0: detected capacity change from 0 to 512
[  273.187573][T14338] FAULT_INJECTION: forcing a failure.
[  273.187573][T14338] name failslab, interval 1, probability 0, space 0, times 0
[  273.200342][T14338] CPU: 0 UID: 0 PID: 14338 Comm: syz.2.3901 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  273.200431][T14338] Tainted: [W]=WARN
[  273.200438][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  273.200450][T14338] Call Trace:
[  273.200456][T14338]  <TASK>
[  273.200464][T14338]  __dump_stack+0x1d/0x30
[  273.200485][T14338]  dump_stack_lvl+0xe8/0x140
[  273.200578][T14338]  dump_stack+0x15/0x1b
[  273.200594][T14338]  should_fail_ex+0x265/0x280
[  273.200622][T14338]  should_failslab+0x8c/0xb0
[  273.200641][T14338]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  273.200669][T14338]  ? __alloc_skb+0x101/0x320
[  273.200695][T14338]  __alloc_skb+0x101/0x320
[  273.200763][T14338]  netlink_alloc_large_skb+0xbf/0xf0
[  273.200792][T14338]  netlink_sendmsg+0x3cf/0x6b0
[  273.200821][T14338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.200865][T14338]  __sock_sendmsg+0x145/0x180
[  273.200918][T14338]  ____sys_sendmsg+0x31e/0x4a0
[  273.200951][T14338]  ___sys_sendmsg+0x17b/0x1d0
[  273.200989][T14338]  __x64_sys_sendmsg+0xd4/0x160
[  273.201066][T14338]  x64_sys_call+0x17ba/0x3000
[  273.201084][T14338]  do_syscall_64+0xd8/0x2a0
[  273.201108][T14338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.201187][T14338] RIP: 0033:0x7f846518f749
[  273.201203][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.201220][T14338] RSP: 002b:00007f8463bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.201298][T14338] RAX: ffffffffffffffda RBX: 00007f84653e5fa0 RCX: 00007f846518f749
[  273.201309][T14338] RDX: 00000000040080c0 RSI: 0000200000000080 RDI: 0000000000000003
[  273.201321][T14338] RBP: 00007f8463bef090 R08: 0000000000000000 R09: 0000000000000000
[  273.201333][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.201345][T14338] R13: 00007f84653e6038 R14: 00007f84653e5fa0 R15: 00007ffe7754edf8
[  273.201490][T14338]  </TASK>
[  273.530521][T14352] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  273.565108][T14354] 9pnet_fd: p9_fd_create_tcp (14354): problem connecting socket to 127.0.0.1
[  273.701587][T14367] loop0: detected capacity change from 0 to 8192
[  273.816947][T14389] loop3: detected capacity change from 0 to 512
[  273.832785][T14397] netlink: 'syz.4.3923': attribute type 1 has an invalid length.
[  273.853444][T14397] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.865206][T14392] FAULT_INJECTION: forcing a failure.
[  273.865206][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.878289][T14392] CPU: 1 UID: 0 PID: 14392 Comm: syz.5.3924 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  273.878401][T14392] Tainted: [W]=WARN
[  273.878408][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  273.878418][T14392] Call Trace:
[  273.878424][T14392]  <TASK>
[  273.878431][T14392]  __dump_stack+0x1d/0x30
[  273.878487][T14392]  dump_stack_lvl+0xe8/0x140
[  273.878508][T14392]  dump_stack+0x15/0x1b
[  273.878525][T14392]  should_fail_ex+0x265/0x280
[  273.878554][T14392]  should_fail+0xb/0x20
[  273.878584][T14392]  should_fail_usercopy+0x1a/0x20
[  273.878612][T14392]  _copy_from_iter+0xd2/0xe80
[  273.878633][T14392]  ? alloc_pages_mpol+0x217/0x260
[  273.878678][T14392]  copy_page_from_iter+0x178/0x2a0
[  273.878699][T14392]  tun_get_user+0x679/0x2650
[  273.878729][T14392]  ? ref_tracker_alloc+0x1f2/0x2f0
[  273.878818][T14392]  tun_chr_write_iter+0x15e/0x210
[  273.878837][T14392]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  273.878976][T14392]  vfs_write+0x52a/0x960
[  273.878998][T14392]  ksys_write+0xda/0x1a0
[  273.879015][T14392]  __x64_sys_write+0x40/0x50
[  273.879034][T14392]  x64_sys_call+0x2847/0x3000
[  273.879056][T14392]  do_syscall_64+0xd8/0x2a0
[  273.879141][T14392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.879161][T14392] RIP: 0033:0x7fc97901e1ff
[  273.879231][T14392] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  273.879249][T14392] RSP: 002b:00007fc977a7f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  273.879267][T14392] RAX: ffffffffffffffda RBX: 00007fc979275fa0 RCX: 00007fc97901e1ff
[  273.879277][T14392] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8
[  273.879323][T14392] RBP: 00007fc977a7f090 R08: 0000000000000000 R09: 0000000000000000
[  273.879334][T14392] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  273.879344][T14392] R13: 00007fc979276038 R14: 00007fc979275fa0 R15: 00007ffd4f8cd1f8
[  273.879361][T14392]  </TASK>
[  274.020091][T14397] __nla_validate_parse: 3 callbacks suppressed
[  274.020106][T14397] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3923'.
[  274.085463][T14403] 9pnet_fd: p9_fd_create_tcp (14403): problem connecting socket to 127.0.0.1
[  274.104545][T14389] FAULT_INJECTION: forcing a failure.
[  274.104545][T14389] name failslab, interval 1, probability 0, space 0, times 0
[  274.117176][T14389] CPU: 1 UID: 0 PID: 14389 Comm: syz.3.3921 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  274.117215][T14389] Tainted: [W]=WARN
[  274.117222][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  274.117234][T14389] Call Trace:
[  274.117240][T14389]  <TASK>
[  274.117248][T14389]  __dump_stack+0x1d/0x30
[  274.117270][T14389]  dump_stack_lvl+0xe8/0x140
[  274.117313][T14389]  dump_stack+0x15/0x1b
[  274.117331][T14389]  should_fail_ex+0x265/0x280
[  274.117360][T14389]  should_failslab+0x8c/0xb0
[  274.117449][T14389]  kmem_cache_alloc_noprof+0x50/0x480
[  274.117466][T14389]  ? __es_insert_extent+0x508/0xee0
[  274.117512][T14389]  __es_insert_extent+0x508/0xee0
[  274.117543][T14389]  ext4_es_insert_extent+0x435/0x1c10
[  274.117573][T14389]  ext4_map_blocks+0x8cd/0xd00
[  274.117636][T14389]  _ext4_get_block+0x10a/0x350
[  274.117664][T14389]  ext4_get_block_unwritten+0x2a/0xb0
[  274.117754][T14389]  ext4_block_write_begin+0x5e8/0xc00
[  274.117786][T14389]  ? __pfx_ext4_get_block_unwritten+0x10/0x10
[  274.117816][T14389]  ? folio_mapping+0xb9/0xe0
[  274.117914][T14389]  ext4_write_begin+0x633/0xe90
[  274.117942][T14389]  ext4_da_write_begin+0x1f0/0x6b0
[  274.117965][T14389]  ? inode_to_bdi+0x47/0xa0
[  274.117984][T14389]  ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0
[  274.118056][T14389]  generic_perform_write+0x184/0x490
[  274.118156][T14389]  ext4_buffered_write_iter+0x1ee/0x3c0
[  274.118240][T14389]  ? ext4_file_write_iter+0xfe/0xf60
[  274.118266][T14389]  ext4_file_write_iter+0x387/0xf60
[  274.118288][T14389]  ? kstrtouint+0x76/0xc0
[  274.118354][T14389]  ? kstrtouint_from_user+0x9f/0xf0
[  274.118434][T14389]  ? avc_policy_seqno+0x15/0x30
[  274.118604][T14389]  ? selinux_file_permission+0x1e4/0x320
[  274.118643][T14389]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  274.118672][T14389]  vfs_write+0x52a/0x960
[  274.118737][T14389]  ksys_write+0xda/0x1a0
[  274.118756][T14389]  __x64_sys_write+0x40/0x50
[  274.118774][T14389]  x64_sys_call+0x2847/0x3000
[  274.118796][T14389]  do_syscall_64+0xd8/0x2a0
[  274.118822][T14389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.118916][T14389] RIP: 0033:0x7f677fb8f749
[  274.118931][T14389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.118946][T14389] RSP: 002b:00007f677e5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.118963][T14389] RAX: ffffffffffffffda RBX: 00007f677fde5fa0 RCX: 00007f677fb8f749
[  274.119030][T14389] RDX: 000000000000fda3 RSI: 0000200000000240 RDI: 0000000000000004
[  274.119043][T14389] RBP: 00007f677e5f7090 R08: 0000000000000000 R09: 0000000000000000
[  274.119054][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  274.119064][T14389] R13: 00007f677fde6038 R14: 00007f677fde5fa0 R15: 00007ffc82912388
[  274.119083][T14389]  </TASK>
[  274.474160][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3927'.
[  274.487325][T14408] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3927'.
[  274.515334][T14416] 9pnet_fd: p9_fd_create_tcp (14416): problem connecting socket to 127.0.0.1
[  274.524634][T14418] FAULT_INJECTION: forcing a failure.
[  274.524634][T14418] name failslab, interval 1, probability 0, space 0, times 0
[  274.537335][T14418] CPU: 0 UID: 0 PID: 14418 Comm: syz.2.3930 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  274.537431][T14418] Tainted: [W]=WARN
[  274.537435][T14418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  274.537515][T14418] Call Trace:
[  274.537520][T14418]  <TASK>
[  274.537525][T14418]  __dump_stack+0x1d/0x30
[  274.537538][T14418]  dump_stack_lvl+0xe8/0x140
[  274.537549][T14418]  dump_stack+0x15/0x1b
[  274.537558][T14418]  should_fail_ex+0x265/0x280
[  274.537647][T14418]  ? alloc_fs_context+0x46/0x590
[  274.537657][T14418]  should_failslab+0x8c/0xb0
[  274.537669][T14418]  __kmalloc_cache_noprof+0x4c/0x4a0
[  274.537682][T14418]  alloc_fs_context+0x46/0x590
[  274.537699][T14418]  fs_context_for_mount+0x22/0x30
[  274.537710][T14418]  mq_init_ns+0xab/0x370
[  274.537725][T14418]  copy_ipcs+0x269/0x440
[  274.537740][T14418]  create_new_namespaces+0x12a/0x400
[  274.537790][T14418]  unshare_nsproxy_namespaces+0xe8/0x120
[  274.537802][T14418]  ksys_unshare+0x3d0/0x6d0
[  274.537812][T14418]  ? ksys_write+0x192/0x1a0
[  274.537953][T14418]  __x64_sys_unshare+0x1f/0x30
[  274.537963][T14418]  x64_sys_call+0x2ae6/0x3000
[  274.537977][T14418]  do_syscall_64+0xd8/0x2a0
[  274.537993][T14418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.538066][T14418] RIP: 0033:0x7f846518f749
[  274.538119][T14418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.538129][T14418] RSP: 002b:00007f8463bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  274.538214][T14418] RAX: ffffffffffffffda RBX: 00007f84653e5fa0 RCX: 00007f846518f749
[  274.538221][T14418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[  274.538228][T14418] RBP: 00007f8463bef090 R08: 0000000000000000 R09: 0000000000000000
[  274.538235][T14418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.538241][T14418] R13: 00007f84653e6038 R14: 00007f84653e5fa0 R15: 00007ffe7754edf8
[  274.538275][T14418]  </TASK>
[  274.748930][   T29] kauditd_printk_skb: 704 callbacks suppressed
[  274.748943][   T29] audit: type=1400 audit(274.736:11279): avc:  denied  { unmount } for  pid=11146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  274.837895][T14427] loop2: detected capacity change from 0 to 512
[  274.864486][   T29] audit: type=1400 audit(274.846:11280): avc:  denied  { sqpoll } for  pid=14428 comm="syz.0.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  274.886643][T14427] EXT4-fs: Ignoring removed i_version option
[  274.892774][T14427] EXT4-fs: Ignoring removed bh option
[  274.965470][   T29] audit: type=1400 audit(274.946:11281): avc:  denied  { write } for  pid=14428 comm="syz.0.3932" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  274.995065][T14441] 9pnet_fd: p9_fd_create_tcp (14441): problem connecting socket to 127.0.0.1
[  275.031941][   T29] audit: type=1400 audit(274.946:11282): avc:  denied  { read } for  pid=14428 comm="syz.0.3932" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  275.058248][T14445] FAULT_INJECTION: forcing a failure.
[  275.058248][T14445] name failslab, interval 1, probability 0, space 0, times 0
[  275.071015][T14445] CPU: 0 UID: 0 PID: 14445 Comm: syz.4.3940 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  275.071042][T14445] Tainted: [W]=WARN
[  275.071048][T14445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  275.071101][T14445] Call Trace:
[  275.071108][T14445]  <TASK>
[  275.071116][T14445]  __dump_stack+0x1d/0x30
[  275.071138][T14445]  dump_stack_lvl+0xe8/0x140
[  275.071157][T14445]  dump_stack+0x15/0x1b
[  275.071175][T14445]  should_fail_ex+0x265/0x280
[  275.071218][T14445]  should_failslab+0x8c/0xb0
[  275.071236][T14445]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  275.071255][T14445]  ? __alloc_skb+0x101/0x320
[  275.071319][T14445]  __alloc_skb+0x101/0x320
[  275.071338][T14445]  ? audit_log_start+0x342/0x720
[  275.071362][T14445]  audit_log_start+0x3a0/0x720
[  275.071384][T14445]  ? kstrtouint+0x76/0xc0
[  275.071485][T14445]  audit_seccomp+0x48/0x100
[  275.071503][T14445]  ? __seccomp_filter+0x82d/0x1250
[  275.071522][T14445]  __seccomp_filter+0x83e/0x1250
[  275.071548][T14445]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  275.071574][T14445]  ? vfs_write+0x7e8/0x960
[  275.071626][T14445]  ? __rcu_read_unlock+0x4f/0x70
[  275.071649][T14445]  ? __fget_files+0x184/0x1c0
[  275.071671][T14445]  __secure_computing+0x82/0x150
[  275.071747][T14445]  syscall_trace_enter+0xcf/0x1e0
[  275.071775][T14445]  do_syscall_64+0xb2/0x2a0
[  275.071798][T14445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.071815][T14445] RIP: 0033:0x7eff53cff749
[  275.071894][T14445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.071981][T14445] RSP: 002b:00007eff52767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  275.072011][T14445] RAX: ffffffffffffffda RBX: 00007eff53f55fa0 RCX: 00007eff53cff749
[  275.072024][T14445] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000010
[  275.072085][T14445] RBP: 00007eff52767090 R08: 0000000000000000 R09: 0000000000000000
[  275.072095][T14445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.072105][T14445] R13: 00007eff53f56038 R14: 00007eff53f55fa0 R15: 00007ffd42795738
[  275.072161][T14445]  </TASK>
[  275.072171][T14445] audit: audit_lost=10 audit_rate_limit=0 audit_backlog_limit=64
[  275.078642][   T29] audit: type=1326 audit(275.036:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  275.083575][T14445] audit: out of memory in audit_log_start
[  275.087351][   T29] audit: type=1326 audit(275.036:11284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  275.239622][T14448] loop3: detected capacity change from 0 to 512
[  275.242630][   T29] audit: type=1326 audit(275.036:11285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  275.242652][   T29] audit: type=1326 audit(275.036:11286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14444 comm="syz.4.3940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff53cff749 code=0x7ffc0000
[  275.398704][T14448] EXT4-fs: Ignoring removed i_version option
[  275.404704][T14448] EXT4-fs: Ignoring removed bh option
[  275.725280][T14474] loop2: detected capacity change from 0 to 512
[  275.751741][T14476] 9pnet_fd: p9_fd_create_tcp (14476): problem connecting socket to 127.0.0.1
[  275.769503][T14474] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  275.779903][T14474] EXT4-fs (loop2): invalid journal inode
[  275.785561][T14474] EXT4-fs (loop2): can't get journal size
[  275.799183][T14474] EXT4-fs (loop2): 1 truncate cleaned up
[  275.860935][T14484] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  275.888833][T14484] netlink: 'syz.4.3953': attribute type 6 has an invalid length.
[  275.953795][T14491] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3954'.
[  276.024135][T14494] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  276.656307][T14514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.684743][T14514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.761016][T14525] loop0: detected capacity change from 0 to 512
[  276.767524][T14525] EXT4-fs: Ignoring removed i_version option
[  276.773674][T14525] EXT4-fs: Ignoring removed bh option
[  276.993510][T14531] lo speed is unknown, defaulting to 1000
[  277.577312][T14534] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  277.643959][T14534] netlink: 'syz.4.3968': attribute type 6 has an invalid length.
[  277.862878][T14545] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  277.873328][T14545] netlink: 'syz.2.3972': attribute type 6 has an invalid length.
[  277.900881][T14543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3967'.
[  277.967727][T14555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3976'.
[  277.990274][T14555] loop2: detected capacity change from 0 to 256
[  278.137894][T14562] loop3: detected capacity change from 0 to 8192
[  278.231880][T14547] loop4: detected capacity change from 0 to 8192
[  279.559811][T14586] loop4: detected capacity change from 0 to 4096
[  279.659336][T14593] loop3: detected capacity change from 0 to 2048
[  279.724630][ T3583]  loop3: p2 p3 p7
[  279.790675][T14597] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3991'.
[  279.817557][T14593]  loop3: p2 p3 p7
[  279.900238][   T29] kauditd_printk_skb: 425 callbacks suppressed
[  279.900251][   T29] audit: type=1326 audit(279.884:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  279.904910][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  279.908437][ T4190] udevd[4190]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  279.933189][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  279.951559][   T29] audit: type=1326 audit(279.884:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  279.982276][   T29] audit: type=1326 audit(279.924:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.005361][   T29] audit: type=1326 audit(279.924:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.028332][   T29] audit: type=1326 audit(279.924:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.051448][   T29] audit: type=1326 audit(279.924:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.074488][   T29] audit: type=1326 audit(279.924:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.097574][   T29] audit: type=1326 audit(279.924:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.128553][   T29] audit: type=1326 audit(280.014:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.151647][   T29] audit: type=1326 audit(280.014:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14602 comm="syz.3.3993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  280.291249][T14608] loop3: detected capacity change from 0 to 512
[  280.405863][T14612] lo speed is unknown, defaulting to 1000
[  280.811932][T14615] loop2: detected capacity change from 0 to 1756
[  280.823060][T14617] loop0: detected capacity change from 0 to 512
[  281.320346][T14629] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  281.333556][T14629] netlink: 'syz.3.4001': attribute type 6 has an invalid length.
[  281.509128][T14649] loop3: detected capacity change from 0 to 512
[  281.562437][T14649] EXT4-fs: Ignoring removed i_version option
[  281.568486][T14649] EXT4-fs: Ignoring removed bh option
[  281.600818][T14646] loop0: detected capacity change from 0 to 512
[  281.658796][T14646] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.4006: iget: bad extra_isize 90 (inode size 256)
[  281.683785][T14646] EXT4-fs (loop0): Remounting filesystem read-only
[  281.691503][T14649] EXT4-fs mount: 46 callbacks suppressed
[  281.691515][T14649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.710105][T14646] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  281.719089][T14646] EXT4-fs (loop0): 1 orphan inode deleted
[  281.729190][T14646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.742265][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4010'.
[  281.766495][T14659] netem: change failed
[  281.778053][T14660] lo speed is unknown, defaulting to 1000
[  281.822214][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.841137][T14646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.865086][T14659] loop4: detected capacity change from 0 to 256
[  281.886061][T14659] vfat: Unknown parameter 'utÿ'
[  282.172634][T14664] loop3: detected capacity change from 0 to 8192
[  282.229188][ T3583]  loop3: p1 p2 p3 p4
[  282.233247][ T3583] loop3: p1 size 196608 extends beyond EOD, truncated
[  282.240655][ T3583] loop3: p2 start 164919041 is beyond EOD, truncated
[  282.247401][ T3583] loop3: p3 size 66846464 extends beyond EOD, truncated
[  282.254938][ T3583] loop3: p4 size 37048832 extends beyond EOD, truncated
[  282.265608][T14664]  loop3: p1 p2 p3 p4
[  282.269711][T14664] loop3: p1 size 196608 extends beyond EOD, truncated
[  282.277207][T14664] loop3: p2 start 164919041 is beyond EOD, truncated
[  282.283962][T14664] loop3: p3 size 66846464 extends beyond EOD, truncated
[  282.308110][T14664] loop3: p4 size 37048832 extends beyond EOD, truncated
[  282.372609][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  282.383766][ T4190] udevd[4190]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  282.435937][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  282.458497][ T4190] udevd[4190]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  282.458893][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  282.469600][ T3583] udevd[3583]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  282.494662][T14678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4017'.
[  282.511837][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'.
[  282.550896][T14681] delete_channel: no stack
[  282.648771][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4019'.
[  282.671611][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4019'.
[  282.758441][T14706] loop4: detected capacity change from 0 to 1024
[  282.825997][T14706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.928803][T11864] EXT4-fs warning (device loop4): ext4_rmdir:3187: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (111)
[  282.950573][T11864] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  282.962608][T11864] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  282.983450][T14716] loop3: detected capacity change from 0 to 8192
[  283.263758][ T1986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.312750][ T1986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.332602][T14727] loop2: detected capacity change from 0 to 512
[  283.382285][ T1986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.404295][T14727] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4035: bg 0: block 5: invalid block bitmap
[  283.445060][T14727] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  283.462288][ T1986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.504026][T14727] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4035: invalid indirect mapped block 3 (level 2)
[  283.557671][T14727] EXT4-fs (loop2): 2 truncates cleaned up
[  283.564923][T14727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.604149][T14727] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.4035'.
[  283.808063][T14721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.936312][ T1986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.947754][ T1986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.959462][ T1986] bond0 (unregistering): Released all slaves
[  283.971504][ T1986] bond1 (unregistering): Released all slaves
[  284.016232][ T1986] hsr_slave_0: left promiscuous mode
[  284.026531][ T1986] hsr_slave_1: left promiscuous mode
[  284.047812][ T1986] veth1_macvtap: left promiscuous mode
[  284.057156][ T1986] veth0_macvtap: left promiscuous mode
[  284.066384][ T1986] veth1_vlan: left promiscuous mode
[  284.078629][ T1986] veth0_vlan: left promiscuous mode
[  284.131508][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.197100][ T1986] team0 (unregistering): Port device team_slave_1 removed
[  284.213125][ T1986] team0 (unregistering): Port device team_slave_0 removed
[  284.402193][T14752] lo speed is unknown, defaulting to 1000
[  284.524198][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4046'.
[  284.538526][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4046'.
[  284.550855][T14791] loop3: detected capacity change from 0 to 8192
[  284.574292][T14752] chnl_net:caif_netlink_parms(): no params data found
[  284.634609][T14752] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.641859][T14752] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.649162][T14752] bridge_slave_0: entered allmulticast mode
[  284.655652][T14752] bridge_slave_0: entered promiscuous mode
[  284.663946][T14752] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.671129][T14752] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.678347][T14752] bridge_slave_1: entered allmulticast mode
[  284.684827][T14752] bridge_slave_1: entered promiscuous mode
[  284.710785][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.740851][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.772006][T14752] team0: Port device team_slave_0 added
[  284.782691][T14752] team0: Port device team_slave_1 added
[  284.811844][T14752] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.818875][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.844811][T14752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.862798][T14752] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.869813][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.895695][T14752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.969508][T14752] hsr_slave_0: entered promiscuous mode
[  284.989066][T14752] hsr_slave_1: entered promiscuous mode
[  284.994984][T14752] debugfs: 'hsr0' already exists in 'hsr'
[  285.000744][T14752] Cannot create hsr debugfs directory
[  285.148412][   T29] kauditd_printk_skb: 520 callbacks suppressed
[  285.148425][   T29] audit: type=1400 audit(285.124:12240): avc:  denied  { write } for  pid=14752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  285.149196][T14752] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  285.183290][   T29] audit: type=1400 audit(285.134:12241): avc:  denied  { read } for  pid=14752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  285.185544][T14752] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  285.214436][T14752] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  285.244130][T14752] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  285.261195][   T29] audit: type=1400 audit(285.244:12242): avc:  denied  { read } for  pid=14825 comm="syz.0.4049" dev="nsfs" ino=4026533573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  285.370622][   T29] audit: type=1400 audit(285.244:12243): avc:  denied  { open } for  pid=14825 comm="syz.0.4049" path="net:[4026533573]" dev="nsfs" ino=4026533573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  285.393656][   T29] audit: type=1400 audit(285.244:12244): avc:  denied  { create } for  pid=14825 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  285.413334][   T29] audit: type=1400 audit(285.244:12245): avc:  denied  { create } for  pid=14824 comm="syz.2.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  285.432745][   T29] audit: type=1400 audit(285.244:12246): avc:  denied  { open } for  pid=14825 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  285.451887][   T29] audit: type=1400 audit(285.244:12247): avc:  denied  { kernel } for  pid=14825 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  285.470879][   T29] audit: type=1400 audit(285.244:12248): avc:  denied  { tracepoint } for  pid=14825 comm="syz.0.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  285.490235][   T29] audit: type=1400 audit(285.264:12249): avc:  denied  { setopt } for  pid=14824 comm="syz.2.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  285.526899][T14752] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.541299][T14752] 8021q: adding VLAN 0 to HW filter on device team0
[  285.546574][T14847] loop3: detected capacity change from 0 to 1024
[  285.556191][ T2558] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.563322][ T2558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.573396][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'.
[  285.598117][ T2558] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.605223][ T2558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.661319][T14847] loop3: detected capacity change from 0 to 512
[  285.693475][T14847] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  285.755838][T14847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  285.775416][T14847] System zones: 1-12
[  285.785758][T14847] EXT4-fs (loop3): 1 truncate cleaned up
[  285.858889][T14847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.875635][T14752] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.901081][T14871] loop2: detected capacity change from 0 to 512
[  285.916560][T14871] EXT4-fs: Ignoring removed i_version option
[  285.922716][T14871] EXT4-fs: Ignoring removed bh option
[  285.943427][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.980374][T14871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.016835][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.126503][T14887] FAULT_INJECTION: forcing a failure.
[  286.126503][T14887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.139707][T14887] CPU: 0 UID: 0 PID: 14887 Comm: syz.0.4060 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  286.139738][T14887] Tainted: [W]=WARN
[  286.139745][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  286.139756][T14887] Call Trace:
[  286.139761][T14887]  <TASK>
[  286.139767][T14887]  __dump_stack+0x1d/0x30
[  286.139799][T14887]  dump_stack_lvl+0xe8/0x140
[  286.139815][T14887]  dump_stack+0x15/0x1b
[  286.139830][T14887]  should_fail_ex+0x265/0x280
[  286.139894][T14887]  should_fail+0xb/0x20
[  286.139919][T14887]  should_fail_usercopy+0x1a/0x20
[  286.139986][T14887]  _copy_from_user+0x1c/0xb0
[  286.140003][T14887]  do_ipv6_setsockopt+0x124/0x2160
[  286.140049][T14887]  ? kstrtoull+0x111/0x140
[  286.140069][T14887]  ? __rcu_read_unlock+0x4f/0x70
[  286.140093][T14887]  ? avc_has_perm_noaudit+0x1b1/0x200
[  286.140124][T14887]  ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0
[  286.140151][T14887]  ipv6_setsockopt+0x59/0x130
[  286.140167][T14887]  tcp_setsockopt+0x98/0xb0
[  286.140183][T14887]  sock_common_setsockopt+0x69/0x80
[  286.140202][T14887]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  286.140281][T14887]  __sys_setsockopt+0x184/0x200
[  286.140306][T14887]  __x64_sys_setsockopt+0x64/0x80
[  286.140333][T14887]  x64_sys_call+0x21d5/0x3000
[  286.140394][T14887]  do_syscall_64+0xd8/0x2a0
[  286.140418][T14887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.140438][T14887] RIP: 0033:0x7fbaebe0f749
[  286.140449][T14887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.140477][T14887] RSP: 002b:00007fbaea877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  286.140493][T14887] RAX: ffffffffffffffda RBX: 00007fbaec065fa0 RCX: 00007fbaebe0f749
[  286.140504][T14887] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  286.140516][T14887] RBP: 00007fbaea877090 R08: 0000000000000508 R09: 0000000000000000
[  286.140529][T14887] R10: 0000200000000d40 R11: 0000000000000246 R12: 0000000000000001
[  286.140540][T14887] R13: 00007fbaec066038 R14: 00007fbaec065fa0 R15: 00007ffde8ea7b08
[  286.140634][T14887]  </TASK>
[  286.389463][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4058'.
[  286.398943][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4058'.
[  286.457095][T14752] veth0_vlan: entered promiscuous mode
[  286.479683][T14752] veth1_vlan: entered promiscuous mode
[  286.515809][T14752] veth0_macvtap: entered promiscuous mode
[  286.530212][T14752] veth1_macvtap: entered promiscuous mode
[  286.539754][T14897] loop0: detected capacity change from 0 to 8192
[  286.582770][T14752] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.608166][T14752] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.634009][ T1655] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.664491][ T1655] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.694325][ T1655] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.706747][ T1655] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.725092][T14915] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  286.751948][T14914] loop0: detected capacity change from 0 to 256
[  286.775452][T14920] loop6: detected capacity change from 0 to 512
[  286.782338][T14920] EXT4-fs: Ignoring removed i_version option
[  286.788418][T14920] EXT4-fs: Ignoring removed bh option
[  286.804340][T14920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.844477][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.996183][T14940] FAULT_INJECTION: forcing a failure.
[  286.996183][T14940] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.009265][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.0.4075 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  287.009366][T14940] Tainted: [W]=WARN
[  287.009373][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  287.009385][T14940] Call Trace:
[  287.009391][T14940]  <TASK>
[  287.009398][T14940]  __dump_stack+0x1d/0x30
[  287.009482][T14940]  dump_stack_lvl+0xe8/0x140
[  287.009498][T14940]  dump_stack+0x15/0x1b
[  287.009512][T14940]  should_fail_ex+0x265/0x280
[  287.009538][T14940]  should_fail+0xb/0x20
[  287.009564][T14940]  should_fail_usercopy+0x1a/0x20
[  287.009644][T14940]  _copy_from_user+0x1c/0xb0
[  287.009664][T14940]  ___sys_sendmsg+0xc1/0x1d0
[  287.009706][T14940]  __x64_sys_sendmsg+0xd4/0x160
[  287.009766][T14940]  x64_sys_call+0x17ba/0x3000
[  287.009784][T14940]  do_syscall_64+0xd8/0x2a0
[  287.009809][T14940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.009826][T14940] RIP: 0033:0x7fbaebe0f749
[  287.009858][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.009875][T14940] RSP: 002b:00007fbaea877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.009892][T14940] RAX: ffffffffffffffda RBX: 00007fbaec065fa0 RCX: 00007fbaebe0f749
[  287.009902][T14940] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000009
[  287.009914][T14940] RBP: 00007fbaea877090 R08: 0000000000000000 R09: 0000000000000000
[  287.009926][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.009939][T14940] R13: 00007fbaec066038 R14: 00007fbaec065fa0 R15: 00007ffde8ea7b08
[  287.010028][T14940]  </TASK>
[  287.520618][T14960] lo speed is unknown, defaulting to 1000
[  287.575308][T14958] loop2: detected capacity change from 0 to 512
[  287.749297][T12997] kernel write not supported for file bpf-prog (pid: 12997 comm: kworker/1:16)
[  287.776955][T14958] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4082: iget: bad extra_isize 90 (inode size 256)
[  287.848980][T14958] EXT4-fs (loop2): Remounting filesystem read-only
[  287.855626][T14958] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30)
[  287.908640][T14958] EXT4-fs (loop2): 1 orphan inode deleted
[  287.914792][T14958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.960440][T14958] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.210696][T14974] loop2: detected capacity change from 0 to 256
[  288.306334][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4089'.
[  288.408547][   T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1)
[  288.436613][T14996] netlink: 'syz.3.4093': attribute type 6 has an invalid length.
[  288.664044][T15014] loop3: detected capacity change from 0 to 512
[  288.699227][T15014] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4100: bg 0: block 5: invalid block bitmap
[  288.750073][T15014] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  288.801293][T15014] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4100: invalid indirect mapped block 3 (level 2)
[  288.851076][T15014] EXT4-fs (loop3): 2 truncates cleaned up
[  288.859439][T15014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.950370][T15027] loop6: detected capacity change from 0 to 256
[  288.966763][T15014] netlink: 10272 bytes leftover after parsing attributes in process `syz.3.4100'.
[  289.042227][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.178882][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4099'.
[  289.231984][T15009] tipc: Started in network mode
[  289.236903][T15009] tipc: Node identity , cluster identity 4711
[  289.243565][T15009] tipc: Failed to obtain node identity
[  289.249064][T15009] tipc: Enabling of bearer <eth:ip6_vti0> rejected, failed to enable media
[  289.331536][T15044] loop3: detected capacity change from 0 to 512
[  289.338425][T15044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  289.382385][T15044] EXT4-fs (loop3): 1 truncate cleaned up
[  289.388533][T15044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.445505][T15049] loop6: detected capacity change from 0 to 2048
[  289.445792][T15051] loop0: detected capacity change from 0 to 512
[  289.463411][T15051] EXT4-fs: test_dummy_encryption option not supported
[  289.491362][T15049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.546096][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.689967][T15059] loop6: detected capacity change from 0 to 2048
[  289.763949][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.778067][T15059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.813753][T15059] FAULT_INJECTION: forcing a failure.
[  289.813753][T15059] name failslab, interval 1, probability 0, space 0, times 0
[  289.826434][T15059] CPU: 1 UID: 0 PID: 15059 Comm: syz.6.4115 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  289.826550][T15059] Tainted: [W]=WARN
[  289.826558][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  289.826569][T15059] Call Trace:
[  289.826576][T15059]  <TASK>
[  289.826583][T15059]  __dump_stack+0x1d/0x30
[  289.826622][T15059]  dump_stack_lvl+0xe8/0x140
[  289.826673][T15059]  dump_stack+0x15/0x1b
[  289.826691][T15059]  should_fail_ex+0x265/0x280
[  289.826718][T15059]  ? __iomap_dio_rw+0x143/0x1290
[  289.826779][T15059]  should_failslab+0x8c/0xb0
[  289.826798][T15059]  __kmalloc_cache_noprof+0x4c/0x4a0
[  289.826820][T15059]  __iomap_dio_rw+0x143/0x1290
[  289.826863][T15059]  ? selinux_file_open+0x2df/0x330
[  289.826930][T15059]  ? do_user_addr_fault+0xd9e/0x1080
[  289.826962][T15059]  ? percpu_counter_add_batch+0xb6/0x130
[  289.827019][T15059]  iomap_dio_rw+0x40/0x90
[  289.827041][T15059]  ext4_file_write_iter+0xb3a/0xf60
[  289.827077][T15059]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  289.827134][T15059]  vfs_write+0x52a/0x960
[  289.827202][T15059]  ksys_write+0xda/0x1a0
[  289.827297][T15059]  __x64_sys_write+0x40/0x50
[  289.827312][T15059]  x64_sys_call+0x2847/0x3000
[  289.827413][T15059]  do_syscall_64+0xd8/0x2a0
[  289.827492][T15059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.827514][T15059] RIP: 0033:0x7f6937eff749
[  289.827533][T15059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  289.827551][T15059] RSP: 002b:00007f693695f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  289.827601][T15059] RAX: ffffffffffffffda RBX: 00007f6938155fa0 RCX: 00007f6937eff749
[  289.827611][T15059] RDX: 0000000000000012 RSI: 00002000000003c0 RDI: 0000000000000005
[  289.827621][T15059] RBP: 00007f693695f090 R08: 0000000000000000 R09: 0000000000000000
[  289.827631][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.827643][T15059] R13: 00007f6938156038 R14: 00007f6938155fa0 R15: 00007fff9ff36078
[  289.827663][T15059]  </TASK>
[  290.076944][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.109647][T15064] loop2: detected capacity change from 0 to 256
[  290.230915][   T29] kauditd_printk_skb: 289 callbacks suppressed
[  290.230945][   T29] audit: type=1400 audit(290.214:12539): avc:  denied  { create } for  pid=15075 comm="syz.2.4120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  290.283725][   T52] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.327777][   T29] audit: type=1400 audit(290.294:12540): avc:  denied  { read } for  pid=15075 comm="syz.2.4120" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  290.375096][   T52] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.396793][T15086] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  290.408295][T15086] netlink: 'syz.0.4122': attribute type 6 has an invalid length.
[  290.417574][   T29] audit: type=1326 audit(290.374:12541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.426602][T15067] lo speed is unknown, defaulting to 1000
[  290.440650][   T29] audit: type=1326 audit(290.374:12542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.469327][   T29] audit: type=1326 audit(290.374:12543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.492470][   T29] audit: type=1326 audit(290.374:12544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.515479][   T29] audit: type=1326 audit(290.374:12545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.533834][T15084] loop3: detected capacity change from 0 to 512
[  290.538441][   T29] audit: type=1326 audit(290.374:12546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.567559][   T29] audit: type=1326 audit(290.374:12547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.590613][   T29] audit: type=1326 audit(290.374:12548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.0.4122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebe0f749 code=0x7ffc0000
[  290.600187][T15077] loop2: detected capacity change from 0 to 8192
[  290.678718][   T52] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.703407][T15067] chnl_net:caif_netlink_parms(): no params data found
[  290.749589][T15084] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.4121: iget: bad extra_isize 90 (inode size 256)
[  290.769744][T15084] EXT4-fs (loop3): Remounting filesystem read-only
[  290.776688][T15084] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[  290.795344][T15084] EXT4-fs (loop3): 1 orphan inode deleted
[  290.801902][T15084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.819087][T15084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.852860][   T52] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.887134][T15067] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.894314][T15067] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.901628][T15067] bridge_slave_0: entered allmulticast mode
[  290.908090][T15067] bridge_slave_0: entered promiscuous mode
[  290.915563][T15067] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.922679][T15067] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.929981][T15067] bridge_slave_1: entered allmulticast mode
[  290.936384][T15067] bridge_slave_1: entered promiscuous mode
[  290.956292][T15067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.969490][T15067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.009225][T15067] team0: Port device team_slave_0 added
[  291.029415][   T52] batadv7: left allmulticast mode
[  291.034449][   T52] batadv7: left promiscuous mode
[  291.039644][   T52] bridge0: port 10(batadv7) entered disabled state
[  291.069635][   T52] batadv6: left allmulticast mode
[  291.074728][   T52] batadv6: left promiscuous mode
[  291.079788][   T52] bridge0: port 9(batadv6) entered disabled state
[  291.087866][   T52] batadv5: left allmulticast mode
[  291.093185][   T52] batadv5: left promiscuous mode
[  291.098206][   T52] bridge0: port 8(batadv5) entered disabled state
[  291.105492][   T52] batadv4: left allmulticast mode
[  291.110601][   T52] batadv4: left promiscuous mode
[  291.115773][   T52] bridge0: port 7(batadv4) entered disabled state
[  291.122840][   T52] batadv3: left allmulticast mode
[  291.127877][   T52] batadv3: left promiscuous mode
[  291.133041][   T52] bridge0: port 6(batadv3) entered disabled state
[  291.140200][   T52] batadv2: left allmulticast mode
[  291.145226][   T52] batadv2: left promiscuous mode
[  291.150641][   T52] bridge0: port 5(batadv2) entered disabled state
[  291.158307][   T52] batadv1: left allmulticast mode
[  291.163389][   T52] batadv1: left promiscuous mode
[  291.168458][   T52] bridge0: port 4(batadv1) entered disabled state
[  291.175777][   T52] bridge_slave_1: left allmulticast mode
[  291.180837][T15110] loop6: detected capacity change from 0 to 512
[  291.181501][   T52] bridge_slave_1: left promiscuous mode
[  291.193416][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.211274][T15110] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4127: iget: bad extra_isize 90 (inode size 256)
[  291.225339][T15110] EXT4-fs (loop6): Remounting filesystem read-only
[  291.232236][T15110] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30)
[  291.232398][   T52] bridge_slave_0: left allmulticast mode
[  291.241232][T15110] EXT4-fs (loop6): 1 orphan inode deleted
[  291.241682][T15110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.247083][   T52] bridge_slave_0: left promiscuous mode
[  291.253328][T15110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.264793][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.407217][T15108] loop3: detected capacity change from 0 to 8192
[  291.415667][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.426607][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.442028][   T52] bond0 (unregistering): Released all slaves
[  291.452255][   T52] bond1 (unregistering): Released all slaves
[  291.461715][T15067] team0: Port device team_slave_1 added
[  291.525195][   T52] veth1_macvtap: left promiscuous mode
[  291.531090][   T52] veth0_macvtap: left promiscuous mode
[  291.537138][   T52] veth1_vlan: left promiscuous mode
[  291.543387][   T52] veth0_vlan: left promiscuous mode
[  291.666726][   T52] team0 (unregistering): Port device team_slave_1 removed
[  291.692563][   T52] team0 (unregistering): Port device team_slave_0 removed
[  291.742274][T15067] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.749278][T15067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.775172][T15067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.835794][T15067] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.842868][T15067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.868842][T15067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.929067][T15067] hsr_slave_0: entered promiscuous mode
[  291.956400][T15067] hsr_slave_1: entered promiscuous mode
[  291.976017][T15067] debugfs: 'hsr0' already exists in 'hsr'
[  291.978786][T15140] loop2: detected capacity change from 0 to 512
[  291.981855][T15067] Cannot create hsr debugfs directory
[  292.083530][T15140] loop2: detected capacity change from 0 to 512
[  292.118409][T15140] EXT4-fs (loop2): orphan cleanup on readonly fs
[  292.126360][T15140] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.4134: ea_inode file size=4 entry size=6
[  292.150317][T15140] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  292.193987][T15140] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.4134: corrupted inode contents
[  292.195552][T15160] loop0: detected capacity change from 0 to 128
[  292.236277][T15140] EXT4-fs error (device loop2): ext4_dirty_inode:6513: inode #15: comm syz.2.4134: mark_inode_dirty error
[  292.270362][T15067] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  292.284372][T15067] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  292.292198][T15140] EXT4-fs error (device loop2): ext4_do_update_inode:5628: inode #15: comm syz.2.4134: corrupted inode contents
[  292.317684][T15067] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  292.324948][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4138'.
[  292.337502][T15067] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  292.344321][T15140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.4134: mark_inode_dirty error
[  292.358487][T15140] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.4134: mark inode dirty (error -117)
[  292.371445][T15140] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117)
[  292.380684][T15140] EXT4-fs (loop2): 1 orphan inode deleted
[  292.388122][T15140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  292.461008][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.482844][T15067] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.493166][T15067] 8021q: adding VLAN 0 to HW filter on device team0
[  292.503246][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.503299][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.511388][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.511473][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.511698][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4139'.
[  292.536173][T15183] loop2: detected capacity change from 0 to 512
[  292.642684][T15193] loop3: detected capacity change from 0 to 2048
[  292.649366][T15067] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.715410][T15193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.767035][T15208] loop2: detected capacity change from 0 to 512
[  292.767519][T15208] EXT4-fs: Ignoring removed oldalloc option
[  292.774219][T15208] EXT4-fs: Mount option(s) incompatible with ext2
[  292.869701][T15067] veth0_vlan: entered promiscuous mode
[  292.872708][T15067] veth1_vlan: entered promiscuous mode
[  292.894291][T15230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4143'.
[  292.897507][T15230] loop2: detected capacity change from 0 to 512
[  292.901316][T15230] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  292.934023][T15067] veth0_macvtap: entered promiscuous mode
[  292.935442][T15067] veth1_macvtap: entered promiscuous mode
[  292.960712][T15067] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.972862][T15067] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.989520][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.001899][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.002110][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.002219][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.088262][T15230] EXT4-fs (loop2): mount failed
[  293.260078][T15260] loop0: detected capacity change from 0 to 512
[  293.266771][T15260] EXT4-fs: Ignoring removed oldalloc option
[  293.286545][T15260] EXT4-fs: Mount option(s) incompatible with ext2
[  293.312024][T15254] loop6: detected capacity change from 0 to 512
[  293.345319][T15254] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4146: iget: bad extra_isize 90 (inode size 256)
[  293.402418][T15270] loop0: detected capacity change from 0 to 512
[  293.417128][T15254] EXT4-fs (loop6): Remounting filesystem read-only
[  293.424655][T15254] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30)
[  293.440852][T15254] EXT4-fs (loop6): 1 orphan inode deleted
[  293.449971][T15270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4150: bg 0: block 5: invalid block bitmap
[  293.450908][T15254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.475381][T15254] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.485457][T15270] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  293.495022][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.505582][T15270] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4150: invalid indirect mapped block 3 (level 2)
[  293.537128][T15270] EXT4-fs (loop0): 2 truncates cleaned up
[  293.543411][T15270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.600144][T15270] netlink: 10256 bytes leftover after parsing attributes in process `syz.0.4150'.
[  293.622917][T15282] loop2: detected capacity change from 0 to 128
[  293.631792][T11146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.637967][T15282] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  293.648410][T15282] FAT-fs (loop2): Filesystem has been set read-only
[  293.676547][T15284] net_ratelimit: 69 callbacks suppressed
[  293.676575][T15284] openvswitch: netlink: Missing key (keys=40, expected=100)
[  293.690608][T15288] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  293.810243][T15298] netlink: 'syz.3.4160': attribute type 6 has an invalid length.
[  293.835582][T15300] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  293.848763][T15289] loop0: detected capacity change from 0 to 512
[  293.860677][T15289] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.4155: iget: bad extra_isize 90 (inode size 256)
[  293.874234][T15289] EXT4-fs (loop0): Remounting filesystem read-only
[  293.880934][T15289] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[  293.890151][T15289] EXT4-fs (loop0): 1 orphan inode deleted
[  293.900137][T15289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.949404][T15316] loop6: detected capacity change from 0 to 128
[  293.956664][T15289] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.975345][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4165'.
[  293.984378][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4165'.
[  293.995166][T15314] loop2: detected capacity change from 0 to 512
[  294.007938][T15314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4166: bg 0: block 5: invalid block bitmap
[  294.029422][T15314] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  294.038797][T15314] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4166: invalid indirect mapped block 3 (level 2)
[  294.072082][T15320] syz.6.4165: attempt to access beyond end of device
[  294.072082][T15320] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128
[  294.089587][T15314] EXT4-fs (loop2): 2 truncates cleaned up
[  294.095706][T15314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.100645][T15319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4168'.
[  294.129268][T15319] loop3: detected capacity change from 0 to 256
[  294.141030][T15314] netlink: 10256 bytes leftover after parsing attributes in process `syz.2.4166'.
[  294.155049][T15320] syz.6.4165: attempt to access beyond end of device
[  294.155049][T15320] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128
[  294.179454][T15320] syz.6.4165: attempt to access beyond end of device
[  294.179454][T15320] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128
[  294.193520][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.194762][T15320] syz.6.4165: attempt to access beyond end of device
[  294.194762][T15320] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128
[  294.229400][T15320] syz.6.4165: attempt to access beyond end of device
[  294.229400][T15320] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128
[  294.246820][T15320] syz.6.4165: attempt to access beyond end of device
[  294.246820][T15320] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128
[  294.263835][T15320] syz.6.4165: attempt to access beyond end of device
[  294.263835][T15320] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128
[  294.287305][T15320] syz.6.4165: attempt to access beyond end of device
[  294.287305][T15320] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128
[  294.304313][T15320] syz.6.4165: attempt to access beyond end of device
[  294.304313][T15320] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128
[  294.322456][T15320] syz.6.4165: attempt to access beyond end of device
[  294.322456][T15320] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128
[  294.375762][T15344] loop6: detected capacity change from 0 to 512
[  294.400637][T15339] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  294.429166][T15344] ext4: Unknown parameter 'obj_type'
[  294.440138][T15344] loop6: detected capacity change from 0 to 512
[  294.466990][T15344] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  294.476153][T15344] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  294.495389][T15344] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  294.503872][T15344] System zones: 0-2, 18-18, 34-35
[  294.510194][T15344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  294.534175][T15344] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  294.543535][T15344] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  294.551741][T15344] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  294.601625][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.799141][T15370] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4183'.
[  294.891175][T15371] lo speed is unknown, defaulting to 1000
[  294.981068][T15375] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  295.303057][   T29] kauditd_printk_skb: 309 callbacks suppressed
[  295.303072][   T29] audit: type=1400 audit(295.284:12857): avc:  denied  { write } for  pid=15393 comm="syz.0.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  295.358040][   T29] audit: type=1400 audit(295.314:12858): avc:  denied  { connect } for  pid=15393 comm="syz.0.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  295.377277][   T29] audit: type=1400 audit(295.314:12859): avc:  denied  { name_connect } for  pid=15393 comm="syz.0.4189" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  295.435153][T15398] loop2: detected capacity change from 0 to 128
[  295.473331][T15400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4189'.
[  295.499567][   T29] audit: type=1400 audit(295.384:12860): avc:  denied  { name_connect } for  pid=15393 comm="syz.0.4189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  295.519360][   T29] audit: type=1400 audit(295.444:12861): avc:  denied  { prog_load } for  pid=15393 comm="syz.0.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  295.539004][   T29] audit: type=1400 audit(295.444:12862): avc:  denied  { bpf } for  pid=15393 comm="syz.0.4189" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  295.559137][   T29] audit: type=1400 audit(295.454:12863): avc:  denied  { perfmon } for  pid=15393 comm="syz.0.4189" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  295.580483][   T29] audit: type=1400 audit(295.494:12864): avc:  denied  { read write } for  pid=15067 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.604224][   T29] audit: type=1400 audit(295.494:12865): avc:  denied  { open } for  pid=15067 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.627977][   T29] audit: type=1400 audit(295.494:12866): avc:  denied  { ioctl } for  pid=15067 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  295.732423][T15398] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  295.763170][T15406] loop7: detected capacity change from 0 to 8192
[  295.766257][T15398] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.4190: No space for directory leaf checksum. Please run e2fsck -D.
[  295.784878][T15398] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.4190: checksumming directory block 0
[  296.091861][T11577] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.261694][T15436] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  296.280831][T15436] netlink: 'syz.0.4198': attribute type 6 has an invalid length.
[  296.289176][T15434] macvtap1: entered promiscuous mode
[  296.294477][T15434] macvtap1: entered allmulticast mode
[  296.327116][T15437] loop2: detected capacity change from 0 to 512
[  296.370439][T15439] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  296.381096][T15437] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.4196: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  296.399756][T15437] EXT4-fs error (device loop2): ext4_quota_enable:7139: comm syz.2.4196: Bad quota inode: 3, type: 0
[  296.410825][T15437] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  296.425834][T15439] netlink: 'syz.6.4199': attribute type 6 has an invalid length.
[  296.425867][T15437] EXT4-fs (loop2): mount failed
[  296.574716][T15457] loop0: detected capacity change from 0 to 128
[  296.597943][T15457] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  296.605617][T15457] FAT-fs (loop0): Filesystem has been set read-only
[  296.630236][T15454] loop2: detected capacity change from 0 to 512
[  296.646881][T15454] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4202: iget: bad extra_isize 90 (inode size 256)
[  296.672200][T15454] EXT4-fs (loop2): Remounting filesystem read-only
[  296.685998][T15454] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30)
[  296.695201][T15454] EXT4-fs (loop2): 1 orphan inode deleted
[  296.701358][T15454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.715565][T15454] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.734861][T15462] loop0: detected capacity change from 0 to 512
[  296.744634][T15462] ext4: Unknown parameter 'uid'
[  296.833069][T15462] SELinux:  Context ׸ýÿX7ªÞd¹Q¬‰YI{C´¨pUèÒ–hÙ»ŒÐr: is not valid (left unmapped).
[  296.833349][T15473] ieee802154 phy0 wpan0: encryption failed: -22
[  296.868281][T15477] loop2: detected capacity change from 0 to 512
[  296.884847][T15477] EXT4-fs: Invalid want_extra_isize 7
[  296.940482][T15477] loop2: detected capacity change from 0 to 128
[  297.067276][T15492] lo speed is unknown, defaulting to 1000
[  297.315117][T15494] lo speed is unknown, defaulting to 1000
[  297.396189][T15499] loop6: detected capacity change from 0 to 128
[  297.428121][T15499] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  297.435802][T15499] FAT-fs (loop6): Filesystem has been set read-only
[  297.853022][T15520] loop3: detected capacity change from 0 to 512
[  297.867526][T15520] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.4220: iget: bad extra_isize 90 (inode size 256)
[  297.921149][T15520] EXT4-fs (loop3): Remounting filesystem read-only
[  297.927975][T15520] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30)
[  297.937482][T15520] EXT4-fs (loop3): 1 orphan inode deleted
[  297.944003][T15520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.964348][T15520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.983602][T15532] __nla_validate_parse: 1 callbacks suppressed
[  297.983658][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4222'.
[  298.065055][T15515] loop7: detected capacity change from 0 to 8192
[  298.102200][T15535] lo speed is unknown, defaulting to 1000
[  298.227585][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4224'.
[  298.367719][T15541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4223'.
[  298.406057][T15542] loop2: detected capacity change from 0 to 256
[  299.017490][T15564] loop6: detected capacity change from 0 to 512
[  299.045797][T15564] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4229: bg 0: block 5: invalid block bitmap
[  299.138460][T15564] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  299.195446][T15564] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4229: invalid indirect mapped block 3 (level 2)
[  299.220069][T15586] loop7: detected capacity change from 0 to 128
[  299.241112][T15564] EXT4-fs (loop6): 2 truncates cleaned up
[  299.260122][T15588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4234'.
[  299.277010][T15564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.331638][T15564] netlink: 5836 bytes leftover after parsing attributes in process `syz.6.4229'.
[  299.367638][T15564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.375065][T15564] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.422424][T15564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.429955][T15564] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.470462][T15586] bio_check_eod: 102 callbacks suppressed
[  299.470537][T15586] syz.7.4233: attempt to access beyond end of device
[  299.470537][T15586] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128
[  299.537129][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4236'.
[  299.564739][T15598] loop0: detected capacity change from 0 to 256
[  299.591964][T15586] syz.7.4233: attempt to access beyond end of device
[  299.591964][T15586] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128
[  299.611388][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.643476][T15586] syz.7.4233: attempt to access beyond end of device
[  299.643476][T15586] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128
[  299.691864][T15586] syz.7.4233: attempt to access beyond end of device
[  299.691864][T15586] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128
[  299.719034][T15586] syz.7.4233: attempt to access beyond end of device
[  299.719034][T15586] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128
[  299.750092][T15586] syz.7.4233: attempt to access beyond end of device
[  299.750092][T15586] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128
[  299.766697][T15586] syz.7.4233: attempt to access beyond end of device
[  299.766697][T15586] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128
[  299.781846][T15586] syz.7.4233: attempt to access beyond end of device
[  299.781846][T15586] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128
[  299.820184][T15626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15626 comm=syz.2.4240
[  299.838114][T15586] syz.7.4233: attempt to access beyond end of device
[  299.838114][T15586] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128
[  299.851888][T15586] syz.7.4233: attempt to access beyond end of device
[  299.851888][T15586] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128
[  299.925266][T15634] netlink: 'syz.7.4247': attribute type 7 has an invalid length.
[  299.933052][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4247'.
[  300.007398][T15642] netlink: 'syz.3.4250': attribute type 6 has an invalid length.
[  300.019888][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4246'.
[  300.050550][T15646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4253'.
[  300.066032][T15646] loop2: detected capacity change from 0 to 256
[  300.136527][T15654] lo speed is unknown, defaulting to 1000
[  300.158170][T15624] loop0: detected capacity change from 0 to 8192
[  300.411096][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4251'.
[  300.422587][   T29] kauditd_printk_skb: 367 callbacks suppressed
[  300.422599][   T29] audit: type=1326 audit(300.394:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.452242][   T29] audit: type=1326 audit(300.394:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.475307][   T29] audit: type=1326 audit(300.394:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.498409][   T29] audit: type=1326 audit(300.394:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.521571][   T29] audit: type=1400 audit(300.394:13238): avc:  denied  { ioctl } for  pid=15668 comm="syz.2.4258" path="socket:[49604]" dev="sockfs" ino=49604 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  300.545945][   T29] audit: type=1326 audit(300.404:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.568909][   T29] audit: type=1326 audit(300.404:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.591864][   T29] audit: type=1326 audit(300.404:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.614836][   T29] audit: type=1326 audit(300.404:13242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.637816][   T29] audit: type=1326 audit(300.404:13243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.4258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846518f749 code=0x7ffc0000
[  300.876599][ T3600] kernel write not supported for file bpf-prog (pid: 3600 comm: kworker/0:10)
[  300.912343][T15694] loop2: detected capacity change from 0 to 512
[  300.921352][T15704] FAULT_INJECTION: forcing a failure.
[  300.921352][T15704] name failslab, interval 1, probability 0, space 0, times 0
[  300.934058][T15704] CPU: 0 UID: 0 PID: 15704 Comm: syz.3.4268 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  300.934108][T15704] Tainted: [W]=WARN
[  300.934114][T15704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  300.934123][T15704] Call Trace:
[  300.934128][T15704]  <TASK>
[  300.934134][T15704]  __dump_stack+0x1d/0x30
[  300.934155][T15704]  dump_stack_lvl+0xe8/0x140
[  300.934201][T15704]  dump_stack+0x15/0x1b
[  300.934281][T15704]  should_fail_ex+0x265/0x280
[  300.934306][T15704]  should_failslab+0x8c/0xb0
[  300.934325][T15704]  kmem_cache_alloc_node_noprof+0x57/0x4a0
[  300.934348][T15704]  ? __alloc_skb+0x101/0x320
[  300.934394][T15704]  ? __account_obj_stock+0x211/0x350
[  300.934415][T15704]  __alloc_skb+0x101/0x320
[  300.934439][T15704]  _sctp_make_chunk+0x59/0x210
[  300.934525][T15704]  sctp_make_abort_user+0x4c/0x3a0
[  300.934547][T15704]  ? _raw_spin_lock_bh+0x56/0xb0
[  300.934574][T15704]  sctp_sendmsg_check_sflags+0x17e/0x1e0
[  300.934673][T15704]  sctp_sendmsg+0x10bb/0x18d0
[  300.934705][T15704]  ? __pfx_sctp_sendmsg+0x10/0x10
[  300.934759][T15704]  inet_sendmsg+0xc5/0xd0
[  300.934777][T15704]  __sock_sendmsg+0x102/0x180
[  300.934796][T15704]  ____sys_sendmsg+0x31e/0x4a0
[  300.934869][T15704]  ___sys_sendmsg+0x17b/0x1d0
[  300.934904][T15704]  __x64_sys_sendmsg+0xd4/0x160
[  300.934937][T15704]  x64_sys_call+0x17ba/0x3000
[  300.934991][T15704]  do_syscall_64+0xd8/0x2a0
[  300.935087][T15704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.935106][T15704] RIP: 0033:0x7f677fb8f749
[  300.935118][T15704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.935134][T15704] RSP: 002b:00007f677e5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.935153][T15704] RAX: ffffffffffffffda RBX: 00007f677fde6090 RCX: 00007f677fb8f749
[  300.935240][T15704] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  300.935301][T15704] RBP: 00007f677e5d6090 R08: 0000000000000000 R09: 0000000000000000
[  300.935368][T15704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.935381][T15704] R13: 00007f677fde6128 R14: 00007f677fde6090 R15: 00007ffc82912388
[  300.935398][T15704]  </TASK>
[  301.162022][T15694] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4264: iget: bad extra_isize 90 (inode size 256)
[  301.188819][T15694] EXT4-fs (loop2): Remounting filesystem read-only
[  301.201988][T15694] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30)
[  301.223602][T15694] EXT4-fs (loop2): 1 orphan inode deleted
[  301.230819][T15710] loop7: detected capacity change from 0 to 128
[  301.238104][T15694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.279990][T15694] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.417172][T15720] netlink: 'syz.6.4276': attribute type 6 has an invalid length.
[  301.522169][T15732] loop6: detected capacity change from 0 to 512
[  301.548905][T15732] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4280: bg 0: block 5: invalid block bitmap
[  301.562932][T15732] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  301.571850][T15732] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4280: invalid indirect mapped block 3 (level 2)
[  301.585345][T15732] EXT4-fs (loop6): 2 truncates cleaned up
[  301.591753][T15732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.626074][T15744] loop2: detected capacity change from 0 to 164
[  301.691760][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.755568][T15755] loop7: detected capacity change from 0 to 512
[  301.783414][T15755] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.4286: iget: bad extra_isize 90 (inode size 256)
[  301.799910][T15755] EXT4-fs (loop7): Remounting filesystem read-only
[  301.815003][T15755] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[  301.824310][T15764] loop2: detected capacity change from 0 to 512
[  301.831178][T15764] EXT4-fs: Invalid want_extra_isize 7
[  301.837565][T15755] EXT4-fs (loop7): 1 orphan inode deleted
[  301.839093][T15762] vhci_hcd: invalid port number 224
[  301.847666][T15755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.863604][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.876290][T15764] loop2: detected capacity change from 0 to 128
[  302.028897][T15781] loop7: detected capacity change from 0 to 512
[  302.043730][T15781] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4296: bg 0: block 5: invalid block bitmap
[  302.057352][T15785] loop2: detected capacity change from 0 to 256
[  302.064142][T15781] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  302.073488][T15784] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  302.082559][T15781] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4296: invalid indirect mapped block 3 (level 2)
[  302.105434][T15781] EXT4-fs (loop7): 2 truncates cleaned up
[  302.111942][T15781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.146033][T15781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.153626][T15781] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.167464][T15781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.175001][T15781] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.218191][T15798] loop2: detected capacity change from 0 to 1024
[  302.230593][T15798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.268305][T15798] EXT4-fs error (device loop2): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.2.4302: path /309/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0
[  302.302393][T15802] loop6: detected capacity change from 0 to 1024
[  302.315206][T15067] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.327633][T15802] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  302.338671][T15802] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  302.350657][T15802] JBD2: no valid journal superblock found
[  302.356374][T15802] EXT4-fs (loop6): Could not load journal inode
[  302.384727][T15805] loop3: detected capacity change from 0 to 512
[  302.401506][T15809] FAULT_INJECTION: forcing a failure.
[  302.401506][T15809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.414572][T15809] CPU: 0 UID: 0 PID: 15809 Comm: syz.7.4305 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  302.414602][T15809] Tainted: [W]=WARN
[  302.414609][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  302.414638][T15809] Call Trace:
[  302.414644][T15809]  <TASK>
[  302.414652][T15809]  __dump_stack+0x1d/0x30
[  302.414674][T15809]  dump_stack_lvl+0xe8/0x140
[  302.414765][T15809]  dump_stack+0x15/0x1b
[  302.414783][T15809]  should_fail_ex+0x265/0x280
[  302.414812][T15809]  should_fail+0xb/0x20
[  302.414836][T15809]  should_fail_usercopy+0x1a/0x20
[  302.414878][T15809]  strncpy_from_user+0x25/0x230
[  302.414903][T15809]  strncpy_from_user_nofault+0x68/0xf0
[  302.414931][T15809]  bpf_probe_read_compat_str+0xb4/0x130
[  302.414997][T15809]  bpf_prog_59ea531272c1e515+0x3e/0x44
[  302.415011][T15809]  bpf_trace_run3+0x10f/0x1d0
[  302.415029][T15809]  ? sctp_chunk_put+0x107/0x140
[  302.415086][T15809]  ? sctp_chunk_put+0x107/0x140
[  302.415107][T15809]  __traceiter_kmem_cache_free+0x38/0x60
[  302.415290][T15809]  ? sctp_chunk_put+0x107/0x140
[  302.415311][T15809]  kmem_cache_free+0x329/0x3d0
[  302.415331][T15809]  ? __kfree_skb+0x109/0x150
[  302.415357][T15809]  sctp_chunk_put+0x107/0x140
[  302.415423][T15809]  sctp_chunk_free+0x43/0x50
[  302.415477][T15809]  __sctp_outq_teardown+0x42a/0x530
[  302.415566][T15809]  sctp_outq_free+0x15/0x20
[  302.415594][T15809]  sctp_association_free+0x160/0x590
[  302.415618][T15809]  sctp_do_sm+0x2b86/0x3230
[  302.415650][T15809]  ? _parse_integer+0x27/0x40
[  302.415720][T15809]  sctp_primitive_SHUTDOWN+0x74/0x90
[  302.415760][T15809]  sctp_shutdown+0xc1/0xe0
[  302.415781][T15809]  ? __pfx_sctp_shutdown+0x10/0x10
[  302.415802][T15809]  inet_shutdown+0x1c2/0x210
[  302.415860][T15809]  __x64_sys_shutdown+0xd6/0x130
[  302.415890][T15809]  x64_sys_call+0xd2f/0x3000
[  302.415925][T15809]  do_syscall_64+0xd8/0x2a0
[  302.415948][T15809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.415964][T15809] RIP: 0033:0x7fd22c20f749
[  302.415976][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.415990][T15809] RSP: 002b:00007fd22ac77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030
[  302.416075][T15809] RAX: ffffffffffffffda RBX: 00007fd22c465fa0 RCX: 00007fd22c20f749
[  302.416090][T15809] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004
[  302.416101][T15809] RBP: 00007fd22ac77090 R08: 0000000000000000 R09: 0000000000000000
[  302.416112][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.416123][T15809] R13: 00007fd22c466038 R14: 00007fd22c465fa0 R15: 00007fffb64b2d58
[  302.416174][T15809]  </TASK>
[  302.420549][T15805] EXT4-fs: Invalid want_extra_isize 7
[  302.648901][T15814] loop0: detected capacity change from 0 to 1024
[  302.679849][T15805] loop3: detected capacity change from 0 to 128
[  302.707602][T15814] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  302.834844][T15820] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  302.855542][T15813] 9pnet_fd: Insufficient options for proto=fd
[  303.062485][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.195517][T15838] lo speed is unknown, defaulting to 1000
[  303.274537][T15839] lo speed is unknown, defaulting to 1000
[  303.327215][T15848] loop2: detected capacity change from 0 to 512
[  303.334333][T15848] EXT4-fs: Invalid want_extra_isize 7
[  303.401499][T15851] netlink: 'syz.2.4321': attribute type 6 has an invalid length.
[  303.609035][T15855] __nla_validate_parse: 11 callbacks suppressed
[  303.609049][T15855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4323'.
[  304.039510][T15871] loop2: detected capacity change from 0 to 128
[  304.068959][T15871] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  304.108806][T15871] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  304.122120][T15875] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  304.154534][T15875] netlink: 'syz.3.4332': attribute type 6 has an invalid length.
[  304.249802][  T290] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  304.344968][T15883] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  304.441370][T15883] netlink: 'syz.2.4335': attribute type 6 has an invalid length.
[  304.848347][T15900] loop7: detected capacity change from 0 to 764
[  304.874403][T15900] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  304.893035][T15900] Symlink component flag not implemented
[  304.912531][T15900] Symlink component flag not implemented (7)
[  305.095396][T15920] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  305.114188][T15925] loop2: detected capacity change from 0 to 128
[  305.182842][T15930] loop0: detected capacity change from 0 to 512
[  305.193604][T15925] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  305.201284][T15925] FAT-fs (loop2): Filesystem has been set read-only
[  305.206792][T15930] EXT4-fs: Invalid want_extra_isize 7
[  305.230561][T15930] loop0: detected capacity change from 0 to 128
[  305.302216][T15940] loop2: detected capacity change from 0 to 128
[  305.318425][T15937] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  305.337599][T15940] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  305.345220][T15940] FAT-fs (loop2): Filesystem has been set read-only
[  305.400308][T15950] netlink: 'syz.3.4350': attribute type 6 has an invalid length.
[  305.445593][T15957] loop2: detected capacity change from 0 to 512
[  305.451964][   T29] kauditd_printk_skb: 232 callbacks suppressed
[  305.451974][   T29] audit: type=1326 audit(561.423:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.3.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  305.481199][   T29] audit: type=1326 audit(561.423:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15949 comm="syz.3.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677fb8f749 code=0x7ffc0000
[  305.510791][T15957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4352: bg 0: block 5: invalid block bitmap
[  305.552492][T15957] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  305.582043][   T29] audit: type=1400 audit(561.563:13476): avc:  denied  { create } for  pid=15967 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.607773][T15957] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4352: invalid indirect mapped block 3 (level 2)
[  305.622188][   T29] audit: type=1400 audit(561.563:13477): avc:  denied  { write } for  pid=15967 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.641205][   T29] audit: type=1400 audit(561.563:13478): avc:  denied  { connect } for  pid=15967 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.663685][   T29] audit: type=1400 audit(561.563:13479): avc:  denied  { name_connect } for  pid=15967 comm="syz.0.4354" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  305.674760][T15957] EXT4-fs (loop2): 2 truncates cleaned up
[  305.699743][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4354'.
[  305.719631][T15957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.733163][T15974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4354'.
[  305.786816][T15978] loop7: detected capacity change from 0 to 512
[  305.793397][   T29] audit: type=1400 audit(561.623:13480): avc:  denied  { name_connect } for  pid=15967 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  305.813386][   T29] audit: type=1400 audit(561.673:13481): avc:  denied  { setopt } for  pid=15967 comm="syz.0.4354" lport=56716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  305.833523][   T29] audit: type=1400 audit(561.673:13482): avc:  denied  { open } for  pid=15970 comm="syz.3.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  305.845277][T15978] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  305.852313][   T29] audit: type=1400 audit(561.673:13483): avc:  denied  { prog_load } for  pid=15967 comm="syz.0.4354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  305.897774][T15978] EXT4-fs (loop7): invalid journal inode
[  305.918884][T15978] EXT4-fs (loop7): can't get journal size
[  305.930483][T15957] netlink: 10268 bytes leftover after parsing attributes in process `syz.2.4352'.
[  305.947118][T15978] EXT4-fs (loop7): 1 truncate cleaned up
[  305.959904][T15978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.984974][T15991] loop3: detected capacity change from 0 to 512
[  306.006831][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.039137][T15991] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4358: bg 0: block 5: invalid block bitmap
[  306.115379][T15991] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  306.160845][T16008] netlink: 'syz.2.4362': attribute type 7 has an invalid length.
[  306.168609][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'.
[  306.178473][T15991] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4358: invalid indirect mapped block 3 (level 2)
[  306.226813][T15991] EXT4-fs (loop3): 2 truncates cleaned up
[  306.238038][T15991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.308226][T15991] netlink: 10244 bytes leftover after parsing attributes in process `syz.3.4358'.
[  306.374747][T16019] netlink: 'syz.2.4365': attribute type 7 has an invalid length.
[  306.382551][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4365'.
[  306.482416][T16027] loop3: detected capacity change from 0 to 512
[  306.499126][T16027] EXT4-fs: Invalid want_extra_isize 7
[  306.510765][T16027] loop3: detected capacity change from 0 to 128
[  306.555606][T16032] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  306.566835][T16032] netlink: 'syz.2.4371': attribute type 6 has an invalid length.
[  306.628700][T16036] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  306.662494][T16039] loop2: detected capacity change from 0 to 1024
[  306.680924][T16041] loop7: detected capacity change from 0 to 512
[  306.689635][T16041] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.4375: iget: bad extra_isize 90 (inode size 256)
[  306.691304][T16039] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  306.703118][T16041] EXT4-fs (loop7): Remounting filesystem read-only
[  306.732775][T16041] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30)
[  306.741821][T16041] EXT4-fs (loop7): 1 orphan inode deleted
[  306.803897][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'.
[  306.809810][ T3487] kernel write not supported for file bpf-prog (pid: 3487 comm: kworker/0:7)
[  307.277110][T16064] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  307.369117][T16064] netlink: 'syz.3.4382': attribute type 6 has an invalid length.
[  307.440904][T16069] netlink: 'syz.6.4385': attribute type 6 has an invalid length.
[  307.502901][T16072] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  307.575088][T16079] loop6: detected capacity change from 0 to 512
[  307.595437][T16079] EXT4-fs: Invalid want_extra_isize 7
[  307.632917][T16079] loop6: detected capacity change from 0 to 128
[  307.711153][T16087] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  307.721439][T16087] netlink: 'syz.6.4393': attribute type 6 has an invalid length.
[  307.790998][T16089] loop7: detected capacity change from 0 to 512
[  307.813386][T16089] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  307.828415][T16089] EXT4-fs (loop7): invalid journal inode
[  307.836582][T16089] EXT4-fs (loop7): can't get journal size
[  307.840091][T16093] netlink: 'syz.3.4396': attribute type 7 has an invalid length.
[  307.850074][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4396'.
[  307.859808][T16089] EXT4-fs (loop7): 1 truncate cleaned up
[  308.005122][T16103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4400'.
[  308.028719][T16101] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  308.245295][T16118] netlink: 'syz.2.4405': attribute type 6 has an invalid length.
[  308.282144][T16127] loop2: detected capacity change from 0 to 512
[  308.294221][T16127] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4409: iget: bad extra_isize 90 (inode size 256)
[  308.297301][T16130] netlink: 'syz.3.4410': attribute type 7 has an invalid length.
[  308.318847][T16127] EXT4-fs (loop2): Remounting filesystem read-only
[  308.325946][T16127] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30)
[  308.335164][T16127] EXT4-fs (loop2): 1 orphan inode deleted
[  308.384713][T16134] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  308.420182][T16141] loop2: detected capacity change from 0 to 1024
[  308.658006][ T3600] kernel write not supported for file bpf-prog (pid: 3600 comm: kworker/0:10)
[  308.689298][ T3600] kernel write not supported for file bpf-prog (pid: 3600 comm: kworker/0:10)
[  308.769604][T16164] __nla_validate_parse: 5 callbacks suppressed
[  308.769618][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'.
[  308.823178][T16166] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  308.880650][T16174] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4426'.
[  309.143387][T16180] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  309.410585][T16187] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4430'.
[  309.733319][T16194] loop6: detected capacity change from 0 to 1024
[  309.758990][T16194] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  309.800407][T16194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4433'.
[  309.887600][T16198] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  309.974572][T16201] loop6: detected capacity change from 0 to 512
[  310.030331][T16201] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4436: bg 0: block 5: invalid block bitmap
[  310.042905][T16201] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  310.052137][T16201] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4436: invalid indirect mapped block 3 (level 2)
[  310.065655][T16201] EXT4-fs (loop6): 2 truncates cleaned up
[  310.135886][T16207] netlink: 10268 bytes leftover after parsing attributes in process `syz.6.4436'.
[  310.316891][T16223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4438'.
[  310.326354][T16223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4438'.
[  310.373437][T16227] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  310.381687][T16227] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  310.552526][   T29] kauditd_printk_skb: 251 callbacks suppressed
[  310.552540][   T29] audit: type=1400 audit(566.533:13733): avc:  denied  { execmem } for  pid=16234 comm="syz.7.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  310.661952][T16238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4449'.
[  310.674757][T16238] loop0: detected capacity change from 0 to 256
[  310.681676][   T29] audit: type=1400 audit(566.663:13734): avc:  denied  { remount } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  311.062356][   T29] audit: type=1400 audit(566.883:13735): avc:  denied  { module_request } for  pid=16237 comm="syz.0.4449" kmod="arptable_vfat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  311.083947][   T29] audit: type=1400 audit(566.913:13736): avc:  denied  { read } for  pid=16237 comm="syz.0.4449" dev="nsfs" ino=4026533573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  311.104637][   T29] audit: type=1400 audit(566.913:13737): avc:  denied  { open } for  pid=16237 comm="syz.0.4449" path="net:[4026533573]" dev="nsfs" ino=4026533573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  311.127461][   T29] audit: type=1400 audit(566.913:13738): avc:  denied  { create } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  311.146411][   T29] audit: type=1400 audit(566.923:13739): avc:  denied  { read } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  311.165237][   T29] audit: type=1400 audit(566.933:13740): avc:  denied  { create } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  311.184189][   T29] audit: type=1400 audit(566.933:13741): avc:  denied  { connect } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  311.203778][   T29] audit: type=1400 audit(566.933:13742): avc:  denied  { setopt } for  pid=16237 comm="syz.0.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  311.252957][T16244] loop6: detected capacity change from 0 to 512
[  311.278121][T16244] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4451: bg 0: block 5: invalid block bitmap
[  311.321627][T16244] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  311.359575][T16244] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4451: invalid indirect mapped block 3 (level 2)
[  311.381374][T16244] EXT4-fs (loop6): 2 truncates cleaned up
[  311.415158][T16168] loop2: detected capacity change from 0 to 512
[  311.427772][T16168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  311.445636][T16254] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  311.475721][T16168] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters
[  311.515415][T16260] netlink: 10268 bytes leftover after parsing attributes in process `syz.6.4451'.
[  311.571162][T16168] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  311.684356][T16254] loop3: detected capacity change from 0 to 512
[  311.709844][T16168] EXT4-fs (loop2): 1 truncate cleaned up
[  311.765996][T16168] EXT4-fs mount: 13 callbacks suppressed
[  311.766048][T16168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.812969][T16254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  311.829309][T14752] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.860314][T16254] EXT4-fs (loop3): 1 truncate cleaned up
[  311.883806][T16268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4457'.
[  311.896754][T16254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.940061][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.077304][T16276] loop2: detected capacity change from 0 to 512
[  312.084047][T16276] EXT4-fs: Invalid want_extra_isize 7
[  312.253440][T16290] loop2: detected capacity change from 0 to 256
[  312.261876][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.539294][T16309] loop2: detected capacity change from 0 to 512
[  312.546653][T16309] EXT4-fs: Invalid want_extra_isize 7
[  312.607886][T16315] validate_nla: 3 callbacks suppressed
[  312.607900][T16315] netlink: 'syz.7.4474': attribute type 7 has an invalid length.
[  312.648920][T16318] loop6: detected capacity change from 0 to 512
[  312.665183][T16318] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.4476: iget: bad extra_isize 90 (inode size 256)
[  312.678926][T16318] EXT4-fs (loop6): Remounting filesystem read-only
[  312.694732][T16318] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30)
[  312.706570][T16318] EXT4-fs (loop6): 1 orphan inode deleted
[  312.713255][T16318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.726555][T16318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.812928][T16338] macvtap1: entered promiscuous mode
[  312.818239][T16338] macvtap1: entered allmulticast mode
[  312.824541][T16338] dummy0: entered promiscuous mode
[  312.830190][T16338] dummy0: entered allmulticast mode
[  312.836372][T16338] team0: Device macvtap1 failed to register rx_handler
[  312.843693][T16338] dummy0: left allmulticast mode
[  312.848917][T16338] dummy0: left promiscuous mode
[  312.940032][T16351] loop2: detected capacity change from 0 to 512
[  312.946685][T16351] EXT4-fs: Invalid want_extra_isize 7
[  312.986484][T16354] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  313.009466][T16358] futex_wake_op: syz.6.4491 tries to shift op by -1; fix this program
[  313.050283][T16362] netlink: 'syz.6.4493': attribute type 6 has an invalid length.
[  313.112504][T16366] loop2: detected capacity change from 0 to 1024
[  313.127589][T16366] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  313.204250][T16372] bond2: entered promiscuous mode
[  313.209455][T16372] bond2: entered allmulticast mode
[  313.218438][T16372] 8021q: adding VLAN 0 to HW filter on device bond2
[  313.231063][T16375] loop0: detected capacity change from 0 to 512
[  313.243289][T16375] EXT4-fs: Invalid want_extra_isize 7
[  313.260579][T16372] bond2 (unregistering): Released all slaves
[  313.268266][T16378] loop2: detected capacity change from 0 to 512
[  313.282952][T16375] loop0: detected capacity change from 0 to 128
[  313.289590][T16378] ==================================================================
[  313.297672][T16378] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid
[  313.305414][T16378] 
[  313.307724][T16378] write to 0xffff888158b5b248 of 4 bytes by interrupt on cpu 0:
[  313.315346][T16378]  __bpf_get_stackid+0x76b/0x800
[  313.320294][T16378]  bpf_get_stackid+0xef/0x120
[  313.324967][T16378]  bpf_get_stackid_raw_tp+0xf6/0x120
[  313.330241][T16378]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  313.335684][T16378]  bpf_trace_run2+0x107/0x1c0
[  313.340349][T16378]  kfree+0x351/0x400
[  313.344230][T16378]  vlan_info_rcu_free+0xee/0x160
[  313.349156][T16378]  rcu_core+0x5d7/0xc60
[  313.353293][T16378]  rcu_core_si+0xd/0x20
[  313.357435][T16378]  handle_softirqs+0xba/0x290
[  313.362103][T16378]  do_softirq+0x5d/0x90
[  313.366246][T16378]  __local_bh_enable_ip+0x70/0x80
[  313.371260][T16378]  srcu_invoke_callbacks+0x16c/0x250
[  313.376536][T16378]  process_scheduled_works+0x4ce/0x9d0
[  313.381976][T16378]  worker_thread+0x582/0x770
[  313.386556][T16378]  kthread+0x489/0x510
[  313.390615][T16378]  ret_from_fork+0x13f/0x270
[  313.395192][T16378]  ret_from_fork_asm+0x1a/0x30
[  313.399944][T16378] 
[  313.402251][T16378] read to 0xffff888158b5b248 of 4 bytes by task 16378 on cpu 1:
[  313.409861][T16378]  __bpf_get_stackid+0x287/0x800
[  313.414791][T16378]  bpf_get_stackid+0xef/0x120
[  313.419455][T16378]  bpf_get_stackid_raw_tp+0xf6/0x120
[  313.424725][T16378]  bpf_prog_53f0063d4d7f65ce+0x2a/0x32
[  313.430167][T16378]  bpf_trace_run2+0x107/0x1c0
[  313.434831][T16378]  kfree+0x351/0x400
[  313.438709][T16378]  vfs_parse_monolithic_sep+0x1af/0x220
[  313.444245][T16378]  generic_parse_monolithic+0x24/0x30
[  313.449600][T16378]  parse_monolithic_mount_data+0x46/0x60
[  313.455221][T16378]  do_new_mount+0x216/0x6a0
[  313.459705][T16378]  path_mount+0x4ab/0xb80
[  313.464021][T16378]  __se_sys_mount+0x28c/0x2e0
[  313.468766][T16378]  __x64_sys_mount+0x67/0x80
[  313.473341][T16378]  x64_sys_call+0x2cca/0x3000
[  313.478005][T16378]  do_syscall_64+0xd8/0x2a0
[  313.482498][T16378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.488375][T16378] 
[  313.490681][T16378] value changed: 0xf5250d87 -> 0x81ed89f9
[  313.496373][T16378] 
[  313.498681][T16378] Reported by Kernel Concurrency Sanitizer on:
[  313.504813][T16378] CPU: 1 UID: 0 PID: 16378 Comm: syz.2.4498 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[  313.516175][T16378] Tainted: [W]=WARN
[  313.519963][T16378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  313.530007][T16378] ==================================================================
[  313.542894][T16378] EXT4-fs: Ignoring removed nomblk_io_submit option
[  313.561247][T16378] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  313.569900][T16378] EXT4-fs (loop2): invalid journal inode
[  313.579399][T16378] EXT4-fs (loop2): can't get journal size
[  313.586288][T16378] EXT4-fs (loop2): 1 truncate cleaned up
[  313.592540][T16378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.601981][T16385] loop3: detected capacity change from 0 to 1024
[  313.628888][T16385] EXT4-fs: inline encryption not supported
[  313.650559][T16385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.702134][T12825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.712099][T11577] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.