last executing test programs:

57.397345773s ago: executing program 2 (id=1562):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)
read(r0, &(0x7f00000032c0)=""/4096, 0x1000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000020007110fbff00000085000200750000"], &(0x7f0000000480)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)

57.279284825s ago: executing program 2 (id=1566):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@jqfmt_vfsold}, {@minixdf}], [{@audit}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@subj_role={'subj_role', 0x3d, '\\-$\\-/'}}, {@fsname={'fsname', 0x3d, '\xfb:@'}}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c509530400c4af", @ANYRES32, @ANYBLOB="000055cf12ac7f186d18000000000000000000008391dd4564ac38df5b4035cd9e700547279c82eba6691d1b22046f4e830f2ab0bb30007ccd81d2f5b0777dff26f7674657", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_icmp(0x2, 0x2, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004ffff8000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==")
r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r6, 0x0, 0x0, 0x1001f0)
r7 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r8, &(0x7f00000000c0)='#', 0x1, 0x709d)
pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x87d, 0x0, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

56.413687279s ago: executing program 2 (id=1584):
socket$inet6(0xa, 0x2, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018"], 0xa0}, 0x4004881)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000140), 0x3, 0x4fa, &(0x7f0000000640)="$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")
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

56.208682093s ago: executing program 2 (id=1586):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x7f19, 0x10001, 0x0, 0x5, 0xf94, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x7f19, 0x10001, 0x0, 0x5, 0xf94, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$9p(&(0x7f0000000100), 0x80000) (async)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RUNLINKAT(r1, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) (async)
write$P9_RUNLINKAT(r1, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
clock_nanosleep(0x4, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) (async)
clock_nanosleep(0x4, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
unshare(0x40000000)
syncfs(r0)
unshare(0x20000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x22) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x22)
pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r6, r6, 0x21)

55.955394686s ago: executing program 2 (id=1592):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = epoll_create1(0x0)
flistxattr(r1, 0x0, 0x0)

55.457990974s ago: executing program 2 (id=1603):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

55.409884195s ago: executing program 32 (id=1603):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.256706729s ago: executing program 5 (id=2628):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380", 0x1f)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000001000000000000a273dfc3dc8b26e9f17d9d3ddb7c4f5abf"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001821", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1019, &(0x7f0000000880)=""/4121}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18)
rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000002c0)={0x2012})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r6, 0x20, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX, @ANYBLOB="163019aaa6d9eb14ed96147891164363de72f97e9fcd03602612f5c6393e01eacb093a93755268e7d4e58ad3ad614aa75d", @ANYRES32, @ANYRESDEC=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001a00)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000b708a36444f700007b8af8ff000000000702458c57ad8302c4747b59669c8b88aba930c348e77b8c2aeb7e24ac4819af764bd10e29fdd49f7101063af3f2030ce97cab054fc916af146d9c97571499fc1060e8e2a50daffafca575a36c9f90a4ba25ae86c1c2b76d33fafac26a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700"/20], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100001040000000063805f5c3d6f4666e200eb000000000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40800)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)

4.060664442s ago: executing program 5 (id=2633):
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)={0x3b, 0x75, 0x1, {0x30, "4216cd38c5fd6ef3c370d2e2e1aeae3d3d5aaf5db6e70a63b0c13ba988a723bf42d93822d76c273b3e515eb4905a500c"}}, 0x3b)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_emit_ethernet(0x0, 0x0, 0x0)

3.981979154s ago: executing program 5 (id=2635):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r1 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x422, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4800, 0x0, 0x0, 0x4, 0x0, 0x804000}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x8, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x1002, 0x81, 0x0})
socket$can_j1939(0x1d, 0x2, 0x7)

3.854111526s ago: executing program 5 (id=2640):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f00000008c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x7, 0x9)
write$P9_RWRITE(r6, &(0x7f0000000040)={0xb, 0x77, 0x87, 0x49d}, 0xb)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$inet_sctp(r6, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44080}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc)

2.224523893s ago: executing program 1 (id=2687):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000080200000800000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000d4e5d327c79271128aad68be060000000000e9ce076f61aa4762aa0022df63568debfbb018908fe65704c88f718c6686a371077a69939598000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001000"/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x11, &(0x7f0000000980)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="060000000400"], 0x50)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffffd, 0x0, 0x18, "0040001e1d11fb801f5d6000"})
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000480)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0)

1.603124463s ago: executing program 4 (id=2697):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000117000085005e0083000000bd0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa49}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x4, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]})
flistxattr(r4, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x80000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f0000000300))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0x8004587d, &(0x7f0000000080))
fremovexattr(r6, &(0x7f0000000000)=@known='trusted.overlay.impure\x00')
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000300), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
r7 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="c2becb5de2e01213c0193c9f19c2e8697cb65067b6e13f10f3e740c54c5f2b7ff7a10412fb978b08f82392e5617f4a3273751f029331467bda2143d2f5f1cf1dab132a0ffb258e8588e938c417a9cd6e10c94455e545f18d28289aa67bd3dcaf61499b40ac1ba3", @ANYRES16=r7], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.485907646s ago: executing program 0 (id=2698):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
ioprio_get$uid(0x3, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a3200000000340003803000008008"], 0xe4}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r8, 0x2007ff3)
copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffa003e459, 0x700000000000000)

1.358135957s ago: executing program 1 (id=2699):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380", 0x1f)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000001000000000000a273dfc3dc8b26e9f17d9d3ddb7c4f5abf"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x4, 0x1019, &(0x7f0000000880)=""/4121}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18)
rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000002c0)={0x2012})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r6, 0x20, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX, @ANYBLOB="163019aaa6d9eb14ed96147891164363de72f97e9fcd03602612f5c6393e01eacb093a93755268e7d4e58ad3ad614aa75d", @ANYRES32, @ANYRESDEC=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001a00)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000b708a36444f700007b8af8ff000000000702458c57ad8302c4747b59669c8b88aba930c348e77b8c2aeb7e24ac4819af764bd10e29fdd49f7101063af3f2030ce97cab054fc916af146d9c97571499fc1060e8e2a50daffafca575a36c9f90a4ba25ae86c1c2b76d33fafac26a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700"/20], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100001040000000063805f5c3d6f4666e200eb000000000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40800)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)

1.357674047s ago: executing program 4 (id=2700):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdff07057b8af8ff000000bfa20000000000000766a6e427021000f8ffffffb703000008000000b704000000003bdbf07adaeb00001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = socket(0x2, 0x80802, 0x0)
getsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)=""/2, &(0x7f00000001c0)=0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xa, 0x2b}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x40}}, 0x4000800)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x1, @vifc_lcl_ifindex=r6, @empty}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8000000000000001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
r10 = msgget$private(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x11, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
msgctl$IPC_RMID(r10, 0x0)
setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

1.323387018s ago: executing program 0 (id=2701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18)
mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x61)

1.305278038s ago: executing program 1 (id=2702):
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x452b}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x12c, r2, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2508}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @random="de4e9407007d"}, {0xa, 0x0, @default_ap_ssid}, {0x20, 0x0, @random="0eacd235bebf99bf64c034444583ab85c892b76cbfcbf4462c65cedb"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0xa0, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1b, 0x0, @random="9d3883154dc0d5bebbdd12b496f456ffc470c948137770"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1f, 0x0, @random="ffa1b20328ae7a447870c16d8b186eaa80655d4d706a6b9d22a472"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000001}, 0xcce482d084bcad12)
unshare(0x26020480)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc)
splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0)
unshare(0x41000000)
unshare(0x400)
ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000080)={0x0, 0x100, 0x0, 0x101})
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x90000, 0x1, 0x1, 0x8, 0x20008, 0x28, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000300)={0x1a, 0x0, 0x1, 0x1, 0x7d, 0x4, @remote}, 0x10)

1.278866049s ago: executing program 4 (id=2704):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ff8}]})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000480)="e4b5eea546a2b4", 0x7, 0x494}])
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
msgsnd(0x0, 0x0, 0x401, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.278309089s ago: executing program 0 (id=2705):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
close(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081)

1.19223724s ago: executing program 4 (id=2708):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
ioprio_get$uid(0x3, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r8, 0x2007ff3)
copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffa003e459, 0x700000000000000)

940.397844ms ago: executing program 4 (id=2710):
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000b40)={[{@lazytime}, {@data_err_abort}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_lock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x18, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f00000001c0), 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x631, &(0x7f0000000d00)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file1\x00', 0x2)
acct(&(0x7f0000000080)='./file1\x00')
acct(0x0)

919.372455ms ago: executing program 3 (id=2711):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', <r3=>0x0, 0x0, 0x20, 0x40, 0xf, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x64, 0xd5, 0x40, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x28, 0x3b, 0x0, 0x8, [0x8, 0x3ff, 0x8, 0x1, 0x80000000, 0x8, 0xe42, 0x3, 0x2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', <r4=>0x0, 0x700, 0x80, 0x100, 0x1924, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x68, 0x0, 0x19, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1b, 0x85, [@loopback, @loopback, @local, @local, @private=0xa010102, @multicast2]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan1\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r8, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r7], 0x68}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000dc0)={0x1338, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1010, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc0}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8d8}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "cdaf3b8368a9a8b87c486450d1f51a945559e6a0d55bce18a78aaf48f529ebc342018248fc643090e60fc2697c37bef0dab4886953fe8a8e5e2c104998f2d235a642113fb607038e8d9e62b44af1655fca0d6e27a33da0deb88b59057f5150dc3f55bf1a179f80e77c43005a7a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'[-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'mirred\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "f2b4bb3cfb5cc08c4ce93c736f2c05b675116d2feb26c8e8360cb5b2d266d240cfe9ec5d47b63f3273a9345e972f75e31c4304efb4ef4040a818875fd30ebd159dca25b64c3b1d674020387ba1499305a103e34f4be94ce018bbd4e8c4a4178740c1695015cea1b7a16e9612c02d9ab06eb09693795c4d1804eecd27f72af26e05bf61a6a85de1f04419ee29e885"}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "5c2f4e4ef2061fcc562c8698bbd14cd2471e800b768262715c568ebf21a1d16dbf86ca5d5208bb7656ce37d79fe82c93428167d278949d09be643c115ba6f0888bc9b23a26dfbe454722e598a420307f9ba933a1720ae46e56568d9cda67d7ecd03f2fd43f6372cf77f7b52fb2dcb6177410583314069ef08d835456e4c76b40c91b630a7f5855dd2670fa7e72f1cd6084b68e660daf01278cb2e52f62c8a54f"}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "24021e1086f988d6778fdf1336b516683b98a3e6788a886dae11d99b983e9f3ba29b75d5bf5d1fc1e021345dd256684979d422c8a9486efebb"}]}]}, 0x1338}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r9=>0x0, 0x2f, 0x8, 0x41, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x40, 0x7800, 0x6, 0x7fff}})
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11)
getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r12}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x98, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040400}, 0x44000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

815.248606ms ago: executing program 5 (id=2712):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380", 0x1f)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000001000000000000a273dfc3dc8b26e9f17d9d3ddb7c4f5abf"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x4, 0x1019, &(0x7f0000000880)=""/4121}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18)
rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000002c0)={0x2012})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r6, 0x20, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX, @ANYBLOB="163019aaa6d9eb14ed96147891164363de72f97e9fcd03602612f5c6393e01eacb093a93755268e7d4e58ad3ad614aa75d", @ANYRES32, @ANYRESDEC=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001a00)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000b708a36444f700007b8af8ff000000000702458c57ad8302c4747b59669c8b88aba930c348e77b8c2aeb7e24ac4819af764bd10e29fdd49f7101063af3f2030ce97cab054fc916af146d9c97571499fc1060e8e2a50daffafca575a36c9f90a4ba25ae86c1c2b76d33fafac26a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700"/20], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100001040000000063805f5c3d6f4666e200eb000000000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40800)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)

752.282147ms ago: executing program 4 (id=2713):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000004000000", @ANYRES32, @ANYBLOB="00000000000000000069310f12f3c0ed887a0176b3f4592a2a272e779858a795abe00a4563f8c5a57eb79d3d74c89e2bb4d15a854dea0300"/66, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r3=>r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000be00"/28], 0x50)
socket$kcm(0x11, 0xa, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="00000000000702000088ffffffb703000008000000b70400000000000085000000c2000000951561300116c92cf06fabf6c0b490a6e608a97f1b69980954c7e6ab5405705cc5bc50317b918ad23244a10b1ace151cc755ce4fd6d276de4035993d8b30cef5d84bcd2930107a3a3a5abe7709fbe11cd6e05dfb4523f8f2c6d2d4c01444c62df69549c675543170cc76323f738ae6fa07c86217b44d0b", @ANYRES8], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000380)=0x7ffd)
ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000180)={0x20, 0x0})

746.607027ms ago: executing program 3 (id=2714):
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=")
r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffb)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}, @enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x8, [{0xf, 0xca, 0xff}, {0x8, 0x4, 0x4}, {0x6, 0x9, 0x3}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x30]}}, &(0x7f00000008c0)=""/2, 0x66, 0x2, 0x1, 0x5}, 0x28)
sendfile(r0, r0, 0x0, 0x800000009)

710.956828ms ago: executing program 5 (id=2715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
close(r1)
socket$caif_stream(0x25, 0x1, 0x1)
recvmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010142)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x5, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x21, 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081)

686.603818ms ago: executing program 3 (id=2716):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18)
mknod(&(0x7f0000000000)='./bus\x00', 0x10, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x301040, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x61)

649.224249ms ago: executing program 3 (id=2717):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

632.458109ms ago: executing program 3 (id=2718):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ff8}]})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000480)="e4b5eea546a2b4", 0x7, 0x494}])
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
msgsnd(0x0, 0x0, 0x401, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

531.855431ms ago: executing program 3 (id=2719):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x2}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000001540)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r3}])
io_getevents(r5, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0)
r6 = semget$private(0x0, 0x2, 0x24)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000080)=[0x1b])
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x66)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r8, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x1, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
mkdir(&(0x7f0000000200)='./file0\x00', 0x1c8)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000)=[0x60d, 0x2, 0x3])
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000100)=0x2000004)
futex(0x0, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x5)

440.275733ms ago: executing program 1 (id=2720):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18)
ioprio_get$uid(0x3, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
ftruncate(r8, 0x2007ff3)
copy_file_range(r8, 0x0, r7, 0x0, 0xffffffffa003e459, 0x700000000000000)

425.090273ms ago: executing program 0 (id=2721):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ff8}]})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000480)="e4b5eea546a2b4", 0x7, 0x494}])
msgsnd(0x0, 0x0, 0x401, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000580)=@raw=[@alu={0x7, 0x0, 0xb, 0x4, 0x4, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

397.073083ms ago: executing program 0 (id=2722):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000240)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_mixed}]}, 0x11, 0x305, &(0x7f0000002480)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x1}, 0x28)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440), 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
timer_gettime(0x0, &(0x7f0000000180))

354.846474ms ago: executing program 0 (id=2723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x2, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x4, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x7, 0x18, 0x9, 0x3, 0x8, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

173.295287ms ago: executing program 1 (id=2725):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380", 0x1f)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000001000000000000a273dfc3dc8b26e9f17d9d3ddb7c4f5abf"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0x4, 0x1019, &(0x7f0000000880)=""/4121}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18)
rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000002c0)={0x2012})
fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x573, &(0x7f0000000cc0)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r6, 0x20, 0x0, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESHEX, @ANYBLOB="163019aaa6d9eb14ed96147891164363de72f97e9fcd03602612f5c6393e01eacb093a93755268e7d4e58ad3ad614aa75d", @ANYRES32, @ANYRESDEC=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001a00)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="0000000000000000b708a36444f700007b8af8ff000000000702458c57ad8302c4747b59669c8b88aba930c348e77b8c2aeb7e24ac4819af764bd10e29fdd49f7101063af3f2030ce97cab054fc916af146d9c97571499fc1060e8e2a50daffafca575a36c9f90a4ba25ae86c1c2b76d33fafac26a"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700"/20], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x7, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c000000100001040000000063805f5c3d6f4666e200eb000000000000", @ANYRES32=0x0, @ANYBLOB="7b130000000000001c0012800b00010067656e65766500000c00028005000a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x40800)
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)

0s ago: executing program 1 (id=2726):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nodiscard}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@sysvgroups}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002"], 0x38}}, 0x0) (async)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',access=any,noxattr,nodevmap,dfltuid=', @ANYRESHEX]) (async)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='/$@\x00', 0x0, r0) (async)
times(&(0x7f0000000400)) (async)
gettid()

kernel console output (not intermixed with test programs):

 T9559] netlink: 'syz.3.2006': attribute type 13 has an invalid length.
[  152.939593][ T9557] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2007: couldn't read orphan inode 15 (err -117)
[  152.946350][ T9559] netlink: 'syz.3.2006': attribute type 17 has an invalid length.
[  152.965800][ T9557] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2007: bg 0: block 5: invalid block bitmap
[  152.979077][ T9559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.979034][ T9557] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  153.007050][ T9557] EXT4-fs (loop5): This should not happen!! Data will be lost
[  153.007050][ T9557] 
[  153.016830][ T9557] EXT4-fs (loop5): Total free blocks count 0
[  153.022962][ T9557] EXT4-fs (loop5): Free/Dirty block details
[  153.028875][ T9557] EXT4-fs (loop5): free_blocks=0
[  153.033930][ T9557] EXT4-fs (loop5): dirty_blocks=64
[  153.039210][ T9557] EXT4-fs (loop5): Block reservation details
[  153.039490][ T9559] loop3: detected capacity change from 0 to 1024
[  153.045335][ T9557] EXT4-fs (loop5): i_reserved_data_blocks=64
[  153.088940][ T9559] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  153.101360][ T9559] EXT4-fs (loop3): This should not happen!! Data will be lost
[  153.101360][ T9559] 
[  153.111141][ T9559] EXT4-fs (loop3): Total free blocks count 0
[  153.117261][ T9559] EXT4-fs (loop3): Free/Dirty block details
[  153.123281][ T9559] EXT4-fs (loop3): free_blocks=0
[  153.128245][ T9559] EXT4-fs (loop3): dirty_blocks=0
[  153.133394][ T9559] EXT4-fs (loop3): Block reservation details
[  153.139475][ T9559] EXT4-fs (loop3): i_reserved_data_blocks=0
[  153.147679][ T9563] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  153.158716][ T9563] SELinux: failed to load policy
[  153.180660][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2009'.
[  153.198587][ T9566] loop5: detected capacity change from 0 to 1024
[  153.205603][ T9566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.318212][ T9576] loop3: detected capacity change from 0 to 1024
[  153.389226][ T9576] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2012: Allocating blocks 449-513 which overlap fs metadata
[  153.437691][ T9575] EXT4-fs (loop3): pa ffff888108c089a0: logic 48, phys. 177, len 21
[  153.445806][ T9575] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4
[  153.594124][ T9583] lo speed is unknown, defaulting to 1000
[  153.765084][ T9586] 9pnet_fd: p9_fd_create_tcp (9586): problem connecting socket to 127.0.0.1
[  154.166992][ T9601] loop5: detected capacity change from 0 to 1024
[  154.314554][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2020'.
[  154.392750][ T9614] netlink: 'syz.1.2023': attribute type 13 has an invalid length.
[  154.400811][ T9614] netlink: 'syz.1.2023': attribute type 17 has an invalid length.
[  154.465918][ T9614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.489604][ T9602] loop3: detected capacity change from 0 to 1024
[  154.524276][ T9602] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  154.560752][ T9602] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  154.570584][ T9602] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  154.605043][ T9602] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  154.619021][ T9620] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  154.633140][ T9619] random: crng reseeded on system resumption
[  154.655757][ T9602] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.2019: unexpected bad inode w/o EXT4_IGET_BAD
[  154.678051][ T9619] IPVS: stopping master sync thread 9620 ...
[  154.693296][ T9602] EXT4-fs (loop3): no journal found
[  154.698543][ T9602] EXT4-fs (loop3): can't get journal size
[  154.732870][ T9602] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.2019: iget: special inode unallocated
[  154.738478][ T9625] loop5: detected capacity change from 0 to 512
[  154.745609][ T9602] EXT4-fs (loop3): get root inode failed
[  154.757354][ T9602] EXT4-fs (loop3): mount failed
[  154.792443][ T9625] EXT4-fs (loop5): 1 orphan inode deleted
[  154.811671][  T588] __quota_error: 299 callbacks suppressed
[  154.811688][  T588] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  154.827353][  T588] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[  154.848826][ T9625] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.861534][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'.
[  154.950105][ T9634] 9pnet_fd: p9_fd_create_tcp (9634): problem connecting socket to 127.0.0.1
[  155.059243][   T29] audit: type=1326 audit(1752942191.030:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.103682][   T29] audit: type=1326 audit(1752942191.030:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.127301][   T29] audit: type=1326 audit(1752942191.030:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.150821][   T29] audit: type=1326 audit(1752942191.040:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.174552][   T29] audit: type=1326 audit(1752942191.040:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.198075][   T29] audit: type=1326 audit(1752942191.040:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.221649][   T29] audit: type=1326 audit(1752942191.040:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.222151][ T9640] loop3: detected capacity change from 0 to 512
[  155.245207][   T29] audit: type=1326 audit(1752942191.040:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.275164][   T29] audit: type=1326 audit(1752942191.040:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f69fdbfe9a9 code=0x7ffc0000
[  155.290397][ T9640] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2032: iget: bad i_size value: 38620345925642
[  155.313993][ T9647] loop4: detected capacity change from 0 to 1024
[  155.324501][ T9640] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2032: couldn't read orphan inode 15 (err -117)
[  155.349894][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2034'.
[  155.351026][ T9640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2032: bg 0: block 5: invalid block bitmap
[  155.372095][ T9640] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  155.384915][ T9640] EXT4-fs (loop3): This should not happen!! Data will be lost
[  155.384915][ T9640] 
[  155.394690][ T9640] EXT4-fs (loop3): Total free blocks count 0
[  155.400885][ T9640] EXT4-fs (loop3): Free/Dirty block details
[  155.406829][ T9640] EXT4-fs (loop3): free_blocks=0
[  155.411835][ T9640] EXT4-fs (loop3): dirty_blocks=64
[  155.417140][ T9640] EXT4-fs (loop3): Block reservation details
[  155.423207][ T9640] EXT4-fs (loop3): i_reserved_data_blocks=64
[  155.620201][ T9659] loop3: detected capacity change from 0 to 512
[  155.636136][ T9683] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2043'.
[  155.646624][ T9683] FAULT_INJECTION: forcing a failure.
[  155.646624][ T9683] name failslab, interval 1, probability 0, space 0, times 0
[  155.659419][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.5.2043 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  155.659498][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  155.659511][ T9683] Call Trace:
[  155.659516][ T9683]  <TASK>
[  155.659524][ T9683]  __dump_stack+0x1d/0x30
[  155.659549][ T9683]  dump_stack_lvl+0xe8/0x140
[  155.659569][ T9683]  dump_stack+0x15/0x1b
[  155.659585][ T9683]  should_fail_ex+0x265/0x280
[  155.659701][ T9683]  should_failslab+0x8c/0xb0
[  155.659731][ T9683]  __kmalloc_noprof+0xa5/0x3e0
[  155.659817][ T9683]  ? pneigh_lookup+0x199/0x3c0
[  155.659845][ T9683]  pneigh_lookup+0x199/0x3c0
[  155.659874][ T9683]  neigh_add+0x4bd/0x8f0
[  155.659914][ T9683]  ? __pfx_neigh_add+0x10/0x10
[  155.659943][ T9683]  rtnetlink_rcv_msg+0x65a/0x6d0
[  155.660036][ T9683]  netlink_rcv_skb+0x120/0x220
[  155.660078][ T9683]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  155.660142][ T9683]  rtnetlink_rcv+0x1c/0x30
[  155.660168][ T9683]  netlink_unicast+0x5a5/0x680
[  155.660210][ T9683]  netlink_sendmsg+0x58b/0x6b0
[  155.660284][ T9683]  ? __pfx_netlink_sendmsg+0x10/0x10
[  155.660304][ T9683]  __sock_sendmsg+0x142/0x180
[  155.660332][ T9683]  ____sys_sendmsg+0x31e/0x4e0
[  155.660379][ T9683]  ___sys_sendmsg+0x17b/0x1d0
[  155.660488][ T9683]  __x64_sys_sendmsg+0xd4/0x160
[  155.660544][ T9683]  x64_sys_call+0x2999/0x2fb0
[  155.660574][ T9683]  do_syscall_64+0xd2/0x200
[  155.660641][ T9683]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  155.660676][ T9683]  ? clear_bhb_loop+0x40/0x90
[  155.660698][ T9683]  ? clear_bhb_loop+0x40/0x90
[  155.660720][ T9683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.660740][ T9683] RIP: 0033:0x7f5cd308e9a9
[  155.660772][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.660823][ T9683] RSP: 002b:00007f5cd16ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  155.660901][ T9683] RAX: ffffffffffffffda RBX: 00007f5cd32b5fa0 RCX: 00007f5cd308e9a9
[  155.660914][ T9683] RDX: 0000000000040000 RSI: 0000200000000940 RDI: 0000000000000005
[  155.660926][ T9683] RBP: 00007f5cd16ef090 R08: 0000000000000000 R09: 0000000000000000
[  155.660938][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.660949][ T9683] R13: 0000000000000000 R14: 00007f5cd32b5fa0 R15: 00007ffee0d4f408
[  155.660975][ T9683]  </TASK>
[  155.917148][ T9659] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  155.952665][ T9659] EXT4-fs (loop3): orphan cleanup on readonly fs
[  155.981537][ T9659] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2038: Block bitmap for bg 0 marked uninitialized
[  155.999402][ T9659] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  156.009772][ T9659] EXT4-fs (loop3): 1 orphan inode deleted
[  156.029605][ T9659] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  156.040617][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'.
[  156.070435][ T9659] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  156.119983][ T9659] siw: device registration error -23
[  156.123366][ T9705] loop4: detected capacity change from 0 to 1024
[  156.136724][ T9701] loop5: detected capacity change from 0 to 512
[  156.164271][ T9701] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  156.262311][ T9725] loop3: detected capacity change from 0 to 512
[  156.307356][ T9725] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  156.328506][ T9730] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  156.340497][ T9729] random: crng reseeded on system resumption
[  156.356500][ T9729] IPVS: stopping master sync thread 9730 ...
[  156.360941][ T9733] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  156.373350][ T9733] SELinux: failed to load policy
[  156.388297][ T9735] loop5: detected capacity change from 0 to 512
[  156.400846][ T9738] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  156.418176][ T9737] random: crng reseeded on system resumption
[  156.450400][ T9737] IPVS: stopping master sync thread 9738 ...
[  156.456527][ T9735] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[  156.588620][ T9735] loop5: detected capacity change from 0 to 512
[  156.596409][ T9735] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2056: casefold flag without casefold feature
[  156.632997][ T9735] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2056: couldn't read orphan inode 15 (err -117)
[  156.648289][ T9760] loop3: detected capacity change from 0 to 1024
[  156.669852][ T9760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  156.704614][ T9748] loop4: detected capacity change from 0 to 512
[  156.725349][ T9748] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  156.770903][ T9748] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  156.779891][ T9748] EXT4-fs (loop4): 1 truncate cleaned up
[  156.794053][ T9748] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  156.815616][ T9748] EXT4-fs (loop4): Remounting filesystem read-only
[  157.145457][ T9778] lo speed is unknown, defaulting to 1000
[  157.297113][ T9782] __nla_validate_parse: 3 callbacks suppressed
[  157.297129][ T9782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2073'.
[  157.345013][ T9785] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2074'.
[  157.464148][ T9787] loop3: detected capacity change from 0 to 512
[  157.503958][ T9787] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  157.585538][   T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1)
[  157.614624][ T9805] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  157.614624][ T9805]    program syz.1.2082 not setting count and/or reply_len properly
[  157.680799][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2085'.
[  157.698444][ T9816] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2086'.
[  157.841689][ T9834] netlink: 'syz.5.2095': attribute type 4 has an invalid length.
[  157.865725][ T9834] netlink: 'syz.5.2095': attribute type 4 has an invalid length.
[  157.870120][ T9840] IPVS: Error connecting to the multicast addr
[  157.886660][ T9840] random: crng reseeded on system resumption
[  157.908627][ T9842] netlink: 'syz.0.2099': attribute type 21 has an invalid length.
[  157.926615][ T9842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2099'.
[  157.961999][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'.
[  157.979620][ T9838] loop4: detected capacity change from 0 to 512
[  157.987214][ T9838] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  158.007111][ T9838] EXT4-fs (loop4): orphan cleanup on readonly fs
[  158.014088][ T9838] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2097: Block bitmap for bg 0 marked uninitialized
[  158.027708][ T9838] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  158.045895][ T9838] EXT4-fs (loop4): 1 orphan inode deleted
[  158.100199][ T9838] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  158.126250][ T9867] loop5: detected capacity change from 0 to 512
[  158.136140][ T9838] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  158.149256][ T9869] 9pnet_fd: p9_fd_create_tcp (9869): problem connecting socket to 127.0.0.1
[  158.166594][ T9838] siw: device registration error -23
[  158.193688][ T9867] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  158.220156][ T9877] loop4: detected capacity change from 0 to 1024
[  158.253876][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2112'.
[  158.278222][ T9885] netlink: 'syz.3.2115': attribute type 21 has an invalid length.
[  158.286278][ T9885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2115'.
[  158.337252][ T9891] FAULT_INJECTION: forcing a failure.
[  158.337252][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.350426][ T9891] CPU: 1 UID: 0 PID: 9891 Comm: syz.4.2117 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  158.350509][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  158.350526][ T9891] Call Trace:
[  158.350534][ T9891]  <TASK>
[  158.350542][ T9891]  __dump_stack+0x1d/0x30
[  158.350564][ T9891]  dump_stack_lvl+0xe8/0x140
[  158.350604][ T9891]  dump_stack+0x15/0x1b
[  158.350626][ T9891]  should_fail_ex+0x265/0x280
[  158.350666][ T9891]  should_fail+0xb/0x20
[  158.350779][ T9891]  should_fail_usercopy+0x1a/0x20
[  158.350876][ T9891]  _copy_from_user+0x1c/0xb0
[  158.350897][ T9891]  memdup_user+0x5e/0xd0
[  158.350925][ T9891]  strndup_user+0x68/0xb0
[  158.350996][ T9891]  __se_sys_mount+0x4d/0x2e0
[  158.351104][ T9891]  ? fput+0x8f/0xc0
[  158.351136][ T9891]  ? ksys_write+0x192/0x1a0
[  158.351252][ T9891]  __x64_sys_mount+0x67/0x80
[  158.351296][ T9891]  x64_sys_call+0xd36/0x2fb0
[  158.351324][ T9891]  do_syscall_64+0xd2/0x200
[  158.351348][ T9891]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  158.351402][ T9891]  ? clear_bhb_loop+0x40/0x90
[  158.351431][ T9891]  ? clear_bhb_loop+0x40/0x90
[  158.351508][ T9891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.351536][ T9891] RIP: 0033:0x7f3e272ce9a9
[  158.351555][ T9891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.351580][ T9891] RSP: 002b:00007f3e2592f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  158.351668][ T9891] RAX: ffffffffffffffda RBX: 00007f3e274f5fa0 RCX: 00007f3e272ce9a9
[  158.351686][ T9891] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000
[  158.351703][ T9891] RBP: 00007f3e2592f090 R08: 0000200000000400 R09: 0000000000000000
[  158.351720][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.351737][ T9891] R13: 0000000000000000 R14: 00007f3e274f5fa0 R15: 00007ffff0b571e8
[  158.351763][ T9891]  </TASK>
[  158.583804][ T9900] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  158.583804][ T9900]    program syz.1.2120 not setting count and/or reply_len properly
[  158.616112][ T9898] loop4: detected capacity change from 0 to 512
[  158.632270][ T9898] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2119: iget: bad i_size value: 38620345925642
[  158.645530][ T9898] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2119: couldn't read orphan inode 15 (err -117)
[  158.665811][ T9898] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2119: bg 0: block 5: invalid block bitmap
[  158.678569][ T9898] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  158.690927][ T9898] EXT4-fs (loop4): This should not happen!! Data will be lost
[  158.690927][ T9898] 
[  158.700696][ T9898] EXT4-fs (loop4): Total free blocks count 0
[  158.706735][ T9898] EXT4-fs (loop4): Free/Dirty block details
[  158.712767][ T9898] EXT4-fs (loop4): free_blocks=0
[  158.717723][ T9898] EXT4-fs (loop4): dirty_blocks=64
[  158.722888][ T9898] EXT4-fs (loop4): Block reservation details
[  158.728923][ T9898] EXT4-fs (loop4): i_reserved_data_blocks=64
[  158.765141][ T9911] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  158.778923][ T9910] random: crng reseeded on system resumption
[  158.792911][ T9910] IPVS: stopping master sync thread 9911 ...
[  158.822035][ T9915] loop4: detected capacity change from 0 to 512
[  158.950676][ T9926] netlink: 'syz.1.2128': attribute type 13 has an invalid length.
[  158.958816][ T9926] netlink: 'syz.1.2128': attribute type 17 has an invalid length.
[  158.969513][ T9920] vhci_hcd: invalid port number 96
[  158.974726][ T9920] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  158.982735][ T9926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.003620][ T9928] FAULT_INJECTION: forcing a failure.
[  159.003620][ T9928] name failslab, interval 1, probability 0, space 0, times 0
[  159.016535][ T9928] CPU: 0 UID: 0 PID: 9928 Comm: syz.0.2130 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  159.016621][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  159.016635][ T9928] Call Trace:
[  159.016641][ T9928]  <TASK>
[  159.016649][ T9928]  __dump_stack+0x1d/0x30
[  159.016671][ T9928]  dump_stack_lvl+0xe8/0x140
[  159.016691][ T9928]  dump_stack+0x15/0x1b
[  159.016708][ T9928]  should_fail_ex+0x265/0x280
[  159.016763][ T9928]  should_failslab+0x8c/0xb0
[  159.016786][ T9928]  kmem_cache_alloc_node_noprof+0x57/0x320
[  159.016816][ T9928]  ? __alloc_skb+0x101/0x320
[  159.016846][ T9928]  __alloc_skb+0x101/0x320
[  159.016916][ T9928]  ? audit_log_start+0x365/0x6c0
[  159.016950][ T9928]  audit_log_start+0x380/0x6c0
[  159.017044][ T9928]  audit_seccomp+0x48/0x100
[  159.017166][ T9928]  ? __seccomp_filter+0x68c/0x10d0
[  159.017189][ T9928]  __seccomp_filter+0x69d/0x10d0
[  159.017213][ T9928]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  159.017249][ T9928]  ? vfs_write+0x75e/0x8e0
[  159.017317][ T9928]  ? __rcu_read_unlock+0x4f/0x70
[  159.017406][ T9928]  ? __fget_files+0x184/0x1c0
[  159.017430][ T9928]  __secure_computing+0x82/0x150
[  159.017453][ T9928]  syscall_trace_enter+0xcf/0x1e0
[  159.017482][ T9928]  do_syscall_64+0xac/0x200
[  159.017500][ T9928]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  159.017557][ T9928]  ? clear_bhb_loop+0x40/0x90
[  159.017579][ T9928]  ? clear_bhb_loop+0x40/0x90
[  159.017602][ T9928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.017623][ T9928] RIP: 0033:0x7f9a5289e9a9
[  159.017639][ T9928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.017718][ T9928] RSP: 002b:00007f9a50f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097
[  159.017737][ T9928] RAX: ffffffffffffffda RBX: 00007f9a52ac5fa0 RCX: 00007f9a5289e9a9
[  159.017750][ T9928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  159.017780][ T9928] RBP: 00007f9a50f07090 R08: 0000000000000000 R09: 0000000000000000
[  159.017792][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.017805][ T9928] R13: 0000000000000000 R14: 00007f9a52ac5fa0 R15: 00007ffc8a1b29d8
[  159.017825][ T9928]  </TASK>
[  159.259785][ T9930] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  159.259785][ T9930]    program syz.4.2131 not setting count and/or reply_len properly
[  159.296516][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2132'.
[  159.390120][ T9941] netlink: 'syz.3.2136': attribute type 21 has an invalid length.
[  159.407863][ T9943] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  159.419643][ T9941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2136'.
[  159.431077][ T9942] random: crng reseeded on system resumption
[  159.444124][ T9942] IPVS: stopping master sync thread 9943 ...
[  159.450335][ T9933] loop5: detected capacity change from 0 to 1024
[  159.457351][ T9933] EXT4-fs: Ignoring removed nomblk_io_submit option
[  159.589910][ T9960] 9pnet_fd: p9_fd_create_tcp (9960): problem connecting socket to 127.0.0.1
[  159.626092][ T9964] loop5: detected capacity change from 0 to 512
[  159.793389][ T9975] vhci_hcd: invalid port number 96
[  159.798565][ T9975] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  159.833764][ T9986] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  159.854503][ T9985] random: crng reseeded on system resumption
[  159.867191][ T9985] IPVS: stopping master sync thread 9986 ...
[  159.896677][ T9993] 9pnet_fd: p9_fd_create_tcp (9993): problem connecting socket to 127.0.0.1
[  159.969205][T10002] loop4: detected capacity change from 0 to 1024
[  159.977252][T10002] EXT4-fs: inline encryption not supported
[  159.988961][T10002] EXT4-fs: Ignoring removed bh option
[  159.990445][   T29] kauditd_printk_skb: 532 callbacks suppressed
[  159.990463][   T29] audit: type=1326 audit(1752942195.960:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  159.994545][T10002] ext4: Unknown parameter 'smackfsdef'
[  160.003273][   T29] audit: type=1326 audit(1752942195.980:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.076193][   T29] audit: type=1326 audit(1752942196.010:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.076514][T10002] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  160.099805][   T29] audit: type=1326 audit(1752942196.010:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.106176][T10002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  160.106305][T10002] vhci_hcd vhci_hcd.0: Device attached
[  160.129830][   T29] audit: type=1326 audit(1752942196.030:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.166297][   T29] audit: type=1326 audit(1752942196.030:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.189945][   T29] audit: type=1326 audit(1752942196.030:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.213622][   T29] audit: type=1326 audit(1752942196.030:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.237242][   T29] audit: type=1326 audit(1752942196.030:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.260940][   T29] audit: type=1326 audit(1752942196.030:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.0.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  160.285634][T10005] vhci_hcd: connection closed
[  160.285906][ T1759] vhci_hcd: stop threads
[  160.295026][ T1759] vhci_hcd: release socket
[  160.299464][ T1759] vhci_hcd: disconnect device
[  160.322406][ T6821] vhci_hcd: vhci_device speed not set
[  160.590765][T10017] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  160.606782][T10016] random: crng reseeded on system resumption
[  160.620890][T10016] IPVS: stopping master sync thread 10017 ...
[  160.676299][T10023] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  160.692525][T10022] random: crng reseeded on system resumption
[  160.704426][T10022] IPVS: stopping master sync thread 10023 ...
[  160.832437][T10025] loop5: detected capacity change from 0 to 512
[  160.839808][T10025] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  160.858485][T10025] EXT4-fs (loop5): orphan cleanup on readonly fs
[  160.866037][T10025] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2165: Block bitmap for bg 0 marked uninitialized
[  160.880782][T10025] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  160.890590][T10025] EXT4-fs (loop5): 1 orphan inode deleted
[  160.898244][T10025] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  160.907961][T10025] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  160.941992][T10033] lo speed is unknown, defaulting to 1000
[  160.949339][T10025] siw: device registration error -23
[  160.959853][T10025] EXT4-fs unmount: 69 callbacks suppressed
[  160.959869][T10025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.006085][T10040] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  161.022577][T10039] random: crng reseeded on system resumption
[  161.060880][T10039] IPVS: stopping master sync thread 10040 ...
[  161.110009][T10043] loop5: detected capacity change from 0 to 512
[  161.143146][T10043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.155757][T10043] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.377322][T10053] loop3: detected capacity change from 0 to 1024
[  161.394398][T10053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.444397][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.466022][T10061] IPVS: Error connecting to the multicast addr
[  161.499604][T10061] random: crng reseeded on system resumption
[  161.588109][T10076] 9pnet_fd: p9_fd_create_tcp (10076): problem connecting socket to 127.0.0.1
[  161.617064][T10080] 9pnet_fd: p9_fd_create_tcp (10080): problem connecting socket to 127.0.0.1
[  161.720632][T10090] FAULT_INJECTION: forcing a failure.
[  161.720632][T10090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.733891][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.1.2189 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  161.733925][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  161.733941][T10090] Call Trace:
[  161.733947][T10090]  <TASK>
[  161.733955][T10090]  __dump_stack+0x1d/0x30
[  161.733979][T10090]  dump_stack_lvl+0xe8/0x140
[  161.734080][T10090]  dump_stack+0x15/0x1b
[  161.734165][T10090]  should_fail_ex+0x265/0x280
[  161.734201][T10090]  should_fail+0xb/0x20
[  161.734232][T10090]  should_fail_usercopy+0x1a/0x20
[  161.734345][T10090]  _copy_from_user+0x1c/0xb0
[  161.734367][T10090]  sock_do_ioctl+0xe6/0x220
[  161.734396][T10090]  sock_ioctl+0x41b/0x610
[  161.734502][T10090]  ? __pfx_sock_ioctl+0x10/0x10
[  161.734603][T10090]  __se_sys_ioctl+0xce/0x140
[  161.734636][T10090]  __x64_sys_ioctl+0x43/0x50
[  161.734667][T10090]  x64_sys_call+0x19a8/0x2fb0
[  161.734690][T10090]  do_syscall_64+0xd2/0x200
[  161.734726][T10090]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  161.734767][T10090]  ? clear_bhb_loop+0x40/0x90
[  161.734857][T10090]  ? clear_bhb_loop+0x40/0x90
[  161.734882][T10090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.734917][T10090] RIP: 0033:0x7f9a1fb1e9a9
[  161.734934][T10090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.734955][T10090] RSP: 002b:00007f9a1e17f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.734978][T10090] RAX: ffffffffffffffda RBX: 00007f9a1fd45fa0 RCX: 00007f9a1fb1e9a9
[  161.734993][T10090] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000008
[  161.735008][T10090] RBP: 00007f9a1e17f090 R08: 0000000000000000 R09: 0000000000000000
[  161.735026][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.735042][T10090] R13: 0000000000000000 R14: 00007f9a1fd45fa0 R15: 00007ffc55bc1258
[  161.735124][T10090]  </TASK>
[  162.045054][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.054477][T10101] loop4: detected capacity change from 0 to 512
[  162.064319][T10101] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2194: iget: bad i_size value: 38620345925642
[  162.084252][T10101] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2194: couldn't read orphan inode 15 (err -117)
[  162.096600][T10106] loop5: detected capacity change from 0 to 512
[  162.103674][T10106] ext4: Unknown parameter 'audit'
[  162.112027][T10101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.129689][T10101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2194: bg 0: block 5: invalid block bitmap
[  162.143226][T10101] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  162.155747][T10101] EXT4-fs (loop4): This should not happen!! Data will be lost
[  162.155747][T10101] 
[  162.165465][T10101] EXT4-fs (loop4): Total free blocks count 0
[  162.171515][T10101] EXT4-fs (loop4): Free/Dirty block details
[  162.177441][T10101] EXT4-fs (loop4): free_blocks=0
[  162.182432][T10101] EXT4-fs (loop4): dirty_blocks=64
[  162.187577][T10101] EXT4-fs (loop4): Block reservation details
[  162.193709][T10101] EXT4-fs (loop4): i_reserved_data_blocks=64
[  162.202353][T10109] netlink: 'syz.5.2196': attribute type 13 has an invalid length.
[  162.210479][T10109] netlink: 'syz.5.2196': attribute type 17 has an invalid length.
[  162.242341][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.278508][T10116] loop5: detected capacity change from 0 to 1024
[  162.285788][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.313801][T10116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.326393][T10115] loop4: detected capacity change from 0 to 512
[  162.342379][T10115] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2199: iget: bad i_size value: 38620345925642
[  162.342568][T10109] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  162.356205][T10115] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2199: couldn't read orphan inode 15 (err -117)
[  162.367750][T10109] EXT4-fs (loop5): This should not happen!! Data will be lost
[  162.367750][T10109] 
[  162.367769][T10109] EXT4-fs (loop5): Total free blocks count 0
[  162.367786][T10109] EXT4-fs (loop5): Free/Dirty block details
[  162.381088][T10115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.389390][T10109] EXT4-fs (loop5): free_blocks=0
[  162.403540][T10115] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2199: bg 0: block 5: invalid block bitmap
[  162.414156][T10109] EXT4-fs (loop5): dirty_blocks=0
[  162.414172][T10109] EXT4-fs (loop5): Block reservation details
[  162.414187][T10109] EXT4-fs (loop5): i_reserved_data_blocks=0
[  162.458482][T10115] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  162.470889][T10115] EXT4-fs (loop4): This should not happen!! Data will be lost
[  162.470889][T10115] 
[  162.480589][T10115] EXT4-fs (loop4): Total free blocks count 0
[  162.486617][T10115] EXT4-fs (loop4): Free/Dirty block details
[  162.492642][T10115] EXT4-fs (loop4): free_blocks=0
[  162.497826][T10115] EXT4-fs (loop4): dirty_blocks=64
[  162.502999][T10115] EXT4-fs (loop4): Block reservation details
[  162.509034][T10115] EXT4-fs (loop4): i_reserved_data_blocks=64
[  162.518154][T10124] syzkaller0: entered promiscuous mode
[  162.523924][T10124] syzkaller0: entered allmulticast mode
[  162.556508][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.584648][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.655495][T10136] loop5: detected capacity change from 0 to 512
[  162.706898][T10132] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  162.713629][T10132] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  162.721242][T10132] vhci_hcd vhci_hcd.0: Device attached
[  162.735938][T10134] vhci_hcd: connection closed
[  162.736218][   T51] vhci_hcd: stop threads
[  162.745273][   T51] vhci_hcd: release socket
[  162.749856][   T51] vhci_hcd: disconnect device
[  163.081569][T10146] loop5: detected capacity change from 0 to 512
[  163.209339][T10148] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  163.209339][T10148]    program syz.5.2209 not setting count and/or reply_len properly
[  163.266738][T10156] FAULT_INJECTION: forcing a failure.
[  163.266738][T10156] name failslab, interval 1, probability 0, space 0, times 0
[  163.272477][T10154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  163.279514][T10156] CPU: 0 UID: 0 PID: 10156 Comm: syz.5.2212 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  163.279555][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  163.279575][T10156] Call Trace:
[  163.279583][T10156]  <TASK>
[  163.279593][T10156]  __dump_stack+0x1d/0x30
[  163.279630][T10156]  dump_stack_lvl+0xe8/0x140
[  163.279658][T10156]  dump_stack+0x15/0x1b
[  163.279681][T10156]  should_fail_ex+0x265/0x280
[  163.279724][T10156]  should_failslab+0x8c/0xb0
[  163.279756][T10156]  kmem_cache_alloc_noprof+0x50/0x310
[  163.279792][T10156]  ? vm_area_dup+0x33/0x2c0
[  163.279828][T10156]  ? __rcu_read_unlock+0x4f/0x70
[  163.279861][T10156]  vm_area_dup+0x33/0x2c0
[  163.279900][T10156]  __split_vma+0xe9/0x650
[  163.279937][T10156]  ? selinux_file_open+0x2df/0x330
[  163.279971][T10156]  vms_gather_munmap_vmas+0x172/0x7a0
[  163.280002][T10156]  ? mntput_no_expire+0x6f/0x3c0
[  163.280052][T10156]  ? mntput+0x4b/0x80
[  163.280083][T10156]  do_vmi_align_munmap+0x1a4/0x3d0
[  163.280125][T10156]  do_vmi_munmap+0x1db/0x220
[  163.280155][T10156]  mremap_at+0x100/0x690
[  163.280194][T10156]  __se_sys_mremap+0x452/0x6f0
[  163.280235][T10156]  ? ksys_write+0x192/0x1a0
[  163.280276][T10156]  __x64_sys_mremap+0x67/0x80
[  163.280309][T10156]  x64_sys_call+0x2ba9/0x2fb0
[  163.280338][T10156]  do_syscall_64+0xd2/0x200
[  163.280360][T10156]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  163.280393][T10156]  ? clear_bhb_loop+0x40/0x90
[  163.280420][T10156]  ? clear_bhb_loop+0x40/0x90
[  163.280467][T10156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.280496][T10156] RIP: 0033:0x7f5cd308e9a9
[  163.280517][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.280542][T10156] RSP: 002b:00007f5cd16ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  163.280568][T10156] RAX: ffffffffffffffda RBX: 00007f5cd32b5fa0 RCX: 00007f5cd308e9a9
[  163.280585][T10156] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000200000400000
[  163.280602][T10156] RBP: 00007f5cd16ef090 R08: 00002000008b5000 R09: 0000000000000000
[  163.280624][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.280641][T10156] R13: 0000000000000000 R14: 00007f5cd32b5fa0 R15: 00007ffee0d4f408
[  163.280679][T10156]  </TASK>
[  163.515003][T10154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.522748][T10154] vhci_hcd vhci_hcd.0: Device attached
[  163.602091][T10159] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14)
[  163.608818][T10159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.616444][T10159] vhci_hcd vhci_hcd.0: Device attached
[  163.639923][T10170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  163.649406][T10170] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21)
[  163.656170][T10170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  163.663941][T10170] vhci_hcd vhci_hcd.0: Device attached
[  163.697599][T10177] loop4: detected capacity change from 0 to 512
[  163.726997][T10154] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13)
[  163.733642][T10154] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  163.741381][T10154] vhci_hcd vhci_hcd.0: Device attached
[  163.748025][T10178] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(16)
[  163.754656][T10178] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  163.762462][T10178] vhci_hcd vhci_hcd.0: Device attached
[  163.763543][T10163] loop3: detected capacity change from 0 to 512
[  163.775286][T10164] futex_wake_op: syz.5.2213 tries to shift op by -1; fix this program
[  163.816824][T10159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  163.845449][T10154] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(18)
[  163.852200][T10154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  163.852908][   T10] usb 1-1: new low-speed USB device number 2 using vhci_hcd
[  163.859926][T10154] vhci_hcd vhci_hcd.0: Device attached
[  163.879067][T10154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  163.888583][T10163] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2214: iget: bad i_size value: 38620345925642
[  163.910030][T10154] vhci_hcd vhci_hcd.0: port 0 already used
[  163.916076][T10163] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2214: couldn't read orphan inode 15 (err -117)
[  163.928671][T10173] vhci_hcd: connection closed
[  163.928792][   T57] vhci_hcd: stop threads
[  163.928890][T10179] vhci_hcd: connection closed
[  163.933571][   T57] vhci_hcd: release socket
[  163.938273][T10160] vhci_hcd: connection closed
[  163.942525][   T57] vhci_hcd: disconnect device
[  163.947188][T10185] vhci_hcd: connection closed
[  163.962677][T10157] vhci_hcd: connection reset by peer
[  163.975134][T10166] vhci_hcd: connection closed
[  163.981257][   T57] vhci_hcd: stop threads
[  163.990444][   T57] vhci_hcd: release socket
[  163.994922][   T57] vhci_hcd: disconnect device
[  164.011704][   T57] vhci_hcd: stop threads
[  164.015997][   T57] vhci_hcd: release socket
[  164.020432][   T57] vhci_hcd: disconnect device
[  164.024598][T10163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.037699][   T57] vhci_hcd: stop threads
[  164.042025][   T57] vhci_hcd: release socket
[  164.046540][   T57] vhci_hcd: disconnect device
[  164.053957][T10194] loop5: detected capacity change from 0 to 512
[  164.061643][   T57] vhci_hcd: stop threads
[  164.065929][   T57] vhci_hcd: release socket
[  164.070377][   T57] vhci_hcd: disconnect device
[  164.082807][   T57] vhci_hcd: stop threads
[  164.087173][   T57] vhci_hcd: release socket
[  164.091643][   T57] vhci_hcd: disconnect device
[  164.146593][T10197] __nla_validate_parse: 8 callbacks suppressed
[  164.146607][T10197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2220'.
[  164.162074][T10197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2220'.
[  164.250747][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'.
[  164.275788][T10201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  164.282511][T10201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  164.290205][T10201] vhci_hcd vhci_hcd.0: Device attached
[  164.327043][T10205] vhci_hcd: connection closed
[  164.327215][  T588] vhci_hcd: stop threads
[  164.336299][  T588] vhci_hcd: release socket
[  164.340869][  T588] vhci_hcd: disconnect device
[  164.437556][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.471466][T10209] vhci_hcd: invalid port number 96
[  164.476639][T10209] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  164.665966][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'.
[  164.856755][T10220] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  164.856755][T10220]    program syz.0.2228 not setting count and/or reply_len properly
[  165.024740][T10233] vhci_hcd: invalid port number 96
[  165.029926][T10233] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  165.082627][   T29] kauditd_printk_skb: 2838 callbacks suppressed
[  165.082641][   T29] audit: type=1326 audit(1752942201.060:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a52895967 code=0x7ffc0000
[  165.115742][   T29] audit: type=1326 audit(1752942201.060:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a5283ab89 code=0x7ffc0000
[  165.139323][   T29] audit: type=1326 audit(1752942201.060:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  165.162919][   T29] audit: type=1326 audit(1752942201.060:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a52895967 code=0x7ffc0000
[  165.186505][   T29] audit: type=1326 audit(1752942201.060:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a5283ab89 code=0x7ffc0000
[  165.210120][   T29] audit: type=1326 audit(1752942201.060:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a52895967 code=0x7ffc0000
[  165.233920][   T29] audit: type=1326 audit(1752942201.060:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a5283ab89 code=0x7ffc0000
[  165.257423][   T29] audit: type=1326 audit(1752942201.060:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a52895967 code=0x7ffc0000
[  165.280933][   T29] audit: type=1326 audit(1752942201.060:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a5283ab89 code=0x7ffc0000
[  165.304689][   T29] audit: type=1326 audit(1752942201.060:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.0.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9a52895967 code=0x7ffc0000
[  165.423843][T10251] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  165.423843][T10251]    program syz.4.2239 not setting count and/or reply_len properly
[  165.453274][T10245] SELinux: syz.0.2237 (10245) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  165.521701][T10256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  165.528268][T10256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  165.535919][T10256] vhci_hcd vhci_hcd.0: Device attached
[  165.550027][T10263] loop3: detected capacity change from 0 to 512
[  165.588875][T10261] vhci_hcd: connection closed
[  165.589181][   T51] vhci_hcd: stop threads
[  165.598395][   T51] vhci_hcd: release socket
[  165.602927][   T51] vhci_hcd: disconnect device
[  165.643114][T10263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.667622][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2245'.
[  165.731949][T10263] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.741796][T10269] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  165.765736][T10269] SELinux: failed to load policy
[  165.972484][T10291] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2253'.
[  166.087717][T10300] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2255'.
[  166.131546][T10305] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2257'.
[  166.225116][T10314] IPVS: Error connecting to the multicast addr
[  166.235147][T10310] lo speed is unknown, defaulting to 1000
[  166.253485][T10311] vhci_hcd: invalid port number 96
[  166.258736][T10311] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  166.271159][T10314] random: crng reseeded on system resumption
[  166.304872][T10319] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  166.355082][T10325] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  166.469026][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.503643][T10329] loop5: detected capacity change from 0 to 512
[  166.510349][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'.
[  166.519706][T10329] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  166.530915][T10329] EXT4-fs (loop5): orphan cleanup on readonly fs
[  166.538044][T10329] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2267: Block bitmap for bg 0 marked uninitialized
[  166.551797][T10329] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  166.561614][T10329] EXT4-fs (loop5): 1 orphan inode deleted
[  166.567922][T10329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  166.581376][T10329] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  166.583098][T10348] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  166.590844][T10329] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  166.608966][T10349] loop3: detected capacity change from 0 to 1024
[  166.614104][T10329] siw: device registration error -23
[  166.616892][T10349] EXT4-fs: inline encryption not supported
[  166.629978][T10347] random: crng reseeded on system resumption
[  166.639674][T10349] EXT4-fs: Ignoring removed bh option
[  166.642073][T10347] IPVS: stopping master sync thread 10348 ...
[  166.645198][T10349] ext4: Unknown parameter 'smackfsdef'
[  166.681451][T10349] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  166.688000][T10349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  166.695747][T10349] vhci_hcd vhci_hcd.0: Device attached
[  166.713022][T10352] vhci_hcd: connection closed
[  166.713303][  T588] vhci_hcd: stop threads
[  166.713301][T10355] loop4: detected capacity change from 0 to 4096
[  166.728653][  T588] vhci_hcd: release socket
[  166.733199][  T588] vhci_hcd: disconnect device
[  166.747854][T10355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.761853][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.796951][T10355] process 'syz.4.2275' launched '/dev/fd/6' with NULL argv: empty string added
[  166.817341][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.832932][T10363] loop5: detected capacity change from 0 to 1024
[  166.840629][T10363] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  166.851604][T10363] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  166.862013][T10363] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  166.873023][T10363] EXT4-fs (loop5): invalid journal inode
[  166.878773][T10363] EXT4-fs (loop5): can't get journal size
[  166.891837][T10363] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.2277: blocks 2-2 from inode overlap system zone
[  166.929484][T10363] EXT4-fs (loop5): failed to initialize system zone (-117)
[  166.946473][T10363] EXT4-fs (loop5): mount failed
[  167.158438][T10386] lo speed is unknown, defaulting to 1000
[  167.283519][T10390] vhci_hcd: invalid port number 96
[  167.288697][T10390] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  167.343960][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2288'.
[  167.402307][T10398] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  167.606527][T10418] loop3: detected capacity change from 0 to 512
[  167.673765][T10420] loop5: detected capacity change from 0 to 512
[  167.755355][T10429] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  167.770534][T10428] random: crng reseeded on system resumption
[  167.788091][T10428] IPVS: stopping master sync thread 10429 ...
[  167.829499][T10435] IPVS: Error connecting to the multicast addr
[  167.847985][T10435] random: crng reseeded on system resumption
[  167.877845][T10439] IPVS: Error connecting to the multicast addr
[  167.892011][T10439] random: crng reseeded on system resumption
[  167.991425][T10443] FAULT_INJECTION: forcing a failure.
[  167.991425][T10443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  168.004700][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.0.2310 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  168.004745][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  168.004757][T10443] Call Trace:
[  168.004763][T10443]  <TASK>
[  168.004772][T10443]  __dump_stack+0x1d/0x30
[  168.004800][T10443]  dump_stack_lvl+0xe8/0x140
[  168.004844][T10443]  dump_stack+0x15/0x1b
[  168.004864][T10443]  should_fail_ex+0x265/0x280
[  168.004901][T10443]  should_fail+0xb/0x20
[  168.004959][T10443]  should_fail_usercopy+0x1a/0x20
[  168.005037][T10443]  _copy_from_user+0x1c/0xb0
[  168.005063][T10443]  __x64_sys_rt_sigsuspend+0x70/0xe0
[  168.005130][T10443]  x64_sys_call+0x1ba8/0x2fb0
[  168.005159][T10443]  do_syscall_64+0xd2/0x200
[  168.005182][T10443]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  168.005263][T10443]  ? clear_bhb_loop+0x40/0x90
[  168.005287][T10443]  ? clear_bhb_loop+0x40/0x90
[  168.005311][T10443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.005373][T10443] RIP: 0033:0x7f9a5289e9a9
[  168.005390][T10443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.005411][T10443] RSP: 002b:00007f9a50f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082
[  168.005509][T10443] RAX: ffffffffffffffda RBX: 00007f9a52ac5fa0 RCX: 00007f9a5289e9a9
[  168.005523][T10443] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00002000000002c0
[  168.005537][T10443] RBP: 00007f9a50f07090 R08: 0000000000000000 R09: 0000000000000000
[  168.005550][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.005564][T10443] R13: 0000000000000000 R14: 00007f9a52ac5fa0 R15: 00007ffc8a1b29d8
[  168.005586][T10443]  </TASK>
[  168.009876][T10454] IPVS: Error connecting to the multicast addr
[  168.192218][T10454] random: crng reseeded on system resumption
[  168.215715][T10460] loop4: detected capacity change from 0 to 1024
[  168.244124][T10460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.291781][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.352029][T10476] loop4: detected capacity change from 0 to 512
[  168.360609][T10476] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2321: iget: bad i_size value: 38620345925642
[  168.374958][T10476] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2321: couldn't read orphan inode 15 (err -117)
[  168.397911][T10481] loop3: detected capacity change from 0 to 128
[  168.421997][T10476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.435366][T10481] syz.3.2320: attempt to access beyond end of device
[  168.435366][T10481] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  168.439325][T10476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2321: bg 0: block 5: invalid block bitmap
[  168.463037][T10476] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  168.475394][T10476] EXT4-fs (loop4): This should not happen!! Data will be lost
[  168.475394][T10476] 
[  168.485161][T10476] EXT4-fs (loop4): Total free blocks count 0
[  168.491160][T10476] EXT4-fs (loop4): Free/Dirty block details
[  168.497085][T10476] EXT4-fs (loop4): free_blocks=0
[  168.502047][T10476] EXT4-fs (loop4): dirty_blocks=64
[  168.507244][T10476] EXT4-fs (loop4): Block reservation details
[  168.513283][T10476] EXT4-fs (loop4): i_reserved_data_blocks=64
[  168.531273][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.620283][T10488] loop4: detected capacity change from 0 to 512
[  168.633472][T10488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.646508][T10488] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.932318][   T10] usb 1-1: enqueue for inactive port 0
[  168.937848][   T10] usb 1-1: enqueue for inactive port 0
[  169.011239][   T10] vhci_hcd: vhci_device speed not set
[  169.136826][   T57] kworker/u8:4: attempt to access beyond end of device
[  169.136826][   T57] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  169.166380][T10504] 9pnet_fd: p9_fd_create_tcp (10504): problem connecting socket to 127.0.0.1
[  169.177445][T10502] FAULT_INJECTION: forcing a failure.
[  169.177445][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  169.190794][T10502] CPU: 0 UID: 0 PID: 10502 Comm: syz.1.2329 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  169.190829][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  169.190842][T10502] Call Trace:
[  169.190847][T10502]  <TASK>
[  169.190857][T10502]  __dump_stack+0x1d/0x30
[  169.190885][T10502]  dump_stack_lvl+0xe8/0x140
[  169.190912][T10502]  dump_stack+0x15/0x1b
[  169.190934][T10502]  should_fail_ex+0x265/0x280
[  169.191009][T10502]  should_fail+0xb/0x20
[  169.191036][T10502]  should_fail_usercopy+0x1a/0x20
[  169.191074][T10502]  _copy_from_iter+0xcf/0xe40
[  169.191178][T10502]  ? __build_skb_around+0x1a0/0x200
[  169.191241][T10502]  ? __alloc_skb+0x223/0x320
[  169.191349][T10502]  netlink_sendmsg+0x471/0x6b0
[  169.191372][T10502]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.191470][T10502]  __sock_sendmsg+0x142/0x180
[  169.191498][T10502]  ____sys_sendmsg+0x31e/0x4e0
[  169.191543][T10502]  ___sys_sendmsg+0x17b/0x1d0
[  169.191668][T10502]  __x64_sys_sendmsg+0xd4/0x160
[  169.191708][T10502]  x64_sys_call+0x2999/0x2fb0
[  169.191735][T10502]  do_syscall_64+0xd2/0x200
[  169.191779][T10502]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  169.191806][T10502]  ? clear_bhb_loop+0x40/0x90
[  169.191840][T10502]  ? clear_bhb_loop+0x40/0x90
[  169.191863][T10502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.191957][T10502] RIP: 0033:0x7f9a1fb1e9a9
[  169.191973][T10502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.191991][T10502] RSP: 002b:00007f9a1e17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.192015][T10502] RAX: ffffffffffffffda RBX: 00007f9a1fd45fa0 RCX: 00007f9a1fb1e9a9
[  169.192033][T10502] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  169.192087][T10502] RBP: 00007f9a1e17f090 R08: 0000000000000000 R09: 0000000000000000
[  169.192100][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.192112][T10502] R13: 0000000000000000 R14: 00007f9a1fd45fa0 R15: 00007ffc55bc1258
[  169.192135][T10502]  </TASK>
[  169.401615][T10505] netlink: 'syz.1.2329': attribute type 10 has an invalid length.
[  169.414464][T10505] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  169.438617][T10509] loop3: detected capacity change from 0 to 512
[  169.471815][T10509] ext4: Unknown parameter 'audit'
[  169.514235][T10515] IPVS: Error connecting to the multicast addr
[  169.557621][T10515] random: crng reseeded on system resumption
[  169.564074][T10520] netlink: 'syz.3.2332': attribute type 13 has an invalid length.
[  169.571982][T10520] netlink: 'syz.3.2332': attribute type 17 has an invalid length.
[  169.603504][T10517] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  169.618649][T10520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.634556][T10517] SELinux: failed to load policy
[  169.644204][T10522] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  169.644204][T10522]    program syz.1.2338 not setting count and/or reply_len properly
[  169.662675][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.739917][T10520] loop3: detected capacity change from 0 to 1024
[  169.748555][T10535] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  169.790011][T10531] random: crng reseeded on system resumption
[  169.803229][T10531] IPVS: stopping master sync thread 10535 ...
[  169.809867][T10537] loop5: detected capacity change from 0 to 512
[  169.831810][T10537] ext4: Unknown parameter 'audit'
[  169.838669][T10520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.875152][T10509] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  169.887471][T10509] EXT4-fs (loop3): This should not happen!! Data will be lost
[  169.887471][T10509] 
[  169.897181][T10509] EXT4-fs (loop3): Total free blocks count 0
[  169.903281][T10509] EXT4-fs (loop3): Free/Dirty block details
[  169.909202][T10509] EXT4-fs (loop3): free_blocks=0
[  169.914239][T10509] EXT4-fs (loop3): dirty_blocks=0
[  169.919304][T10509] EXT4-fs (loop3): Block reservation details
[  169.925422][T10509] EXT4-fs (loop3): i_reserved_data_blocks=0
[  169.970886][T10549] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  169.994714][T10548] random: crng reseeded on system resumption
[  170.018729][T10548] IPVS: stopping master sync thread 10549 ...
[  170.047028][T10546] loop5: detected capacity change from 0 to 1024
[  170.061422][T10557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  170.062880][T10546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.103459][T10556] random: crng reseeded on system resumption
[  170.123047][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.153761][T10556] IPVS: stopping master sync thread 10557 ...
[  170.176058][T10546] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  170.188384][T10546] EXT4-fs (loop5): This should not happen!! Data will be lost
[  170.188384][T10546] 
[  170.198083][T10546] EXT4-fs (loop5): Total free blocks count 0
[  170.204151][T10546] EXT4-fs (loop5): Free/Dirty block details
[  170.210172][T10546] EXT4-fs (loop5): free_blocks=0
[  170.212175][T10555] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  170.215151][T10546] EXT4-fs (loop5): dirty_blocks=0
[  170.225916][T10555] SELinux: failed to load policy
[  170.230049][T10546] EXT4-fs (loop5): Block reservation details
[  170.241235][T10546] EXT4-fs (loop5): i_reserved_data_blocks=0
[  170.256118][T10567] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  170.256118][T10567]    program syz.1.2354 not setting count and/or reply_len properly
[  170.287330][T10569] loop4: detected capacity change from 0 to 1024
[  170.294291][T10569] EXT4-fs: Ignoring removed nomblk_io_submit option
[  170.344634][T10569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.357568][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.369650][T10584] IPVS: Error connecting to the multicast addr
[  170.382889][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.396325][T10584] random: crng reseeded on system resumption
[  170.440644][T10581] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  170.493092][   T29] kauditd_printk_skb: 540 callbacks suppressed
[  170.493107][   T29] audit: type=1326 audit(1752942206.470:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.545784][T10602] __nla_validate_parse: 4 callbacks suppressed
[  170.545800][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2365'.
[  170.567988][T10603] IPVS: Error connecting to the multicast addr
[  170.582321][T10603] random: crng reseeded on system resumption
[  170.590815][   T29] audit: type=1326 audit(1752942206.500:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.614528][   T29] audit: type=1326 audit(1752942206.500:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.638657][   T29] audit: type=1326 audit(1752942206.500:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.662354][   T29] audit: type=1326 audit(1752942206.500:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.686011][   T29] audit: type=1326 audit(1752942206.500:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.709731][   T29] audit: type=1326 audit(1752942206.500:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.733371][   T29] audit: type=1326 audit(1752942206.500:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.757821][   T29] audit: type=1326 audit(1752942206.500:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.781591][   T29] audit: type=1326 audit(1752942206.500:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10593 comm="syz.4.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  170.808910][T10594] loop4: detected capacity change from 0 to 512
[  170.817926][T10594] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2362: iget: bad i_size value: 38620345925642
[  170.831461][T10594] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2362: couldn't read orphan inode 15 (err -117)
[  170.845038][T10594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.861991][T10594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2362: bg 0: block 5: invalid block bitmap
[  170.874689][T10594] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  170.887076][T10594] EXT4-fs (loop4): This should not happen!! Data will be lost
[  170.887076][T10594] 
[  170.897627][T10594] EXT4-fs (loop4): Total free blocks count 0
[  170.903685][T10594] EXT4-fs (loop4): Free/Dirty block details
[  170.909661][T10594] EXT4-fs (loop4): free_blocks=0
[  170.914728][T10594] EXT4-fs (loop4): dirty_blocks=64
[  170.920000][T10594] EXT4-fs (loop4): Block reservation details
[  170.926043][T10594] EXT4-fs (loop4): i_reserved_data_blocks=64
[  170.933660][T10610] loop3: detected capacity change from 0 to 512
[  170.940574][T10610] ext4: Unknown parameter 'audit'
[  170.956078][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.959040][T10612] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  170.959040][T10612]    program syz.0.2370 not setting count and/or reply_len properly
[  171.020517][T10621] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  171.032681][T10623] netlink: 'syz.3.2369': attribute type 13 has an invalid length.
[  171.040555][T10623] netlink: 'syz.3.2369': attribute type 17 has an invalid length.
[  171.050709][T10620] random: crng reseeded on system resumption
[  171.057010][T10623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  171.063365][T10620] IPVS: stopping master sync thread 10621 ...
[  171.089076][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'.
[  171.106244][T10623] loop3: detected capacity change from 0 to 1024
[  171.123033][T10623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.145520][T10623] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  171.157977][T10623] EXT4-fs (loop3): This should not happen!! Data will be lost
[  171.157977][T10623] 
[  171.167693][T10623] EXT4-fs (loop3): Total free blocks count 0
[  171.173738][T10623] EXT4-fs (loop3): Free/Dirty block details
[  171.179826][T10623] EXT4-fs (loop3): free_blocks=0
[  171.184205][T10633] vhci_hcd: invalid port number 96
[  171.184792][T10623] EXT4-fs (loop3): dirty_blocks=0
[  171.190008][T10633] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  171.195110][T10623] EXT4-fs (loop3): Block reservation details
[  171.208204][T10623] EXT4-fs (loop3): i_reserved_data_blocks=0
[  171.243812][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.269085][T10639] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  171.356314][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'.
[  171.385642][T10652] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  171.385642][T10652]    program syz.0.2384 not setting count and/or reply_len properly
[  171.409162][T10656] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  171.422512][T10654] random: crng reseeded on system resumption
[  171.435096][T10654] IPVS: stopping master sync thread 10656 ...
[  171.441106][T10658] netlink: 'syz.3.2382': attribute type 1 has an invalid length.
[  171.510009][T10662] loop3: detected capacity change from 0 to 1024
[  171.510234][T10661] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  171.531689][T10662] EXT4-fs: inline encryption not supported
[  171.569835][T10662] EXT4-fs: Ignoring removed bh option
[  171.575660][T10662] ext4: Unknown parameter 'smackfsdef'
[  171.584871][T10667] 9pnet_fd: p9_fd_create_tcp (10667): problem connecting socket to 127.0.0.1
[  171.605991][T10662] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  171.612550][T10662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  171.620211][T10662] vhci_hcd vhci_hcd.0: Device attached
[  171.633020][T10669] vhci_hcd: connection closed
[  171.633427][  T588] vhci_hcd: stop threads
[  171.642427][  T588] vhci_hcd: release socket
[  171.647069][  T588] vhci_hcd: disconnect device
[  171.711811][ T1037] usb usb2-port1: attempt power cycle
[  171.712927][T10678] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  171.794232][T10682] vhci_hcd: invalid port number 96
[  171.799407][T10682] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  171.818293][T10690] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  171.831887][T10689] random: crng reseeded on system resumption
[  171.843617][T10689] IPVS: stopping master sync thread 10690 ...
[  171.902618][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2400'.
[  171.933780][T10702] loop4: detected capacity change from 0 to 512
[  171.940511][T10702] ext4: Unknown parameter 'audit'
[  171.999691][T10711] netlink: 'syz.4.2403': attribute type 13 has an invalid length.
[  172.007770][T10711] netlink: 'syz.4.2403': attribute type 17 has an invalid length.
[  172.028114][T10711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.052943][T10713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'.
[  172.070318][T10711] loop4: detected capacity change from 0 to 1024
[  172.093210][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.116574][T10711] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  172.128943][T10711] EXT4-fs (loop4): This should not happen!! Data will be lost
[  172.128943][T10711] 
[  172.138708][T10711] EXT4-fs (loop4): Total free blocks count 0
[  172.144811][T10711] EXT4-fs (loop4): Free/Dirty block details
[  172.150799][T10711] EXT4-fs (loop4): free_blocks=0
[  172.156117][T10711] EXT4-fs (loop4): dirty_blocks=0
[  172.161164][T10711] EXT4-fs (loop4): Block reservation details
[  172.167206][T10711] EXT4-fs (loop4): i_reserved_data_blocks=0
[  172.343933][T10725] vhci_hcd: invalid port number 96
[  172.349132][T10725] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  172.402478][T10727] IPVS: Error connecting to the multicast addr
[  172.425984][T10727] random: crng reseeded on system resumption
[  172.574854][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.651662][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'.
[  172.783477][T10743] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  172.790122][T10743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  172.797681][T10743] vhci_hcd vhci_hcd.0: Device attached
[  172.806605][T10744] vhci_hcd: connection closed
[  172.806732][   T31] vhci_hcd: stop threads
[  172.815794][   T31] vhci_hcd: release socket
[  172.820233][   T31] vhci_hcd: disconnect device
[  172.946194][T10751] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  172.959808][T10750] random: crng reseeded on system resumption
[  172.973077][T10750] IPVS: stopping master sync thread 10751 ...
[  173.048759][T10755] SELinux: ebitmap: map size 16780032 does not match my size 64 (high bit was 1919511808)
[  173.059384][T10755] SELinux: failed to load policy
[  173.114324][T10761] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  173.114324][T10761]    program syz.0.2425 not setting count and/or reply_len properly
[  173.193935][T10765] vhci_hcd: invalid port number 96
[  173.199201][T10765] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  173.283770][T10776] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  173.296780][T10775] random: crng reseeded on system resumption
[  173.309345][T10775] IPVS: stopping master sync thread 10776 ...
[  173.340963][T10782] SELinux:  policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c
[  173.362028][T10782] SELinux: failed to load policy
[  173.410799][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2435'.
[  173.433375][T10788] vhci_hcd: invalid port number 96
[  173.438656][T10788] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  173.574042][T10799] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_rx_wq": -EINTR
[  173.590059][T10828] IPVS: Error connecting to the multicast addr
[  173.606612][ T1037] usb usb2-port1: unable to enumerate USB device
[  173.641965][T10828] random: crng reseeded on system resumption
[  173.664307][T10832] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  173.670897][T10832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  173.678651][T10832] vhci_hcd vhci_hcd.0: Device attached
[  173.689553][T10833] vhci_hcd: connection closed
[  173.689774][ T1759] vhci_hcd: stop threads
[  173.698932][ T1759] vhci_hcd: release socket
[  173.703413][ T1759] vhci_hcd: disconnect device
[  173.805383][T10843] 9pnet_fd: p9_fd_create_tcp (10843): problem connecting socket to 127.0.0.1
[  173.816796][T10841] vhci_hcd: invalid port number 96
[  173.822057][T10841] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  174.032408][T10862] IPVS: Error connecting to the multicast addr
[  174.043976][T10862] random: crng reseeded on system resumption
[  174.096771][T10866] loop3: detected capacity change from 0 to 512
[  174.105473][T10866] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2458: iget: bad i_size value: 38620345925642
[  174.118625][T10866] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2458: couldn't read orphan inode 15 (err -117)
[  174.131655][T10866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.148669][T10866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2458: bg 0: block 5: invalid block bitmap
[  174.161459][T10866] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  174.173855][T10866] EXT4-fs (loop3): This should not happen!! Data will be lost
[  174.173855][T10866] 
[  174.183707][T10866] EXT4-fs (loop3): Total free blocks count 0
[  174.189753][T10866] EXT4-fs (loop3): Free/Dirty block details
[  174.195841][T10866] EXT4-fs (loop3): free_blocks=0
[  174.200877][T10866] EXT4-fs (loop3): dirty_blocks=64
[  174.206232][T10866] EXT4-fs (loop3): Block reservation details
[  174.212249][T10866] EXT4-fs (loop3): i_reserved_data_blocks=64
[  174.234416][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.243931][T10869] bond0: (slave bridge0): Releasing backup interface
[  174.267490][T10871] loop3: detected capacity change from 0 to 1024
[  174.293680][T10871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.307809][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2460'.
[  174.351450][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.398803][T10877] vhci_hcd: invalid port number 96
[  174.404067][T10877] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  174.444945][T10884] FAULT_INJECTION: forcing a failure.
[  174.444945][T10884] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.458362][T10884] CPU: 1 UID: 0 PID: 10884 Comm: syz.3.2465 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  174.458451][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  174.458468][T10884] Call Trace:
[  174.458475][T10884]  <TASK>
[  174.458483][T10884]  __dump_stack+0x1d/0x30
[  174.458504][T10884]  dump_stack_lvl+0xe8/0x140
[  174.458558][T10884]  dump_stack+0x15/0x1b
[  174.458579][T10884]  should_fail_ex+0x265/0x280
[  174.458619][T10884]  should_fail+0xb/0x20
[  174.458648][T10884]  should_fail_usercopy+0x1a/0x20
[  174.458679][T10884]  _copy_from_user+0x1c/0xb0
[  174.458705][T10884]  ___sys_sendmsg+0xc1/0x1d0
[  174.458783][T10884]  __x64_sys_sendmsg+0xd4/0x160
[  174.458880][T10884]  x64_sys_call+0x2999/0x2fb0
[  174.458909][T10884]  do_syscall_64+0xd2/0x200
[  174.458930][T10884]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  174.459004][T10884]  ? clear_bhb_loop+0x40/0x90
[  174.459030][T10884]  ? clear_bhb_loop+0x40/0x90
[  174.459072][T10884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.459102][T10884] RIP: 0033:0x7f69fdbfe9a9
[  174.459122][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.459147][T10884] RSP: 002b:00007f69fc267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.459197][T10884] RAX: ffffffffffffffda RBX: 00007f69fde25fa0 RCX: 00007f69fdbfe9a9
[  174.459213][T10884] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000007
[  174.459229][T10884] RBP: 00007f69fc267090 R08: 0000000000000000 R09: 0000000000000000
[  174.459245][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.459261][T10884] R13: 0000000000000000 R14: 00007f69fde25fa0 R15: 00007ffe6fbe1088
[  174.459287][T10884]  </TASK>
[  174.472753][T10887] loop4: detected capacity change from 0 to 512
[  174.650277][T10887] ext4: Unknown parameter 'audit'
[  174.669982][T10896] loop3: detected capacity change from 0 to 512
[  174.688845][T10894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  174.695479][T10894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  174.703087][T10894] vhci_hcd vhci_hcd.0: Device attached
[  174.709749][T10901] netlink: 'syz.4.2467': attribute type 13 has an invalid length.
[  174.717784][T10901] netlink: 'syz.4.2467': attribute type 17 has an invalid length.
[  174.717903][T10896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  174.753760][T10896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.760334][T10897] vhci_hcd: connection closed
[  174.767461][  T309] vhci_hcd: stop threads
[  174.776687][  T309] vhci_hcd: release socket
[  174.781242][  T309] vhci_hcd: disconnect device
[  174.781456][T10896] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.830304][T10901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.876687][T10905] loop4: detected capacity change from 0 to 1024
[  174.892435][T10909] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  174.914303][T10905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.959657][T10919] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  174.972959][T10918] random: crng reseeded on system resumption
[  174.983156][T10887] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  174.983895][T10918] IPVS: stopping master sync thread 10919 ...
[  174.995609][T10887] EXT4-fs (loop4): This should not happen!! Data will be lost
[  174.995609][T10887] 
[  175.011534][T10887] EXT4-fs (loop4): Total free blocks count 0
[  175.017561][T10887] EXT4-fs (loop4): Free/Dirty block details
[  175.023629][T10887] EXT4-fs (loop4): free_blocks=0
[  175.028688][T10887] EXT4-fs (loop4): dirty_blocks=0
[  175.034074][T10887] EXT4-fs (loop4): Block reservation details
[  175.040274][T10887] EXT4-fs (loop4): i_reserved_data_blocks=0
[  175.083540][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.103149][T10924] IPVS: Error connecting to the multicast addr
[  175.115202][T10924] random: crng reseeded on system resumption
[  175.153922][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.239247][T10936] SELinux: ebitmap: truncated map
[  175.247169][T10936] SELinux: failed to load policy
[  175.314357][T10941] vhci_hcd: invalid port number 96
[  175.319510][T10941] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  175.366028][T10945] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  175.366028][T10945]    program syz.1.2485 not setting count and/or reply_len properly
[  175.387208][T10948] IPVS: Error connecting to the multicast addr
[  175.397761][T10948] random: crng reseeded on system resumption
[  175.437422][T10951] IPVS: Error connecting to the multicast addr
[  175.445207][T10953] FAULT_INJECTION: forcing a failure.
[  175.445207][T10953] name failslab, interval 1, probability 0, space 0, times 0
[  175.457861][T10953] CPU: 0 UID: 0 PID: 10953 Comm: syz.1.2487 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  175.457917][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  175.457931][T10953] Call Trace:
[  175.457939][T10953]  <TASK>
[  175.458005][T10953]  __dump_stack+0x1d/0x30
[  175.458031][T10953]  dump_stack_lvl+0xe8/0x140
[  175.458050][T10953]  dump_stack+0x15/0x1b
[  175.458066][T10953]  should_fail_ex+0x265/0x280
[  175.458152][T10953]  should_failslab+0x8c/0xb0
[  175.458173][T10953]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  175.458199][T10953]  ? __d_alloc+0x3d/0x350
[  175.458228][T10953]  __d_alloc+0x3d/0x350
[  175.458261][T10953]  ? selinux_inode_rename+0x4d3/0x5d0
[  175.458373][T10953]  d_alloc+0x2e/0x100
[  175.458400][T10953]  shmem_rename2+0x135/0x290
[  175.458421][T10953]  ? __pfx_shmem_rename2+0x10/0x10
[  175.458494][T10953]  vfs_rename+0x7d6/0xa20
[  175.458545][T10953]  do_renameat2+0x764/0xab0
[  175.458576][T10953]  __x64_sys_renameat2+0x7e/0x90
[  175.458595][T10953]  x64_sys_call+0x2bf6/0x2fb0
[  175.458665][T10953]  do_syscall_64+0xd2/0x200
[  175.458714][T10953]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  175.458748][T10953]  ? clear_bhb_loop+0x40/0x90
[  175.458775][T10953]  ? clear_bhb_loop+0x40/0x90
[  175.458803][T10953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.458855][T10953] RIP: 0033:0x7f9a1fb1e9a9
[  175.458869][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.458891][T10953] RSP: 002b:00007f9a1e17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  175.458915][T10953] RAX: ffffffffffffffda RBX: 00007f9a1fd45fa0 RCX: 00007f9a1fb1e9a9
[  175.459002][T10953] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  175.459015][T10953] RBP: 00007f9a1e17f090 R08: 0000000000000005 R09: 0000000000000000
[  175.459028][T10953] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000002
[  175.459088][T10953] R13: 0000000000000000 R14: 00007f9a1fd45fa0 R15: 00007ffc55bc1258
[  175.459114][T10953]  </TASK>
[  175.704053][T10951] random: crng reseeded on system resumption
[  175.740136][   T29] kauditd_printk_skb: 504 callbacks suppressed
[  175.740154][   T29] audit: type=1326 audit(1752942211.710:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.770153][   T29] audit: type=1326 audit(1752942211.710:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.793915][   T29] audit: type=1326 audit(1752942211.710:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.817767][   T29] audit: type=1326 audit(1752942211.710:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.841483][   T29] audit: type=1326 audit(1752942211.710:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.865316][   T29] audit: type=1326 audit(1752942211.710:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.888942][   T29] audit: type=1326 audit(1752942211.710:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.912648][   T29] audit: type=1326 audit(1752942211.710:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.936635][   T29] audit: type=1326 audit(1752942211.710:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.960406][   T29] audit: type=1326 audit(1752942211.710:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.5.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cd308e9a9 code=0x7ffc0000
[  175.987402][T10961] loop3: detected capacity change from 0 to 512
[  175.995366][T10961] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  176.007003][T10961] EXT4-fs (loop3): orphan cleanup on readonly fs
[  176.030014][T10961] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2490: Block bitmap for bg 0 marked uninitialized
[  176.044489][T10961] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  176.053768][T10961] EXT4-fs (loop3): 1 orphan inode deleted
[  176.060068][T10961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  176.101646][T10958] siw: device registration error -23
[  176.126601][T10968] loop5: detected capacity change from 0 to 1024
[  176.141748][T10968] EXT4-fs: inline encryption not supported
[  176.147872][T10968] EXT4-fs: Ignoring removed bh option
[  176.153675][T10968] ext4: Unknown parameter 'smackfsdef'
[  176.200042][T10968] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  176.206614][T10968] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  176.214260][T10968] vhci_hcd vhci_hcd.0: Device attached
[  176.229755][T10972] vhci_hcd: invalid port number 96
[  176.234937][T10972] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  176.251765][T10973] vhci_hcd: connection closed
[  176.251895][   T51] vhci_hcd: stop threads
[  176.261152][   T51] vhci_hcd: release socket
[  176.266125][   T51] vhci_hcd: disconnect device
[  176.284235][T10983] IPVS: Error connecting to the multicast addr
[  176.293713][T10976] lo speed is unknown, defaulting to 1000
[  176.304932][T10983] random: crng reseeded on system resumption
[  176.338650][T10986] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  176.338650][T10986]    program syz.1.2500 not setting count and/or reply_len properly
[  176.605410][T10997] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  176.630354][T10961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.655431][T10999] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  176.747905][T11010] loop3: detected capacity change from 0 to 1024
[  176.776292][T11010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.790887][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2508'.
[  176.790931][T11017] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  176.813152][T11016] random: crng reseeded on system resumption
[  176.824538][T11016] IPVS: stopping master sync thread 11017 ...
[  176.824646][T11019] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  176.824646][T11019]    program syz.5.2511 not setting count and/or reply_len properly
[  176.867710][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.889544][T11023] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  176.889544][T11023]    program syz.0.2512 not setting count and/or reply_len properly
[  176.944987][T11031] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  177.015648][T11039] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  177.056715][T11046] loop3: detected capacity change from 0 to 1024
[  177.070100][T11046] EXT4-fs: inline encryption not supported
[  177.077230][T11046] EXT4-fs: Ignoring removed bh option
[  177.082906][T11046] ext4: Unknown parameter 'smackfsdef'
[  177.094565][T11046] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9)
[  177.101282][T11046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  177.108970][T11046] vhci_hcd vhci_hcd.0: Device attached
[  177.133766][T11050] vhci_hcd: connection closed
[  177.134181][   T57] vhci_hcd: stop threads
[  177.143599][   T57] vhci_hcd: release socket
[  177.148042][   T57] vhci_hcd: disconnect device
[  177.154429][T11056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  177.165849][T11055] loop5: detected capacity change from 0 to 512
[  177.174210][T11053] random: crng reseeded on system resumption
[  177.191921][T11058] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  177.191921][T11058]    program syz.0.2525 not setting count and/or reply_len properly
[  177.210598][T11055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.236325][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'.
[  177.241437][T11055] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  177.287508][T11073] IPVS: Error connecting to the multicast addr
[  177.311564][T11073] random: crng reseeded on system resumption
[  177.325662][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.368110][T11084] 9pnet_fd: p9_fd_create_tcp (11084): problem connecting socket to 127.0.0.1
[  177.447934][T11091] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  177.463586][T11090] random: crng reseeded on system resumption
[  177.497252][T11095] random: crng reseeded on system resumption
[  177.509507][T11095] IPVS: stopping master sync thread 11091 ...
[  177.533661][T11098] 9pnet_fd: p9_fd_create_tcp (11098): problem connecting socket to 127.0.0.1
[  177.696743][T11103] ip6erspan0: entered promiscuous mode
[  177.757156][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2542'.
[  177.784259][T11107] loop3: detected capacity change from 0 to 512
[  177.815518][T11109] IPVS: Error connecting to the multicast addr
[  177.826704][T11109] random: crng reseeded on system resumption
[  177.856489][T11111] 9pnet_fd: p9_fd_create_tcp (11111): problem connecting socket to 127.0.0.1
[  177.998293][T11116] loop3: detected capacity change from 0 to 128
[  178.024497][T11116] syz.3.2546: attempt to access beyond end of device
[  178.024497][T11116] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  178.097941][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'.
[  178.232895][T11124] IPVS: Error connecting to the multicast addr
[  178.243821][T11124] random: crng reseeded on system resumption
[  178.331090][T11128] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  178.379942][T11126] siw: device registration error -23
[  178.440160][T11138] loop5: detected capacity change from 0 to 512
[  178.457505][T11136] lo speed is unknown, defaulting to 1000
[  178.479377][T11142] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  178.502819][T11141] random: crng reseeded on system resumption
[  178.503175][T11144] 9pnet_fd: p9_fd_create_tcp (11144): problem connecting socket to 127.0.0.1
[  178.515088][T11141] IPVS: stopping master sync thread 11142 ...
[  178.724986][  T309] kworker/u8:5: attempt to access beyond end of device
[  178.724986][  T309] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  178.909216][T11158] loop3: detected capacity change from 0 to 512
[  178.919448][T11158] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  178.972019][T11158] EXT4-fs (loop3): orphan cleanup on readonly fs
[  178.979358][T11158] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2562: Block bitmap for bg 0 marked uninitialized
[  178.995177][T11158] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  179.005134][T11158] EXT4-fs (loop3): 1 orphan inode deleted
[  179.012262][T11158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  179.028723][T11158] siw: device registration error -23
[  179.039014][T11158] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.258922][T11169] loop4: detected capacity change from 0 to 128
[  179.297320][T11174] loop3: detected capacity change from 0 to 1024
[  179.304343][T11174] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.323497][T11174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.355930][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.375059][T11180] 9pnet_fd: p9_fd_create_tcp (11180): problem connecting socket to 127.0.0.1
[  179.816247][T11205] loop5: detected capacity change from 0 to 512
[  179.900540][T11209] 9pnet_fd: p9_fd_create_tcp (11209): problem connecting socket to 127.0.0.1
[  180.038120][T11215] ip6erspan0: entered promiscuous mode
[  180.289208][T11227] netlink: 'syz.3.2584': attribute type 21 has an invalid length.
[  180.297460][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2584'.
[  180.521763][T11234] IPVS: Error connecting to the multicast addr
[  180.533846][T11234] random: crng reseeded on system resumption
[  180.722682][T11242] 9pnet_fd: p9_fd_create_tcp (11242): problem connecting socket to 127.0.0.1
[  180.749834][T11245] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  180.764211][T11244] random: crng reseeded on system resumption
[  180.775859][T11244] IPVS: stopping master sync thread 11245 ...
[  180.802907][   T29] kauditd_printk_skb: 466 callbacks suppressed
[  180.802963][   T29] audit: type=1326 audit(1752942216.780:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5289e9a9 code=0x0
[  180.992738][   T29] audit: type=1326 audit(1752942216.960:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.016605][   T29] audit: type=1326 audit(1752942216.960:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.040269][   T29] audit: type=1326 audit(1752942216.960:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.064022][   T29] audit: type=1326 audit(1752942216.960:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.087631][   T29] audit: type=1326 audit(1752942216.960:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.111314][   T29] audit: type=1326 audit(1752942216.960:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.134861][   T29] audit: type=1326 audit(1752942216.960:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.158541][   T29] audit: type=1326 audit(1752942216.960:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.182209][   T29] audit: type=1326 audit(1752942216.960:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.0.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5289e9a9 code=0x7ffc0000
[  181.484584][T11269] loop3: detected capacity change from 0 to 512
[  181.507496][T11269] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  181.582583][T11269] EXT4-fs (loop3): orphan cleanup on readonly fs
[  181.607661][T11269] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2598: Block bitmap for bg 0 marked uninitialized
[  181.690498][T11269] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  181.701292][T11269] EXT4-fs (loop3): 1 orphan inode deleted
[  181.707563][T11269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  181.723532][T11269] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  181.736238][T11275] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  181.802112][T11269] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  181.811961][T11274] random: crng reseeded on system resumption
[  181.822039][T11269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.833177][T11279] 9pnet_fd: p9_fd_create_tcp (11279): problem connecting socket to 127.0.0.1
[  181.842620][T11274] IPVS: stopping master sync thread 11275 ...
[  181.866541][T11281] IPVS: Error connecting to the multicast addr
[  181.892020][T11281] random: crng reseeded on system resumption
[  181.934121][   T36] IPVS: starting estimator thread 0...
[  181.993250][T11304] 9pnet_fd: p9_fd_create_tcp (11304): problem connecting socket to 127.0.0.1
[  182.051363][T11294] IPVS: using max 2352 ests per chain, 117600 per kthread
[  182.075172][T11306] lo speed is unknown, defaulting to 1000
[  182.106592][T11309] loop5: detected capacity change from 0 to 1024
[  182.113520][T11309] EXT4-fs: inline encryption not supported
[  182.121606][T11309] EXT4-fs: Ignoring removed bh option
[  182.131492][T11309] ext4: Unknown parameter 'smackfsdef'
[  183.155416][T11324] netlink: 'syz.0.2617': attribute type 21 has an invalid length.
[  183.158808][T11321] loop5: detected capacity change from 0 to 1024
[  183.172897][T11326] IPVS: Error connecting to the multicast addr
[  183.179115][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2617'.
[  183.197116][T11321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  183.211157][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2620'.
[  183.222007][T11321] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.245109][T11326] random: crng reseeded on system resumption
[  183.262143][T11328] loop4: detected capacity change from 0 to 512
[  183.290587][T11339] netlink: 'syz.1.2623': attribute type 10 has an invalid length.
[  183.298554][T11339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2623'.
[  183.352913][ T8367] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  183.363690][T11328] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2620: iget: bad i_size value: 38620345925642
[  183.382854][T11328] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2620: couldn't read orphan inode 15 (err -117)
[  183.398038][T11328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.429569][T11328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2620: bg 0: block 5: invalid block bitmap
[  183.445523][T11328] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  183.457280][T11337] lo speed is unknown, defaulting to 1000
[  183.458067][T11328] EXT4-fs (loop4): This should not happen!! Data will be lost
[  183.458067][T11328] 
[  183.474117][T11328] EXT4-fs (loop4): Total free blocks count 0
[  183.480365][T11328] EXT4-fs (loop4): Free/Dirty block details
[  183.486317][T11328] EXT4-fs (loop4): free_blocks=0
[  183.491303][T11328] EXT4-fs (loop4): dirty_blocks=64
[  183.496437][T11328] EXT4-fs (loop4): Block reservation details
[  183.502619][T11328] EXT4-fs (loop4): i_reserved_data_blocks=64
[  183.514602][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2622'.
[  183.523746][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'.
[  183.536018][T11337] loop3: detected capacity change from 0 to 512
[  183.542588][T11337] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.549166][T11337] EXT4-fs: Ignoring removed bh option
[  183.554920][T11337] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  183.567859][T11337] EXT4-fs (loop3): 1 truncate cleaned up
[  183.569371][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.574031][T11337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.653284][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.653991][T11354] loop4: detected capacity change from 0 to 1024
[  183.669363][T11354] EXT4-fs: inline encryption not supported
[  183.676040][T11354] EXT4-fs: Ignoring removed bh option
[  183.682409][T11354] ext4: Unknown parameter 'smackfsdef'
[  183.690601][T11352] loop5: detected capacity change from 0 to 1024
[  183.703328][T11352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.719764][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2628'.
[  183.776631][T11356] loop3: detected capacity change from 0 to 512
[  183.802324][T11356] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2630: iget: bad i_size value: 38620345925642
[  183.815623][T11356] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2630: couldn't read orphan inode 15 (err -117)
[  183.838369][T11356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2630: bg 0: block 5: invalid block bitmap
[  183.851678][T11356] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  183.864006][T11356] EXT4-fs (loop3): This should not happen!! Data will be lost
[  183.864006][T11356] 
[  183.873992][T11356] EXT4-fs (loop3): Total free blocks count 0
[  183.880108][T11356] EXT4-fs (loop3): Free/Dirty block details
[  183.886087][T11356] EXT4-fs (loop3): free_blocks=0
[  183.891374][T11356] EXT4-fs (loop3): dirty_blocks=64
[  183.896942][T11356] EXT4-fs (loop3): Block reservation details
[  183.902968][T11356] EXT4-fs (loop3): i_reserved_data_blocks=64
[  183.964239][T11373] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  183.964239][T11373]    program syz.3.2637 not setting count and/or reply_len properly
[  184.060072][T11390] loop4: detected capacity change from 0 to 128
[  184.071241][T11388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.083443][T11385] tipc: Resetting bearer <eth:syzkaller0>
[  184.113145][T11393] loop0: detected capacity change from 0 to 512
[  184.115594][T11385] tipc: Disabling bearer <eth:syzkaller0>
[  184.119982][T11393] ext3: Unknown parameter 'smackfsroot'
[  184.309413][T11418] netlink: 'syz.1.2654': attribute type 21 has an invalid length.
[  184.318555][T11418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2654'.
[  184.327799][T11404] loop4: detected capacity change from 0 to 512
[  184.336874][T11404] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  184.351153][T11404] EXT4-fs (loop4): orphan cleanup on readonly fs
[  184.357649][T11425] loop0: detected capacity change from 0 to 512
[  184.358315][T11404] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2649: Block bitmap for bg 0 marked uninitialized
[  184.364258][T11425] ext4: Unknown parameter 'audit'
[  184.378522][T11404] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  184.391128][T11404] EXT4-fs (loop4): 1 orphan inode deleted
[  184.399015][T11404] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  184.408640][T11404] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  184.438580][T11427] netlink: 'syz.0.2655': attribute type 13 has an invalid length.
[  184.446495][T11427] netlink: 'syz.0.2655': attribute type 17 has an invalid length.
[  184.483625][T11431] loop4: detected capacity change from 0 to 128
[  184.498264][T11427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.519580][T11432] loop0: detected capacity change from 0 to 1024
[  184.545337][T11425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  184.557724][T11425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  184.557724][T11425] 
[  184.567394][T11425] EXT4-fs (loop0): Total free blocks count 0
[  184.573467][T11425] EXT4-fs (loop0): Free/Dirty block details
[  184.579476][T11425] EXT4-fs (loop0): free_blocks=0
[  184.584487][T11425] EXT4-fs (loop0): dirty_blocks=0
[  184.589263][T11438] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  184.589522][T11425] EXT4-fs (loop0): Block reservation details
[  184.602772][T11425] EXT4-fs (loop0): i_reserved_data_blocks=0
[  184.628004][T11440] FAULT_INJECTION: forcing a failure.
[  184.628004][T11440] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.641162][T11440] CPU: 1 UID: 0 PID: 11440 Comm: syz.4.2660 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
[  184.641224][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  184.641241][T11440] Call Trace:
[  184.641320][T11440]  <TASK>
[  184.641329][T11440]  __dump_stack+0x1d/0x30
[  184.641356][T11440]  dump_stack_lvl+0xe8/0x140
[  184.641382][T11440]  dump_stack+0x15/0x1b
[  184.641429][T11440]  should_fail_ex+0x265/0x280
[  184.641511][T11440]  should_fail+0xb/0x20
[  184.641590][T11440]  should_fail_usercopy+0x1a/0x20
[  184.641619][T11440]  _copy_from_user+0x1c/0xb0
[  184.641637][T11440]  ___sys_sendmsg+0xc1/0x1d0
[  184.641705][T11440]  __x64_sys_sendmsg+0xd4/0x160
[  184.641740][T11440]  x64_sys_call+0x2999/0x2fb0
[  184.641760][T11440]  do_syscall_64+0xd2/0x200
[  184.641803][T11440]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  184.641828][T11440]  ? clear_bhb_loop+0x40/0x90
[  184.641913][T11440]  ? clear_bhb_loop+0x40/0x90
[  184.641933][T11440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.641957][T11440] RIP: 0033:0x7f3e272ce9a9
[  184.642048][T11440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.642066][T11440] RSP: 002b:00007f3e2592f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.642096][T11440] RAX: ffffffffffffffda RBX: 00007f3e274f5fa0 RCX: 00007f3e272ce9a9
[  184.642114][T11440] RDX: 0000000000000000 RSI: 0000200000004440 RDI: 0000000000000004
[  184.642131][T11440] RBP: 00007f3e2592f090 R08: 0000000000000000 R09: 0000000000000000
[  184.642147][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.642227][T11440] R13: 0000000000000000 R14: 00007f3e274f5fa0 R15: 00007ffff0b571e8
[  184.642245][T11440]  </TASK>
[  184.842411][T11448] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  184.856926][T11447] random: crng reseeded on system resumption
[  184.869108][T11447] IPVS: stopping master sync thread 11448 ...
[  184.999483][T11459] loop0: detected capacity change from 0 to 1024
[  185.153593][T11468] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  185.160968][T11468] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0
[  185.218819][T11473] 9pnet_fd: p9_fd_create_tcp (11473): problem connecting socket to 127.0.0.1
[  185.261400][T11476] IPVS: Error connecting to the multicast addr
[  185.288112][T11476] random: crng reseeded on system resumption
[  185.337797][T11481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2677'.
[  185.506446][T11496] 9pnet_fd: p9_fd_create_tcp (11496): problem connecting socket to 127.0.0.1
[  185.532893][T11498] netlink: 'syz.3.2685': attribute type 21 has an invalid length.
[  185.548115][T11498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2685'.
[  185.759182][T11509] loop4: detected capacity change from 0 to 1024
[  185.774639][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'.
[  185.855347][   T29] kauditd_printk_skb: 326 callbacks suppressed
[  185.855361][   T29] audit: type=1326 audit(1752942221.830:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  185.892033][   T29] audit: type=1326 audit(1752942221.870:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  185.915743][   T29] audit: type=1326 audit(1752942221.870:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  185.939462][   T29] audit: type=1326 audit(1752942221.870:11640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  185.963362][   T29] audit: type=1326 audit(1752942221.870:11641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  185.987064][   T29] audit: type=1326 audit(1752942221.870:11642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  186.011381][   T29] audit: type=1326 audit(1752942221.870:11643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  186.035031][   T29] audit: type=1326 audit(1752942221.870:11644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  186.058605][   T29] audit: type=1326 audit(1752942221.870:11645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  186.082430][   T29] audit: type=1326 audit(1752942221.870:11646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e272ce9a9 code=0x7ffc0000
[  186.121628][T11517] loop0: detected capacity change from 0 to 1024
[  186.128591][T11517] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.228440][T11526] loop0: detected capacity change from 0 to 512
[  186.235909][T11530] 9pnet_fd: p9_fd_create_tcp (11530): problem connecting socket to 127.0.0.1
[  186.237222][T11526] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2693: iget: bad i_size value: 38620345925642
[  186.258211][T11526] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2693: couldn't read orphan inode 15 (err -117)
[  186.277044][T11526] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2693: bg 0: block 5: invalid block bitmap
[  186.280942][T11533] loop4: detected capacity change from 0 to 512
[  186.289773][T11526] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  186.296874][T11533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  186.308098][T11526] EXT4-fs (loop0): This should not happen!! Data will be lost
[  186.308098][T11526] 
[  186.308119][T11526] EXT4-fs (loop0): Total free blocks count 0
[  186.308136][T11526] EXT4-fs (loop0): Free/Dirty block details
[  186.308152][T11526] EXT4-fs (loop0): free_blocks=0
[  186.308273][T11526] EXT4-fs (loop0): dirty_blocks=64
[  186.320902][T11533] EXT4-fs (loop4): 1 truncate cleaned up
[  186.327751][T11526] EXT4-fs (loop0): Block reservation details
[  186.327765][T11526] EXT4-fs (loop0): i_reserved_data_blocks=64
[  186.357144][T11533] EXT4-fs (loop4): shut down requested (0)
[  186.378001][T11533] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  186.387333][T11533] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  186.396425][T11533] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=15
[  186.421838][T11536] loop0: detected capacity change from 0 to 512
[  186.430516][T11536] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2698: iget: bad i_size value: 38620345925642
[  186.443768][T11536] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2698: couldn't read orphan inode 15 (err -117)
[  186.460740][T11536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2698: bg 0: block 5: invalid block bitmap
[  186.475212][T11536] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  186.487536][T11536] EXT4-fs (loop0): This should not happen!! Data will be lost
[  186.487536][T11536] 
[  186.497221][T11536] EXT4-fs (loop0): Total free blocks count 0
[  186.503347][T11536] EXT4-fs (loop0): Free/Dirty block details
[  186.509441][T11536] EXT4-fs (loop0): free_blocks=0
[  186.514550][T11536] EXT4-fs (loop0): dirty_blocks=64
[  186.520122][T11536] EXT4-fs (loop0): Block reservation details
[  186.526171][T11536] EXT4-fs (loop0): i_reserved_data_blocks=64
[  186.626408][T11555] loop3: detected capacity change from 0 to 512
[  186.633230][T11555] ext4: Unknown parameter 'audit'
[  186.692570][T11559] netlink: 'syz.3.2707': attribute type 13 has an invalid length.
[  186.700459][T11559] netlink: 'syz.3.2707': attribute type 17 has an invalid length.
[  186.714455][T11559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.743993][T11558] loop4: detected capacity change from 0 to 512
[  186.750608][T11559] loop3: detected capacity change from 0 to 1024
[  186.752940][T11558] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2708: iget: bad i_size value: 38620345925642
[  186.770000][T11558] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2708: couldn't read orphan inode 15 (err -117)
[  186.787656][T11558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2708: bg 0: block 5: invalid block bitmap
[  186.789866][T11555] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28
[  186.800633][T11558] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  186.812420][T11555] EXT4-fs (loop3): This should not happen!! Data will be lost
[  186.812420][T11555] 
[  186.812441][T11555] EXT4-fs (loop3): Total free blocks count 0
[  186.812459][T11555] EXT4-fs (loop3): Free/Dirty block details
[  186.812474][T11555] EXT4-fs (loop3): free_blocks=0
[  186.824731][T11558] EXT4-fs (loop4): This should not happen!! Data will be lost
[  186.824731][T11558] 
[  186.824751][T11558] EXT4-fs (loop4): Total free blocks count 0
[  186.834405][T11555] EXT4-fs (loop3): dirty_blocks=0
[  186.840400][T11558] EXT4-fs (loop4): Free/Dirty block details
[  186.846318][T11555] EXT4-fs (loop3): Block reservation details
[  186.851271][T11558] EXT4-fs (loop4): free_blocks=0
[  186.860889][T11555] EXT4-fs (loop3): i_reserved_data_blocks=0
[  186.866893][T11558] EXT4-fs (loop4): dirty_blocks=64
[  186.900483][T11558] EXT4-fs (loop4): Block reservation details
[  186.906571][T11558] EXT4-fs (loop4): i_reserved_data_blocks=64
[  186.945243][T11567] loop4: detected capacity change from 0 to 512
[  186.954392][T11567] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2710: iget: bad i_size value: 38620345925642
[  186.964041][T11570] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  186.967663][T11567] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2710: couldn't read orphan inode 15 (err -117)
[  186.986800][T11570] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  187.015899][T11567] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.2710: iget: bad i_size value: 38620345925642
[  187.029621][T11567] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.2710: iget: bad i_size value: 38620345925642
[  187.070914][T11575] loop5: detected capacity change from 0 to 1024
[  187.088378][T11571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11571 comm=syz.3.2711
[  187.107542][T11579] netlink: 'syz.4.2713': attribute type 21 has an invalid length.
[  187.133793][T11583] loop3: detected capacity change from 0 to 128
[  187.161332][T11583] syz.3.2714: attempt to access beyond end of device
[  187.161332][T11583] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  187.187257][  T309] kworker/u8:5: attempt to access beyond end of device
[  187.187257][  T309] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  187.486133][T11601] loop0: detected capacity change from 0 to 512
[  187.786317][T11605] lo speed is unknown, defaulting to 1000
[  187.844830][T11605] chnl_net:caif_netlink_parms(): no params data found
[  187.879230][T11623] ==================================================================
[  187.887373][T11623] BUG: KCSAN: data-race in call_rcu / mas_state_walk
[  187.894188][T11623] 
[  187.896523][T11623] write to 0xffff8881040dfd08 of 8 bytes by task 11621 on cpu 0:
[  187.904433][T11623]  call_rcu+0x51/0x3f0
[  187.908536][T11623]  mas_wmb_replace+0xc6a/0x14a0
[  187.913412][T11623]  mas_wr_store_entry+0x1773/0x2b50
[  187.918644][T11623]  mas_store_prealloc+0x74d/0x9e0
[  187.923697][T11623]  vma_iter_store_new+0x1c5/0x200
[  187.928741][T11623]  vma_complete+0x125/0x580
[  187.933259][T11623]  __split_vma+0x5d9/0x650
[  187.937687][T11623]  vma_modify+0x3f2/0xc80
[  187.942027][T11623]  vma_modify_flags+0x101/0x130
[  187.946922][T11623]  mprotect_fixup+0x2cc/0x570
[  187.951615][T11623]  do_mprotect_pkey+0x6d6/0x980
[  187.956575][T11623]  __x64_sys_mprotect+0x48/0x60
[  187.961445][T11623]  x64_sys_call+0x2794/0x2fb0
[  187.966143][T11623]  do_syscall_64+0xd2/0x200
[  187.970660][T11623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.976566][T11623] 
[  187.978893][T11623] read to 0xffff8881040dfd08 of 8 bytes by task 11623 on cpu 1:
[  187.986880][T11623]  mas_state_walk+0x28f/0x650
[  187.991668][T11623]  mas_walk+0x30/0x120
[  187.995763][T11623]  lock_vma_under_rcu+0xa2/0x2f0
[  188.000724][T11623]  do_user_addr_fault+0x233/0x1090
[  188.005865][T11623]  exc_page_fault+0x62/0xa0
[  188.010391][T11623]  asm_exc_page_fault+0x26/0x30
[  188.015257][T11623] 
[  188.017585][T11623] value changed: 0x000055556c467fff -> 0xffff8881040df108
[  188.024699][T11623] 
[  188.027053][T11623] Reported by Kernel Concurrency Sanitizer on:
[  188.033300][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.1.2726 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  188.046165][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  188.056235][T11623] ==================================================================
[  188.071668][T11605] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.078801][T11605] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.110012][T11605] bridge_slave_0: entered allmulticast mode
[  188.116698][T11605] bridge_slave_0: entered promiscuous mode
[  188.274536][  T588] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.364852][  T588] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.417212][  T588] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.473780][  T588] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.592276][  T588] bridge0 (unregistering): left promiscuous mode
[  188.622900][  T588] bond0 (unregistering): left promiscuous mode
[  188.631686][  T588] bond0 (unregistering): Released all slaves
[  188.640430][  T588] bond1 (unregistering): Released all slaves
[  188.693247][  T588] IPVS: stopping master sync thread 11056 ...
[  188.718728][  T588] hsr_slave_0: left promiscuous mode
[  188.724827][  T588] hsr_slave_1: left promiscuous mode
[  188.734592][  T588] veth1_macvtap: left promiscuous mode
[  188.740109][  T588] veth0_macvtap: left promiscuous mode
[  188.745761][  T588] veth1_vlan: left promiscuous mode
[  188.750983][  T588] veth0_vlan: left promiscuous mode
[  189.245848][  T588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.293832][  T588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.343667][  T588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.393941][  T588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.454995][  T588] bridge_slave_0: left allmulticast mode
[  189.460737][  T588] bridge_slave_0: left promiscuous mode
[  189.466481][  T588] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.512452][  T588] bond0 (unregistering): left allmulticast mode
[  189.518750][  T588] bond0 (unregistering): left promiscuous mode
[  189.526944][  T588] bond0 (unregistering): Released all slaves
[  189.535936][  T588] bond1 (unregistering): Released all slaves
[  189.544532][  T588] bond2 (unregistering): Released all slaves
[  189.552915][  T588] bond3 (unregistering): Released all slaves
[  189.561491][  T588] bond4 (unregistering): Released all slaves
[  189.569867][  T588] bond5 (unregistering): Released all slaves
[  189.643129][  T588] bond0 (unregistering): Released all slaves
[  189.693084][  T588] bond0 (unregistering): Released all slaves
[  189.734225][  T588] tipc: Disabling bearer <eth:veth1_to_bond>
[  189.740404][  T588] tipc: Left network mode
[  189.793418][  T588] hsr_slave_0: left promiscuous mode
[  189.799059][  T588] hsr_slave_1: left promiscuous mode
[  189.806852][  T588] hsr_slave_0: left promiscuous mode
[  189.813838][  T588] hsr_slave_1: left promiscuous mode
[  189.822810][  T588] veth1_macvtap: left promiscuous mode
[  189.828378][  T588] veth0_macvtap: left promiscuous mode
[  189.834132][  T588] veth1_vlan: left promiscuous mode
[  189.839611][  T588] veth0_vlan: left promiscuous mode