last executing test programs:

2m24.460330502s ago: executing program 4 (id=338):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004000200"], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000040)={{r0}, 0x3, &(0x7f0000000000)=[0xf, 0x8000000000000000, 0xf9c6], 0x10, 0x4, 0x1})
pipe(&(0x7f0000002480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RWRITE(r2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) (fail_nth: 1)

2m24.063641727s ago: executing program 4 (id=342):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001100)=[@in6={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, @in={0x2, 0x0, @broadcast}], 0x2c) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000001140)='\\', 0x1}], 0x1}, 0x8040)
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) (async)
open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) (async)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0xfffffffffffffff9, 0x7d75, 0x4df3ab86, 0x8000, 0x8001, 0x8})

2m23.064619191s ago: executing program 4 (id=359):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000100)={0x9, 0xd000001, 0x0, 0xfffffffffffffffc, 0x401, 0x0, 0x200, 0x7}, 0x0, 0x0, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffe, r1, &(0x7f00000001c0)='m', 0x1}])
io_uring_setup(0x1d7e, &(0x7f00000004c0))
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x200040, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet6(0xa, 0x3, 0x3c)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10)
inotify_init1(0x80000)

2m22.816877115s ago: executing program 4 (id=364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@i_version}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$eJzs3cFvVE8dAPDv23Zp6a/8CspBjQoiioawbRdoCBfhojGExEg8eYDaLk3TXbbpLpFWDuXonUQST/onePNgwsmDN29684IHE1SioSYe1ry327K023b9dduF7ueTvL43M8t+Z7rMzL6B3QlgYJ2PiPWIOBERDyJiopWftI641TzSx71983Ru483TuSQajXv/SLLyNC/a/kzqk9ZzjkbED78X8ZNkZ9za6trSbLlcWmmlJ+uV5cna6tqVxVwrpzgzPTN14+r1Ys/aeq7ym9ffXbzzo9/99iuv/rj+7Z+l1Rr/+amsrL0dvdRsej7G2/KGI+LOYQTrk+HW3x8+Pmlv+1xEXMj6/0QMZa8mAHCcNRoT0ZhoTwMAx116/z8eSa7QWgsYj1yuUGiu4Z2NsVy5Wqtfnqg+fjQf2RrW6cjnHi6WS1OttcLTkU/S9HR2/S5dfC/9vHQ1Is5ExPORk1l5Ya5anu/nGx8AGGCfbJv//z3SnP8BgGNutN8VAACOnPkfAAaP+R8ABs//Mf/7dCAAHBPu/wFg8Jj/AWDw7Dv/PzuaegAAR+IHd++mR2Oj+f3Xm9/UfWW+VFsqVB7PFeaqK8uFhWp1oVwqzDUa+z1fuVpdnr62laytrt2vVB8/qt9frMwulO6X8ofZGACgK2fOvfxzOumv3zyZHdG2l4O5Go63XL8rAPTNUL8rAPSNz/PA4OriHt8yABxzHbbofc+u/0Xohc1f4WN16YvW/2FQHWT939oBfNw+2/r/d3peD+DomcNhcDUaiT3/AWDAWOMHDvTv/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCgxrMjyRWyvcDX05+5QiHiVEScjnzycLFcmoqITyPiTyP5kTQ93e9KAwAHlPtb0tr/69LExfHtpSeS/4xk54j46S/v/eLJbL2+Mp3m/3Mrv/4izT9ZXyme6EcDAIB2t3ZmZfN3sXVuu5F/++bp3OZxlFV8fbu5uWgad6N1NEuGYzg7j0Y+Isb+lbTSTen7laEexF9/FhFf2Gz/aDxpizCerYE0dz7dHj+Nfarn8dt//9vj595rby4rS8/57Hfx+R7UBQbNy9vNcbLV99Iu3up/uTifnTv3/9FshDq4dPxL+/XGjvEvtzX+De2In2R9/vxWeu+avL72++/vyGxMNMueRXxpuFP8ZCt+0nn8zV/sso1/+fJXL+xW1vhVxKWO7d/ckbqSDbOT9cryZG117cpiZXahtFB6VCzOTM9M3bh6vTiZrVE3f/6hU4y/37z86W7x0/aP7RJ/dO/2xze6bP+v//vgx1/bI/63vt759T+7R/x0Tvxml/Fnx27tun13Gn9+l/bv8/rH5S7jv/rr2nyXDwUAjkBtdW1ptlwurexzkb7X3O8xLrq/SO/tP4BqZBexHtGrJ8wWJSKi42PSd9QfRpMP6yL5MKrRi4t+j0zAYXvX6ftdEwAAAAAAAAAAAAAAYDe11bWlkc6f1urZRb/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1vwAAAP//tBrD+w==")
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010c2628e06c73002600000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000e6030a01030000e6ff00000000020000000900010073797a30000000000900030073797a1f7bc2903200000000140000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="141000010000000000000000000000000a48000000060a09040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)

2m21.948791487s ago: executing program 4 (id=386):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x10001}]}, 0x40}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r2 = socket$kcm(0x10, 0x2, 0x0)
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)

2m21.323787526s ago: executing program 4 (id=399):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c)

2m21.283081786s ago: executing program 32 (id=399):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f0000000200)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c)

1m56.304226337s ago: executing program 5 (id=707):
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffff7ffffe9}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)

1m56.012688051s ago: executing program 5 (id=714):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x7aa7d, 0x83)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x4e, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20044450}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20)
gettid()
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(r0, 0x4008, 0xcdd0, 0x4c, &(0x7f0000000300)={[0x100000000]}, 0x8)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
eventfd2(0x2, 0x80001)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9})
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000)

1m55.858730663s ago: executing program 5 (id=716):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad2}}, @call={0x85, 0x0, 0x0, 0x4e}, @generic={0xdf, 0x2, 0x0, 0x40, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xd1, &(0x7f00000001c0)=""/209, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x7, 0x8, 0xfffffff9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x1, 0x1, 0xe}, {0x1, 0x3, 0x9, 0xb}, {0x4, 0x3, 0x7, 0xc}, {0x2, 0x2, 0x7, 0x2}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0x23, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000000), &(0x7f00000004c0)=r0}, 0x20)
syz_open_dev$sg(&(0x7f0000000540), 0x823000, 0x40) (async)
r1 = syz_open_dev$sg(&(0x7f0000000540), 0x823000, 0x40)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000580))
truncate(&(0x7f00000005c0)='./file0\x00', 0x2)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000600)={0x2, 0x7f, 0x401})
umount2(&(0x7f0000000640)='./file0\x00', 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0x7a, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x1001) (async)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x1001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000680)=@raw=[@map_idx={0x18, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x8, 0x0, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x20, &(0x7f0000000700)=""/32, 0x40f00, 0x11, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000b00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x0, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0x2, 0x4}, {0x1, 0x5, 0xd, 0x9}, {0x4, 0x4, 0xd, 0x4}, {0x4, 0x4, 0x2, 0xb}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x4, 0x2, 0x7}, {0x5, 0x5, 0x4, 0xc}, {0x2, 0x5, 0xe, 0xb}, {0x3, 0x3, 0x5, 0x4}], 0x10, 0x8, @void, @value}, 0x94) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x5, &(0x7f0000000680)=@raw=[@map_idx={0x18, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x8, 0x0, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x20, &(0x7f0000000700)=""/32, 0x40f00, 0x11, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000b00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x0, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000b80)=[{0x5, 0x2, 0x2, 0x4}, {0x1, 0x5, 0xd, 0x9}, {0x4, 0x4, 0xd, 0x4}, {0x4, 0x4, 0x2, 0xb}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x4, 0x2, 0x7}, {0x5, 0x5, 0x4, 0xc}, {0x2, 0x5, 0xe, 0xb}, {0x3, 0x3, 0x5, 0x4}], 0x10, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='rpcgss_seqno\x00', r3, 0x0, 0x9}, 0x18) (async)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d40)={&(0x7f0000000d00)='rpcgss_seqno\x00', r3, 0x0, 0x9}, 0x18)
ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async)
r6 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x50, r1, 0xca9b0000) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x50, r1, 0xca9b0000)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x3, 0x18}, 0xc)
r7 = geteuid()
sendmsg$nl_xfrm(r3, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)=@getpolicy={0x1d8, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in=@multicast1, 0x4e22, 0x6, 0x4e23, 0xa, 0x2, 0x20, 0x40, 0x33, r2, r7}, 0x6e6bbb, 0x1}, [@etimer_thresh={0x8, 0xc, 0x9}, @migrate={0x180, 0x11, [{@in=@remote, @in=@private=0xa010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x3c, 0x0, 0x0, 0x34ff, 0xa, 0xa}, {@in=@local, @in6=@private1, @in6=@loopback, @in=@rand_addr=0x64010102, 0x33, 0x1dcda0241056dc04, 0x0, 0x3504, 0x2, 0x2}, {@in=@multicast2, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3c, 0x3, 0x0, 0x3506, 0xa87fe301e6a889de, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0xff, 0x2, 0x0, 0x3500, 0x2, 0xa}, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x1, 0x0, 0x3500, 0xa, 0x2}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e00)=@getpolicy={0x1d8, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {{@in6=@local, @in=@multicast1, 0x4e22, 0x6, 0x4e23, 0xa, 0x2, 0x20, 0x40, 0x33, r2, r7}, 0x6e6bbb, 0x1}, [@etimer_thresh={0x8, 0xc, 0x9}, @migrate={0x180, 0x11, [{@in=@remote, @in=@private=0xa010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x3c, 0x0, 0x0, 0x34ff, 0xa, 0xa}, {@in=@local, @in6=@private1, @in6=@loopback, @in=@rand_addr=0x64010102, 0x33, 0x1dcda0241056dc04, 0x0, 0x3504, 0x2, 0x2}, {@in=@multicast2, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3c, 0x3, 0x0, 0x3506, 0xa87fe301e6a889de, 0xa}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0xff, 0x2, 0x0, 0x3500, 0x2, 0xa}, {@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@private=0xa010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, 0x1, 0x0, 0x3500, 0xa, 0x2}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000001080)=0x81008)
lseek(r5, 0x1000, 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x152, 0x152, 0x4, [@const={0x9, 0x0, 0x0, 0xa, 0x3}, @ptr={0x9, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x4, 0x5}, {0x8, 0x2}, {0x0, 0x2}, {0xf}, {0x0, 0x2}, {0x0, 0x2}, {0xf, 0x1}, {0x1, 0x2}, {0x5, 0x5}, {0x9}]}, @datasec={0xd, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x8}, {0x2, 0x9bd, 0xb}, {0x2, 0x81, 0x5}], '5-'}, @func={0x8, 0x0, 0x0, 0xc, 0x1}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x10001, [{0xa, 0x4, 0x3}]}, @struct={0xb, 0x8, 0x0, 0x4, 0x1, 0x2, [{0xf, 0x3, 0x4}, {0x0, 0x5, 0xc}, {0x0, 0x0, 0x618}, {0x6, 0x3, 0x4}, {0xc, 0x1}, {0x9, 0x2, 0x50}, {0x9, 0x3, 0xff}, {0x2, 0x0, 0x157}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x69, 0x6}, @typedef={0xb, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000001240)=""/166, 0x170, 0xa6, 0x0, 0x380, 0x10000, @value=r3}, 0x28)
epoll_create(0x1) (async)
epoll_create(0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'dvmrp1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001340)={'dvmrp1\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r4, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001540)}}, 0x10)
bind$can_j1939(r3, &(0x7f00000016c0)={0x1d, r2, 0x1, {0x1, 0xff, 0x1}, 0x1}, 0x18)
r8 = open(&(0x7f0000001700)='./file0\x00', 0x711082, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001740), 0x10080) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001740), 0x10080)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001780)='$\x00', &(0x7f00000017c0)='./file0/file0\x00', r8)
perf_event_open$cgroup(&(0x7f0000001800)={0x5, 0x80, 0x10, 0xa, 0x27, 0xd2, 0x0, 0x80, 0x4000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x4800, 0x9, 0x0, 0x9, 0x80000000, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x929}, r8, 0xffffffffffffffff, r8, 0x4)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000018c0), r8)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b80)={0xffffffffffffffff, &(0x7f0000001a00)="252a2909b29111c2a35f081bc9d22c43fc62ffc32eeb7e4b04681151f45a432afca82c5462514a45e12715f9c30071130a66967599ebdb290374e68d7fbe68be9f02f0fe124b3429da2c258e2facf2f94808b7ae67709a3bc88d244a504c097f5d1dfdc3694d5ca718da4d54d7d73a108a6fa176e9f09fcb9adff59a5efbd467a78c18256215fcfd356d0ceff2ca92e538278c38230adc20d8a625e0697202e6e8a48ffdd167d6c643d25f5eb9bc34a3c5133da132258d52dd05b733de0690e7679776ddd91a1b68f85477acb0424a4f0a881efb2d48c5b0f72d776c8f71b30bca01ccf0d8dfef66fc07fc7fe074e869a5de1fd8f837c6ec", &(0x7f0000001b00)=""/96}, 0x20)

1m55.834522813s ago: executing program 5 (id=717):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069112c000000da90ecc1d46942080000851000000200000085000000050000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0x1, 0x7a5, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
sendfile(r1, r1, 0x0, 0x7a680000)
truncate(&(0x7f0000000200)='./file2\x00', 0x7)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xdad6, 0x1000}, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4)
sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x1b8, r8, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "1a701cff3f8b9dd2f5a9ff549ada913e8dd4ee02dfba90ba"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "437645f03111dc12706f178dc63b2df90ba3dedffff1f244dd03d66a871f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000004)
recvfrom(r6, 0x0, 0x0, 0x40000001, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write(r9, &(0x7f0000000040)="2fc96a97343219b797b9b2de0ee57a13986051ecafda81d8346c7e44e059c6064b91db3bdae1cb89fdcae8f1039c1bb523baffcf9d78a36660240075d00b158b8191689b545c61adcdcce8c180bd81fc5bf79a827741a565c2509a18803def1b0795123318c91a02fdddbd0bce13c7e82648f4f1f8ba5f88841c7dd3177ca1f7f9a251e4709fab5849bc577f38af48d223f075001488e7ffb78e8355f41c47e60b24605a128e4c2470221673d1532d7c8e92be3818f7bd6e6e901186c44ba0b29643786e7e832aaabbd556a6", 0xcc)
sendto$inet6(r9, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1m55.527814248s ago: executing program 5 (id=722):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000280)=@raw=[@generic={0x6, 0x4, 0x9, 0xfff, 0x9c}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @generic={0x6, 0x8, 0x3, 0x25, 0x4}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0xb}], 0x10, 0x401, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = signalfd4(r0, &(0x7f0000000240)={[0x6]}, 0x8, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r4, r3, 0x23, 0x1c, 0x0, @void, @value=r3}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x0, 0x0, 0xfbfe, 0x0, 0xb, 0x82690027, r1})

1m54.247370466s ago: executing program 5 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = creat(&(0x7f0000000580)='./bus\x00', 0xac)
io_setup(0x1, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
r8 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0xad, 0x0, 0xcb, 0x0, 0x0, 0x8308, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xb}, 0x19200, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r9 = syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f00000006c0)={[], [{@uid_gt}, {@euid_lt}, {@permit_directio}]}, 0xff, 0x564, &(0x7f0000001280)="$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")
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRESOCT, @ANYRES8=r4, @ANYRES8=r3, @ANYRESHEX=r9, @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r10, 0x0, 0x20000401}, 0x18)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r12}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fgetxattr(r11, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
getpid()
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRES8=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)

1m54.246818916s ago: executing program 33 (id=748):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = creat(&(0x7f0000000580)='./bus\x00', 0xac)
io_setup(0x1, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
r8 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0xad, 0x0, 0xcb, 0x0, 0x0, 0x8308, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xb}, 0x19200, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r9 = syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f00000006c0)={[], [{@uid_gt}, {@euid_lt}, {@permit_directio}]}, 0xff, 0x564, &(0x7f0000001280)="$eJzs3cFvI1cZAPBvJnE2u5uSFDiUSpSKFu0WWGfTsG3EoYCE4FQJKOKEtITEiaJ14lXitJtoRVNxRUICBJW4wIkLEn8AEioH7gipUrkjQFSoZOEAUttBY4+7iWNvHLAzavL7SbMzb8Yz3/fs9fM8+2UmgHPr8Yi4GhFjEfFUREwX69Niir32lD/u3v7dpXxKIsteeCuJpFjXOdaFYn652G0yIr725YhvJ0fjbu3s3lqs12ubRXm2uZ68nWW719bWF1drq7WN+fm5ZxaeXbixcH0o9ZyJiOe++Ncff/8XX3ruN59+6U8337z6nTyt/2TZy9FVj2FqV73Sei46xiNicxTBSjLeqmHbjYH26PEfAgCAU5Gf738wIj7eOv+fjrHW2RwAAABwlmSfm4q3k4gMAAAAOLPSiJiKJK0W432nirGZlyPiw3EprTe2mp9aaWxvLOfbImaikq6s1WvXY7I1dmAmKklenivG2HbKT3eV5yPi4Yj40fTFVrm61Kgvl/3lBwAAAJwTl7v6//+aTtNqtdi4V3JyAAAAwPDMlJ0AAAAAMHL6/wAAAHC2VfL+fzbQDZnS0WcDAAAAjMBXnn8+n7LO/a+XX9zZvtV48dpybetWdX17qbrU2LxdXW00VlvX7Fs/7nj1RuP2Z2Jj+85ss7bVnN3a2b253tjeaN5cO3QLbAAAAOAUPfyx1/6YRMTeZy+2ptxEsa0SkY0dfPB4GRkCo3KiMT1/GV0ewOk7+Pl+scQ8gNPnlB7Or0rZCQClO+4PgPoO3vn98HMBAABG48pH+v/+/9ZKqakBI1b8/p8MdAEQ4EwZKzsBoDTt3//ezdrKzgY4TZX7ZwBHhwLpFMCZlw7n9/9jhhImGhQAACjZVGtK0mrRD5iKNK1WIx5q3Rawkqys1WvXI+IDEfHGdOVCXp5r7Zk4mwcAAAAAAAAAAAAAAAAAAAAAAACAAWVZEhkAAABwpkWkf+vcmevK9JNT3d8PTCT/nm7NI+Kln77wkzuLzebmXL7+H++tb75arH/6pN8+/PDNIX2NAQAAABzQ6ad3+vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEz39u8u3cuyLNu/u3Sacf/+hYiYKeIXU3vLeEy25pNRiYhL/0xi/MB+SUSMDSH+3isR8Uiv+EmeVswUWRyKPxGRRsTFYcWPE8aPdvzLQ4gP59lrefvz+V7vvzQeb817v//Gi+n/1b/9S99r/8b6tH8P9Tto5XDx0dd/Nds3/isRj473bn868ZP8eD3iPzFgHb/19d3dftuyn0dc6dX+JYdjzTbXb89u7exeW1tfXK2t1jbm5+eeWXh24cbC9dmVtXqt+LdnjB989Nfv3i+9c6T+lx7Q/rbq3+f5f3LA+r/z+p39D7UXu16ZqMTPsuzqE71f/0fy2SePxu989n2i+BzIy/lzmL76jZ7xH/vlHx7rl1te/+U+9Z/sqv+Fw/WfGLD68dRXv/vnQR8LAIze1s7urcV6vbZp4eBCzJxwr9/u/4+x3mcvwUS0F/LzztLzSSKJfOGNQ5sWy0+svfBy8R5brHfebUM68u+KztEoky+pPQIAAEbn/kl/95ak5+MvnEZSAAAAAAAAAAAAAAAAAAAAcM4cexmwfpvSiLi/5pvfe8DVyLpj7pVTVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB/pvAAAA//9nOdcx")
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRESOCT, @ANYRES8=r4, @ANYRES8=r3, @ANYRESHEX=r9, @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r10, 0x0, 0x20000401}, 0x18)
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r12}, 0x10)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fgetxattr(r11, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
getpid()
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRES8=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)

7.578050364s ago: executing program 1 (id=2544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101da0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0xc, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x8, 0x4, 0x9, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x30}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @map_fd]}, &(0x7f0000000280)='GPL\x00', 0x6, 0x9f, &(0x7f00000004c0)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x5, 0x80, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0x0, 0x4}, {0x0, 0x1, 0xf, 0xc}], 0x10, 0x9, @void, @value}, 0x94)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000600)=r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1})
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001900010000000000fbdbdf250a00000000000000000a000008001e0000040000140005"], 0x38}, 0x1, 0x0, 0x0, 0x4040052}, 0x0)
ioperm(0x7, 0x449, 0x7fc)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})

7.529854545s ago: executing program 1 (id=2547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x2, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x44905}, 0x4040005)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000003000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4040001)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r9 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19)
pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r11, &(0x7f0000000140)="f4", 0x1, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8)

7.388646467s ago: executing program 1 (id=2549):
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10)
socket$netlink(0x10, 0x3, 0x13)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000002000000000000000000bbff020000000000000000000000000001"], 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0x313002, 0x49)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000004c0))

2.691870123s ago: executing program 3 (id=2616):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x20000000}, 0x18)
sigaltstack(&(0x7f0000000340)={&(0x7f0000000280)=""/182, 0x2, 0xb6}, &(0x7f0000000380)={&(0x7f00000004c0)=""/231, 0x0, 0xe7})

2.691137133s ago: executing program 3 (id=2617):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100006cc70000000000000000ea04850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000400)=0xb, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = fsmount(r2, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1, 0x0, 0x10001}, 0x18)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r5, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000084}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r12=>0x0})
io_uring_enter(r7, 0x1eb, 0x6e45, 0x6, &(0x7f0000000540), 0x8)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r12, 0x20, 0x52}}, 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7, 0x8001, 0x40, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, 0x8, 0x20, 0x8, 0x9}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b00)={0x44, r9, 0x904, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2})
writev(r13, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

2.611545354s ago: executing program 3 (id=2618):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/220, 0xdc}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000280)={0x7f, 0x5, 0x2, 0xc000, 0x6, 0x8})
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.510023239s ago: executing program 3 (id=2623):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc)

1.48154014s ago: executing program 2 (id=2624):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000100001080000", @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)

1.42754088s ago: executing program 2 (id=2626):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[], 0x18)

1.372890471s ago: executing program 2 (id=2627):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x20000000}, 0x18)
sigaltstack(&(0x7f0000000340)={&(0x7f0000000280)=""/182, 0x2, 0xb6}, &(0x7f0000000380)={&(0x7f00000004c0)=""/231, 0x0, 0xe7})

1.313200682s ago: executing program 6 (id=2629):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r3 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet(0x2, 0x3, 0x6)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES8=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r9, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.310436312s ago: executing program 3 (id=2630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = creat(0x0, 0xac)
io_setup(0x1, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
r8 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0xad, 0x0, 0xcb, 0x0, 0x0, 0x8308, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xb}, 0x19200, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRESOCT, @ANYRES8=r4, @ANYRES8=r3, @ANYRESHEX, @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r9, 0x0, 0x20000401}, 0x18)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fgetxattr(r10, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
r13 = getpid()
syz_pidfd_open(r13, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRES8=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)

1.247817513s ago: executing program 2 (id=2631):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init1(0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x6bf1c2d5adba8c32})
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

1.230132173s ago: executing program 0 (id=2632):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r3 = socket$inet(0x2, 0x3, 0x6)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES8=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
listen(r8, 0x0)
connect$unix(r7, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.153368714s ago: executing program 0 (id=2633):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0)

1.073861955s ago: executing program 0 (id=2634):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/220, 0xdc}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000280)={0x7f, 0x5, 0x2, 0xc000, 0x6, 0x8})
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

511.654563ms ago: executing program 1 (id=2635):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newtfilter={0x534, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0xe, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x508, 0x2, [@TCA_U32_SEL={0x504, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5, [{0x8, 0x8, 0x7fffffff, 0xff}, {0x1, 0x10, 0xeb, 0x1000}, {0x3, 0x9, 0x7fff, 0x4}, {0xfffffff8, 0x6321, 0x9, 0xd17}, {0x4, 0x9da5, 0x1000, 0x1ff}, {0x0, 0x7fffffff, 0x7f, 0x3}, {0xc, 0x0, 0x7ff, 0x8}, {0x8, 0x9, 0x4, 0x8}, {0x6, 0x0, 0x3, 0x873}, {0x1, 0x2, 0x32b, 0xd}, {0x8, 0xa, 0x7, 0x7fff}, {0xffffffff, 0x80, 0x9, 0x2}, {0x0, 0x9, 0x7cc, 0x4}, {0xfffffff7, 0x1, 0x1, 0x6}, {0x8, 0x3, 0x1, 0x20000}, {0x4, 0x7fffffff, 0x3, 0x3ff}, {0xc0000000, 0xd5, 0x6, 0x4}, {0xfffffffc, 0x1, 0x0, 0x17d}, {0x9, 0x8, 0x9, 0x6}, {0x1, 0x2, 0x5, 0x2}, {0x4, 0xfffff9ae, 0x400, 0x100}, {0x4, 0x1, 0x1000, 0x437}, {0xcc, 0xb, 0x1401, 0x7ff}, {0x3, 0x7ed4, 0x0, 0x4}, {0x48a6, 0xb, 0x2, 0xe8}, {0x4, 0x7, 0xad, 0x401}, {0x200, 0x9, 0x27a, 0x7ff}, {0x4, 0xd, 0x0, 0x3}, {0x8ba1, 0x1000, 0x0, 0x3}, {0x495, 0x2, 0x401, 0x3}, {0x5, 0x1, 0xfff, 0x7}, {0x9, 0x80000001, 0x7, 0x6}, {0x80000001, 0xe34, 0x2, 0x7}, {0x8, 0x7ff, 0xb2a5, 0x5}, {0x4, 0xf21, 0x7, 0xfffffff1}, {0x5, 0x0, 0x6, 0x3ff}, {0xfffffffa, 0x4, 0xba6d, 0x8}, {0x4, 0xbe27, 0x3, 0x3ff}, {0x7, 0xfd4, 0x9, 0x796}, {0x6d, 0x8a, 0xf, 0xde9}, {0xff, 0x10, 0x1, 0xbfa}, {0x5, 0x6, 0xfff, 0x3}, {0x2, 0x8, 0xd47, 0x2}, {0x2, 0x8, 0x8, 0xfd9d}, {0x800, 0x100, 0x5, 0x7}, {0x9, 0x2, 0x1, 0xd76}, {0x3, 0x5, 0x3, 0x3}, {0x8, 0x3, 0x0, 0x8}, {0x4, 0x4, 0x7, 0x80000001}, {0x9, 0x7ff, 0x101, 0x6}, {0x8, 0x3, 0x2, 0x7fffffff}, {0x800, 0x7, 0x3ff, 0x9}, {0x2, 0x1054, 0x8, 0x800}, {0x8, 0x9, 0xffffffff}, {0x10, 0x3, 0x7, 0x400}, {0x0, 0x1, 0x6, 0x6}, {0x60, 0x91a, 0x159, 0x8}, {0x1, 0x6, 0x0, 0x1ff}, {0x80000000, 0x3, 0x7}, {0x3, 0x1, 0x56ad, 0x4}, {0x7, 0xfffffffb, 0x0, 0x8}, {0x1000, 0x42, 0x8000, 0x8}, {0xe, 0x5, 0x5, 0x4}, {0x7, 0x5, 0x0, 0x9}, {0xb68000, 0x800, 0x10000, 0xfa}, {0x81, 0x1, 0x7, 0x8409}, {0x0, 0x57a4, 0x56db08da, 0x9}, {0xb0, 0x3, 0x10, 0x6}, {0x0, 0x6, 0x79, 0x80000000}, {0x5, 0x3, 0x7ff, 0x8256}, {0xfffffffd, 0x8, 0x5, 0x1}, {0x6, 0x3, 0x1c00000, 0xffffff80}, {0x9, 0x9, 0x400, 0x9}, {0x2, 0x81, 0x7, 0xc8}, {0x4, 0x6, 0xebb, 0x7}, {0x0, 0x7, 0x4}, {0xffffffff, 0x40, 0xffff, 0x3}, {0x8, 0x7, 0x4000000, 0x4}, {0xdd, 0x675b, 0x2, 0x3}]}}]}}]}, 0x534}, 0x1, 0x0, 0x0, 0x81}, 0x800)

388.017475ms ago: executing program 1 (id=2636):
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000100)="e7", 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}, 0xa}, 0x1c, &(0x7f0000003040)=[{&(0x7f00000008c0)="ef8b38de00bfe05ca9ebef983e857bda23df619799779d3ed663f6c3247cdd80d5133322df3ba3e4da09bb73f4be6b6fd16650be0071fdf659aa61f78ead1f1945db7d2e0d6a4f00b3e7c81b6674d866e51e5a73ded3f97f9b768e96ea9400103f519bd99653fb91ee1ddb94276b65a624e93d1019afe9c22ef9f7d45061e311ac50a643a30ec43ac86f2d43cbc2c9e69aac7c3753b62d3316a410fc17afa5c662f2d2cec21435618d704420b7db6f3a", 0xb0}, {&(0x7f0000000980)="155078f213a87a1b3fefef88eba37d2fa4b706bebea2163ffa81112bfd291d894f951277c0e099c77dd5143652c929dcaebf56f50b973449fc0dd3f24d5ec88b835b3066c4b5bfc5e4d8e8a0771557532b6c4f66550ae7f350b53eaf9a583f8a96803dd1ca4af2e50b880b6f14d55fff478ecf574df03337bb84e99251c8613fa676", 0x82}, {&(0x7f0000000a40)="6a2a754db01d0f06b10d1e21622a8139f229dade8b5806612ad7efc4fe9fb240c3c878747bbdb4fdadc19dad7b66809ee8494d05447edd7bd75ac10abd8b569d568273eec13940331b29b393d1b2895b22ee04207e7cc8169433dfa2f1f3eb8a3015132aee76aa4579e76cd5c8082477a0d522c77505ae0196d5422859694efc0bac7bef9431d5bceb261400fc315f4b0e3f1193cd30c7dc44aaf72f771c38d089a4c8ed4b484be3c31b52c1c3f4bff330975f15e7fc66902e6865d285ce53401d78ea71b90cd66a7dbb3d858dc787525302e06ec77bee928e3de522186e951534f1cc6e29c0cbd556f439763f6b129009a2", 0xf2}, {&(0x7f0000000b40)="5187dea5ebbc601391a692aadf97b2b14e356e902997174ab79805ab3a4c6e42ceedd4", 0x23}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000b80)="d6dd9023f9b81891c50853906809c5d7d26dc36a75e471b1e796e55683487ef43af97ba292f9e68599729196dad6fa7f5c6017f999926d02e6797c5551d6b172afcb2e0f3664f2bab9c33c65b9a6c90dee13ea81c476db081d419508d284c269641098c9d32f1fed754d44ed0ea1b10318e66fa7f13831b927f07ec0db732a2d54cbf350243cde144b77af8d4dc8dccb90d094ceb6f02be5dff6fd2959e1c5f1e8c515dfe583de0947", 0xa9}, {&(0x7f0000000c40)="c46efcd0e1c59111150ad8d84cb68290bef66c5cac31da3b03448d9c22f14f8a485aa927ae2750c0420050825c362e584276734a9453fc90df3644b0711fc825f8106b6fef8526b7760bd5a0787327817162f38a11cbe7a6fd52c11b7904d42a83289683fbb9765b8d230022", 0x6c}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000000cc0)="cd142af64fc35a2d28b00d3a5bf32c37522adef2583c7a65edde516ff891312f46003e64c85ea42624b14c61523c7f5031ef843b2566f58a72a2ff4da23726716ee7a0dc3419c8881e5c56566582848617532160608cc6e6e669ea16da1dcbddf28b37f3869b69e822f1c0e3bc612a862b0dd3676e92e2c6a1d2453b9a68c253022e003d15d53f1fb5", 0x89}, {&(0x7f0000002f80)="53836282d1f4d2939934ceecc5fbb5b2b69496c117a84d0d12c60b0aedee36e0c028dbd6107da1be0cd2c6ec3d66998873cf454fabde529cd97095786d08724feacf74a77e3470b062d6f3d4824e122f1710003d08596a4748dc80aba0ec0e4152e7d32726fb3d33343d7013199ff444f3f27dca8ed926224c021c596528059cfadf5d5862ca02a0fe8790b9a2007e5698b3b0f2fff964d3fdcb3f6c0835d00339", 0xa1}], 0xa, &(0x7f0000003300)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x1d, 0x6, 0x1, 0xb, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @flowinfo={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x9, [0x200]}}, @enc_lim={0x4, 0x1, 0x42}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @jumbo={0xc2, 0x4, 0x65}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x10, 0x5, [0x5, 0x2, 0x9, 0x7]}}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x0, 0x0, [@empty]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x89, 0x10, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0x2, 0x68, "0c7d69fdf749ad0146dd808e42a9de6e8cf3fc79af30d388a8ee31b51acb4007b3250637eb1048c10c2bccc4ae0e5e078180abfebb000a9f26194756e96fb1fc2b9f443a676085078790867e4652cdedb563ad694ff44cf5c1e8564e63c8fc61697ee6e8369a644d"}, @ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x2}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn, @jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x8001}]}}}], 0x200}}], 0x3, 0x400c404)
sendto$inet6(r0, &(0x7f0000000000)="0f", 0xfdef, 0x0, 0x0, 0x0)

387.159955ms ago: executing program 6 (id=2637):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)=ANY=[], 0x18)

369.495955ms ago: executing program 6 (id=2638):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
inotify_init1(0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x6bf1c2d5adba8c32})
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

358.412055ms ago: executing program 2 (id=2639):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = creat(0x0, 0xac)
io_setup(0x1, &(0x7f0000000040)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10)
r8 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0xad, 0x0, 0xcb, 0x0, 0x0, 0x8308, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0xb}, 0x19200, 0x0, 0xfffffffe, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r8, @ANYRESOCT, @ANYRES8=r4, @ANYRES8=r3, @ANYRESHEX, @ANYRES32=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kfree\x00', r9, 0x0, 0x20000401}, 0x18)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101a00, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000de"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r11}, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
fgetxattr(r10, &(0x7f00000002c0)=@known='security.selinux\x00', 0x0, 0x0)
r13 = getpid()
syz_pidfd_open(r13, 0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYRES8=r7], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)

344.423066ms ago: executing program 0 (id=2640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc)

305.750616ms ago: executing program 1 (id=2641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r3 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r4 = socket$inet(0x2, 0x3, 0x6)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES8=r4], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r9, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r9, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

305.042736ms ago: executing program 6 (id=2642):
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='S\x00\x00\x00'], 0x53)
mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

231.723967ms ago: executing program 6 (id=2643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x2, 0x2, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x44905}, 0x4040005)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0xc3, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4040001)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
write$UHID_INPUT(r8, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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")
r9 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19)
pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)
r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r11 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r11, &(0x7f0000000140)="f4", 0x1, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8)

162.079878ms ago: executing program 0 (id=2644):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0xc0f85403, 0x0)

159.865068ms ago: executing program 3 (id=2645):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000c3f3ffff000000006c884a4a34cd310f0e0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYRES8=r5, @ANYBLOB="e8cdeb4ce170b4e378756827595822d3507bc3cbddd834b855205ad587118deca604a0a344a0442ed003c3da75fcd9ee05b69a134e1119f799b97bba5949df29ac5405645c6640ca299aa4dbe5cdb7d496f1fba9c97f86c40242e62f66afea3d68a10c03c80fec9c56e9cf825fa6a79eab31d32684dc648b33ca59973b0ec381b9ffd412abee54df360c5465f3fb1277d2a4d1d88a223e7af576a0d1a39c269b040fcbedbe46e481f51edcf504510b9f9182bcf213a0de6599d4639ed2e7f25c17", @ANYBLOB="adffa88800000000140012800b0001006d6163736563000004000280080005009cf98f6ae17cbcc41ec69e1794c098fd4d9db1e393791d3480cb", @ANYRES32=r10, @ANYBLOB="0b07ea385dfb0ba8fa8771d6470e8593b6eee8c0c654ddb93753593f305f5cd9dc5ed9312a56151422d6cedf3ec738b0d4854d32b4ebd861b0087f2d1711afb2d42d0098907c77"], 0x3c}}, 0x8000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r13, &(0x7f0000004200)='t', 0x1)
sendfile(r13, r12, 0x0, 0x3ffff)
sendfile(r13, r12, 0x0, 0x7ffff000)

107.789469ms ago: executing program 0 (id=2646):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8)
read(r0, &(0x7f00000002c0)=""/183, 0xeb)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
timer_create(0x3, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x30000000, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'erspan0\x00', 0x0})
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)

20.88732ms ago: executing program 6 (id=2647):
r0 = inotify_init()
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000040)=""/69, 0x45}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/6, 0x6}], 0x7)
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)={0x0, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x200}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x28)
ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f0000000380)="41e76cecdb7e0e4c691157d83bc521a76ba04d3e37eff7e146a8b7ce9c7b045e28f59efa329f8db94d6c142a4cef1001655e9a9cee574ab05774831313da9a3dff2a636bfebd33126c05cad16684fa5fa558008742cd8014012b35354cc6f4aaee15170332b16c5f23260aa5b28d6a0b6748ea15841fd7d6cc6ca3bbf4f15933fec2a28c1588b4d5aadc74586a901ed088cc396a2c1cea984c946dac3133353f3391b36434b5c6b7dacfc0b50414893dc40d79c098f6af81f41fe7e74ff29371886c6cc917dbaa2e45aecf2813931cf26ea9cb4c0d730260e036514ab0e063a1d78ce561ef7872696245f6a2530f841f9583e7afadf8445f38171d622db1ca087f6d5feae7b35b7d9e0bd4466a20bff96b5663d724f95d28fdeff5fd54e5738dd081b7fae95a69eced76e481985dfea51fcdbe7ea577d3c074ea547e08135c0176a56db71def2e4968d4ad24433faa045c5073f3299745747d4d5bdcccf59800ad70d522d461d40981eb47b8719895f14e51af5bf0b3b4a99ee3ed5b83403b964a0315fd860650c0be59e7e46cf28bbcd0129e42ea64f296a10c100e26a4d30e6272f558bd12b6a44f7849c423ffe83396285d4eaffde57a72601b88fb9ce109d34bd8ac3381d92199e9bfcd08c81f41dcead5864d63429d3a43a12e121513cf0718e45e04178dc273b0749693e9289986a434bce491b5aca51c793217575a665b48245a83caa7b412a55867a8d2e8d7049e3b9c2f905ec89d5f46db888be3628adadb6924f6e336e6256ab51b0505bec03fc3a1b3d636ee5f7f7be99a6ab79db9028f016bd32e9e47f710186833104d52de4a7920009eca8f9ecd9e9240cdececc83d4e7138e3ae85d52697a1ed9d03a0fbaf0c11cc421ab138b9e43376f7bde6ec4ce2fb7d6c0115b20e3a4a9342a1f4e59f0354d0b6a735416cfbbf06308be7347e9d001d775e9b6bde76932004786662f937263d27b8cf85ad958b18aad748ae2c90001c5c09a07c06cd1565a74952bd615dcb0a57a58e3ca4b4bf62fb1d047f77eb0f0238ec7aaf9c0bbf31e69b9b4183107beeb0d956e15da6cac8295b2b3a086871ab488f7c65d17d47a1951e74d509bd51324b9bd4fa8ca7593b43704470685278d9bea4776d87596ea57e520b5527e8dd2656c36d37701a967fa6dd4ba5a1b319264098335621cef81e894c21a0b23cf9b03367b664593dc9323b8fbbb1c8312c7c7d3dd664e537bf523a38424fa06148cf61e19e7bd37a7c147b6d8558f699667bb8309196ba5241321c178aa56bf159cf3ee0ec6931164ea794b847619dbdf282191f7ce266b03b690b8ddb5a27a8354591f5acf648ab6c2b21b2e83b85cd99fa47a8a3173d1f2e2009f928f8091c43b4c5fbec8ed8890e51fbf24d67bae7631bcb15ff752110a74b1fcc30a3c2614f0198d9f98abec2b0923f480d909a412332930051a0a680a6b3fbbf848989b8665625baf097eecc1a28ab686a4d813c3e2a53e58493c79570797d205a19f7b5b5ba77f9e7189c9a6e8174856af0b32b006ae8c974e1ce0304be192d817f628644ced3e5b4ad8939265384e59545fa3507a164450d0ecb010fb10a3f2ef74df8c28b441b9c1c3f6dc2a2b4c4131db9c4572b0547060831ee8082d33bad48faa9709d6a18af0c7f54bcf8d0d5191aa6d6c5886d86d7fc8199495ef5e69691dabdbe914da8bd4981f8f00855f75518a899e018f417cad38ee998092fc2ae9848979adc14f9e15dfc719625ddf0e674da059ab0b6daadfac9221d50f3efd7ec6b0eb71ac200576c71e017d7d60601af41c27fc7603345d80151e2b40aa5ab06c8c07e4bea6385ff353199508a446db01989d4c260c637f6650332c272fd25cbaa4c4796d0e121294787f76c9782a0d10406b7eea7f2a884245ccb551c0fc7ee012f19b1433fabd18899cc2d1944688ae8d3318d5e4f4b862bd0dabb71f8ba9e024c67523c383f9ab6253d53214eb09749c5d18030bb892475ad1341f4bf193a0696ebadee737f7723c76e275f1ee14ffc13d0b0359e6ed1da78724645f176cc56a086f9f024eb313a4bcc85eeb0985ec307393bcf230da280404a2b419747f67af06842fa92939d4d0afd1477b41aa431af13520ca68f9bb03da3b33c6896516634d4d890a244df1117c9b2083a5174aa5d91d1393ee3bd1dac4a2264b2602858760810bc0c2a8d836e7c0466f3e131d461bbc6f48e7ac31e6451a349b33c77cd5d3e9abd4c55108073552db4bf65e0b20e6712accf57433aefd21638c726623354084fc7a17c6746d4ef0a9d2aa0612f2461acb295df51522e4dc7ed9ecdf1424e2a57484ee6395345f98524dc453bdb4177bb38c1cc072f269ebb737c68a74cff80497918d426bee42e87c75fb0cd650700d47763554e7b27858754e19e43d541e2a395e94bf80a01cbf62cdb3670015e41eb3efd32b7334afcd6c51da7e65685937e576c3f4c1043e3feef55b500bbd11b6e89009bc48ccd8cd14f25fd154ea24c7d6abbb20fef6c36738856823c282cbd425f689fc6785b76be989fcc2c3168efde7af78865b50db59f1abacb09c2388ffd2886dfb8771c77acc6148c29c86e3dd0bfd5eb7634b5892e932f28167c670df4746b471e329dc3481d8babd0ef6a292a13033cc82451c6a91c39776725b21b68830d7a7eb82988fab049316822ae704b1037941582eb7ed80c5a4ee77b17118a1d80444b3d85086b834aa8f08822d7479d59eb148f2692363e134e6dad04ee283b229cf88389394b978e4eb1fc7fb944142234dde847559fccbd6b871706ce40f2e17077c8e5bd3defe67939bd69b07e247e97e8dc709d1e2575b4f1ab2806c33ae190b4f92384d7be098fbb96a67f0ae10978bf8cfbf5ecef3174fa281e53811cd98d8d8762b37b64fe22d9ddaf25ad664a99d91145e0656f30fe90346ba4be01879908a50038f63761b045f92a7b8990bc232dc37531ef61e1b9bed8dbc149764e709cb4d868c69629818f4a50409e97b94a5936fc4fcb836f00562e803b6369f7c059756e742b5b7d62cfdd2ec3d775ae9bfdec352defee917a05c9dd7464da8afbb379d38ec88b48d11b44b9b2cfd77390c4be92b3bc2ae82a5bfff0358417f59d2503623dcafd647682c2b554b5c9b88ae3cd7294d77537ef7dd65e2c6bd9f374870c350e423d9aafaed5425d178ed81ac3bcc26be21a3522547a3424e940f086c60e7b2c109b8d1c01f12c727fdc0f074e9928aa4b376ed6f5c2967bf76d3657f3e611834acd8e75493b0ac2e86b67d1978e5359df569b6f24371e9a64ab9801cd230e1ca68217165515c7eafb2a41d3aa4b88ff284bec616c171598048a2c80affb504681145ef6086025592c05285d6008ea4cf11d1966a9bb07929f06367fc3b4adbbe86b509b31be1d5fb55af15c76672a0d8fe5268624086d2beb5e5567121a64e2f4047aba427407ad3439c6012f69030122f7b45f4e8352ae263b1f91c26181dbd148d6b91ac5281a488753bdc176c90b5a0475cc9c34dd1ed8c34337420c566d4420a69f112b46aa3ca36e09f6738a0d1a9c8c812ac6e7cd7b97d2245748c42dee2cc225aa77527cc2422b0416eda1b16b24eafaca05df54aea278088ad8d37341d9851fd3757bdb8f1aa2133f3a3cb04f0739158c500a4bb4cadbde9a7d4c9148c6d0d42d8ee89dbfe24381de3ec12d411b3708c27e1b8b25ddbbf5cdcdd060bd31dba7f8129720790d02eb0dabf03c35b289591f27b3a6750592b5e5c3bb66b0f040f24359e0b5f9e9a010900995132a1969e0cf9d62dc603df3fa02779f2044f0966c804f83f6bba781822a874c5443d5be39931e36502382aa62b608d1ca984c7943a99fc3f045df8678c8bfb14d5e40482ce79a018c844048ad322febf466d76745aacaf7b593865e4124783a465bd69aac69efa0aa84c79e2282c9025399636ea7c6e478b6a5ee2797e2eafc8158d7571e259bacd793b7e05007782b6bafcf9b6cbc7f59951d672c5bd5fd6daae879c903f532a2e7b4828e2a1f75487eeeeab6e7ebcead21d98de49e9b5ce82eac7ee8254f61b3d1ddaf690a90596ad1c9cf3738f9eff09b6734e4098ff6781b982c08d16a8f8d8e8db065f5d21e2e3a0ac427d39429e99c12ddd72a44391c9bbd4c60652962f4456092ea6d349f253b954130bef696885e06a1119e458a76c86c3052028395e88881e728317e7acdcd69a1ccc699b87762564ce00b6aa054c3e7b2b322ffb13262f67b5f492d757a99b8aedb7aea05f9b7e6769dbf145d3c7ada8d5d8c4d17f6e214e8ee715c885a2f4ad691dd21709cd4e44ac9ce8b86cb244b4dc2bd2a18939ff2c480eaf964c5cdc92e9071e44eb6f45fe775a1c7d1838570259b37a09a9e3158619e6f682c6ab1ca8f18db2f3cdcdf8a238c849daa82631b7a6ce1add29b29b8acb13ce7608ad75a6fa3939ca2de751408b47ff7310bd5f6b3c9023dd9439f3edf3d6fe26269baf51d4cdc46e66a1da930c3a4300ecf7d4143d9b4239f749e66eebc72a890cb65618d218df312ffb327a413c8abf5cc6656cd4af23c1222ad3bc197df6b16eb34f948d84b151ab6619583d335dc6eb70380f2faebee4d5fed68e901c6ce260705b328a4f67be0672b4b978cf052c288a5b2228eaa174de15af5da709f36b47e816b70f9dedbd10eb18a966b18f8a8dd9d05090f24fb57c1c0578fac7fd65d506471c4916c5ced08d87e783d48a9aab1240d125a780ce6da3a35a894a8d0b3c6ea5cd76a4601985031b8b7a2c3e8a272c588653b82cacfe760a628460e4e9ffe1bc68a2232c626894017e0449427e3e1e2aeb28dc82e487a712cf458bcf7229dbba591208681976e61066b3b126d4f0c5233bf21410ee9ce1f9f385ae31a788cbd67f82bc482d1c04e2c4b8d58cf90bf78e34ab371efa6e3dd6391aea42216c795358e0544e22dad89e220cb27d5e4318360011943daa3a94311fb79a5540ba9c1c8a8c58f15d7ea72ca3f144600ebc2c451138dce596f25c8bd3605c08f77fe1ee7e2e08441a0abe7fc0678b629ad7ceab2be727d74c3598f99b3c8ea93c675463fd1d0a9dd73b9170c389a17202a20381624e7901e8e50ff54dec16abe24446ad2e88c457d059dc0b1d267a8050d2da077ba64b75df77b651aa628ff4c42d2bd9c19425cf267a4cbab70f6d1941ac4496989474d4b59c57b0597ca3df8ecb0ab103f237117e43dd959a295208d7ba70de041c9c02120c8c7c3a5daa33ed701d7e14c9b507eeac858422cbdf78e9cdca738d4d9d9961efa79fade8874b8596719e787de4f14cd1bf7e51711a5d52eecbd49ff91431d26ccec691f8fae893f9e27a1acdd602a44c05374d5a0a9b32388eb04a15ce92e8a76516087b2bcd6cc51235272a180e059234d6cd0ffb0b55cde55eb31d51d97644ee6a994e5e3cc15e175338b0987972a25ef126de9a5584bcaf6383abcbef73c6022010eff693e2730d460ba1b637085b99b97e0ce142d47caf78c6193a4935e60929a21729e5d838e991071983f886ba905fb86bf21a729e0d7c6ab3d3db3b327fb5a57efcd2fe57e350efaf5a43b543144f342e073e8aa11bdbd6bb72f57f11f7281ee4a66d3536504e54a87cb597251817f6668c246b19d893d1cce651f654a6f81883a0b978cb8a3315a06a0ff205f12593e72af589a3c16cc74500d988e3f48ec3ed308c873e9914f698613da8c87d257a532fdfe9691d2e7c2eeeb49f863608bceb9ba2240e1f0e33065dfbaefd8a29deddf814c9544356e05e3")
setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001380), 0x2)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003600)=[{&(0x7f0000001440)=""/234, 0xea}, {&(0x7f0000001540)=""/61, 0x3d}, {&(0x7f0000001580)=""/12, 0xc}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/43, 0x2b}], 0x6}, 0x2000)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
connect$netlink(r2, &(0x7f00000036c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003700)={0x0, ""/256, 0x0, 0x0, <r3=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000003900)={{r2}, r4, 0x8, @unused=[0x3, 0x80000001, 0xf, 0xfffffffffffff4fd], @devid})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000004900)=[@in6={0xa, 0x4e22, 0x8, @loopback, 0x8}], 0x1c)
socket$rxrpc(0x21, 0x2, 0x7)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000004940), 0x4)
r7 = syz_open_dev$sg(&(0x7f0000004980), 0x7ff, 0x101401)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000049c0)={0x1, 'ip6gretap0\x00', {}, 0x8})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000004a00), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000004ac0)={{r7}, r3, 0x18, @inherit={0x50, &(0x7f0000004a40)={0x0, 0x1, 0x1, 0xc, {0x4, 0x4, 0xc59d, 0x1ff, 0x6}, [0xdb]}}, @name="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"})
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000005ac0), 0x580, 0x0)
read$rfkill(r9, &(0x7f0000005b00), 0x8)
openat$nci(0xffffffffffffff9c, &(0x7f0000005b40), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000005b80)={{0x1, 0x1, 0x18, <r10=>r2, {<r11=>r9}}, './file0\x00'})
ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f0000005e00)={0x3, &(0x7f0000005d80)=[{0x2, 0xe3, &(0x7f0000005bc0)="18ac1efefaa4a5cbf70c939b7a46e5e79710635c33af77981a7cbaa190cee33f3fe9d59858d0ad0c280e6ab948f5b5dc7fb12aee636e2891ff27c1e57efbd4976ee0057f2227c6ccf07ab8cd5eec3567bcf4cada7fffed8b00212e22097127d43f1200dd39269767d6cc76ba863c167347ee21c932cf4042b8ad13054bcdbbbcef3d2ead0bc68114f5f0bcd7586f9733a608f7f83e79d6088e8eb8d91db79ff3a6612f5394fac56471f7282ac956b21aa0bbbf92e8fb495a88692e764a2488da3514f23ee615a220263f7e0fb509a618da1feaddab4c75519064fe0b10bcfd6810bc4c", 0x1}, {0x1, 0x8, &(0x7f0000005cc0)="91c80f12f55fccb7", 0x0, 0x1}, {0x4, 0x49, &(0x7f0000005d00)="4e621d318c2dea3f9b0f45c61be3fd7980a7f3d527ba0d34f38b10064c90a30317968dfef0ff38b61d961d27661266d2510c5424a32f850fd09cb16b7f55672f1d49df2cc96f21baa3", 0x1}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000005e80)={0x1, &(0x7f0000005e40)=[{0x7, 0x3, 0x6, 0x3}]})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r10, 0x111, 0x5, 0x3, 0x4)
listen(r6, 0x400)
close_range(0xffffffffffffffff, r8, 0x2)

0s ago: executing program 2 (id=2648):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r3 = socket$inet(0x2, 0x3, 0x8)
r4 = socket$inet(0x2, 0x3, 0x6)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES8=r4], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)=r7}, 0x20)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r10, 0x0)
connect$unix(r9, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r10, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  153.140987][   T29] audit: type=1326 audit(1747350418.036:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  153.643768][ T9384] loop0: detected capacity change from 0 to 8192
[  153.859785][ T9398] loop6: detected capacity change from 0 to 1024
[  153.893350][ T9398] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1835: Allocating blocks 497-513 which overlap fs metadata
[  153.910970][ T9398] EXT4-fs (loop6): pa ffff8881071bbb60: logic 256, phys. 369, len 9
[  153.919162][ T9398] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  153.950657][ T9376] FAULT_INJECTION: forcing a failure.
[  153.950657][ T9376] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.963888][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.2.1826 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  153.963982][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  153.963998][ T9376] Call Trace:
[  153.964005][ T9376]  <TASK>
[  153.964012][ T9376]  __dump_stack+0x1d/0x30
[  153.964033][ T9376]  dump_stack_lvl+0xe8/0x140
[  153.964054][ T9376]  dump_stack+0x15/0x1b
[  153.964071][ T9376]  should_fail_ex+0x265/0x280
[  153.964180][ T9376]  should_fail+0xb/0x20
[  153.964210][ T9376]  should_fail_usercopy+0x1a/0x20
[  153.964235][ T9376]  copy_fpstate_to_sigframe+0x62b/0x7d0
[  153.964272][ T9376]  ? copy_fpstate_to_sigframe+0xe5/0x7d0
[  153.964373][ T9376]  get_sigframe+0x34d/0x490
[  153.964431][ T9376]  ? get_signal+0xdc8/0xf70
[  153.964455][ T9376]  x64_setup_rt_frame+0xa8/0x580
[  153.964545][ T9376]  arch_do_signal_or_restart+0x26e/0x480
[  153.964610][ T9376]  syscall_exit_to_user_mode+0x68/0xb0
[  153.964643][ T9376]  do_syscall_64+0xdd/0x1a0
[  153.964728][ T9376]  ? clear_bhb_loop+0x40/0x90
[  153.964817][ T9376]  ? clear_bhb_loop+0x40/0x90
[  153.964842][ T9376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.964892][ T9376] RIP: 0033:0x7f5ef8cfe969
[  153.964908][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  153.964931][ T9376] RSP: 002b:00007f5ef7367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  153.964955][ T9376] RAX: 0000000000000000 RBX: 00007f5ef8f25fa0 RCX: 00007f5ef8cfe969
[  153.964971][ T9376] RDX: 0000200000000080 RSI: 0000000000005404 RDI: 0000000000000005
[  153.964987][ T9376] RBP: 00007f5ef7367090 R08: 0000000000000000 R09: 0000000000000000
[  153.965059][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  153.965076][ T9376] R13: 0000000000000000 R14: 00007f5ef8f25fa0 R15: 00007ffe2a5b1618
[  153.965111][ T9376]  </TASK>
[  154.246005][ T9412] __nla_validate_parse: 4 callbacks suppressed
[  154.246026][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1836'.
[  154.306435][ T9409] loop3: detected capacity change from 0 to 1024
[  154.346353][ T9416] netlink: 'syz.1.1840': attribute type 10 has an invalid length.
[  154.360278][ T9409] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1839: Allocating blocks 497-513 which overlap fs metadata
[  154.362662][ T9423] loop6: detected capacity change from 0 to 1024
[  154.376660][ T9424] netlink: 'syz.2.1838': attribute type 10 has an invalid length.
[  154.389301][ T9409] EXT4-fs (loop3): pa ffff8881071bbbd0: logic 256, phys. 369, len 9
[  154.397436][ T9409] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  154.462076][ T9423] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1841: Allocating blocks 497-513 which overlap fs metadata
[  154.478975][ T9423] EXT4-fs (loop6): pa ffff888107177c40: logic 256, phys. 369, len 9
[  154.487170][ T9423] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  154.514313][ T9441] loop3: detected capacity change from 0 to 512
[  154.537619][ T9441] EXT4-fs (loop3): shut down requested (1)
[  154.631496][ T9448] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  154.689369][ T9451] FAULT_INJECTION: forcing a failure.
[  154.689369][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.702516][ T9451] CPU: 0 UID: 0 PID: 9451 Comm: syz.0.1849 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  154.702585][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  154.702602][ T9451] Call Trace:
[  154.702610][ T9451]  <TASK>
[  154.702627][ T9451]  __dump_stack+0x1d/0x30
[  154.702648][ T9451]  dump_stack_lvl+0xe8/0x140
[  154.702667][ T9451]  dump_stack+0x15/0x1b
[  154.702684][ T9451]  should_fail_ex+0x265/0x280
[  154.702773][ T9451]  should_fail+0xb/0x20
[  154.702810][ T9451]  should_fail_usercopy+0x1a/0x20
[  154.702829][ T9451]  _copy_from_user+0x1c/0xb0
[  154.702922][ T9451]  btf_new_fd+0x20a/0x790
[  154.702959][ T9451]  bpf_btf_load+0x112/0x130
[  154.703005][ T9451]  __sys_bpf+0x561/0x790
[  154.703054][ T9451]  __x64_sys_bpf+0x41/0x50
[  154.703088][ T9451]  x64_sys_call+0x2478/0x2fb0
[  154.703129][ T9451]  do_syscall_64+0xd0/0x1a0
[  154.703151][ T9451]  ? clear_bhb_loop+0x40/0x90
[  154.703172][ T9451]  ? clear_bhb_loop+0x40/0x90
[  154.703233][ T9451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.703253][ T9451] RIP: 0033:0x7ff509b4e969
[  154.703345][ T9451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.703365][ T9451] RSP: 002b:00007ff5081b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  154.703423][ T9451] RAX: ffffffffffffffda RBX: 00007ff509d75fa0 RCX: 00007ff509b4e969
[  154.703435][ T9451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012
[  154.703523][ T9451] RBP: 00007ff5081b7090 R08: 0000000000000000 R09: 0000000000000000
[  154.703539][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.703554][ T9451] R13: 0000000000000000 R14: 00007ff509d75fa0 R15: 00007ffe1b726558
[  154.703579][ T9451]  </TASK>
[  154.899013][ T9448] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  154.908106][ T9448] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  155.206913][ T9458] netlink: 'syz.0.1853': attribute type 10 has an invalid length.
[  155.412147][ T9471] loop6: detected capacity change from 0 to 512
[  155.419924][ T9471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  155.435441][ T9471] EXT4-fs (loop6): orphan cleanup on readonly fs
[  155.442533][ T9471] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1858: bg 0: block 248: padding at end of block bitmap is not set
[  155.457910][ T9471] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1858: Failed to acquire dquot type 1
[  155.470200][ T9471] EXT4-fs (loop6): 1 truncate cleaned up
[  155.484250][ T9472] loop0: detected capacity change from 0 to 1024
[  155.522945][ T9472] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1857: Allocating blocks 497-513 which overlap fs metadata
[  155.565095][ T9472] EXT4-fs (loop0): pa ffff8881071bbb60: logic 256, phys. 369, len 9
[  155.573235][ T9472] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  155.692225][ T9497] loop0: detected capacity change from 0 to 512
[  155.730820][ T9497] EXT4-fs (loop0): shut down requested (1)
[  155.753284][ T9497] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  155.763385][ T9497] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  155.814016][ T9497] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  156.109474][ T9515] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  156.141711][ T9515] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0
[  156.389369][ T9526] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  156.472486][ T9530] netlink: 'syz.2.1876': attribute type 10 has an invalid length.
[  156.509435][ T9532] loop6: detected capacity change from 0 to 512
[  156.576266][ T9532] EXT4-fs (loop6): shut down requested (1)
[  156.588835][ T9532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  156.628237][ T9532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  156.692270][ T9532] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  156.820834][ T9547] loop3: detected capacity change from 0 to 512
[  156.828120][ T9547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  156.842240][ T9547] EXT4-fs (loop3): orphan cleanup on readonly fs
[  156.851681][ T9547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1881: bg 0: block 248: padding at end of block bitmap is not set
[  156.866380][ T9547] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1881: Failed to acquire dquot type 1
[  156.878354][ T9547] EXT4-fs (loop3): 1 truncate cleaned up
[  156.889026][ T9554] loop6: detected capacity change from 0 to 128
[  156.959812][ T9554] syz.6.1882: attempt to access beyond end of device
[  156.959812][ T9554] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  157.041156][ T9564] loop0: detected capacity change from 0 to 1024
[  157.058211][ T9564] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1888: Allocating blocks 497-513 which overlap fs metadata
[  157.076003][ T9564] EXT4-fs (loop0): pa ffff8881071bbcb0: logic 256, phys. 369, len 9
[  157.084100][ T9564] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  157.096907][ T3423] kworker/u8:7: attempt to access beyond end of device
[  157.096907][ T3423] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  157.144527][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1889'.
[  157.154496][ T9575] syzkaller1: entered promiscuous mode
[  157.160564][ T9575] syzkaller1: entered allmulticast mode
[  157.171619][ T9575] loop6: detected capacity change from 0 to 512
[  157.179329][ T9575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  157.226731][ T9575] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1889: invalid block
[  157.241196][ T9575] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1889: invalid indirect mapped block 4294967295 (level 1)
[  157.261090][ T9575] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1889: invalid indirect mapped block 4294967295 (level 1)
[  157.299763][ T9588] loop0: detected capacity change from 0 to 512
[  157.328032][ T9575] EXT4-fs (loop6): 2 truncates cleaned up
[  157.372543][ T9575] netlink: 'syz.6.1889': attribute type 4 has an invalid length.
[  157.387418][ T9588] EXT4-fs (loop0): shut down requested (1)
[  157.399647][ T9575] netlink: 'syz.6.1889': attribute type 4 has an invalid length.
[  157.409900][ T9588] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  157.442468][ T9575] lo: left promiscuous mode
[  157.447102][ T9575] lo: left allmulticast mode
[  157.452456][ T9588] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  157.484157][ T9588] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  157.958266][   T29] kauditd_printk_skb: 95 callbacks suppressed
[  157.958279][   T29] audit: type=1326 audit(1747350422.876:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.029789][ T9606] loop3: detected capacity change from 0 to 128
[  158.043265][   T29] audit: type=1326 audit(1747350422.916:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.066778][   T29] audit: type=1326 audit(1747350422.916:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.090633][   T29] audit: type=1326 audit(1747350422.916:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.114507][   T29] audit: type=1326 audit(1747350422.916:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.138019][   T29] audit: type=1326 audit(1747350422.916:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.161830][   T29] audit: type=1326 audit(1747350422.916:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.185338][   T29] audit: type=1326 audit(1747350422.916:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.195525][ T9606] syz.3.1901: attempt to access beyond end of device
[  158.195525][ T9606] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  158.209125][   T29] audit: type=1326 audit(1747350422.916:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.246243][   T29] audit: type=1326 audit(1747350422.916:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.0.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  158.453362][ T3912] kworker/u8:10: attempt to access beyond end of device
[  158.453362][ T3912] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  158.602868][ T9626] loop3: detected capacity change from 0 to 512
[  158.626452][ T9626] EXT4-fs (loop3): shut down requested (1)
[  158.633061][ T9626] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  158.642099][ T9626] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  158.665391][ T9626] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  158.732714][ T9635] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  158.817937][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'.
[  158.864388][ T9652] syzkaller1: entered promiscuous mode
[  158.869996][ T9652] syzkaller1: entered allmulticast mode
[  158.955623][ T9654] loop3: detected capacity change from 0 to 2048
[  158.992088][ T9652] loop0: detected capacity change from 0 to 512
[  159.008590][ T9652] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.037401][ T9654] EXT4-fs: Ignoring removed orlov option
[  159.066614][ T9652] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1916: invalid block
[  159.084859][ T9654] EXT4-fs (loop3): can't enable nombcache during remount
[  159.123733][ T9652] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1916: invalid indirect mapped block 4294967295 (level 1)
[  159.166312][ T9652] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1916: invalid indirect mapped block 4294967295 (level 1)
[  159.252137][ T9652] EXT4-fs (loop0): 2 truncates cleaned up
[  159.254646][ T9663] netlink: 'syz.2.1918': attribute type 10 has an invalid length.
[  159.262757][ T9652] netlink: 'syz.0.1916': attribute type 4 has an invalid length.
[  159.344923][ T9652] netlink: 'syz.0.1916': attribute type 4 has an invalid length.
[  159.411169][ T9676] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  159.488141][ T9686] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  159.547042][ T9690] loop0: detected capacity change from 0 to 1024
[  159.589535][ T9690] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1928: Allocating blocks 497-513 which overlap fs metadata
[  159.603196][ T9708] loop6: detected capacity change from 0 to 2048
[  159.611825][ T9690] EXT4-fs (loop0): pa ffff8881071bbcb0: logic 256, phys. 369, len 9
[  159.619956][ T9690] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  159.643954][ T9708] EXT4-fs: Ignoring removed orlov option
[  159.651155][ T9708] EXT4-fs (loop6): can't enable nombcache during remount
[  159.741397][ T9712] netlink: 'syz.0.1934': attribute type 10 has an invalid length.
[  159.930128][ T9721] loop6: detected capacity change from 0 to 764
[  159.938531][ T9721] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  159.950226][ T9721] bridge_slave_0: left allmulticast mode
[  159.956321][ T9721] bridge_slave_0: left promiscuous mode
[  159.962163][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.970141][ T9721] bridge_slave_1: left allmulticast mode
[  159.975930][ T9721] bridge_slave_1: left promiscuous mode
[  159.981613][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.087655][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.098763][ T9721] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.303112][ T9731] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  160.448358][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'.
[  160.459876][ T9739] syzkaller1: entered promiscuous mode
[  160.465679][ T9739] syzkaller1: entered allmulticast mode
[  160.501332][ T9739] loop3: detected capacity change from 0 to 512
[  160.509457][ T9739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  160.526580][ T9739] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1943: invalid block
[  160.541549][ T9739] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1943: invalid indirect mapped block 4294967295 (level 1)
[  160.557670][ T9739] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1943: invalid indirect mapped block 4294967295 (level 1)
[  160.573214][ T9739] EXT4-fs (loop3): 2 truncates cleaned up
[  160.584933][ T9739] netlink: 'syz.3.1943': attribute type 4 has an invalid length.
[  160.598093][ T9739] netlink: 'syz.3.1943': attribute type 4 has an invalid length.
[  160.609874][ T3391] lo speed is unknown, defaulting to 1000
[  160.615719][ T3391] syz0: Port: 1 Link ACTIVE
[  160.677341][ T3391] lo speed is unknown, defaulting to 1000
[  160.683170][ T3391] syz0: Port: 1 Link DOWN
[  160.865683][ T9752] loop0: detected capacity change from 0 to 1024
[  160.902116][ T9752] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1945: Allocating blocks 497-513 which overlap fs metadata
[  160.917450][ T9752] EXT4-fs (loop0): pa ffff8881071bbc40: logic 256, phys. 369, len 9
[  160.925661][ T9752] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  160.973130][ T9771] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  160.988613][ T9767] loop3: detected capacity change from 0 to 1024
[  161.004767][ T3326] EXT4-fs unmount: 69 callbacks suppressed
[  161.004786][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.028383][ T9767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.031742][ T9777] loop6: detected capacity change from 0 to 128
[  161.044014][ T9767] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1951: Allocating blocks 497-513 which overlap fs metadata
[  161.072008][ T9777] syz.6.1955: attempt to access beyond end of device
[  161.072008][ T9777] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  161.099596][ T9767] EXT4-fs (loop3): pa ffff888107177c40: logic 256, phys. 369, len 9
[  161.107911][ T9767] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  161.150686][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.179226][  T124] kworker/u8:5: attempt to access beyond end of device
[  161.179226][  T124] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  161.241739][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'.
[  161.257199][ T9792] syzkaller1: entered promiscuous mode
[  161.263226][ T9792] syzkaller1: entered allmulticast mode
[  161.286969][ T9792] loop3: detected capacity change from 0 to 512
[  161.295975][ T9792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.362094][ T9792] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1959: invalid block
[  161.444847][ T9792] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1959: invalid indirect mapped block 4294967295 (level 1)
[  161.496327][ T9792] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1959: invalid indirect mapped block 4294967295 (level 1)
[  161.541390][ T9808] loop6: detected capacity change from 0 to 1024
[  161.549163][ T9792] EXT4-fs (loop3): 2 truncates cleaned up
[  161.558726][ T9792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.579239][ T9792] netlink: 'syz.3.1959': attribute type 4 has an invalid length.
[  161.591757][ T9808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.611603][ T9792] netlink: 'syz.3.1959': attribute type 4 has an invalid length.
[  161.623573][ T9808] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1965: Allocating blocks 497-513 which overlap fs metadata
[  161.642710][ T3364] lo speed is unknown, defaulting to 1000
[  161.648667][ T3364] syz0: Port: 1 Link ACTIVE
[  161.680677][ T3364] lo speed is unknown, defaulting to 1000
[  161.686670][ T3364] syz0: Port: 1 Link DOWN
[  161.697238][ T9808] EXT4-fs (loop6): pa ffff8881071bbc40: logic 256, phys. 369, len 9
[  161.705764][ T9808] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  161.823812][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.861581][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.047758][ T9827] loop0: detected capacity change from 0 to 512
[  162.055733][ T9827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.065556][ T9827] EXT4-fs (loop0): orphan cleanup on readonly fs
[  162.072911][ T9827] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1971: bg 0: block 248: padding at end of block bitmap is not set
[  162.093283][ T9827] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1971: Failed to acquire dquot type 1
[  162.113421][ T9832] loop3: detected capacity change from 0 to 128
[  162.152134][ T9832] syz.3.1972: attempt to access beyond end of device
[  162.152134][ T9832] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  162.214333][ T9836] loop6: detected capacity change from 0 to 8192
[  162.233208][ T3423] kworker/u8:7: attempt to access beyond end of device
[  162.233208][ T3423] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  162.270199][ T9827] EXT4-fs (loop0): 1 truncate cleaned up
[  162.277940][ T9827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.320500][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.344913][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'.
[  162.355548][ T9843] syzkaller1: entered promiscuous mode
[  162.361074][ T9843] syzkaller1: entered allmulticast mode
[  162.375757][ T9843] loop3: detected capacity change from 0 to 512
[  162.382931][ T9843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.398704][ T9843] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1978: invalid block
[  162.411754][ T9843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1978: invalid indirect mapped block 4294967295 (level 1)
[  162.427536][ T9843] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1978: invalid indirect mapped block 4294967295 (level 1)
[  162.444899][ T9843] EXT4-fs (loop3): 2 truncates cleaned up
[  162.451803][ T9843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.474736][ T9843] netlink: 'syz.3.1978': attribute type 4 has an invalid length.
[  162.513832][ T9843] netlink: 'syz.3.1978': attribute type 4 has an invalid length.
[  162.525042][ T3403] lo speed is unknown, defaulting to 1000
[  162.530875][ T3403] syz0: Port: 1 Link ACTIVE
[  162.572414][ T3403] lo speed is unknown, defaulting to 1000
[  162.578250][ T3403] syz0: Port: 1 Link DOWN
[  162.683267][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.885295][ T9870] loop0: detected capacity change from 0 to 1024
[  162.909271][ T9870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.937204][ T9870] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1986: Allocating blocks 497-513 which overlap fs metadata
[  162.953836][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'.
[  162.965307][ T9870] EXT4-fs (loop0): pa ffff8881071bbcb0: logic 256, phys. 369, len 9
[  162.973581][ T9870] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  163.054386][   T29] kauditd_printk_skb: 103 callbacks suppressed
[  163.054400][   T29] audit: type=1326 audit(1747350427.976:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  163.085465][   T29] audit: type=1326 audit(1747350427.976:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.1.1982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  163.086781][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.165107][ T9885] FAULT_INJECTION: forcing a failure.
[  163.165107][ T9885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.178405][ T9885] CPU: 0 UID: 0 PID: 9885 Comm: syz.3.1991 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  163.178440][ T9885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  163.178455][ T9885] Call Trace:
[  163.178461][ T9885]  <TASK>
[  163.178469][ T9885]  __dump_stack+0x1d/0x30
[  163.178517][ T9885]  dump_stack_lvl+0xe8/0x140
[  163.178539][ T9885]  dump_stack+0x15/0x1b
[  163.178577][ T9885]  should_fail_ex+0x265/0x280
[  163.178619][ T9885]  should_fail+0xb/0x20
[  163.178652][ T9885]  should_fail_usercopy+0x1a/0x20
[  163.178677][ T9885]  _copy_from_user+0x1c/0xb0
[  163.178705][ T9885]  __sys_bind+0x106/0x2a0
[  163.178876][ T9885]  __x64_sys_bind+0x3f/0x50
[  163.178908][ T9885]  x64_sys_call+0x2086/0x2fb0
[  163.179003][ T9885]  do_syscall_64+0xd0/0x1a0
[  163.179026][ T9885]  ? clear_bhb_loop+0x40/0x90
[  163.179095][ T9885]  ? clear_bhb_loop+0x40/0x90
[  163.179189][ T9885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.179215][ T9885] RIP: 0033:0x7f965a17e969
[  163.179309][ T9885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.179380][ T9885] RSP: 002b:00007f96587e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  163.179398][ T9885] RAX: ffffffffffffffda RBX: 00007f965a3a5fa0 RCX: 00007f965a17e969
[  163.179410][ T9885] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000003
[  163.179421][ T9885] RBP: 00007f96587e7090 R08: 0000000000000000 R09: 0000000000000000
[  163.179433][ T9885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.179486][ T9885] R13: 0000000000000000 R14: 00007f965a3a5fa0 R15: 00007ffc6d6b2cb8
[  163.179509][ T9885]  </TASK>
[  163.403058][ T9893] binfmt_misc: register: failed to install interpreter file ./file0
[  163.420501][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  163.448270][ T9893] IPVS: Error joining to the multicast group
[  163.530624][ T9909] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  163.958954][   T29] audit: type=1326 audit(1747350428.876:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  163.982615][   T29] audit: type=1326 audit(1747350428.876:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.010287][   T29] audit: type=1326 audit(1747350428.926:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.033992][   T29] audit: type=1326 audit(1747350428.926:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.057551][   T29] audit: type=1326 audit(1747350428.926:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.149717][   T29] audit: type=1326 audit(1747350428.926:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.173604][   T29] audit: type=1326 audit(1747350428.926:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.197230][   T29] audit: type=1326 audit(1747350428.926:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9926 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  164.257774][ T9937] loop0: detected capacity change from 0 to 256
[  164.428146][ T9953] loop6: detected capacity change from 0 to 8192
[  164.738335][ T9959] loop3: detected capacity change from 0 to 1024
[  164.756983][ T9959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.773146][ T9959] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2016: Allocating blocks 497-513 which overlap fs metadata
[  164.788222][ T9959] EXT4-fs (loop3): pa ffff888107177b60: logic 256, phys. 369, len 9
[  164.796396][ T9959] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  164.864237][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.892692][ T9966] loop3: detected capacity change from 0 to 512
[  164.902319][ T9966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.919866][ T9966] EXT4-fs (loop3): shut down requested (1)
[  164.928586][ T9966] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  164.938631][ T9966] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  164.947816][ T9966] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  164.979130][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.076141][ T9975] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  165.167024][ T9982] bond_slave_1: entered promiscuous mode
[  165.173027][ T9982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'.
[  165.218655][ T9982] bond_slave_1 (unregistering): left promiscuous mode
[  166.059163][T10008] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  166.180981][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2038'.
[  166.190821][T10022] syzkaller1: entered promiscuous mode
[  166.196586][T10022] syzkaller1: entered allmulticast mode
[  166.206993][T10022] loop6: detected capacity change from 0 to 512
[  166.313843][T10022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.338483][T10022] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2038: invalid block
[  166.351677][T10022] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2038: invalid indirect mapped block 4294967295 (level 1)
[  166.369522][T10022] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2038: invalid indirect mapped block 4294967295 (level 1)
[  166.417462][T10022] EXT4-fs (loop6): 2 truncates cleaned up
[  166.437599][T10022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.506163][T10022] netlink: 'syz.6.2038': attribute type 4 has an invalid length.
[  166.532238][T10022] netlink: 'syz.6.2038': attribute type 4 has an invalid length.
[  166.568125][T10046] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  166.708509][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.069808][T10057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2051'.
[  167.219989][T10057] loop0: detected capacity change from 0 to 1024
[  167.407293][T10064] loop0: detected capacity change from 0 to 512
[  167.470306][T10064] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  167.609324][T10064] EXT4-fs (loop0): orphan cleanup on readonly fs
[  167.616939][T10064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2054: bg 0: block 248: padding at end of block bitmap is not set
[  167.634800][T10064] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2054: Failed to acquire dquot type 1
[  167.646707][T10064] EXT4-fs (loop0): 1 truncate cleaned up
[  167.653436][T10064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  167.698436][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.728964][T10080] loop0: detected capacity change from 0 to 2048
[  167.756245][T10080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.781657][T10080] EXT4-fs: Ignoring removed orlov option
[  167.790489][T10080] EXT4-fs (loop0): can't enable nombcache during remount
[  167.921157][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.991653][T10102] loop0: detected capacity change from 0 to 128
[  168.014583][T10102] syz.0.2065: attempt to access beyond end of device
[  168.014583][T10102] loop0: rw=0, sector=121, nr_sectors = 120 limit=128
[  168.106103][  T124] kworker/u8:5: attempt to access beyond end of device
[  168.106103][  T124] loop0: rw=1, sector=241, nr_sectors = 800 limit=128
[  168.158080][T10109] loop0: detected capacity change from 0 to 512
[  168.178108][T10109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.192259][T10109] EXT4-fs (loop0): shut down requested (1)
[  168.199251][T10109] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  168.208885][T10109] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  168.218942][T10109] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  168.229771][   T29] kauditd_printk_skb: 112 callbacks suppressed
[  168.229789][   T29] audit: type=1326 audit(1747350433.146:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.266015][   T29] audit: type=1326 audit(1747350433.146:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.289779][   T29] audit: type=1326 audit(1747350433.146:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.313622][   T29] audit: type=1326 audit(1747350433.146:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.337417][   T29] audit: type=1326 audit(1747350433.146:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.361237][   T29] audit: type=1326 audit(1747350433.186:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.385682][   T29] audit: type=1326 audit(1747350433.186:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.410258][   T29] audit: type=1326 audit(1747350433.186:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.434799][   T29] audit: type=1326 audit(1747350433.186:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.458954][   T29] audit: type=1326 audit(1747350433.186:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10108 comm="syz.0.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  168.490043][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.493296][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'.
[  168.513338][T10118] syzkaller1: entered promiscuous mode
[  168.518994][T10118] syzkaller1: entered allmulticast mode
[  168.536372][T10118] netlink: 'syz.2.2073': attribute type 4 has an invalid length.
[  168.551572][T10118] netlink: 'syz.2.2073': attribute type 4 has an invalid length.
[  168.746210][T10132] loop3: detected capacity change from 0 to 1024
[  168.807027][T10132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.824949][T10132] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2077: Allocating blocks 497-513 which overlap fs metadata
[  168.857223][T10132] EXT4-fs (loop3): pa ffff888107177a80: logic 256, phys. 369, len 9
[  168.865563][T10132] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  168.966587][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.979053][T10147] loop0: detected capacity change from 0 to 128
[  169.012852][T10147] syz.0.2081: attempt to access beyond end of device
[  169.012852][T10147] loop0: rw=0, sector=121, nr_sectors = 120 limit=128
[  169.012903][T10155] loop3: detected capacity change from 0 to 512
[  169.037526][T10155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.053665][T10155] EXT4-fs (loop3): shut down requested (1)
[  169.060312][T10155] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  169.069258][T10155] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  169.078615][T10155] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  169.100803][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.124266][  T124] kworker/u8:5: attempt to access beyond end of device
[  169.124266][  T124] loop0: rw=1, sector=241, nr_sectors = 800 limit=128
[  169.169125][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'.
[  169.187590][T10167] syzkaller1: entered promiscuous mode
[  169.193207][T10167] syzkaller1: entered allmulticast mode
[  169.210874][T10167] loop0: detected capacity change from 0 to 512
[  169.219575][T10167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.245451][T10167] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2087: invalid block
[  169.263373][T10167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2087: invalid indirect mapped block 4294967295 (level 1)
[  169.277931][T10167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2087: invalid indirect mapped block 4294967295 (level 1)
[  169.292613][T10167] EXT4-fs (loop0): 2 truncates cleaned up
[  169.300158][T10167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.318222][T10167] netlink: 'syz.0.2087': attribute type 4 has an invalid length.
[  169.329161][T10167] netlink: 'syz.0.2087': attribute type 4 has an invalid length.
[  169.474364][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.497228][T10180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2091'.
[  169.515946][T10180] loop0: detected capacity change from 0 to 1024
[  169.838415][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'.
[  169.848125][T10188] syzkaller1: entered promiscuous mode
[  169.853740][T10188] syzkaller1: entered allmulticast mode
[  169.866477][T10188] netlink: 'syz.1.2094': attribute type 4 has an invalid length.
[  169.877145][T10188] netlink: 'syz.1.2094': attribute type 4 has an invalid length.
[  170.058832][T10205] loop0: detected capacity change from 0 to 1024
[  170.104364][T10205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.104827][T10214] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2102'.
[  170.127144][T10215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'.
[  170.139727][T10215] syzkaller1: entered promiscuous mode
[  170.145426][T10215] syzkaller1: entered allmulticast mode
[  170.178973][T10205] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2101: Allocating blocks 497-513 which overlap fs metadata
[  170.201897][T10218] loop3: detected capacity change from 0 to 512
[  170.209591][T10218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.219039][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'.
[  170.221944][T10205] EXT4-fs (loop0): pa ffff888107177af0: logic 256, phys. 369, len 9
[  170.231339][T10217] syzkaller1: entered promiscuous mode
[  170.236440][T10205] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  170.242098][T10217] syzkaller1: entered allmulticast mode
[  170.263134][T10218] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2112: invalid block
[  170.276440][T10218] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2112: invalid indirect mapped block 4294967295 (level 1)
[  170.279205][T10217] netlink: 'syz.1.2103': attribute type 4 has an invalid length.
[  170.311430][T10218] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2112: invalid indirect mapped block 4294967295 (level 1)
[  170.311539][T10217] netlink: 'syz.1.2103': attribute type 4 has an invalid length.
[  170.340308][T10218] EXT4-fs (loop3): 2 truncates cleaned up
[  170.347003][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.357443][T10218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.373178][T10215] netlink: 'syz.3.2112': attribute type 4 has an invalid length.
[  170.389898][T10215] netlink: 'syz.3.2112': attribute type 4 has an invalid length.
[  170.416371][ T3392] lo speed is unknown, defaulting to 1000
[  170.422161][ T3392] syz0: Port: 1 Link ACTIVE
[  170.426912][T10222] loop0: detected capacity change from 0 to 8192
[  170.565842][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.635863][T10234] loop6: detected capacity change from 0 to 512
[  170.905933][T10234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.129101][T10234] EXT4-fs (loop6): shut down requested (1)
[  171.211930][T10239] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  171.357797][T10239] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  171.400864][T10239] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop6 ino=12
[  171.463876][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.618899][T10285] loop6: detected capacity change from 0 to 1024
[  172.647821][T10285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.665409][T10285] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2125: Allocating blocks 497-513 which overlap fs metadata
[  172.682161][T10285] EXT4-fs (loop6): pa ffff888107177cb0: logic 256, phys. 369, len 9
[  172.690504][T10285] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  172.743310][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.931035][T10296] loop6: detected capacity change from 0 to 8192
[  172.981112][T10298] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  173.156585][T10322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2135'.
[  173.191619][T10322] loop3: detected capacity change from 0 to 1024
[  174.467552][T10344] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  174.521806][T10354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2147'.
[  174.572752][T10354] loop3: detected capacity change from 0 to 1024
[  174.599349][   T29] kauditd_printk_skb: 43 callbacks suppressed
[  174.599369][   T29] audit: type=1326 audit(1747350439.516:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.629219][   T29] audit: type=1326 audit(1747350439.516:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.653000][   T29] audit: type=1326 audit(1747350439.516:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.677024][   T29] audit: type=1326 audit(1747350439.516:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.700859][   T29] audit: type=1326 audit(1747350439.516:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.724775][   T29] audit: type=1326 audit(1747350439.516:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.748310][   T29] audit: type=1326 audit(1747350439.516:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.772360][   T29] audit: type=1326 audit(1747350439.516:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.778592][T10358] loop3: detected capacity change from 0 to 512
[  174.795888][   T29] audit: type=1326 audit(1747350439.516:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.826229][   T29] audit: type=1326 audit(1747350439.516:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.6.2148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  174.852953][T10358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.902120][T10358] EXT4-fs (loop3): shut down requested (1)
[  174.909754][T10358] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  174.964420][T10358] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  174.973570][T10358] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  175.006433][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.757596][T10377] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  175.997505][T10387] loop3: detected capacity change from 0 to 1024
[  176.047272][T10387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.071400][T10387] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2160: Allocating blocks 497-513 which overlap fs metadata
[  176.101933][T10387] EXT4-fs (loop3): pa ffff8881071bbd20: logic 256, phys. 369, len 9
[  176.110202][T10387] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  176.122846][T10403] loop0: detected capacity change from 0 to 1024
[  176.144816][T10403] EXT4-fs: Ignoring removed orlov option
[  176.184354][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.206859][T10403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.795501][T10431] netlink: 4 bytes leftover after parsing attributes in process `wg1'.
[  176.937901][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.025546][T10444] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2177'.
[  177.078988][T10444] loop6: detected capacity change from 0 to 1024
[  177.080136][T10449] loop0: detected capacity change from 0 to 512
[  177.102252][T10449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.116602][T10449] EXT4-fs (loop0): shut down requested (1)
[  177.119201][T10454] loop6: detected capacity change from 0 to 128
[  177.140184][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.148901][T10454] syz.6.2180: attempt to access beyond end of device
[  177.148901][T10454] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  177.193115][T10456] loop0: detected capacity change from 0 to 1024
[  177.205863][T10456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.226219][  T124] kworker/u8:5: attempt to access beyond end of device
[  177.226219][  T124] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  177.250415][T10456] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2181: Allocating blocks 497-513 which overlap fs metadata
[  177.272653][T10456] EXT4-fs (loop0): pa ffff888107177cb0: logic 256, phys. 369, len 9
[  177.281014][T10456] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  177.321114][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.426026][T10488] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2191'.
[  177.444494][T10488] loop6: detected capacity change from 0 to 1024
[  177.445947][T10490] loop0: detected capacity change from 0 to 512
[  177.459831][T10490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.476166][T10490] EXT4-fs (loop0): shut down requested (1)
[  177.499622][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.517425][T10493] loop6: detected capacity change from 0 to 8192
[  178.352204][T10512] loop3: detected capacity change from 0 to 2048
[  178.386962][T10512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.477731][T10525] EXT4-fs: Ignoring removed orlov option
[  178.513546][T10525] EXT4-fs (loop3): can't enable nombcache during remount
[  178.540706][T10530] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2204'.
[  178.584117][T10537] netlink: 11 bytes leftover after parsing attributes in process `syz.6.2207'.
[  178.717282][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.993396][T10555] loop0: detected capacity change from 0 to 512
[  179.063068][T10555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.266458][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.528629][T10574] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2219'.
[  179.560210][T10574] loop0: detected capacity change from 0 to 1024
[  179.668356][T10585] loop3: detected capacity change from 0 to 1024
[  179.691539][T10585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.707362][T10585] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2224: Allocating blocks 497-513 which overlap fs metadata
[  179.722588][T10585] EXT4-fs (loop3): pa ffff888107177af0: logic 256, phys. 369, len 9
[  179.730901][T10585] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  179.772930][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.015540][   T29] kauditd_printk_skb: 88 callbacks suppressed
[  180.015558][   T29] audit: type=1326 audit(1747350444.936:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.103534][   T29] audit: type=1326 audit(1747350444.936:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="syz.1.2229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.127171][   T29] audit: type=1326 audit(1747350444.936:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.150430][   T29] audit: type=1326 audit(1747350444.936:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.173837][   T29] audit: type=1326 audit(1747350444.936:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.197178][   T29] audit: type=1326 audit(1747350444.936:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.220282][   T29] audit: type=1326 audit(1747350444.966:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.243840][   T29] audit: type=1326 audit(1747350444.966:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.267893][   T29] audit: type=1326 audit(1747350444.976:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.292605][   T29] audit: type=1326 audit(1747350444.976:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10604 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  180.812760][T10623] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2234'.
[  181.166591][T10640] loop3: detected capacity change from 0 to 512
[  181.219969][T10644] loop6: detected capacity change from 0 to 1024
[  181.234960][T10640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.264396][T10640] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  181.288492][T10644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.326736][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.339687][T10644] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2242: Allocating blocks 497-513 which overlap fs metadata
[  181.416365][T10644] EXT4-fs (loop6): pa ffff888107177cb0: logic 256, phys. 369, len 9
[  181.424556][T10644] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  181.470136][T10662] loop0: detected capacity change from 0 to 8192
[  181.516510][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.808118][T10681] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2248'.
[  182.996318][T10714] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2261'.
[  183.012356][T10714] loop6: detected capacity change from 0 to 1024
[  183.078150][T10720] loop6: detected capacity change from 0 to 2048
[  183.095406][T10720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.116075][T10720] EXT4-fs: Ignoring removed orlov option
[  183.122037][T10720] EXT4-fs (loop6): can't enable nombcache during remount
[  183.246133][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.288858][T10727] loop6: detected capacity change from 0 to 1024
[  183.305179][T10727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.320073][T10727] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2266: Allocating blocks 497-513 which overlap fs metadata
[  183.338355][T10727] EXT4-fs (loop6): pa ffff8881071bbd90: logic 256, phys. 369, len 9
[  183.346495][T10727] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  183.721574][T10748] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2273'.
[  183.769309][T10750] loop0: detected capacity change from 0 to 1024
[  183.808721][T10746] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2272: Allocating blocks 497-513 which overlap fs metadata
[  183.878491][T10759] lo speed is unknown, defaulting to 1000
[  183.880980][T10762] loop6: detected capacity change from 0 to 8192
[  183.891990][T10746] EXT4-fs (loop0): pa ffff888107177a10: logic 256, phys. 369, len 9
[  183.900290][T10746] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  184.216402][T10786] loop0: detected capacity change from 0 to 512
[  184.256450][T10786] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  184.764237][T10803] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2289'.
[  184.777837][T10803] hub 9-0:1.0: USB hub found
[  184.782679][T10803] hub 9-0:1.0: 8 ports detected
[  185.155299][T10840] loop3: detected capacity change from 0 to 8192
[  185.304800][T10844] loop0: detected capacity change from 0 to 8192
[  185.363823][T10844]  loop0: p1 p2[DM] p4
[  185.368249][T10844] loop0: p1 size 196608 extends beyond EOD, truncated
[  185.376327][T10844] loop0: p2 start 4292936063 is beyond EOD, truncated
[  185.383404][T10844] loop0: p4 size 50331648 extends beyond EOD, truncated
[  186.003156][T10857] FAULT_INJECTION: forcing a failure.
[  186.003156][T10857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.016707][T10857] CPU: 0 UID: 0 PID: 10857 Comm: syz.1.2309 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  186.016742][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  186.016759][T10857] Call Trace:
[  186.016767][T10857]  <TASK>
[  186.016777][T10857]  __dump_stack+0x1d/0x30
[  186.016803][T10857]  dump_stack_lvl+0xe8/0x140
[  186.016855][T10857]  dump_stack+0x15/0x1b
[  186.016991][T10857]  should_fail_ex+0x265/0x280
[  186.017024][T10857]  should_fail+0xb/0x20
[  186.017052][T10857]  should_fail_usercopy+0x1a/0x20
[  186.017119][T10857]  _copy_from_iter+0xcf/0xdd0
[  186.017144][T10857]  ? __build_skb_around+0x1a0/0x200
[  186.017191][T10857]  ? __alloc_skb+0x223/0x320
[  186.017224][T10857]  netlink_sendmsg+0x471/0x6b0
[  186.017246][T10857]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.017326][T10857]  __sock_sendmsg+0x142/0x180
[  186.017362][T10857]  ____sys_sendmsg+0x31e/0x4e0
[  186.017389][T10857]  ___sys_sendmsg+0x17b/0x1d0
[  186.017433][T10857]  __x64_sys_sendmsg+0xd4/0x160
[  186.017468][T10857]  x64_sys_call+0x2999/0x2fb0
[  186.017495][T10857]  do_syscall_64+0xd0/0x1a0
[  186.017541][T10857]  ? clear_bhb_loop+0x40/0x90
[  186.017562][T10857]  ? clear_bhb_loop+0x40/0x90
[  186.017582][T10857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.017605][T10857] RIP: 0033:0x7f8370a2e969
[  186.017624][T10857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.017722][T10857] RSP: 002b:00007f836f097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  186.017742][T10857] RAX: ffffffffffffffda RBX: 00007f8370c55fa0 RCX: 00007f8370a2e969
[  186.017755][T10857] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  186.017767][T10857] RBP: 00007f836f097090 R08: 0000000000000000 R09: 0000000000000000
[  186.017778][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.017789][T10857] R13: 0000000000000000 R14: 00007f8370c55fa0 R15: 00007fff149e06e8
[  186.017932][T10857]  </TASK>
[  186.343910][   T29] kauditd_printk_skb: 550 callbacks suppressed
[  186.343924][   T29] audit: type=1400 audit(1747350451.266:5850): avc:  denied  { append } for  pid=10860 comm="syz.1.2312" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  186.344014][T10866] random: crng reseeded on system resumption
[  186.356856][   T29] audit: type=1400 audit(1747350451.266:5851): avc:  denied  { open } for  pid=10860 comm="syz.1.2312" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  186.451553][   T29] audit: type=1326 audit(1747350451.366:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x0
[  186.466341][T10873] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2316'.
[  186.500855][   T29] audit: type=1326 audit(1747350451.416:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.524575][   T29] audit: type=1326 audit(1747350451.416:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.548226][   T29] audit: type=1326 audit(1747350451.416:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.573318][   T29] audit: type=1326 audit(1747350451.416:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.597077][   T29] audit: type=1326 audit(1747350451.416:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.621162][   T29] audit: type=1326 audit(1747350451.416:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.644858][   T29] audit: type=1326 audit(1747350451.416:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10860 comm="syz.1.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8370a2e969 code=0x7ffc0000
[  186.713618][T10873] loop0: detected capacity change from 0 to 1024
[  186.760303][T10879] block device autoloading is deprecated and will be removed.
[  186.902139][T10899] loop6: detected capacity change from 0 to 512
[  186.910961][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2327'.
[  186.946030][T10899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  186.970677][T10899] System zones: 0-2, 18-18, 34-34
[  186.986458][T10899] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2326: bg 0: block 248: padding at end of block bitmap is not set
[  187.012460][T10910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2329'.
[  187.026460][T10907] loop0: detected capacity change from 0 to 8192
[  187.033601][T10899] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2326: Failed to acquire dquot type 1
[  187.051030][T10899] EXT4-fs (loop6): 1 truncate cleaned up
[  187.057305][T10899] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.095671][T10910] loop3: detected capacity change from 0 to 1024
[  187.107829][ T8023] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1
[  187.679953][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2340'.
[  187.711416][T10939] loop6: detected capacity change from 0 to 512
[  187.718271][T10939] EXT4-fs: Ignoring removed orlov option
[  187.724256][T10939] EXT4-fs: quotafile must be on filesystem root
[  187.743564][T10939] loop6: detected capacity change from 0 to 1024
[  187.853498][T10943] loop6: detected capacity change from 0 to 128
[  187.875997][T10943] syz.6.2342: attempt to access beyond end of device
[  187.875997][T10943] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  187.947116][T10945] FAULT_INJECTION: forcing a failure.
[  187.947116][T10945] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.960383][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.0.2343 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  187.960486][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  187.960503][T10945] Call Trace:
[  187.960510][T10945]  <TASK>
[  187.960519][T10945]  __dump_stack+0x1d/0x30
[  187.960546][T10945]  dump_stack_lvl+0xe8/0x140
[  187.960571][T10945]  dump_stack+0x15/0x1b
[  187.960664][T10945]  should_fail_ex+0x265/0x280
[  187.960705][T10945]  should_fail+0xb/0x20
[  187.960780][T10945]  should_fail_usercopy+0x1a/0x20
[  187.960805][T10945]  _copy_from_iter+0xcf/0xdd0
[  187.960828][T10945]  ? __build_skb_around+0x1a0/0x200
[  187.960869][T10945]  ? __alloc_skb+0x223/0x320
[  187.960931][T10945]  netlink_sendmsg+0x471/0x6b0
[  187.960959][T10945]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.960984][T10945]  __sock_sendmsg+0x142/0x180
[  187.961046][T10945]  ____sys_sendmsg+0x31e/0x4e0
[  187.961075][T10945]  ___sys_sendmsg+0x17b/0x1d0
[  187.961122][T10945]  __x64_sys_sendmsg+0xd4/0x160
[  187.961202][T10945]  x64_sys_call+0x2999/0x2fb0
[  187.961222][T10945]  do_syscall_64+0xd0/0x1a0
[  187.961244][T10945]  ? clear_bhb_loop+0x40/0x90
[  187.961285][T10945]  ? clear_bhb_loop+0x40/0x90
[  187.961311][T10945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.961336][T10945] RIP: 0033:0x7ff509b4e969
[  187.961355][T10945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.961375][T10945] RSP: 002b:00007ff5081b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.961475][T10945] RAX: ffffffffffffffda RBX: 00007ff509d75fa0 RCX: 00007ff509b4e969
[  187.961488][T10945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  187.961499][T10945] RBP: 00007ff5081b7090 R08: 0000000000000000 R09: 0000000000000000
[  187.961511][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.961524][T10945] R13: 0000000000000000 R14: 00007ff509d75fa0 R15: 00007ffe1b726558
[  187.961545][T10945]  </TASK>
[  188.163661][ T8017] kworker/u8:12: attempt to access beyond end of device
[  188.163661][ T8017] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  188.191235][T10949] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2344'.
[  188.208261][T10949] loop6: detected capacity change from 0 to 1024
[  188.442552][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2351'.
[  188.455568][T10961] loop1: detected capacity change from 0 to 512
[  188.496772][T10961] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.556200][T10961] FAULT_INJECTION: forcing a failure.
[  188.556200][T10961] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.556243][T10961] CPU: 1 UID: 0 PID: 10961 Comm: syz.1.2350 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  188.556376][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  188.556389][T10961] Call Trace:
[  188.556394][T10961]  <TASK>
[  188.556401][T10961]  __dump_stack+0x1d/0x30
[  188.556485][T10961]  dump_stack_lvl+0xe8/0x140
[  188.556511][T10961]  dump_stack+0x15/0x1b
[  188.556533][T10961]  should_fail_ex+0x265/0x280
[  188.556654][T10961]  should_fail+0xb/0x20
[  188.556695][T10961]  should_fail_usercopy+0x1a/0x20
[  188.556715][T10961]  strncpy_from_user+0x25/0x230
[  188.556740][T10961]  ? kmem_cache_alloc_noprof+0x186/0x310
[  188.556774][T10961]  ? getname_flags+0x80/0x3b0
[  188.556817][T10961]  getname_flags+0xae/0x3b0
[  188.556873][T10961]  do_sys_openat2+0x60/0x110
[  188.556896][T10961]  __x64_sys_openat+0xf2/0x120
[  188.556918][T10961]  x64_sys_call+0x1af/0x2fb0
[  188.556943][T10961]  do_syscall_64+0xd0/0x1a0
[  188.556981][T10961]  ? clear_bhb_loop+0x40/0x90
[  188.557009][T10961]  ? clear_bhb_loop+0x40/0x90
[  188.557041][T10961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.557064][T10961] RIP: 0033:0x7f8370a2e969
[  188.557079][T10961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.557162][T10961] RSP: 002b:00007f836f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  188.557185][T10961] RAX: ffffffffffffffda RBX: 00007f8370c55fa0 RCX: 00007f8370a2e969
[  188.557201][T10961] RDX: 0000000000048041 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  188.557217][T10961] RBP: 00007f836f097090 R08: 0000000000000000 R09: 0000000000000000
[  188.557239][T10961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.557251][T10961] R13: 0000000000000000 R14: 00007f8370c55fa0 R15: 00007fff149e06e8
[  188.557270][T10961]  </TASK>
[  188.597356][T10969] loop6: detected capacity change from 0 to 512
[  188.628433][T10969] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.670473][T10972] loop3: detected capacity change from 0 to 1024
[  188.691188][T10972] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2352: Allocating blocks 497-513 which overlap fs metadata
[  188.692820][T10972] EXT4-fs (loop3): pa ffff888107177540: logic 256, phys. 369, len 9
[  188.692847][T10972] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  188.994405][T10980] bridge: RTM_NEWNEIGH with invalid ether address
[  189.001046][T10978] loop6: detected capacity change from 0 to 128
[  189.033867][T10982] loop3: detected capacity change from 0 to 2048
[  189.055232][T10978] syz.6.2355: attempt to access beyond end of device
[  189.055232][T10978] loop6: rw=0, sector=121, nr_sectors = 120 limit=128
[  189.071525][T10977] loop1: detected capacity change from 0 to 8192
[  189.076879][T10982] EXT4-fs: Ignoring removed orlov option
[  189.085940][T10982] EXT4-fs (loop3): can't enable nombcache during remount
[  189.170182][T10992] loop0: detected capacity change from 0 to 1024
[  189.190629][ T3423] kworker/u8:7: attempt to access beyond end of device
[  189.190629][ T3423] loop6: rw=1, sector=241, nr_sectors = 800 limit=128
[  189.223846][T10992] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2360: Allocating blocks 497-513 which overlap fs metadata
[  189.249214][T10992] EXT4-fs (loop0): pa ffff8881071773f0: logic 256, phys. 369, len 9
[  189.257411][T10992] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  189.414179][T11009] loop3: detected capacity change from 0 to 1024
[  189.428481][T11009] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2364: Allocating blocks 497-513 which overlap fs metadata
[  189.445186][T11009] EXT4-fs (loop3): pa ffff8881071bbd90: logic 256, phys. 369, len 9
[  189.453332][T11009] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  189.580798][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2370'.
[  189.640403][T11030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2372'.
[  189.669119][T11030] loop0: detected capacity change from 0 to 1024
[  189.743792][T11032] loop0: detected capacity change from 0 to 2048
[  189.760619][T11034] loop3: detected capacity change from 0 to 1024
[  189.781014][T11034] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2374: Allocating blocks 497-513 which overlap fs metadata
[  189.800734][T11032] EXT4-fs: Ignoring removed orlov option
[  189.806878][T11032] EXT4-fs (loop0): can't enable nombcache during remount
[  189.814184][T11034] EXT4-fs (loop3): pa ffff8881071bbd90: logic 256, phys. 369, len 9
[  189.822227][T11034] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  190.054299][T11052] loop1: detected capacity change from 0 to 1024
[  190.068320][T11052] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2379: Allocating blocks 497-513 which overlap fs metadata
[  190.084610][T11052] EXT4-fs (loop1): pa ffff888107177540: logic 256, phys. 369, len 9
[  190.092824][T11052] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  190.213143][T11067] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2384'.
[  190.232335][T11067] loop0: detected capacity change from 0 to 1024
[  190.317549][T11069] loop6: detected capacity change from 0 to 1024
[  190.339664][T11069] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2385: Allocating blocks 497-513 which overlap fs metadata
[  190.355728][T11069] EXT4-fs (loop6): pa ffff8881071773f0: logic 256, phys. 369, len 9
[  190.363826][T11069] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  190.696864][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'.
[  190.720151][T11080] loop3: detected capacity change from 0 to 8192
[  190.779277][T11086] loop6: detected capacity change from 0 to 2048
[  190.811447][T11086] EXT4-fs: Ignoring removed orlov option
[  190.818264][T11086] EXT4-fs (loop6): can't enable nombcache during remount
[  190.872020][T11097] loop1: detected capacity change from 0 to 1024
[  190.911020][T11097] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2394: Allocating blocks 497-513 which overlap fs metadata
[  190.929903][T11097] EXT4-fs (loop1): pa ffff8881071bbe00: logic 256, phys. 369, len 9
[  190.938079][T11097] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  191.773195][T11119] loop3: detected capacity change from 0 to 512
[  191.815519][T11119] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  191.825559][T11119] System zones: 0-2, 18-18, 34-34
[  191.832123][T11119] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2401: bg 0: block 248: padding at end of block bitmap is not set
[  191.848213][T11119] __quota_error: 70 callbacks suppressed
[  191.848306][T11119] Quota error (device loop3): write_blk: dquota write failed
[  191.861463][T11119] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  191.873812][T11119] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2401: Failed to acquire dquot type 1
[  191.887673][T11119] EXT4-fs (loop3): 1 truncate cleaned up
[  191.894010][T11119] EXT4-fs mount: 33 callbacks suppressed
[  191.894025][T11119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.912385][T11119] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.923849][T11119] FAULT_INJECTION: forcing a failure.
[  191.923849][T11119] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.937080][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.3.2401 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  191.937113][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  191.937129][T11119] Call Trace:
[  191.937138][T11119]  <TASK>
[  191.937147][T11119]  __dump_stack+0x1d/0x30
[  191.937202][T11119]  dump_stack_lvl+0xe8/0x140
[  191.937227][T11119]  dump_stack+0x15/0x1b
[  191.937242][T11119]  should_fail_ex+0x265/0x280
[  191.937280][T11119]  should_fail+0xb/0x20
[  191.937386][T11119]  should_fail_usercopy+0x1a/0x20
[  191.937411][T11119]  _copy_from_user+0x1c/0xb0
[  191.937475][T11119]  vmemdup_user+0x59/0xd0
[  191.937556][T11119]  path_setxattrat+0x1b6/0x310
[  191.937704][T11119]  __x64_sys_fsetxattr+0x6b/0x80
[  191.937731][T11119]  x64_sys_call+0x2f7c/0x2fb0
[  191.937774][T11119]  do_syscall_64+0xd0/0x1a0
[  191.937795][T11119]  ? clear_bhb_loop+0x40/0x90
[  191.937817][T11119]  ? clear_bhb_loop+0x40/0x90
[  191.937852][T11119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.937882][T11119] RIP: 0033:0x7f965a17e969
[  191.937964][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.937985][T11119] RSP: 002b:00007f96587e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be
[  191.938002][T11119] RAX: ffffffffffffffda RBX: 00007f965a3a5fa0 RCX: 00007f965a17e969
[  191.938080][T11119] RDX: 0000200000001100 RSI: 0000200000000000 RDI: 0000000000000004
[  191.938141][T11119] RBP: 00007f96587e7090 R08: 0000000000000001 R09: 0000000000000000
[  191.938152][T11119] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[  191.938163][T11119] R13: 0000000000000000 R14: 00007f965a3a5fa0 R15: 00007ffc6d6b2cb8
[  191.938182][T11119]  </TASK>
[  192.177030][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.252752][T11137] loop3: detected capacity change from 0 to 512
[  192.275425][T11137] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  192.285059][T11137] System zones: 0-2, 18-18, 34-34
[  192.290881][T11137] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2408: bg 0: block 248: padding at end of block bitmap is not set
[  192.305946][T11137] Quota error (device loop3): write_blk: dquota write failed
[  192.313686][T11137] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  192.323899][T11137] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2408: Failed to acquire dquot type 1
[  192.336163][T11137] EXT4-fs (loop3): 1 truncate cleaned up
[  192.336571][T11141] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2409'.
[  192.342343][T11137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.363856][T11137] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.410377][T11141] loop6: detected capacity change from 0 to 1024
[  192.435345][   T29] audit: type=1326 audit(1747350457.356:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.6.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.460029][   T29] audit: type=1326 audit(1747350457.356:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.6.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.483687][   T29] audit: type=1326 audit(1747350457.356:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.6.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.507616][   T29] audit: type=1326 audit(1747350457.356:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.531120][   T29] audit: type=1326 audit(1747350457.356:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.554532][   T29] audit: type=1326 audit(1747350457.356:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c58a2e969 code=0x7ffc0000
[  192.594050][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.382255][T11176] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2421'.
[  193.401120][T11176] loop0: detected capacity change from 0 to 1024
[  193.454650][T11180] loop0: detected capacity change from 0 to 128
[  193.585988][T11185] loop0: detected capacity change from 0 to 1024
[  193.605548][T11185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.621499][T11185] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2425: Allocating blocks 497-513 which overlap fs metadata
[  193.638060][T11185] EXT4-fs (loop0): pa ffff8881071bbc40: logic 256, phys. 369, len 9
[  193.646956][T11185] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  193.680622][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.726452][T11192] loop0: detected capacity change from 0 to 1024
[  193.746123][T11192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.761605][T11192] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2426: Allocating blocks 497-513 which overlap fs metadata
[  193.777284][T11192] EXT4-fs (loop0): pa ffff8881071bbe00: logic 256, phys. 369, len 9
[  193.785433][T11192] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  193.812066][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.837726][T11200] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.846847][T11200] bond0: (slave bond1): Enslaving as an active interface with a down link
[  194.007962][T11210] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2433'.
[  194.096383][T11217] loop1: detected capacity change from 0 to 1024
[  194.115359][T11217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.129875][T11217] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2436: Allocating blocks 497-513 which overlap fs metadata
[  194.145617][T11217] EXT4-fs (loop1): pa ffff888107177310: logic 256, phys. 369, len 9
[  194.153768][T11217] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  194.182889][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.206877][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'.
[  194.216561][T11225] syzkaller1: entered promiscuous mode
[  194.222129][T11225] syzkaller1: entered allmulticast mode
[  194.231771][T11225] loop1: detected capacity change from 0 to 512
[  194.238826][T11225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.249253][T11225] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2437: invalid block
[  194.261634][T11225] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2437: invalid indirect mapped block 4294967295 (level 1)
[  194.275960][T11225] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2437: invalid indirect mapped block 4294967295 (level 1)
[  194.290350][T11225] EXT4-fs (loop1): 2 truncates cleaned up
[  194.296557][T11225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.310737][T11225] netlink: 'syz.1.2437': attribute type 4 has an invalid length.
[  194.372282][T11231] loop3: detected capacity change from 0 to 1024
[  194.381141][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.392721][T11231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.408230][T11231] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2439: Allocating blocks 497-513 which overlap fs metadata
[  194.423926][T11231] EXT4-fs (loop3): pa ffff8881071bbc40: logic 256, phys. 369, len 9
[  194.432174][T11231] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  194.463365][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.579272][T11244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2444'.
[  194.598987][T11244] loop3: detected capacity change from 0 to 1024
[  194.757167][T11252] loop0: detected capacity change from 0 to 1024
[  194.775249][T11252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.790566][T11252] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2448: Allocating blocks 497-513 which overlap fs metadata
[  194.805509][T11252] EXT4-fs (loop0): pa ffff888107177380: logic 256, phys. 369, len 9
[  194.813590][T11252] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  194.841403][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.478158][T11263] loop3: detected capacity change from 0 to 512
[  195.485556][T11263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.495273][T11263] EXT4-fs (loop3): orphan cleanup on readonly fs
[  195.502348][T11263] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2451: bg 0: block 248: padding at end of block bitmap is not set
[  195.517089][T11263] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2451: Failed to acquire dquot type 1
[  195.529113][T11263] EXT4-fs (loop3): 1 truncate cleaned up
[  195.535591][T11263] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.558681][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.597357][T11266] loop3: detected capacity change from 0 to 1024
[  195.615393][T11266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.629991][T11266] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2452: Allocating blocks 497-513 which overlap fs metadata
[  195.644850][T11266] EXT4-fs (loop3): pa ffff888107177310: logic 256, phys. 369, len 9
[  195.653074][T11266] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  195.681641][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.875031][T11283] 9pnet: p9_errstr2errno: server reported unknown error 
[  196.138796][T11292] loop3: detected capacity change from 0 to 512
[  196.146075][T11292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  196.157256][T11292] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.164946][T11292] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2462: bg 0: block 248: padding at end of block bitmap is not set
[  196.180044][T11292] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2462: Failed to acquire dquot type 1
[  196.192551][T11292] EXT4-fs (loop3): 1 truncate cleaned up
[  196.199315][T11292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.242671][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.979655][   T29] kauditd_printk_skb: 64 callbacks suppressed
[  196.979673][   T29] audit: type=1326 audit(1747350461.896:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.026105][   T29] audit: type=1326 audit(1747350461.936:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="syz.0.2468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.049723][   T29] audit: type=1326 audit(1747350461.936:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.072821][   T29] audit: type=1326 audit(1747350461.936:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096006][   T29] audit: type=1326 audit(1747350461.936:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096049][   T29] audit: type=1326 audit(1747350461.936:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096085][   T29] audit: type=1326 audit(1747350461.946:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096119][   T29] audit: type=1326 audit(1747350461.946:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096222][   T29] audit: type=1326 audit(1747350461.946:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.096321][   T29] audit: type=1326 audit(1747350461.946:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11310 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  197.200273][T11316] loop6: detected capacity change from 0 to 1024
[  197.257172][T11316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.273305][T11314] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2469: Allocating blocks 497-513 which overlap fs metadata
[  197.288258][T11314] EXT4-fs (loop6): pa ffff888107177380: logic 256, phys. 369, len 9
[  197.296388][T11314] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  197.341356][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.622186][T11348] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2478'.
[  197.639857][T11348] loop0: detected capacity change from 0 to 1024
[  197.678294][T11351] loop0: detected capacity change from 0 to 4096
[  197.687062][T11351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.735131][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.773391][T11364] loop0: detected capacity change from 0 to 1024
[  197.793422][T11364] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.809014][T11364] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2483: Allocating blocks 497-513 which overlap fs metadata
[  197.823376][T11362] loop1: detected capacity change from 0 to 1024
[  197.825978][T11364] EXT4-fs (loop0): pa ffff8881071bbe70: logic 256, phys. 369, len 9
[  197.837816][T11364] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  197.845092][T11362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.863748][T11362] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2484: Allocating blocks 497-513 which overlap fs metadata
[  197.878913][T11362] EXT4-fs (loop1): pa ffff888107177310: logic 256, phys. 369, len 9
[  197.886985][T11362] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  197.898166][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.931904][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.968691][T11378] loop0: detected capacity change from 0 to 1024
[  197.986237][T11378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.001045][T11378] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2486: Allocating blocks 497-513 which overlap fs metadata
[  198.017180][T11378] EXT4-fs (loop0): pa ffff888107177380: logic 256, phys. 369, len 9
[  198.025263][T11378] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  198.055552][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.076316][T11387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2489'.
[  198.095237][T11387] loop0: detected capacity change from 0 to 1024
[  198.275902][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2495'.
[  198.316399][T11411] loop6: detected capacity change from 0 to 512
[  198.334610][T11411] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  198.342775][T11411] System zones: 0-2, 18-18, 34-34
[  198.348936][T11411] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2498: bg 0: block 248: padding at end of block bitmap is not set
[  198.364481][T11411] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2498: Failed to acquire dquot type 1
[  198.377671][T11411] EXT4-fs (loop6): 1 truncate cleaned up
[  198.378148][T11411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.396269][T11411] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.421997][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.459870][T11418] loop3: detected capacity change from 0 to 1024
[  198.476788][T11422] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2501'.
[  198.496407][T11422] loop6: detected capacity change from 0 to 1024
[  198.503554][T11418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.521496][T11415] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2499: Allocating blocks 497-513 which overlap fs metadata
[  198.538516][T11415] EXT4-fs (loop3): pa ffff8881071bbc40: logic 256, phys. 369, len 9
[  198.546619][T11415] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  198.583215][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.625355][T11431] loop3: detected capacity change from 0 to 512
[  198.634731][T11431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.647696][T11431] EXT4-fs (loop3): shut down requested (1)
[  198.654192][T11431] FAULT_INJECTION: forcing a failure.
[  198.654192][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.667547][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.3.2505 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  198.667628][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  198.667642][T11431] Call Trace:
[  198.667650][T11431]  <TASK>
[  198.667658][T11431]  __dump_stack+0x1d/0x30
[  198.667717][T11431]  dump_stack_lvl+0xe8/0x140
[  198.667736][T11431]  dump_stack+0x15/0x1b
[  198.667795][T11431]  should_fail_ex+0x265/0x280
[  198.667837][T11431]  should_fail+0xb/0x20
[  198.667913][T11431]  should_fail_usercopy+0x1a/0x20
[  198.667931][T11431]  strncpy_from_user+0x25/0x230
[  198.667965][T11431]  ? kmem_cache_alloc_noprof+0x186/0x310
[  198.668010][T11431]  ? getname_flags+0x80/0x3b0
[  198.668201][T11431]  getname_flags+0xae/0x3b0
[  198.668241][T11431]  path_removexattrat+0xf5/0x570
[  198.668275][T11431]  __x64_sys_removexattr+0x38/0x50
[  198.668367][T11431]  x64_sys_call+0x2c7a/0x2fb0
[  198.668387][T11431]  do_syscall_64+0xd0/0x1a0
[  198.668411][T11431]  ? clear_bhb_loop+0x40/0x90
[  198.668437][T11431]  ? clear_bhb_loop+0x40/0x90
[  198.668524][T11431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.668558][T11431] RIP: 0033:0x7f965a17e969
[  198.668576][T11431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.668592][T11431] RSP: 002b:00007f96587e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5
[  198.668608][T11431] RAX: ffffffffffffffda RBX: 00007f965a3a5fa0 RCX: 00007f965a17e969
[  198.668619][T11431] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  198.668686][T11431] RBP: 00007f96587e7090 R08: 0000000000000000 R09: 0000000000000000
[  198.668696][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.668745][T11431] R13: 0000000000000000 R14: 00007f965a3a5fa0 R15: 00007ffc6d6b2cb8
[  198.668762][T11431]  </TASK>
[  198.865341][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.989763][T11448] loop3: detected capacity change from 0 to 512
[  198.999490][T11448] EXT4-fs (loop3): Invalid default hash set in the superblock
[  199.061721][T11452] loop0: detected capacity change from 0 to 1024
[  199.077499][T11452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.105906][T11452] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2514: Allocating blocks 497-513 which overlap fs metadata
[  199.116882][T11464] lo speed is unknown, defaulting to 1000
[  199.128625][T11452] EXT4-fs (loop0): pa ffff888107177310: logic 256, phys. 369, len 9
[  199.136719][T11452] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  199.167699][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.177401][T11464] loop3: detected capacity change from 0 to 2048
[  199.196677][T11464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.315324][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.352091][T11480] FAULT_INJECTION: forcing a failure.
[  199.352091][T11480] name failslab, interval 1, probability 0, space 0, times 0
[  199.364936][T11480] CPU: 1 UID: 0 PID: 11480 Comm: syz.0.2524 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  199.364965][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  199.365042][T11480] Call Trace:
[  199.365049][T11480]  <TASK>
[  199.365058][T11480]  __dump_stack+0x1d/0x30
[  199.365083][T11480]  dump_stack_lvl+0xe8/0x140
[  199.365106][T11480]  dump_stack+0x15/0x1b
[  199.365130][T11480]  should_fail_ex+0x265/0x280
[  199.365172][T11480]  should_failslab+0x8c/0xb0
[  199.365264][T11480]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  199.365287][T11480]  ? shmem_alloc_inode+0x34/0x50
[  199.365326][T11480]  ? __pfx_shmem_alloc_inode+0x10/0x10
[  199.365395][T11480]  shmem_alloc_inode+0x34/0x50
[  199.365481][T11480]  alloc_inode+0x40/0x170
[  199.365506][T11480]  new_inode+0x1d/0xe0
[  199.365531][T11480]  shmem_get_inode+0x244/0x750
[  199.365559][T11480]  __shmem_file_setup+0x122/0x1f0
[  199.365676][T11480]  shmem_file_setup+0x3b/0x50
[  199.365754][T11480]  __se_sys_memfd_create+0x2c3/0x590
[  199.365778][T11480]  __x64_sys_memfd_create+0x31/0x40
[  199.365801][T11480]  x64_sys_call+0x122f/0x2fb0
[  199.365849][T11480]  do_syscall_64+0xd0/0x1a0
[  199.365871][T11480]  ? clear_bhb_loop+0x40/0x90
[  199.365890][T11480]  ? clear_bhb_loop+0x40/0x90
[  199.365908][T11480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.365930][T11480] RIP: 0033:0x7ff509b4e969
[  199.365943][T11480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.365958][T11480] RSP: 002b:00007ff5081b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  199.366037][T11480] RAX: ffffffffffffffda RBX: 000000000000053f RCX: 00007ff509b4e969
[  199.366054][T11480] RDX: 00007ff5081b6ef0 RSI: 0000000000000000 RDI: 00007ff509bd1444
[  199.366070][T11480] RBP: 00002000000007c0 R08: 00007ff5081b6bb7 R09: 00007ff5081b6e40
[  199.366086][T11480] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  199.366097][T11480] R13: 00007ff5081b6ef0 R14: 00007ff5081b6eb0 R15: 0000200000000240
[  199.366115][T11480]  </TASK>
[  199.676938][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'.
[  199.695051][T11486] loop6: detected capacity change from 0 to 1024
[  199.702365][T11497] syzkaller1: entered promiscuous mode
[  199.708193][T11497] syzkaller1: entered allmulticast mode
[  199.756131][T11508] lo speed is unknown, defaulting to 1000
[  199.762341][T11486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.794016][T11486] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2528: Allocating blocks 497-513 which overlap fs metadata
[  199.815704][T11486] EXT4-fs (loop6): pa ffff8881071bbe70: logic 256, phys. 369, len 9
[  199.823887][T11486] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  199.846193][T11513] loop0: detected capacity change from 0 to 1024
[  199.853092][T11513] EXT4-fs: Ignoring removed nomblk_io_submit option
[  199.884184][T11513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.905548][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.151590][T11526] process 'syz.3.2540' launched './file0' with NULL argv: empty string added
[  200.184284][T11531] FAULT_INJECTION: forcing a failure.
[  200.184284][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  200.197438][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.1.2541 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  200.197474][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  200.197490][T11531] Call Trace:
[  200.197497][T11531]  <TASK>
[  200.197505][T11531]  __dump_stack+0x1d/0x30
[  200.197532][T11531]  dump_stack_lvl+0xe8/0x140
[  200.197628][T11531]  dump_stack+0x15/0x1b
[  200.197648][T11531]  should_fail_ex+0x265/0x280
[  200.197764][T11531]  should_fail+0xb/0x20
[  200.197797][T11531]  should_fail_usercopy+0x1a/0x20
[  200.197822][T11531]  _copy_from_iter+0xcf/0xdd0
[  200.197848][T11531]  ? __build_skb_around+0x1a0/0x200
[  200.197906][T11531]  ? __build_skb+0x59/0x70
[  200.197987][T11531]  netlink_sendmsg+0x471/0x6b0
[  200.198010][T11531]  ? __pfx_netlink_sendmsg+0x10/0x10
[  200.198029][T11531]  __sock_sendmsg+0x142/0x180
[  200.198086][T11531]  sock_write_iter+0x165/0x1b0
[  200.198123][T11531]  ? __pfx_sock_write_iter+0x10/0x10
[  200.198152][T11531]  vfs_write+0x49d/0x8d0
[  200.198211][T11531]  ksys_write+0xda/0x1a0
[  200.198246][T11531]  __x64_sys_write+0x40/0x50
[  200.198279][T11531]  x64_sys_call+0x2cdd/0x2fb0
[  200.198317][T11531]  do_syscall_64+0xd0/0x1a0
[  200.198340][T11531]  ? clear_bhb_loop+0x40/0x90
[  200.198360][T11531]  ? clear_bhb_loop+0x40/0x90
[  200.198381][T11531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.198406][T11531] RIP: 0033:0x7f8370a2e969
[  200.198443][T11531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.198466][T11531] RSP: 002b:00007f836f097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  200.198489][T11531] RAX: ffffffffffffffda RBX: 00007f8370c55fa0 RCX: 00007f8370a2e969
[  200.198528][T11531] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003
[  200.198540][T11531] RBP: 00007f836f097090 R08: 0000000000000000 R09: 0000000000000000
[  200.198584][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.198599][T11531] R13: 0000000000000000 R14: 00007f8370c55fa0 R15: 00007fff149e06e8
[  200.198624][T11531]  </TASK>
[  200.506211][T11550] netlink: 'syz.3.2548': attribute type 2 has an invalid length.
[  200.514125][T11550] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2548'.
[  200.549471][T11548] loop1: detected capacity change from 0 to 1024
[  200.575164][T11548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.589473][T11548] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2547: Allocating blocks 497-513 which overlap fs metadata
[  200.604901][T11548] EXT4-fs (loop1): pa ffff888107177310: logic 256, phys. 369, len 9
[  200.612961][T11548] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  200.617537][T11550] loop3: detected capacity change from 0 to 2048
[  200.645673][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.657999][T11550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.781748][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.808161][T11561] FAULT_INJECTION: forcing a failure.
[  200.808161][T11561] name failslab, interval 1, probability 0, space 0, times 0
[  200.820873][T11561] CPU: 0 UID: 0 PID: 11561 Comm: syz.6.2551 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  200.820903][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  200.820914][T11561] Call Trace:
[  200.820919][T11561]  <TASK>
[  200.820940][T11561]  __dump_stack+0x1d/0x30
[  200.820996][T11561]  dump_stack_lvl+0xe8/0x140
[  200.821088][T11561]  dump_stack+0x15/0x1b
[  200.821102][T11561]  should_fail_ex+0x265/0x280
[  200.821131][T11561]  should_failslab+0x8c/0xb0
[  200.821161][T11561]  kmem_cache_alloc_noprof+0x50/0x310
[  200.821234][T11561]  ? audit_log_start+0x365/0x6c0
[  200.821263][T11561]  audit_log_start+0x365/0x6c0
[  200.821289][T11561]  ? __rcu_read_unlock+0x34/0x70
[  200.821363][T11561]  audit_seccomp+0x48/0x100
[  200.821395][T11561]  ? __seccomp_filter+0x68c/0x10d0
[  200.821435][T11561]  __seccomp_filter+0x69d/0x10d0
[  200.821467][T11561]  __secure_computing+0x82/0x150
[  200.821553][T11561]  syscall_trace_enter+0xcf/0x1e0
[  200.821575][T11561]  do_syscall_64+0xaa/0x1a0
[  200.821595][T11561]  ? clear_bhb_loop+0x40/0x90
[  200.821646][T11561]  ? clear_bhb_loop+0x40/0x90
[  200.821674][T11561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.821693][T11561] RIP: 0033:0x7f0c58a30887
[  200.821706][T11561] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.821722][T11561] RSP: 002b:00007f0c57095fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  200.821738][T11561] RAX: ffffffffffffffda RBX: 00007f0c58c55fa0 RCX: 00007f0c58a30887
[  200.821813][T11561] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  200.821823][T11561] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  200.821833][T11561] R10: 0000200000000680 R11: 0000000000000286 R12: 0000000000000001
[  200.821844][T11561] R13: 0000000000000000 R14: 00007f0c58c55fa0 R15: 00007ffc093e7fa8
[  200.821862][T11561]  </TASK>
[  201.104728][T11570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2554'.
[  201.174109][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.297322][T11581] vhci_hcd: invalid port number 96
[  201.302600][T11581] vhci_hcd: default hub control req: 0000 vfffc i0060 l0
[  201.320321][T11584] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.2561'.
[  201.378577][T11589] loop0: detected capacity change from 0 to 1024
[  201.390132][T11588] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.2561'.
[  201.425681][T11589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.451443][T11589] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2560: Allocating blocks 497-513 which overlap fs metadata
[  201.469217][T11589] EXT4-fs (loop0): pa ffff888107177380: logic 256, phys. 369, len 9
[  201.477467][T11589] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  201.563935][T11608] netlink: 28 bytes leftover after parsing attributes in process `GPL'.
[  201.623566][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.733256][T11614] loop3: detected capacity change from 0 to 1024
[  201.994733][   T29] kauditd_printk_skb: 374 callbacks suppressed
[  201.994749][   T29] audit: type=1326 audit(1747350466.916:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.090038][   T29] audit: type=1326 audit(1747350466.946:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.113649][   T29] audit: type=1326 audit(1747350466.946:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.137408][   T29] audit: type=1326 audit(1747350466.946:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.161078][   T29] audit: type=1326 audit(1747350466.946:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.184627][   T29] audit: type=1326 audit(1747350466.956:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.208305][   T29] audit: type=1326 audit(1747350466.956:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.231986][   T29] audit: type=1326 audit(1747350466.956:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.255586][   T29] audit: type=1326 audit(1747350466.956:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.279106][   T29] audit: type=1326 audit(1747350466.956:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.3.2573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965a17e969 code=0x7ffc0000
[  202.516628][T11588] syz.6.2561 (11588) used greatest stack depth: 6776 bytes left
[  202.683497][T11636] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  202.744823][T11638] __nla_validate_parse: 2 callbacks suppressed
[  202.744886][T11638] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2582'.
[  202.786025][T11638] loop6: detected capacity change from 0 to 1024
[  202.862962][T11644] xt_hashlimit: max too large, truncated to 1048576
[  202.875850][T11642] lo speed is unknown, defaulting to 1000
[  202.987696][T11655] loop3: detected capacity change from 0 to 512
[  203.030362][T11651] loop0: detected capacity change from 0 to 1024
[  203.053839][T11655] EXT4-fs (loop3): Invalid default hash set in the superblock
[  203.093689][T11660] loop6: detected capacity change from 0 to 8192
[  203.145329][T11651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.226341][T11667] FAULT_INJECTION: forcing a failure.
[  203.226341][T11667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  203.239533][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.3.2592 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  203.239631][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  203.239648][T11667] Call Trace:
[  203.239668][T11667]  <TASK>
[  203.239676][T11667]  __dump_stack+0x1d/0x30
[  203.239817][T11667]  dump_stack_lvl+0xe8/0x140
[  203.239836][T11667]  dump_stack+0x15/0x1b
[  203.239855][T11667]  should_fail_ex+0x265/0x280
[  203.239920][T11667]  should_fail+0xb/0x20
[  203.239958][T11667]  should_fail_usercopy+0x1a/0x20
[  203.239986][T11667]  strncpy_from_user+0x25/0x230
[  203.240085][T11667]  ? kmem_cache_alloc_noprof+0x186/0x310
[  203.240111][T11667]  ? getname_flags+0x80/0x3b0
[  203.240153][T11667]  getname_flags+0xae/0x3b0
[  203.240202][T11667]  __se_sys_newstat+0x4b/0x270
[  203.240251][T11667]  ? fput+0x8f/0xc0
[  203.240338][T11667]  ? ksys_write+0x16e/0x1a0
[  203.240447][T11667]  __x64_sys_newstat+0x31/0x40
[  203.240489][T11667]  x64_sys_call+0x781/0x2fb0
[  203.240509][T11667]  do_syscall_64+0xd0/0x1a0
[  203.240544][T11667]  ? clear_bhb_loop+0x40/0x90
[  203.240572][T11667]  ? clear_bhb_loop+0x40/0x90
[  203.240600][T11667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.240691][T11667] RIP: 0033:0x7f965a17e969
[  203.240709][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.240733][T11667] RSP: 002b:00007f96587e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  203.240777][T11667] RAX: ffffffffffffffda RBX: 00007f965a3a5fa0 RCX: 00007f965a17e969
[  203.240793][T11667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  203.240808][T11667] RBP: 00007f96587e7090 R08: 0000000000000000 R09: 0000000000000000
[  203.240828][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.240843][T11667] R13: 0000000000000000 R14: 00007f965a3a5fa0 R15: 00007ffc6d6b2cb8
[  203.240865][T11667]  </TASK>
[  203.439980][T11651] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2587: Allocating blocks 497-513 which overlap fs metadata
[  203.459982][T11651] EXT4-fs (loop0): pa ffff888107177230: logic 256, phys. 369, len 9
[  203.468170][T11651] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  203.531369][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.631075][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2595'.
[  203.721209][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'.
[  204.852823][T11702] loop0: detected capacity change from 0 to 512
[  204.860118][T11702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  204.872106][T11702] EXT4-fs (loop0): orphan cleanup on readonly fs
[  204.879393][T11702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2605: bg 0: block 248: padding at end of block bitmap is not set
[  204.895085][T11702] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2605: Failed to acquire dquot type 1
[  204.907029][T11702] EXT4-fs (loop0): 1 truncate cleaned up
[  204.913419][T11702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.956933][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.966865][T11705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11705 comm=syz.2.2606
[  204.982277][T11707] loop3: detected capacity change from 0 to 512
[  205.024801][T11707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.071174][T11709] loop6: detected capacity change from 0 to 8192
[  205.100285][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'.
[  205.134111][T11707] EXT4-fs (loop3): shut down requested (1)
[  205.140678][T11707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  205.149589][T11707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  205.159411][T11707] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop3 ino=12
[  205.215278][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.368316][T11734] xt_hashlimit: max too large, truncated to 1048576
[  206.554052][ T3475] lo speed is unknown, defaulting to 1000
[  206.559903][ T3475] syz0: Port: 1 Link DOWN
[  206.560742][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2624'.
[  206.600998][T11753] loop0: detected capacity change from 0 to 512
[  206.625683][T11753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.665566][T11753] EXT4-fs (loop0): shut down requested (1)
[  206.687088][T11753] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  206.723315][T11753] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  206.754966][T11753] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop0 ino=12
[  206.768767][T11762] loop3: detected capacity change from 0 to 8192
[  206.803285][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.082866][   T29] kauditd_printk_skb: 279 callbacks suppressed
[  207.082883][   T29] audit: type=1326 audit(1747350471.996:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.113731][   T29] audit: type=1326 audit(1747350472.036:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.144512][   T29] audit: type=1326 audit(1747350472.066:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.168211][   T29] audit: type=1326 audit(1747350472.066:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.191753][   T29] audit: type=1326 audit(1747350472.066:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.494667][   T29] audit: type=1326 audit(1747350472.416:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.521020][   T29] audit: type=1326 audit(1747350472.446:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff509b4e969 code=0x7ffc0000
[  207.771249][T11797] loop6: detected capacity change from 0 to 1024
[  207.895895][T11806] loop3: detected capacity change from 0 to 1024
[  207.902547][T11806] EXT4-fs: Ignoring removed orlov option
[  207.925471][T11797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.931134][T11806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.945546][T11797] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.2643: Allocating blocks 497-513 which overlap fs metadata
[  207.965589][T11797] EXT4-fs (loop6): pa ffff888107177310: logic 256, phys. 369, len 9
[  207.973787][T11797] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  208.001286][T11812] loop0: detected capacity change from 0 to 2048
[  208.011136][ T6091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.042659][T11812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.092416][   T29] audit: type=1400 audit(1747350473.006:6667): avc:  denied  { setopt } for  pid=11815 comm="syz.6.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  208.378611][T11806] ==================================================================
[  208.386758][T11806] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping
[  208.394615][T11806] 
[  208.396962][T11806] write to 0xffffea0004aa5e18 of 8 bytes by task 11813 on cpu 1:
[  208.404700][T11806]  __filemap_remove_folio+0x1a5/0x2a0
[  208.410112][T11806]  folio_unmap_invalidate+0x1dd/0x360
[  208.415534][T11806]  invalidate_inode_pages2_range+0x27c/0x3d0
[  208.421551][T11806]  filemap_invalidate_pages+0x16d/0x1a0
[  208.427128][T11806]  kiocb_invalidate_pages+0x6e/0x80
[  208.432375][T11806]  __iomap_dio_rw+0x5d4/0x1250
[  208.437173][T11806]  iomap_dio_rw+0x40/0x90
[  208.441536][T11806]  ext4_file_write_iter+0xad9/0xf00
[  208.446775][T11806]  iter_file_splice_write+0x5ef/0x970
[  208.452187][T11806]  direct_splice_actor+0x156/0x2a0
[  208.457327][T11806]  splice_direct_to_actor+0x312/0x680
[  208.462723][T11806]  do_splice_direct+0xda/0x150
[  208.467511][T11806]  do_sendfile+0x380/0x640
[  208.471934][T11806]  __x64_sys_sendfile64+0x105/0x150
[  208.477164][T11806]  x64_sys_call+0xb39/0x2fb0
[  208.481766][T11806]  do_syscall_64+0xd0/0x1a0
[  208.486286][T11806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.492278][T11806] 
[  208.494608][T11806] read to 0xffffea0004aa5e18 of 8 bytes by task 11806 on cpu 0:
[  208.502249][T11806]  folio_mapping+0xa1/0x120
[  208.506791][T11806]  folio_wait_writeback+0x43/0x140
[  208.511916][T11806]  file_write_and_wait_range+0x20b/0x2c0
[  208.517564][T11806]  generic_buffers_fsync_noflush+0x45/0x120
[  208.523527][T11806]  ext4_sync_file+0x1ab/0x690
[  208.528241][T11806]  vfs_fsync_range+0x10d/0x130
[  208.533028][T11806]  ext4_buffered_write_iter+0x34f/0x3c0
[  208.538633][T11806]  ext4_file_write_iter+0xdbf/0xf00
[  208.543859][T11806]  iter_file_splice_write+0x5ef/0x970
[  208.549255][T11806]  direct_splice_actor+0x156/0x2a0
[  208.554401][T11806]  splice_direct_to_actor+0x312/0x680
[  208.559792][T11806]  do_splice_direct+0xda/0x150
[  208.564589][T11806]  do_sendfile+0x380/0x640
[  208.569017][T11806]  __x64_sys_sendfile64+0x105/0x150
[  208.574239][T11806]  x64_sys_call+0xb39/0x2fb0
[  208.578866][T11806]  do_syscall_64+0xd0/0x1a0
[  208.583387][T11806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.589295][T11806] 
[  208.591624][T11806] value changed: 0xffff88810738c298 -> 0x0000000000000000
[  208.598741][T11806] 
[  208.601066][T11806] Reported by Kernel Concurrency Sanitizer on:
[  208.607222][T11806] CPU: 0 UID: 0 PID: 11806 Comm: syz.3.2645 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) 
[  208.619732][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  208.629814][T11806] ==================================================================