last executing test programs:

4.383273604s ago: executing program 4 (id=3927):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
setitimer(0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010025000000000000000c0000001008000000005f005f5f0061005f3000cfcf303ab16afac6a2c7c97a2b6671bbffd51900d29b4a408d77b2007c8aad4a38e73d27eec4f2152dc4faa5dccd9a18029866487a292d5d4da521870f49acdf037c6cb1fec7ad2d8544da0988"], &(0x7f0000000540)=""/253, 0x2f, 0xfd, 0x1, 0x3ff}, 0x28)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x9}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x19, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000008338ff61b60eb7e93b7d834e7c9f0e0a42d0ccb82e2210a3d70a5a7fc437398da5d6ff96c77cfa031f25a2441519e9ec49a8e71e00d7fc74d7b78f48ad6608e844cf4d1d20dbe3876e0a583ab4f02b9c322e876cef8d7552a536f3538ce1b9af75448077", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000))

2.979515115s ago: executing program 4 (id=3945):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200087ed, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r4}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x84, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x4000000000001, 0x35b281)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00'}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)

2.905177696s ago: executing program 4 (id=3947):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50)
r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000880)=0x10, 0x800)
setsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000980)="aa2122ffda57eda5b482cde5e0bea7e76cf0d94b92851b27f2c1c0175baada2187aed93593e08a4018e7fb796c9496f16acbdf10be2f4c9a7d838fbc402b9620b8e2ed1d8ceb131c730001ad7e437c62b6cc039452ee1c710338bf61d967f64f27165cba7cb52bf787dc82cb3ffd49c49f7c83730d3c54f49509cd203245bc6001ca40097c33b02f87fd34d8c6681e4338a35a81b0bd2bfbd1c2624eea67a1a955ff5b", 0xa3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={<r2=>0x0}, &(0x7f00000001c0)=0xc)
ioprio_get$pid(0x2, r2)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000080)="21df5f2b44e0d938f64bfed2df61c9ffe5a85320411c698392405fc7900d18c6214b3550a0079e755be47326c3c2865dfa35e6970f9b12a101306e52f599901111712737186a52130c692574593058b24cfda1d9f45e15a600a1db2bd9bed72d89e3f02b3bc81ea03af69d", 0x6b)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x3)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)
syz_emit_ethernet(0xa1, &(0x7f0000000a40)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x16, 0x4, 0x2, 0x3, 0x93, 0x64, 0x0, 0x0, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0x52, 0x3, 0x3, [{@loopback, 0x4}, {@rand_addr=0x64010101, 0xaf7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe}, {@broadcast, 0x1}, {@loopback, 0x40}, {@rand_addr=0x64010102, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x3}]}]}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x1, "2c9ce2", 0x9, "adbbac"}, "b8130f590b12dd95b4b21dbca9bb689b5ccdd867722afff934b7d4ddb20e1f2b1fd945ee8737716344bec1"}}}}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

2.883091146s ago: executing program 4 (id=3949):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$eJzs3c9vFGUfAPDvs7stlAItb97kfZGDTUiERG1pwWiMiRDx5sEfJJ5IrG0hhAUaWhNBjJDgf6B/gIk3E2M8EmOIevHqzcSriSESA714WzO7s2WB3f7cMsh8PsnQ55mnk+8zu3z7zDw7MxtAaY1l/1Qi9kbEfIoY6WirRd441vq9u3euzCzduTKTotF4568UKV/X/v2U/xzON94eEb/8kOI/1YfjLly6fHa6Xp+7mNcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz9s796JexGFt+TTplr+tL/Q5WkGq+P51vcaoV2CHWpf3+DUTE/2IkqnHvzRuJT98qtHPAlmqkiAZQUkn+Q0m1jwOy89/2UuwRCfCo3D7WmgC4m1pze0vL+V9rzQ3G9ubcwI6lFJ3TOiki+jEzl8WYfyaNZEts0Twc0N3VaxHx/27jf2rm5mhzFj/L/8p9+V+JiDfzn9n6tzcYf+yBuvyHR2cz+f9eR/6/v8H48h8AAAAAAAD65+axiHiu2+d/leXrf6LL9T/DEXG0D/FX//yvcqsPYYAubh+LeCUi2tf+LXXkf260mtd2Na8HGEinztTnDkXE7og4GAPbsvrkCjHG9v080LOt4/q/bMnit68FzPtxq7bt/m1mpxenN7PPQMvtaxFP1brlf1oe/1OX8T8b++fXGKNx/NUfe7Wtnv/AVml8EXGg6/h/78kVaeXnc0w0jwcm2kcFD/vo5I1ve8WX/1CcbPzfsXL+j6bO5/UsrD/Gx3/+ton87378P5hONB85M5iv+3B6cfHiZMRgeuPh9VPr7zM8idr50M6XLP8P7u9+/r/S8f9QRFxdY8wT379+vVeb8R+KM3QtYnZd4//6C/vf/fzvXvHXNv4faY7pB/M15v9gZWtN0KL7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/RpWI2BmpMr5crlTGxyOGI+K/saNSv7Cw+OypCx+cn83amt//X2l/0+9Iq57a3/8/2lGfeqB+OCL2RMRn1aFmfXzmQn226J0HAAAAAAAAAAAAAAAAAACAx8Rwj/v/M39Ui+4dsOVqRXcAKIz8h/KS/1Be8h/KS/5Decl/KC/5D+Ul/6G85D+UV7Xx9cmi+wAAAAAAAPTNnqdv/poi4urLQ80lM5i3DRTaM2CrHS26A0BhPOIHysulf1Beq53jmwOAJ19apX37hrcEAAAAAAAAAAAAAPrlwF73/0NZVYruAFCY3vf/ezIAPOnc/w/l5RwfcP8/AAAAAAAAAAAAADz+Fi5dPjtdr89d3Ghh2+Y2V1BYa+H33a3/s49Lf9ZfiNSHjHtEhaL/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG3/BAAA//9r5fVk")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
ftruncate(r1, 0x2007ffc)

2.58820114s ago: executing program 4 (id=3956):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
setitimer(0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010025000000000000000c0000001008000000005f005f5f0061005f3000cfcf303ab16afac6a2c7c97a2b6671bbffd51900d29b4a408d77b2007c8aad4a38e73d27eec4f2152dc4faa5dccd9a18029866487a292d5d4da521870f49acdf037c6cb1fec7ad2d8544da0988"], &(0x7f0000000540)=""/253, 0x2f, 0xfd, 0x1, 0x3ff}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x19, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000008338ff61b60eb7e93b7d834e7c9f0e0a42d0ccb82e2210a3d70a5a7fc437398da5d6ff96c77cfa031f25a2441519e9ec49a8e71e00d7fc74d7b78f48ad6608e844cf4d1d20dbe3876e0a583ab4f02b9c322e876cef8d7552a536f3538ce1b9af75448077", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000))

2.507803132s ago: executing program 0 (id=3958):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
setitimer(0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010025000000000000000c0000001008000000005f005f5f0061005f3000cfcf303ab16afac6a2c7c97a2b6671bbffd51900d29b4a408d77b2007c8aad4a38e73d27eec4f2152dc4faa5dccd9a18029866487a292d5d4da521870f49acdf037c6cb1fec7ad2d8544da0988"], &(0x7f0000000540)=""/253, 0x2f, 0xfd, 0x1, 0x3ff}, 0x28)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x9}, 0xc)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0xffffffff, 0x6, 0x4, 0x0, r6, 0x80000000, '\x00', r4, r5, 0x4, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000b00), &(0x7f00000003c0)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x19, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000008338ff61b60eb7e93b7d834e7c9f0e0a42d0ccb82e2210a3d70a5a7fc437398da5d6ff96c77cfa031f25a2441519e9ec49a8e71e00d7fc74d7b78f48ad6608e844cf4d1d20dbe3876e0a583ab4f02b9c322e876cef8d7552a536f3538ce1b9af75448077", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000))

2.229534936s ago: executing program 2 (id=3963):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x2000775)
write$binfmt_elf64(r4, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xc, 0x4, 0x2}]}, 0x78)
close(r4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

2.085326518s ago: executing program 2 (id=3965):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x428, 0x3f3, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x2, 0x10, [0x9, 0x7, 0x6, 0xffff2f19, 0x8, 0x2, 0x3, 0x5, 0x2, 0x6, 0xa, 0xa68, 0x0, 0xfffffffb, 0xa02, 0x100000, 0xe, 0x5, 0x5, 0x9, 0x7fffffff, 0x1, 0x10000, 0x61, 0x9, 0x0, 0x5, 0x2, 0x81, 0x101, 0x1, 0x800, 0xffff28da, 0x0, 0x2, 0x5, 0x8000, 0x3e, 0x8, 0x5, 0x6, 0x7, 0x1000, 0x800, 0x7, 0xfffffffc, 0x100, 0x3, 0x4b, 0x3ab, 0x10001, 0xff, 0x2, 0x6, 0x7, 0x1000, 0x1, 0xfffeffff, 0x5, 0x0, 0x6, 0x8, 0x401, 0x10], [0x2, 0x6, 0x80, 0x2000000, 0xff, 0x80, 0x2e2b368, 0x6, 0xf986, 0x100, 0x5, 0x3, 0x3, 0x127, 0x8, 0xb6f4bc36, 0x583c, 0xf, 0x2, 0x3179, 0x1, 0x7, 0x4, 0x1, 0x1ff, 0x56e00000, 0x4, 0x10000, 0x1, 0x1, 0x9, 0x8001, 0x5, 0x3, 0x61, 0x2a6, 0x87b, 0x10, 0x52, 0x7, 0x5, 0x0, 0x3, 0x3ff, 0x3, 0x0, 0x46b1, 0x1, 0x4, 0xa93, 0x8001, 0x6, 0x48, 0x5, 0x6, 0x80, 0x8000, 0x5, 0x176560, 0xff85, 0xfffff6c6, 0x93f, 0x4, 0x7], [0x4, 0x2, 0x18, 0x2, 0xff, 0x9, 0x0, 0x9, 0xd39, 0x5, 0x3, 0x7, 0x7, 0x7ff, 0xa3, 0x7ffffffb, 0x52, 0x100, 0x3, 0x0, 0x1, 0x8, 0x1ff, 0x224f, 0x8, 0x3, 0xf235, 0x80000000, 0x6, 0x4, 0x8, 0x6, 0x40, 0x0, 0x4, 0x5, 0x7, 0x6, 0x8, 0x5, 0x1, 0xfff, 0x80, 0x1, 0x200, 0x101, 0xa64a, 0x2, 0x9, 0x0, 0x7, 0x69ed, 0xd, 0x1, 0x10000, 0x7fff, 0x4, 0x9, 0x9, 0x1, 0x9, 0x4, 0x1, 0x1], [0xffffffff, 0x3, 0xfffffff7, 0x10, 0x597c, 0x5, 0xea24c51, 0x2452, 0x5, 0x8, 0x7f, 0x10, 0x41a436b6, 0x2, 0x9, 0x3af95ef0, 0xec27, 0x81, 0x4, 0x4, 0x9, 0x0, 0x3, 0x8, 0x0, 0x3, 0x2, 0x9, 0x7f, 0x80000000, 0xfffffe01, 0x0, 0x4, 0x3, 0x3, 0x2, 0x0, 0x7, 0x7, 0x2, 0xd, 0x640d, 0x0, 0x0, 0x1, 0x7, 0x5, 0x5, 0x7, 0x8, 0xffffffff, 0x3, 0xffff, 0x0, 0x0, 0x5, 0x1, 0x8, 0xff, 0x5600000, 0x4, 0x1, 0x9, 0xffffff26], 0x7, ['{\x00', '\x00', ':&&\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)

1.156152892s ago: executing program 0 (id=3967):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)

977.767435ms ago: executing program 3 (id=3969):
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r3 = dup2(r2, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000040)='./file1\x00', 0x2000775)
write$binfmt_elf64(r4, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x2, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0xc, 0x4, 0x2}]}, 0x78)
close(r4)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

973.134975ms ago: executing program 1 (id=3970):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x101}, [@tail_call, @call={0x85, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x23, &(0x7f0000000100)=""/35, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x7, 0xf80, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x5, 0x3, 0x1}], 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='fsi_master_gpio_crc_rsp_error\x00', r0, 0x0, 0x4}, 0x18)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000340))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x40, 0xd, 0x2, 0x42, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7, 0x80000000, 0x5}})
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0xc}, {0xa, 0x4}, {0xfff1, 0x15}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x40800)
r4 = syz_open_procfs(0x0, &(0x7f0000000540)='stack\x00')
getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6_vti0\x00', <r5=>r3, 0x29, 0x5, 0x1, 0x2, 0x56, @private2={0xfc, 0x2, '\x00', 0x67}, @remote, 0x8, 0x40, 0x0, 0xfffffff7}})
r6 = socket$netlink(0x10, 0x3, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x128, 0x2, 0x2, 0x601, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x48010)
close_range(r4, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000008c0)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff}, './file0\x00'})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r6)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000a40), 0x129c20, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0xf, &(0x7f0000001f00)={0x8, 0x1, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000a80)=""/139, 0x8b}, {&(0x7f0000000b40)=""/79, 0x4f}, {&(0x7f0000000bc0)=""/226, 0xe2}, {&(0x7f0000000cc0)=""/34, 0x22}, {&(0x7f0000000d00)=""/59, 0x3b}, {&(0x7f0000000d40)=""/112, 0x70}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/123, 0x7b}], &(0x7f0000001ec0)=[0x2, 0x1, 0x0, 0x4, 0x6, 0x2, 0x9]}, 0x20)
ioctl$TIOCSCTTY(r4, 0x540e, 0x46a5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
removexattr(&(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)=@random={'os2.', '@$\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002040)={'syztnl1\x00', &(0x7f0000001fc0)={'syztnl0\x00', r5, 0x2f, 0x81, 0x1, 0x9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x80, 0x80, 0xe, 0x9}})
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000002180)=@get={0x1, &(0x7f0000002080)=""/237, 0x8})
ioctl$VT_ACTIVATE(r8, 0x5606, 0x9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002200), r8)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x38, r11, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x40001)
sendmsg$kcm(r8, &(0x7f0000004640)={&(0x7f0000002300)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002380)="21f43674fcca1d51839de07c5289040363a55bc96d2742334f80b378459347b8d8bd35b678ac1c1c5a29059fb935d058e0f420f2635be51a063e4135098103c84af35e1aa6b79812de3dd99e51d0c06368329e0cd21eb269abcd865b4eed55bf5967f93e79116ae3156499c1d867a2b71814d7ef4862c45b9bd3b6efeeb74f02e373cf17a39669272168b32eb8230153bdb808dc2b4e306aad3c62cc8b4056cc79471156a7f153edb64abe70039624fdc77a1ea6ab96c16536adab2f12723162a144adec0de95bd3815821b7744612daf104159e79bc25a3a037fce3fc0e8deda35ec2c7ad6df736b134f0401a2a0f5eac453824dd8af37ae91031195c3d0be7402a68aad59c0a0dd3c32f2506c60c51300b6a0a717ff69a7beaf3268f7bca015226bf270e2914a792f1b55be003f62698cc79b0437ce601224864c57bb5e80128937c9051c5b407e6c6161dba18bfe328d47e89242121b9e4d721790836445ee3c9f05605c7aee5c6a31a104ff2431c9975e9f9367e8cb910830212c40f2060abd77180abd50d005f1415909809e22c9e888fc88fa70fae8d176cfffca69d2479778c800e77760cf1c67e97bca9078a29d37efa1b76ad6ff08b373f1e89bdf7df1dcb8689aa35f31e5a685998e54d02bf9b03c1d153f6c7e2ca5b187b7b7861c46d6257521faf95c81e22acabaf2008f6a6fbaf4ba7cdffab5bf894d34af75b78e67605140940d87c0f61841d2c56b14d7655fa6d1b9a08628fc490e2f92102eb4ec62a7bcf75d262055c89d02da0bfe102f40aa6d99f98c763e27c1360b9c1feb086516995353c48a01a2be8d495a3dc6d511be59b9c06a279163b4be91ae1d85e497b534273a556c45473020d39a7043e925e7e48fbfd667a1b60a497ab1bdace2b61a6529be6e21523bc4794670155cbc9d5dc90ef143ea14a1f129bd12d20fda2357f27baeeeb66b6bdcfbd09065617845e9fc0e122da7721cc85126860f22211f70c8559c3d48a4d10a7c140d50bb70d14e94d05d0c6d44a5611e8e830758eb2a7583a7a172f95f9143c7ccf351acd4a8da6838a5dd22bebadec017c9a4f08fca3a19f95844969ccfc2af747bfd6968d229cd66e7785283e74f64e8ef8f6fa6263e4c8ef1b60834738d7f4d4130701ec3fe7a173150a5ee958985d1b441da3c9a2789e0f50cdb7a3fca723bf650636d564db5d101e4d79b97669f4bbd6ce451727b8efa870c9d19e1d02583b4aed4269bbfa4adcee904aebe3efcc0f8bcec366a08792ef8eef1cd5fb639abd43e8537e6fde8c54bd2f47da9e722f959094d15b1a9a9198d6da54be0537d27ef9019e86c757a1e19ec50ddfbef3131beccf476e89264da6a8c5f48870bfc82e01d5db1c4776983e6947d79c111fc822ebac7d38b9e9f64d65e5dc65e260f41487b90456414f67e8072f9c95f6bbd9a048ada74e58051d907b2350c3a756f38ca66dce02171a4f0f851081a9eb85e7ee26dda11c16ccd1c98dd1ed81d75944514d93fabc33b6da8fd1e6bc9cc3b44f56998069593f5f97363c342c0a9408b86511ea19521549469dbaabc64b76469e7e374c7d3be96d1c358d2daffdd7a2bfa5084c2440854352f80bff8d628117235a2798b36ce58a6f1d3ef4ecd4bb11908cf08dc2ce0c79262bb7f1d198e85c1c5bbbf36ea5e80413c99c5d4973c37307d372fde6ec41b636973a50f1900aee51b356584b19da09ca4637631a81e2cc2dba202b62a5ecd1214a0c22e1542c086ae409d0013dc39a117f217f6a94e4a586c977b676521449d90b8c072ffb787e322134845b3ad6690956d46ee55964b3c4e0f7603105ed19e73f6af3441d48babe547ec97ec60e9d7412e3105d9150adc6bdfadeeab60564d2a290611b4493bf4275c6dc46a1146d31f2bf67e0d1d83f83857166cbf7ffc2eaf408671fdaf7958552b51ae7bdf3b4decae62378c2766d8d5e54cdd9a0d8bfdc94bab56c23f42631b79c03ae87244d326d588e47c63975eb37612885f35486fe85279cdd456c192cd4a993576446aa8976f86e94ce400c1b8262f2c8d281451531171617c0dcb72fdda1b8140da5315fa6610cee0e9363299ba098c2061324e5b8d6824ffd71afdbb989e391032c7ec1af3929f7ddb8c7c5aecc5c4f701b50eecfae685a0806143b175e481291eda5e2b0e6e1c635324afc2c23d30a2391784aa81ce24ea44d77cfb0b03eceba2c3bbf8f055e7bb5dd10e9c0295ae5c63ca6dbdd59bbad6eb019cfb2697716a39ffcb238876cc7fea487d4c92ecb3387f17c5638215bfcd68cb2e0cc3218b524fc1d526518592ac731ea212bc0841dffd742c364da68cd63485d5cb43bf6eaf06da9896966a736447d39777e4b96c0e13effdd0354152b0a7b88cc84b8cb82c553ecbd3ab954a7714e257e3ebfc3e66cae8c484422bfba0b15de8a53cee02eb2409d7aa25fc614ee639b5d3829c6f99950f7296aa6ef6e7025b6bd50345405a790834124acc3560b0e023bcb464bb29e7d53aa78a00bc1e03ad42381a13b0237752e198b2cf8dc1d7c0ee7ae1445355447233d1c00d772d02384fd53846eece42c5cbf820c366330707b32efdc12e3ba8c4d85ccb1e7b3a8bd48f5f2902a97a8614e26fc5dc34f911337e24769e0c92bed79083e3fb7683f7cd7a9094e8a0509f1fbd32aa707b5608a5092d72c631ea23de35cbc595d777381f03fa0f43f4a2b9c4b55a77537f91d110e1a569226acf054404b19cb82ecca04c0ae3d5b9138d54e6ff19c6a34e6034afe0d3dea83c282873de1c5a2d92e9e07d3783459a680da208d572e689b813078a33ddf20a78006711c313457cbea08149453f93bd74d1ee7836581f9edb5a7e610ee1f79ba475a2d8f0868c08a08c3243bd6e55f9eaff84906caa2e735da01ec555785746a0d837d8a6030a243b9b8d5abeb89662952da85a6ca9e28efe605334d209eec46740009111495045b34d4e04b34bbd36d1610394efdbff5a9c46b6f83f6c14fdf9bb3f8501dd565b8cc56a54f4e418f7c71b7d0d029ee2005ec9b897903ccdc58ad97823ba3ef0cf5ab03d859014216fb1e4addfd73621bd41255846ab069fada0586d27729ae6322a5aa37e0c084cda9c94ced0678d38692809152d889dd088e192951a5a813f8660a73b62acb3f569fa7be9fd9a3f91fcda05f8829ff38b876a5571ce4f1319635ffca8ed45878d60b98eeaffb8598dc8e1068428b129e8ffcb98b1dc486b99724f73030b295a6eafb7f9a46ebc9c2bd67fc57e9a37a96a9450a5d85914aed62a140efe077a92566a21c4d20f72cbff7b6321c5432e3154f60c3a3d2ae11708d975f0cbcf19e54f2f2ed05834b35c1595b6642d61b177b06860b9363e3c69ecbb78afe40920498fd511710e212dc49cd41d648648cfd6386c5d0b9da0eec2ac592d6101f87cd883bc83dd9f341bdaf2670261c7e0a49dd55f9b6aa9763c92449cf7dd09d795d4193928267d4f9748671b3b3b9e219272a6597d4b7c6f545b78aeed1fd68fbe1d8670e980a2425cf4f1aadc794c44802f8a37442e5a2fb96fc5697402250c8c9f37702a241a3718c6669905310d8a92beb9e83fbec2efb14501ac9581428f0c96e30c7d108fb0f61f1ed7e28422f3df07f29ac7d07d727b16c9ceb05032a61d7d33c291f2beaddbfb388e4d2b9931d57cacde6a88e69522c838be1bf47b0a82c1fed9d7eaa2637300a5e433e451daa11180f394c1b948cb4f64c621e8b7ead017619b67f549a2d86add3a5b97754981879020ad4949a42437e8d87faabf45016648cd99f5560a5ad1519ac970a5e3f25b9ceafc947eb08d7c20b5a450668b3c61d4b6b09eff89523bfce0e3aec53943bac202f457bb7f1ced93e3d095809315bb7a6d74ea587efe365bd778a5b776bc8be3015a61a45c714dc44c6b19feec58b18f3c1be20e2165eb2d169ecc48d0031c3cd7d8974b9cc20f0890f3b8af1992df99468cfe9f2a6ce9ae29a5aaaedb2cdd2fc49f123ada3225958f8f1de6dfb7d461fd16b1ce07b21d0393c4b8e2c29999049e2813c10dc0f56e887ae608eeb962dd565d55889efea09119c4a01d2c347bb1ba6299c6fadf1c72e56746ef7b250fb138ed493065e4f715e48b9072ef844aabc231304e5e51ae84f13959aeffebe7e1b1f58f58cc6023a34bfa34eded76666c5507c720371153bac78b853fbfc9418acbcb54d9221ca301d729d1c217f2ecda357ff6dd3bf33ee76580d7b7e582c38fd373f278e933b9c1a15866ee50794e17c769029b37419a9f79387a9e344f303876eee9a5b03773b4d6ae230aa37a3e112aa6c5683ab3aa8814e398a3eea41c55650e45e6d2d5391a33cc91da418c39391682096de375e5889b498c2a6cf8a35e1955415487df23d071f8cb5276ff421ba62b60e18777778687a5f9b57f61d1193eb2425ae9d4378e73b988709b9d634b0d15203539e3f05d269b072f19c317783ecaf24abd09fdf455698a4ace8327aa89195acbbb7cbeb5c644be36906cb81d4db4ffee1a598a3cc21cc28b746c88c65c4aec248b84a8e1cf30654f70af7530343faa3aa347c747eebbed5fd0d14a452f9d849d9461816923cfd1bca22f6478322ac9a9a596d07942fd0621397d12f42d2ccda6ad111c82315c07abffc6b20ba1cccf0ce608933558e9de5e909fec2b350b5daa232c5839592704be37054ef4c1c9965eba66a09b7bc3a8c1e799662f49bcc9c503c0792cfac95d24effd0696ae00ea785c19c1cd0140f0f2e6f8dbb4a87af99dd5d5a3703b9be7a7bb288e8e279829824772a49e1543fec9c88b9ea8e1c60ddf1ce8dcc8822c5892037b26a9d80ba45aa2139229f2c149d24bf6f2ec174105cc7ce2af7d7363505a02a2e514b14ae7627dd880528a8f3780d0396146355185fdbf0fc802a7b815b144e739df13a1c37b233c15b2a66f4d9173ec613fa2ce06a519bfbabcaf35ab6874e082833268cdfa829b7765e4b442b130eccb26b9727927fb542bc1b29c9bf60d215ec4e9bc758a06c0c4588c7639f5225623070378ecf62e49b36ab0de199e27e21aa7f689d47fb6c62e3f532af92cb113ef7464c896c241f95e162c438b9e44bb1949a33c35a2f8bd822a7551b7bd9e3e14ce0fa09c21c9f6a94af57bdf2542273142939210b9d5598a7a1e6e969b21e939b924ecf06445f1fab971adf7dd7de4d103a737bcd0b44603009514069a1e4ca44d3bd16987d097ac3d637efbb6daff550c4158a58d9ba0b321764ec5c75944be9b40222c7ee9e55f07f87444a6e2a1429ff877bc6fc1e69e3bcc2028b14ea83246f443e70d6f23894c5dad8e67649b54affa9518b3bf07a41026398069ebac8b1bac8d24896731414dba92fad32df8fa08dbb96093718580fdde8528105295e7ab0fc5e1010ebfb28398f1b5aaa4a7865746bdb3904df581a216ae3dfa6f62273a357b2778e1383f51ff34d79b5c159c11af2e624c69127291132274b51b57af466660d2e2b4154fb3768d0da7745039b69acebd823a5d2c0224d3da7fb52e42665df14c43d63d82d3a1231ccd9060ee0b72bb3bbadaf68d667d2a7fdf66d4041ac070fcb0a12d62fdd9e248e69724e3524e1659c5a19254ad7e6471d2bfa6a40d873af67b533f10eebd6de670efe7c2e62369b473e18e83645be74e0d32815a34660656c9489ebf106814c23c3c75520a52989e8910f14d8c0da78fda6e57876bf1005185a65e8527837683831cc0b14c5683ff9251f783dbdcf223db1c8f4f3f6a51a71fa3499838a5f4366d079c64fb5", 0x1000}, {&(0x7f0000003380)="43d246258f2d693399705d739255d62c", 0x10}, {&(0x7f00000033c0)="230e7b206b2daf1f559a30365ba0468ae141641f61878273c559418466d9084e4253dbf2871d66a2c88f2ebfae9b3787ddc29b0723ffd97674d3f87c4ebdbedc7ece04e71f261dfd648f02270f31a046ce5fe9a4fcde17fe542c4198d8db4290cb9b9f8c8b48a701db756f613f57e2347e85f81afd714abf2e302ea4813cc5aed5a295d99b409e0f937a", 0x8a}, {&(0x7f0000003480)="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", 0x1000}], 0x4, &(0x7f00000044c0)=[{0x88, 0x29, 0x2, "19b068b02bcb5821783c1591850bdeb40950c032f65a0649c2416142382fc3b59e3358dff30b467a63a293acbb39c9101847f096f3f80333d82d4ee92cb3c17bb508ddc01c6aaf519298e73cde12fec315a4c8f3634144a1bce4c8769c15e5f0c222111a65aafdabdaeab5c426c259c50a5b7b8b4f5367"}, {0x58, 0x107, 0x2, "79826f3451803a2132be8498698cad6a48e161959da711620addf6824db20aad3623d711beb2be1910c97392f05ffc007619bcaad0f8e57bf1906f887e1c5997bc1ba021"}, {0x88, 0x0, 0x2, "da5e03b8e2634889846d287b7abafcb85ac4c1aa141d96a0621ab11a16c6df7577d1ebdc1c23b8b38a43eb6de76c2eb92d5c9491309ecadaa8ddd648dca4e8b01e5f7c0fc463130658b427767a0d910e85debe4777afed1797f871d625e5df16caa3d233c18c1df56cf4c4fec449e051ab7a656e5e8b32"}], 0x168}, 0xc839762c5441bfd8)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)

867.022896ms ago: executing program 2 (id=3971):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

829.157547ms ago: executing program 3 (id=3972):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001140)="$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")
statx(r1, &(0x7f0000000040)='./bus\x00', 0x0, 0x7ff, &(0x7f0000000940))

816.973147ms ago: executing program 1 (id=3973):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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")
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x7ffff000)
fallocate(r3, 0x0, 0x0, 0x1001f4)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

774.764878ms ago: executing program 2 (id=3974):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000))
setresuid(0x0, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2)

753.233568ms ago: executing program 2 (id=3975):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x2, &(0x7f0000002400))
unlink(&(0x7f0000000180)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000840)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}, {@minixdf}, {@lazytime}]}, 0xff, 0x42f, &(0x7f0000000940)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21)

667.956319ms ago: executing program 3 (id=3976):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x8002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})

587.312241ms ago: executing program 0 (id=3977):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000d000000000000181100006dc5aded12dedfc3811576adea44bb4b67c44a6da11801cab9e40516ed8739f5d9417bde7e825f000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x7}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000c8, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="594c792e8fd60d5c9b82f4a0d89c31e1a3e3663b4c3beb1e710f59e4ea947f6f2938ce8364e93b9c25457436bc1e20f19d07df5f6112422db4180e925a2cf2d35671b947e24d81147df9afc0524ca1bff4f5c4f3969d6cd050fe43d834850744fb76e0d963ceb616469457a5bcd8ef119fff2e01fd8b1703e78de89b6b4ee91b3147a7f4ad065198444f4714e39421d7ee19aba7680a203f38d9952444aba1e9e10a35aa8ec394ba7d0cbbd99397f213845c0c6c0a83f83d"], 0xfd, 0x1d4, &(0x7f00000002c0)="$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")
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffb, 0x4c000)
ioctl$BLKSECDISCARD(r4, 0x127d, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
timer_create(0x3, 0x0, &(0x7f0000044000))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
pipe(&(0x7f0000000740)={<r7=>0xffffffffffffffff})
io_submit(r6, 0x2, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xf9, r5, &(0x7f00000005c0)="e7ff54582ba8ebd13e5f1156af9632958deecf6453dc144478e42bb90a42d7c6d143781278b5b85170c487338f0a8e07c3a60ec68c7a0517cecbc99ce972002a4ce0f80daf361090b2b9276d6773bca7990b19176276aeb5a15491b81a48d7454d2e6ecb1a2751b0a031862423b220bcf63521bac01fbfb4dc6313b4400c4ad17d1b865afe379869bfc6c7cbf98c739e4c7c813479a689889d19c733778f09f4094f41c8d141b5d4279fcc5669752dd71df12c63c53b22dfc2cae6c4beba1af550", 0xc1, 0xb710, 0x0, 0x1, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x7, r5, &(0x7f00000006c0)="4c888d36089d8715e2213e8657b0ca82b5b362a0084478e4d941b3997c1d777c1cf9aa2d28ed076932f2195bf565a557ad3d82297d39d58e1d32855779ea8e403fa2262490b38c0ee74e100339bf9714f2a9", 0x52, 0x1ff, 0x0, 0x1, r7}])
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
writev(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4b, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000008c0)={0x3ff, 0x101, 0x1, 'queue0\x00', 0x6})

573.844891ms ago: executing program 4 (id=3978):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x14246, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x2)
unlink(&(0x7f0000000140)='./cgroup\x00')
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000000000000000000008000000c2e90000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000e4bb0cc39f2be1d8b3515861550880988c3524d5559c92de1ec426464087b06a25b526c9c58ad5ddc547466e0f6cbb7f665e571", @ANYRES32=0x0, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB="040000000500000005000000010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000008000000000000000238ed4b532e96480002b25bcbd7dd3894043a67264918c6d91afecc756d56196303eebcae0e535591d95ae55080e7f1b555346d93b14a8ca028bf3f28a4b91752d311125251e7cf0cd6864b83047cc191b3d49c470bc7b38a62980afe46d3a94afe4863426f4dadebfbe8e6d85fb6357652cfad3ca23da33a463f1051fc0a96e5947a9b7dcc929", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000100"/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1b00000000010004000000000082521865b76fb5d44cbbe9383d5bde6d5b930f72997c7b81efed89e60e5df615f748fd7a0eaaf897b74a086fa771bdd11d494ad8c5c951304a00980949c5268fe06a3595f6d6332d39faa81a72647326184745bbf21e78aa108d9b8eb609bae70147370b32c11dd6bedb78a92317e8632e1a46e7ea4f37049f7633abefe2f3f848f2ddfbdbbbf0d29e809e0421066f715d3aac6fdbca441aa055d9b93a4632a0d4d48d3ba3a806003509f4", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRESDEC=r5], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@resgid}, {@noblock_validity}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

570.466501ms ago: executing program 1 (id=3979):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f0000001140)="$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")
statx(r1, &(0x7f0000000040)='./bus\x00', 0x0, 0x7ff, &(0x7f0000000940))

563.302241ms ago: executing program 3 (id=3980):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)

518.340272ms ago: executing program 0 (id=3981):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
fcntl$setlease(r0, 0x400, 0x9e8eae06a5a0b97c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r0, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r4, r5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

506.539752ms ago: executing program 2 (id=3982):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x428, 0x3f3, 0x800, 0x70bd2c, 0x25dfdbfc, {0x0, 0x2, 0x10, [0x9, 0x7, 0x6, 0xffff2f19, 0x8, 0x2, 0x3, 0x5, 0x2, 0x6, 0xa, 0xa68, 0x0, 0xfffffffb, 0xa02, 0x100000, 0xe, 0x5, 0x5, 0x9, 0x7fffffff, 0x1, 0x10000, 0x61, 0x9, 0x0, 0x5, 0x2, 0x81, 0x101, 0x1, 0x800, 0xffff28da, 0x0, 0x2, 0x5, 0x8000, 0x3e, 0x8, 0x5, 0x6, 0x7, 0x1000, 0x800, 0x7, 0xfffffffc, 0x100, 0x3, 0x4b, 0x3ab, 0x10001, 0xff, 0x2, 0x6, 0x7, 0x1000, 0x1, 0xfffeffff, 0x5, 0x0, 0x6, 0x8, 0x401, 0x10], [0x2, 0x6, 0x80, 0x2000000, 0xff, 0x80, 0x2e2b368, 0x6, 0xf986, 0x100, 0x5, 0x3, 0x3, 0x127, 0x8, 0xb6f4bc36, 0x583c, 0xf, 0x2, 0x3179, 0x1, 0x7, 0x4, 0x1, 0x1ff, 0x56e00000, 0x4, 0x10000, 0x1, 0x1, 0x9, 0x8001, 0x5, 0x3, 0x61, 0x2a6, 0x87b, 0x10, 0x52, 0x7, 0x5, 0x0, 0x3, 0x3ff, 0x3, 0x0, 0x46b1, 0x1, 0x4, 0xa93, 0x8001, 0x6, 0x48, 0x5, 0x6, 0x80, 0x8000, 0x5, 0x176560, 0xff85, 0xfffff6c6, 0x93f, 0x4, 0x7], [0x4, 0x2, 0x18, 0x2, 0xff, 0x9, 0x0, 0x9, 0xd39, 0x5, 0x3, 0x7, 0x7, 0x7ff, 0xa3, 0x7ffffffb, 0x52, 0x100, 0x3, 0x0, 0x1, 0x8, 0x1ff, 0x224f, 0x8, 0x3, 0xf235, 0x80000000, 0x6, 0x4, 0x8, 0x6, 0x40, 0x0, 0x4, 0x5, 0x7, 0x6, 0x8, 0x5, 0x1, 0xfff, 0x80, 0x1, 0x200, 0x101, 0xa64a, 0x2, 0x9, 0x0, 0x7, 0x69ed, 0xd, 0x1, 0x10000, 0x7fff, 0x4, 0x9, 0x9, 0x1, 0x9, 0x4, 0x1, 0x1], [0xffffffff, 0x3, 0xfffffff7, 0x10, 0x597c, 0x5, 0xea24c51, 0x2452, 0x5, 0x8, 0x7f, 0x10, 0x41a436b6, 0x2, 0x9, 0x3af95ef0, 0xec27, 0x81, 0x4, 0x4, 0x9, 0x0, 0x3, 0x8, 0x0, 0x3, 0x2, 0x9, 0x7f, 0x80000000, 0xfffffe01, 0x0, 0x4, 0x3, 0x3, 0x2, 0x0, 0x7, 0x7, 0x2, 0xd, 0x640d, 0x0, 0x0, 0x1, 0x7, 0x5, 0x5, 0x7, 0x8, 0xffffffff, 0x3, 0xffff, 0x0, 0x0, 0x5, 0x1, 0x8, 0xff, 0x5600000, 0x4, 0x1, 0x9, 0xffffff26], 0x7, ['{\x00', '\x00', ':&&\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94)

442.204173ms ago: executing program 0 (id=3983):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x2, &(0x7f0000002400))
unlink(&(0x7f0000000180)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000840)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}, {@minixdf}, {@lazytime}]}, 0xff, 0x42f, &(0x7f0000000940)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21)

441.662293ms ago: executing program 3 (id=3984):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

373.529234ms ago: executing program 1 (id=3985):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10)
sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

303.463955ms ago: executing program 1 (id=3986):
sendmmsg(0xffffffffffffffff, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0xffff, 0x0, 0x1, 0x8, 0x20002, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)

292.857075ms ago: executing program 3 (id=3987):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
ftruncate(r1, 0x2007ffc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='dlm_ast\x00', r2, 0x0, 0x2}, 0x18)
r8 = socket(0x10, 0x803, 0x0)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'tunl0\x00', r12, 0x7810, 0x1, 0x6, 0x2519de33, {{0x1a, 0x4, 0x0, 0x31, 0x68, 0x64, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast2, {[@lsrr={0x83, 0x13, 0x20, [@broadcast, @private=0xa010102, @multicast2, @broadcast]}, @cipso={0x86, 0x34, 0x3, [{0x6, 0x5, "c0e95f"}, {0x5, 0xa, "0beb988b752e575a"}, {0x6, 0xc, "57fcd546a762d944046f"}, {0x7, 0x3, 'J'}, {0x6, 0x10, "77fbe59ee1c776850e8a34dc6677"}]}, @noop, @generic={0x82, 0xa, "cc3f00ea4806e170"}]}}}}})

267.401786ms ago: executing program 0 (id=3988):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x50, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x3c, 0x1, [@m_mirred={0x38, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x9, 0x6, "040000004c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001200080008"], 0x110}, 0x1, 0x7}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x100, 0x7, &(0x7f0000000300)="5742e3109bac2e8d6422447d9bcebb17565ae5d65285f7c7aab185dd78ea2b333941f5692339ac8f6cec88ac3b003bf6016c61ab2187809e1eeadb879176b4a895ed97e52b3d160eb4b28311c18728a7601893ae7b021128f92e1c5f2a4c9f60d63c55c2271056a9a64f45c0b5f2b7754ded3e0c2fc5745ec97b1686e730a619bc17f795c80dc1a3801922d9ef82a9026587fd714de0d683a5bfc1c0b2d5058121db52e25d1cadc6d3165b79f0a633946937807faa91ad7807bb9b567bbd61c3ded8c80273", 0xc5)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea5a5ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2bd8105c3408eeb8543ebc5de0849c1f31bd94033655fd11430fd18e55f5361750c7a2a7"], 0x4, 0x25e, &(0x7f0000000900)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

0s ago: executing program 1 (id=3989):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
setitimer(0x2, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x19, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000008338ff61b60eb7e93b7d834e7c9f0e0a42d0ccb82e2210a3d70a5a7fc437398da5d6ff96c77cfa031f25a2441519e9ec49a8e71e00d7fc74d7b78f48ad6608e844cf4d1d20dbe3876e0a583ab4f02b9c322e876cef8d7552a536f3538ce1b9af75448077", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x1d00c15, 0x0, 0x6, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

78318][   T37] EXT4-fs (loop3): Total free blocks count 0
[  313.584355][   T37] EXT4-fs (loop3): Free/Dirty block details
[  313.590356][   T37] EXT4-fs (loop3): free_blocks=0
[  313.595349][   T37] EXT4-fs (loop3): dirty_blocks=4096
[  313.600725][   T37] EXT4-fs (loop3): Block reservation details
[  313.697256][T14748] loop1: detected capacity change from 0 to 128
[  313.710294][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.744394][T14751] loop4: detected capacity change from 0 to 2048
[  313.825704][T14757] netlink: 'syz.0.3448': attribute type 9 has an invalid length.
[  313.833651][T14757] netlink: 'syz.0.3448': attribute type 6 has an invalid length.
[  313.841411][T14757] netlink: 'syz.0.3448': attribute type 7 has an invalid length.
[  313.849176][T14757] netlink: 'syz.0.3448': attribute type 8 has an invalid length.
[  313.918308][T14751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.088530][T14763] loop0: detected capacity change from 0 to 256
[  314.100895][T14762] netlink: 'syz.3.3449': attribute type 1 has an invalid length.
[  314.281922][T14763] FAT-fs (loop0): Directory bread(block 1285) failed
[  314.318330][T14766] loop3: detected capacity change from 0 to 2048
[  314.331656][T14757] FAT-fs (loop0): Directory bread(block 1285) failed
[  314.343023][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.352354][T14757] FAT-fs (loop0): Directory bread(block 1285) failed
[  314.352446][T14768] loop2: detected capacity change from 0 to 2048
[  314.359132][T14757] FAT-fs (loop0): Directory bread(block 1285) failed
[  314.374778][T14766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.403409][T14768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.592034][T14781] loop1: detected capacity change from 0 to 2048
[  314.617287][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.641373][T14781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.663746][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.698171][T14787] loop4: detected capacity change from 0 to 256
[  314.829667][T14801] loop2: detected capacity change from 0 to 256
[  314.902618][T14787] FAT-fs (loop4): Directory bread(block 1285) failed
[  314.933880][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.001067][T14774] FAT-fs (loop4): Directory bread(block 1285) failed
[  315.008535][T14801] FAT-fs (loop2): Directory bread(block 1285) failed
[  315.021043][T14774] FAT-fs (loop4): Directory bread(block 1285) failed
[  315.023772][T14793] FAT-fs (loop2): Directory bread(block 1285) failed
[  315.036387][T14793] FAT-fs (loop2): Directory bread(block 1285) failed
[  315.038614][T14774] FAT-fs (loop4): Directory bread(block 1285) failed
[  315.044502][T14793] FAT-fs (loop2): Directory bread(block 1285) failed
[  315.128586][T14809] lo speed is unknown, defaulting to 1000
[  315.301199][T14817] loop4: detected capacity change from 0 to 2048
[  315.364955][T14817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.435592][T14821] loop2: detected capacity change from 0 to 128
[  315.656974][T14823] loop1: detected capacity change from 0 to 256
[  316.026067][T14828] loop0: detected capacity change from 0 to 128
[  316.267591][   T29] kauditd_printk_skb: 161 callbacks suppressed
[  316.267622][   T29] audit: type=1400 audit(1752500740.879:16488): avc:  denied  { setopt } for  pid=14829 comm="syz.2.3466" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  316.397493][   T29] audit: type=1400 audit(1752500740.909:16489): avc:  denied  { connect } for  pid=14829 comm="syz.2.3466" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  316.418196][   T29] audit: type=1400 audit(1752500740.909:16490): avc:  denied  { write } for  pid=14829 comm="syz.2.3466" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  316.451818][T14832] loop2: detected capacity change from 0 to 2048
[  316.478341][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.507090][T14832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.643310][T14823] FAT-fs (loop1): Directory bread(block 1285) failed
[  316.707557][T14844] loop0: detected capacity change from 0 to 2048
[  316.716599][T14816] FAT-fs (loop1): Directory bread(block 1285) failed
[  316.724294][T14816] FAT-fs (loop1): Directory bread(block 1285) failed
[  316.743462][T14844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.760485][T14816] FAT-fs (loop1): Directory bread(block 1285) failed
[  316.790711][T14850] loop4: detected capacity change from 0 to 256
[  316.804324][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.909574][T14850] FAT-fs (loop4): Directory bread(block 1285) failed
[  316.943440][T14855] loop2: detected capacity change from 0 to 2048
[  316.974269][T14855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.002566][T14855] FAULT_INJECTION: forcing a failure.
[  317.002566][T14855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.015828][T14855] CPU: 1 UID: 0 PID: 14855 Comm: syz.2.3473 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  317.015858][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  317.015933][T14855] Call Trace:
[  317.015942][T14855]  <TASK>
[  317.015952][T14855]  __dump_stack+0x1d/0x30
[  317.015986][T14855]  dump_stack_lvl+0xe8/0x140
[  317.016010][T14855]  dump_stack+0x15/0x1b
[  317.016030][T14855]  should_fail_ex+0x265/0x280
[  317.016088][T14855]  should_fail+0xb/0x20
[  317.016121][T14855]  should_fail_usercopy+0x1a/0x20
[  317.016161][T14855]  strncpy_from_user+0x25/0x230
[  317.016191][T14855]  ? kmem_cache_alloc_noprof+0x186/0x310
[  317.016242][T14855]  ? getname_flags+0x80/0x3b0
[  317.016264][T14855]  getname_flags+0xae/0x3b0
[  317.016287][T14855]  user_path_at+0x28/0x130
[  317.016315][T14855]  do_fchownat+0xb0/0x210
[  317.016343][T14855]  __x64_sys_chown+0x47/0x60
[  317.016387][T14855]  x64_sys_call+0x800/0x2fb0
[  317.016414][T14855]  do_syscall_64+0xd2/0x200
[  317.016435][T14855]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  317.016531][T14855]  ? clear_bhb_loop+0x40/0x90
[  317.016559][T14855]  ? clear_bhb_loop+0x40/0x90
[  317.016586][T14855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.016623][T14855] RIP: 0033:0x7fa5bc01e929
[  317.016759][T14855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.016807][T14855] RSP: 002b:00007fa5ba687038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[  317.016830][T14855] RAX: ffffffffffffffda RBX: 00007fa5bc245fa0 RCX: 00007fa5bc01e929
[  317.016844][T14855] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 00002000000003c0
[  317.016856][T14855] RBP: 00007fa5ba687090 R08: 0000000000000000 R09: 0000000000000000
[  317.016868][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.016935][T14855] R13: 0000000000000000 R14: 00007fa5bc245fa0 R15: 00007ffe38cc12a8
[  317.016953][T14855]  </TASK>
[  317.216590][T14839] FAT-fs (loop4): Directory bread(block 1285) failed
[  317.219171][T14855] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 9: comm syz.2.3473: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0
[  317.241454][T14839] FAT-fs (loop4): Directory bread(block 1285) failed
[  317.242723][T14855] EXT4-fs (loop2): Remounting filesystem read-only
[  317.252244][T14839] FAT-fs (loop4): Directory bread(block 1285) failed
[  317.283067][   T29] audit: type=1400 audit(1752500741.889:16491): avc:  denied  { compute_member } for  pid=14858 comm="syz.1.3474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  317.287118][T14859] loop1: detected capacity change from 0 to 1024
[  317.315329][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.373281][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.381980][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.383992][   T29] audit: type=1400 audit(1752500741.989:16492): avc:  denied  { read write } for  pid=14865 comm="syz.2.3475" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  317.413715][   T29] audit: type=1400 audit(1752500741.989:16493): avc:  denied  { open } for  pid=14865 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  317.437479][   T29] audit: type=1400 audit(1752500741.989:16494): avc:  denied  { ioctl } for  pid=14865 comm="syz.2.3475" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  317.445107][T14866] loop2: detected capacity change from 0 to 1024
[  317.476040][T14864] loop1: detected capacity change from 0 to 2048
[  317.483324][   T29] audit: type=1400 audit(1752500742.009:16495): avc:  denied  { create } for  pid=14865 comm="syz.2.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  317.503238][   T29] audit: type=1400 audit(1752500742.019:16496): avc:  denied  { bind } for  pid=14865 comm="syz.2.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  317.523342][T14866] EXT4-fs: dax option not supported
[  317.528281][T14869] validate_nla: 17 callbacks suppressed
[  317.528304][T14869] netlink: 'syz.4.3477': attribute type 1 has an invalid length.
[  317.538103][T14871] loop3: detected capacity change from 0 to 128
[  317.561403][   T29] audit: type=1400 audit(1752500742.149:16497): avc:  denied  { create } for  pid=14865 comm="syz.2.3475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  317.585362][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.585769][T14864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.609557][T14875] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  317.628451][T14871] loop3: detected capacity change from 0 to 512
[  317.657206][T14871] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  317.681066][T14871] EXT4-fs (loop3): 1 truncate cleaned up
[  317.688920][T14871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.714880][T14884] loop0: detected capacity change from 0 to 2048
[  317.735083][T14884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.820906][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.842696][T14893] netlink: 'syz.3.3484': attribute type 9 has an invalid length.
[  317.845149][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.850522][T14893] netlink: 'syz.3.3484': attribute type 6 has an invalid length.
[  317.867515][T14893] netlink: 'syz.3.3484': attribute type 7 has an invalid length.
[  317.875325][T14893] netlink: 'syz.3.3484': attribute type 8 has an invalid length.
[  317.899217][T14896] SELinux:  Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped).
[  317.925364][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.948895][T14899] FAULT_INJECTION: forcing a failure.
[  317.948895][T14899] name failslab, interval 1, probability 0, space 0, times 0
[  317.961702][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.0.3486 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  317.961812][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  317.961892][T14899] Call Trace:
[  317.961900][T14899]  <TASK>
[  317.961911][T14899]  __dump_stack+0x1d/0x30
[  317.961936][T14899]  dump_stack_lvl+0xe8/0x140
[  317.961961][T14899]  dump_stack+0x15/0x1b
[  317.961982][T14899]  should_fail_ex+0x265/0x280
[  317.962045][T14899]  should_failslab+0x8c/0xb0
[  317.962067][T14899]  kmem_cache_alloc_noprof+0x50/0x310
[  317.962098][T14899]  ? skb_clone+0x151/0x1f0
[  317.962199][T14899]  skb_clone+0x151/0x1f0
[  317.962222][T14899]  __netlink_deliver_tap+0x2c9/0x500
[  317.962261][T14899]  netlink_unicast+0x653/0x680
[  317.962323][T14899]  netlink_sendmsg+0x58b/0x6b0
[  317.962349][T14899]  ? __pfx_netlink_sendmsg+0x10/0x10
[  317.962373][T14899]  __sock_sendmsg+0x145/0x180
[  317.962403][T14899]  ____sys_sendmsg+0x31e/0x4e0
[  317.962519][T14899]  ___sys_sendmsg+0x17b/0x1d0
[  317.962569][T14899]  __x64_sys_sendmsg+0xd4/0x160
[  317.962655][T14899]  x64_sys_call+0x2999/0x2fb0
[  317.962741][T14899]  do_syscall_64+0xd2/0x200
[  317.962764][T14899]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  317.962797][T14899]  ? clear_bhb_loop+0x40/0x90
[  317.962824][T14899]  ? clear_bhb_loop+0x40/0x90
[  317.962920][T14899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.962965][T14899] RIP: 0033:0x7fa9f6cae929
[  317.962983][T14899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.963005][T14899] RSP: 002b:00007fa9f5317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.963023][T14899] RAX: ffffffffffffffda RBX: 00007fa9f6ed5fa0 RCX: 00007fa9f6cae929
[  317.963053][T14899] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  317.963068][T14899] RBP: 00007fa9f5317090 R08: 0000000000000000 R09: 0000000000000000
[  317.963084][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.963100][T14899] R13: 0000000000000000 R14: 00007fa9f6ed5fa0 R15: 00007ffd7ed4a1f8
[  317.963170][T14899]  </TASK>
[  318.172546][T14900] loop3: detected capacity change from 0 to 256
[  318.179505][T14899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3486'.
[  318.189078][T14900] FAT-fs (loop3): Directory bread(block 1285) failed
[  318.202717][T14893] FAT-fs (loop3): Directory bread(block 1285) failed
[  318.209627][T14893] FAT-fs (loop3): Directory bread(block 1285) failed
[  318.216482][T14893] FAT-fs (loop3): Directory bread(block 1285) failed
[  318.308894][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'.
[  318.338577][T14903] lo speed is unknown, defaulting to 1000
[  318.346883][T14907] netlink: 'syz.3.3489': attribute type 10 has an invalid length.
[  318.354818][T14907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3489'.
[  318.394105][T14907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.402965][T14907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.411745][T14907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.420562][T14907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.436763][T14907] team0: Port device geneve1 added
[  318.614619][T14923] FAULT_INJECTION: forcing a failure.
[  318.614619][T14923] name failslab, interval 1, probability 0, space 0, times 0
[  318.614726][T14921] loop4: detected capacity change from 0 to 128
[  318.627376][T14923] CPU: 1 UID: 0 PID: 14923 Comm: syz.3.3495 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  318.627453][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  318.627472][T14923] Call Trace:
[  318.627481][T14923]  <TASK>
[  318.627542][T14923]  __dump_stack+0x1d/0x30
[  318.627573][T14923]  dump_stack_lvl+0xe8/0x140
[  318.627602][T14923]  dump_stack+0x15/0x1b
[  318.627625][T14923]  should_fail_ex+0x265/0x280
[  318.627730][T14923]  ? audit_log_d_path+0x8d/0x150
[  318.627847][T14923]  should_failslab+0x8c/0xb0
[  318.627878][T14923]  __kmalloc_cache_noprof+0x4c/0x320
[  318.627919][T14923]  audit_log_d_path+0x8d/0x150
[  318.627960][T14923]  audit_log_d_path_exe+0x42/0x70
[  318.628088][T14923]  audit_log_task+0x1e9/0x250
[  318.628130][T14923]  audit_seccomp+0x61/0x100
[  318.628166][T14923]  ? __seccomp_filter+0x68c/0x10d0
[  318.628236][T14923]  __seccomp_filter+0x69d/0x10d0
[  318.628268][T14923]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  318.628315][T14923]  ? vfs_write+0x75e/0x8e0
[  318.628357][T14923]  ? __rcu_read_unlock+0x4f/0x70
[  318.628443][T14923]  ? __fget_files+0x184/0x1c0
[  318.628473][T14923]  __secure_computing+0x82/0x150
[  318.628571][T14923]  syscall_trace_enter+0xcf/0x1e0
[  318.628655][T14923]  do_syscall_64+0xac/0x200
[  318.628679][T14923]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  318.628715][T14923]  ? clear_bhb_loop+0x40/0x90
[  318.628744][T14923]  ? clear_bhb_loop+0x40/0x90
[  318.628774][T14923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.628900][T14923] RIP: 0033:0x7f8539c6e929
[  318.628922][T14923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.628949][T14923] RSP: 002b:00007f85382d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  318.628988][T14923] RAX: ffffffffffffffda RBX: 00007f8539e95fa0 RCX: 00007f8539c6e929
[  318.629006][T14923] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  318.629024][T14923] RBP: 00007f85382d7090 R08: 0000000000000000 R09: 0000000000000000
[  318.629039][T14923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.629057][T14923] R13: 0000000000000000 R14: 00007f8539e95fa0 R15: 00007fff06d9cd58
[  318.629158][T14923]  </TASK>
[  318.671419][T14926] loop3: detected capacity change from 0 to 2048
[  318.909069][T14921] loop4: detected capacity change from 0 to 512
[  318.918243][T14921] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  319.022227][T14932] loop2: detected capacity change from 0 to 128
[  319.030725][T14926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.045426][T14932] FAT-fs (loop2): bogus number of FAT structure
[  319.051793][T14932] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  319.061160][T14932] FAT-fs (loop2): Can't find a valid FAT filesystem
[  319.089954][T14921] EXT4-fs (loop4): 1 truncate cleaned up
[  319.107275][T14921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.170451][T14939] netlink: 'syz.2.3499': attribute type 9 has an invalid length.
[  319.178310][T14939] netlink: 'syz.2.3499': attribute type 6 has an invalid length.
[  319.186117][T14939] netlink: 'syz.2.3499': attribute type 7 has an invalid length.
[  319.193961][T14939] netlink: 'syz.2.3499': attribute type 8 has an invalid length.
[  319.266800][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.339475][T14946] loop2: detected capacity change from 0 to 256
[  319.343389][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.409008][T14953] loop3: detected capacity change from 0 to 1024
[  319.456520][T14953] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  319.467591][T14953] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  319.517743][T14953] JBD2: no valid journal superblock found
[  319.523622][T14953] EXT4-fs (loop3): Could not load journal inode
[  319.531498][T14946] FAT-fs (loop2): Directory bread(block 1285) failed
[  319.715090][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'.
[  319.762401][T14958] bridge_slave_1: left allmulticast mode
[  319.768193][T14958] bridge_slave_1: left promiscuous mode
[  319.773976][T14958] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.795342][T14939] FAT-fs (loop2): Directory bread(block 1285) failed
[  319.832108][T14939] FAT-fs (loop2): Directory bread(block 1285) failed
[  319.865884][T14958] bridge_slave_0: left allmulticast mode
[  319.871623][T14958] bridge_slave_0: left promiscuous mode
[  319.877499][T14958] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.913751][T14939] FAT-fs (loop2): Directory bread(block 1285) failed
[  320.012080][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'.
[  320.170929][T14977] loop3: detected capacity change from 0 to 512
[  320.197766][T14977] EXT4-fs: Ignoring removed nobh option
[  320.282908][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3511: corrupted inode contents
[  320.313033][T14977] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3511: mark_inode_dirty error
[  320.344596][T14985] loop2: detected capacity change from 0 to 2048
[  320.360028][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3511: corrupted inode contents
[  320.408853][T14985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.438592][T14977] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3511: mark_inode_dirty error
[  320.457781][T14977] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3511: Failed to acquire dquot type 0
[  320.493670][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3511: corrupted inode contents
[  320.514669][T14977] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3511: mark_inode_dirty error
[  320.541174][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3511: corrupted inode contents
[  320.553979][T14977] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3511: mark_inode_dirty error
[  320.576107][T14998] loop1: detected capacity change from 0 to 256
[  320.596005][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3511: corrupted inode contents
[  320.619385][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.644428][T14977] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  320.663692][T14977] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3511: corrupted inode contents
[  320.674118][T14999] lo speed is unknown, defaulting to 1000
[  320.693330][T15001] loop2: detected capacity change from 0 to 512
[  320.703312][T14977] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3511: mark_inode_dirty error
[  320.731215][T14977] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  320.772686][T14977] EXT4-fs (loop3): 1 truncate cleaned up
[  320.778730][T14977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.829603][T14977] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.846730][T15001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.849029][T15006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15006 comm=syz.0.3518
[  320.872365][T15001] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.903532][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.943578][T14977] FAULT_INJECTION: forcing a failure.
[  320.943578][T14977] name failslab, interval 1, probability 0, space 0, times 0
[  320.956293][T14977] CPU: 0 UID: 0 PID: 14977 Comm: syz.3.3511 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  320.956325][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.956339][T14977] Call Trace:
[  320.956347][T14977]  <TASK>
[  320.956355][T14977]  __dump_stack+0x1d/0x30
[  320.956381][T14977]  dump_stack_lvl+0xe8/0x140
[  320.956403][T14977]  dump_stack+0x15/0x1b
[  320.956447][T14977]  should_fail_ex+0x265/0x280
[  320.956563][T14977]  should_failslab+0x8c/0xb0
[  320.956590][T14977]  kmem_cache_alloc_noprof+0x50/0x310
[  320.956653][T14977]  ? getname_flags+0x80/0x3b0
[  320.956682][T14977]  getname_flags+0x80/0x3b0
[  320.956708][T14977]  __x64_sys_lgetxattr+0xfd/0x140
[  320.956801][T14977]  x64_sys_call+0x1b0e/0x2fb0
[  320.956826][T14977]  do_syscall_64+0xd2/0x200
[  320.956856][T14977]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  320.956888][T14977]  ? clear_bhb_loop+0x40/0x90
[  320.956915][T14977]  ? clear_bhb_loop+0x40/0x90
[  320.956971][T14977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.957044][T14977] RIP: 0033:0x7f8539c6e929
[  320.957062][T14977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.957081][T14977] RSP: 002b:00007f85382d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  320.957105][T14977] RAX: ffffffffffffffda RBX: 00007f8539e95fa0 RCX: 00007f8539c6e929
[  320.957120][T14977] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000
[  320.957192][T14977] RBP: 00007f85382d7090 R08: 0000000000000000 R09: 0000000000000000
[  320.957212][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.957223][T14977] R13: 0000000000000000 R14: 00007f8539e95fa0 R15: 00007fff06d9cd58
[  320.957242][T14977]  </TASK>
[  321.219422][T15015] sd 0:0:1:0: device reset
[  321.228155][T14998] FAT-fs (loop1): Directory bread(block 1285) failed
[  321.244195][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.253682][T14993] FAT-fs (loop1): Directory bread(block 1285) failed
[  321.260483][T14993] FAT-fs (loop1): Directory bread(block 1285) failed
[  321.269552][T14993] FAT-fs (loop1): Directory bread(block 1285) failed
[  321.276591][   T29] kauditd_printk_skb: 121 callbacks suppressed
[  321.276608][   T29] audit: type=1326 audit(1752500745.879:16617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.306403][   T29] audit: type=1326 audit(1752500745.879:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.330078][   T29] audit: type=1326 audit(1752500745.879:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.355775][T15015] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3520'.
[  321.356260][   T29] audit: type=1326 audit(1752500745.889:16620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.388401][   T29] audit: type=1326 audit(1752500745.889:16621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.412085][   T29] audit: type=1326 audit(1752500745.889:16622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.435852][   T29] audit: type=1326 audit(1752500745.969:16623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.459514][   T29] audit: type=1326 audit(1752500745.969:16624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.483243][   T29] audit: type=1326 audit(1752500745.969:16625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.506808][   T29] audit: type=1326 audit(1752500745.969:16626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15014 comm="syz.2.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5bc01e929 code=0x7ffc0000
[  321.528955][T15019] loop3: detected capacity change from 0 to 2048
[  321.584405][T15019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.807368][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.834356][T15032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.843381][T15032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.852360][T15032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.861366][T15032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.923313][T15035] tipc: Started in network mode
[  321.928319][T15035] tipc: Node identity 62f48f59f361, cluster identity 4711
[  321.935783][T15035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.943177][T15033] tipc: Resetting bearer <eth:syzkaller0>
[  321.975291][T15033] tipc: Disabling bearer <eth:syzkaller0>
[  322.228436][T15050] loop3: detected capacity change from 0 to 2048
[  322.244493][T15052] loop0: detected capacity change from 0 to 2048
[  322.257226][T15050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.320578][T15052] Alternate GPT is invalid, using primary GPT.
[  322.327437][T15052]  loop0: p2 p3 p7
[  322.350469][T15060] lo speed is unknown, defaulting to 1000
[  322.549771][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.073807][T15071] Restarting kernel threads ...
[  323.096274][T15071] Done restarting kernel threads.
[  323.131830][T15077] validate_nla: 8 callbacks suppressed
[  323.131852][T15077] netlink: 'syz.0.3538': attribute type 21 has an invalid length.
[  323.493562][T15084] netlink: 'syz.0.3541': attribute type 1 has an invalid length.
[  323.581955][T15087] loop1: detected capacity change from 0 to 512
[  323.611148][T15087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.637709][T15090] loop3: detected capacity change from 0 to 2048
[  323.667496][T15087] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.709396][T15090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.077159][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.285583][T15107] netlink: 'syz.4.3547': attribute type 9 has an invalid length.
[  324.293438][T15107] netlink: 'syz.4.3547': attribute type 6 has an invalid length.
[  324.301259][T15107] netlink: 'syz.4.3547': attribute type 7 has an invalid length.
[  324.309032][T15107] netlink: 'syz.4.3547': attribute type 8 has an invalid length.
[  324.357985][T15112] FAULT_INJECTION: forcing a failure.
[  324.357985][T15112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.371159][T15112] CPU: 1 UID: 0 PID: 15112 Comm: syz.0.3549 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  324.371206][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  324.371227][T15112] Call Trace:
[  324.371236][T15112]  <TASK>
[  324.371244][T15112]  __dump_stack+0x1d/0x30
[  324.371272][T15112]  dump_stack_lvl+0xe8/0x140
[  324.371300][T15112]  dump_stack+0x15/0x1b
[  324.371389][T15112]  should_fail_ex+0x265/0x280
[  324.371431][T15112]  should_fail+0xb/0x20
[  324.371467][T15112]  should_fail_usercopy+0x1a/0x20
[  324.371550][T15112]  _copy_from_user+0x1c/0xb0
[  324.371574][T15112]  do_sock_getsockopt+0xf1/0x240
[  324.371618][T15112]  __x64_sys_getsockopt+0x11e/0x1a0
[  324.371729][T15112]  x64_sys_call+0x12aa/0x2fb0
[  324.371868][T15112]  do_syscall_64+0xd2/0x200
[  324.371888][T15112]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  324.371922][T15112]  ? clear_bhb_loop+0x40/0x90
[  324.371952][T15112]  ? clear_bhb_loop+0x40/0x90
[  324.372008][T15112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.372034][T15112] RIP: 0033:0x7fa9f6cae929
[  324.372103][T15112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.372135][T15112] RSP: 002b:00007fa9f5317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  324.372160][T15112] RAX: ffffffffffffffda RBX: 00007fa9f6ed5fa0 RCX: 00007fa9f6cae929
[  324.372177][T15112] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003
[  324.372193][T15112] RBP: 00007fa9f5317090 R08: 0000200000000300 R09: 0000000000000000
[  324.372211][T15112] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  324.372227][T15112] R13: 0000000000000000 R14: 00007fa9f6ed5fa0 R15: 00007ffd7ed4a1f8
[  324.372306][T15112]  </TASK>
[  324.596183][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.624164][T15114] loop4: detected capacity change from 0 to 256
[  324.648875][T15117] loop1: detected capacity change from 0 to 2048
[  324.688990][T15117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.777238][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.787364][T15114] FAT-fs (loop4): Directory bread(block 1285) failed
[  324.815355][T15125] sd 0:0:1:0: device reset
[  324.827644][T15107] FAT-fs (loop4): Directory bread(block 1285) failed
[  324.844050][T15125] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3553'.
[  324.852329][T15107] FAT-fs (loop4): Directory bread(block 1285) failed
[  324.880244][T15107] FAT-fs (loop4): Directory bread(block 1285) failed
[  324.975495][T15123] netlink: 'syz.3.3552': attribute type 29 has an invalid length.
[  325.011557][T15123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=15123 comm=syz.3.3552
[  325.149960][T15137] loop0: detected capacity change from 0 to 128
[  325.657199][T15143] loop4: detected capacity change from 0 to 2048
[  325.683613][T15143] EXT4-fs: Ignoring removed mblk_io_submit option
[  325.688985][T15152] loop3: detected capacity change from 0 to 1024
[  325.712926][T15149] lo speed is unknown, defaulting to 1000
[  325.714976][T15143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.719228][T15152] EXT4-fs: Ignoring removed nobh option
[  325.736492][T15152] EXT4-fs: Ignoring removed bh option
[  325.803654][T15152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.156646][T15162] sd 0:0:1:0: device reset
[  326.242085][T15162] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3564'.
[  326.296874][T15165] loop2: detected capacity change from 0 to 1024
[  326.303067][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.325906][T15167] netlink: 'syz.0.3567': attribute type 1 has an invalid length.
[  326.334290][T15165] EXT4-fs: Ignoring removed nobh option
[  326.339961][T15165] EXT4-fs: Ignoring removed bh option
[  326.348668][   T29] kauditd_printk_skb: 214 callbacks suppressed
[  326.348684][   T29] audit: type=1326 audit(1752500750.959:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.406033][ T3425] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set
[  326.438367][T15171] loop3: detected capacity change from 0 to 2048
[  326.453799][T15171] EXT4-fs: Ignoring removed mblk_io_submit option
[  326.461651][T15165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.482319][ T3425] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  326.494910][ T3425] EXT4-fs (loop4): This should not happen!! Data will be lost
[  326.494910][ T3425] 
[  326.506013][   T29] audit: type=1326 audit(1752500750.959:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.529748][   T29] audit: type=1326 audit(1752500750.959:16843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.553363][   T29] audit: type=1326 audit(1752500750.959:16844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.576958][   T29] audit: type=1326 audit(1752500751.069:16845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.600798][   T29] audit: type=1326 audit(1752500751.069:16846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15168 comm="syz.3.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8539c6e929 code=0x7ffc0000
[  326.606485][ T3439] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 609 with error 28
[  326.637393][ T3439] EXT4-fs (loop4): This should not happen!! Data will be lost
[  326.637393][ T3439] 
[  326.647065][ T3439] EXT4-fs (loop4): Total free blocks count 0
[  326.653107][ T3439] EXT4-fs (loop4): Free/Dirty block details
[  326.659055][ T3439] EXT4-fs (loop4): free_blocks=0
[  326.664052][ T3439] EXT4-fs (loop4): dirty_blocks=624
[  326.669282][ T3439] EXT4-fs (loop4): Block reservation details
[  326.677885][T15174] FAULT_INJECTION: forcing a failure.
[  326.677885][T15174] name failslab, interval 1, probability 0, space 0, times 0
[  326.690591][T15174] CPU: 1 UID: 0 PID: 15174 Comm: syz.2.3566 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  326.690621][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.690637][T15174] Call Trace:
[  326.690645][T15174]  <TASK>
[  326.690655][T15174]  __dump_stack+0x1d/0x30
[  326.690680][T15174]  dump_stack_lvl+0xe8/0x140
[  326.690704][T15174]  dump_stack+0x15/0x1b
[  326.690795][T15174]  should_fail_ex+0x265/0x280
[  326.690832][T15174]  should_failslab+0x8c/0xb0
[  326.690857][T15174]  __kmalloc_noprof+0xa5/0x3e0
[  326.690882][T15174]  ? ext4_convert_inline_data_nolock+0x8d/0x4c0
[  326.690972][T15174]  ext4_convert_inline_data_nolock+0x8d/0x4c0
[  326.691033][T15174]  ext4_convert_inline_data+0x2b8/0x350
[  326.691134][T15174]  ext4_page_mkwrite+0x1a9/0xba0
[  326.691172][T15174]  do_wp_page+0xe5a/0x2400
[  326.691197][T15174]  ? mntput_no_expire+0x6f/0x3c0
[  326.691225][T15174]  ? __rcu_read_lock+0x37/0x50
[  326.691248][T15174]  ? pte_offset_map_rw_nolock+0x199/0x1f0
[  326.691337][T15174]  handle_mm_fault+0x77d/0x2be0
[  326.691406][T15174]  ? __rcu_read_unlock+0x4f/0x70
[  326.691444][T15174]  do_user_addr_fault+0x3fe/0x1090
[  326.691486][T15174]  ? __rcu_read_unlock+0x4f/0x70
[  326.691520][T15174]  exc_page_fault+0x62/0xa0
[  326.691556][T15174]  asm_exc_page_fault+0x26/0x30
[  326.691578][T15174] RIP: 0010:__put_user_4+0xd/0x20
[  326.691616][T15174] Code: 66 89 01 31 c9 0f 01 ca e9 d0 7d 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  326.691682][T15174] RSP: 0018:ffffc900015afe78 EFLAGS: 00050206
[  326.691701][T15174] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000200000000000
[  326.691717][T15174] RDX: ffff8881145230c0 RSI: 0000000000000007 RDI: 0000000000000000
[  326.691731][T15174] RBP: 0000000000000006 R08: 0001ffff86848aff R09: 0000000000000000
[  326.691742][T15174] R10: 000188810a45d5c0 R11: 000188810a45d5c7 R12: 0000200000000000
[  326.691754][T15174] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  326.691772][T15174]  __sys_socketpair+0xa6/0x430
[  326.691845][T15174]  ? ksys_write+0x192/0x1a0
[  326.691922][T15174]  __x64_sys_socketpair+0x52/0x60
[  326.691955][T15174]  x64_sys_call+0x23f2/0x2fb0
[  326.691982][T15174]  do_syscall_64+0xd2/0x200
[  326.692003][T15174]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  326.692098][T15174]  ? clear_bhb_loop+0x40/0x90
[  326.692167][T15174]  ? clear_bhb_loop+0x40/0x90
[  326.692270][T15174]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.692294][T15174] RIP: 0033:0x7fa5bc01e929
[  326.692311][T15174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.692332][T15174] RSP: 002b:00007fa5ba666038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  326.692355][T15174] RAX: ffffffffffffffda RBX: 00007fa5bc246080 RCX: 00007fa5bc01e929
[  326.692388][T15174] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[  326.692403][T15174] RBP: 00007fa5ba666090 R08: 0000000000000000 R09: 0000000000000000
[  326.692419][T15174] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.692435][T15174] R13: 0000000000000001 R14: 00007fa5bc246080 R15: 00007ffe38cc12a8
[  326.692459][T15174]  </TASK>
[  327.012736][T15171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.072170][   T29] audit: type=1326 audit(1752500751.679:16847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15181 comm="syz.4.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8924e929 code=0x7ffc0000
[  327.095988][   T29] audit: type=1326 audit(1752500751.679:16848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15181 comm="syz.4.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee8924e929 code=0x7ffc0000
[  327.119603][   T29] audit: type=1326 audit(1752500751.679:16849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15181 comm="syz.4.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8924e929 code=0x7ffc0000
[  327.130670][T15185] loop4: detected capacity change from 0 to 2048
[  327.143256][   T29] audit: type=1326 audit(1752500751.679:16850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15181 comm="syz.4.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fee8924e929 code=0x7ffc0000
[  327.182588][T15185] EXT4-fs: Ignoring removed mblk_io_submit option
[  327.201234][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.254454][T15189] loop0: detected capacity change from 0 to 2048
[  327.294833][T15193] FAULT_INJECTION: forcing a failure.
[  327.294833][T15193] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.308041][T15193] CPU: 1 UID: 0 PID: 15193 Comm: syz.2.3574 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  327.308073][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  327.308119][T15193] Call Trace:
[  327.308128][T15193]  <TASK>
[  327.308138][T15193]  __dump_stack+0x1d/0x30
[  327.308165][T15193]  dump_stack_lvl+0xe8/0x140
[  327.308204][T15193]  dump_stack+0x15/0x1b
[  327.308246][T15193]  should_fail_ex+0x265/0x280
[  327.308284][T15193]  should_fail+0xb/0x20
[  327.308368][T15193]  should_fail_usercopy+0x1a/0x20
[  327.308404][T15193]  _copy_from_user+0x1c/0xb0
[  327.308429][T15193]  ___sys_sendmsg+0xc1/0x1d0
[  327.308604][T15193]  __x64_sys_sendmsg+0xd4/0x160
[  327.308642][T15193]  x64_sys_call+0x2999/0x2fb0
[  327.308667][T15193]  do_syscall_64+0xd2/0x200
[  327.308690][T15193]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  327.308724][T15193]  ? clear_bhb_loop+0x40/0x90
[  327.308812][T15193]  ? clear_bhb_loop+0x40/0x90
[  327.308841][T15193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.308868][T15193] RIP: 0033:0x7fa5bc01e929
[  327.308887][T15193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.308911][T15193] RSP: 002b:00007fa5ba687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.308982][T15193] RAX: ffffffffffffffda RBX: 00007fa5bc245fa0 RCX: 00007fa5bc01e929
[  327.308994][T15193] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000004
[  327.309010][T15193] RBP: 00007fa5ba687090 R08: 0000000000000000 R09: 0000000000000000
[  327.309026][T15193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.309066][T15193] R13: 0000000000000000 R14: 00007fa5bc245fa0 R15: 00007ffe38cc12a8
[  327.309091][T15193]  </TASK>
[  327.514634][ T3439] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set
[  327.629514][ T3439] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  327.642001][ T3439] EXT4-fs (loop3): This should not happen!! Data will be lost
[  327.642001][ T3439] 
[  327.653757][ T3439] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 333 with error 28
[  327.666627][ T3439] EXT4-fs (loop3): This should not happen!! Data will be lost
[  327.666627][ T3439] 
[  327.676382][ T3439] EXT4-fs (loop3): Total free blocks count 0
[  327.682409][ T3439] EXT4-fs (loop3): Free/Dirty block details
[  327.688427][ T3439] EXT4-fs (loop3): free_blocks=0
[  327.693583][ T3439] EXT4-fs (loop3): dirty_blocks=336
[  327.698856][ T3439] EXT4-fs (loop3): Block reservation details
[  327.816510][T15200] loop2: detected capacity change from 0 to 128
[  328.301895][   T31] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 234: padding at end of block bitmap is not set
[  328.341204][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  328.353741][   T31] EXT4-fs (loop4): This should not happen!! Data will be lost
[  328.353741][   T31] 
[  328.431477][T15204] loop3: detected capacity change from 0 to 2048
[  328.441811][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  328.444513][T15206] loop0: detected capacity change from 0 to 512
[  328.454680][   T31] EXT4-fs (loop4): This should not happen!! Data will be lost
[  328.454680][   T31] 
[  328.470669][   T31] EXT4-fs (loop4): Total free blocks count 0
[  328.477095][   T31] EXT4-fs (loop4): Free/Dirty block details
[  328.483041][   T31] EXT4-fs (loop4): free_blocks=0
[  328.488033][   T31] EXT4-fs (loop4): dirty_blocks=4096
[  328.493402][   T31] EXT4-fs (loop4): Block reservation details
[  328.499494][   T31] EXT4-fs (loop4): i_reserved_data_blocks=256
[  328.506542][T15206] EXT4-fs: Ignoring removed nobh option
[  328.547740][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3578: corrupted inode contents
[  328.573856][T15206] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3578: mark_inode_dirty error
[  328.634160][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3578: corrupted inode contents
[  328.679021][T15206] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3578: mark_inode_dirty error
[  328.700700][T15206] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3578: Failed to acquire dquot type 0
[  328.713072][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3578: corrupted inode contents
[  328.732711][T15206] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3578: mark_inode_dirty error
[  328.791516][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3578: corrupted inode contents
[  328.810749][T15224] loop1: detected capacity change from 0 to 1024
[  328.817982][T15224] EXT4-fs: Ignoring removed nobh option
[  328.827315][T15206] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3578: mark_inode_dirty error
[  328.829446][T15224] EXT4-fs: Ignoring removed bh option
[  328.853847][T15225] lo speed is unknown, defaulting to 1000
[  328.880911][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3578: corrupted inode contents
[  328.896743][T15206] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  328.896776][T15219] loop4: detected capacity change from 0 to 1024
[  328.922231][T15206] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3578: corrupted inode contents
[  328.938805][T15224] program syz.1.3583 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  328.948612][T15224] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  328.979386][T15206] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3578: mark_inode_dirty error
[  328.991226][T15206] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  329.003933][T15219] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.016667][T15206] EXT4-fs (loop0): 1 truncate cleaned up
[  329.027360][T15206] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.043923][T15234] loop3: detected capacity change from 0 to 128
[  329.063783][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'.
[  329.085272][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3578'.
[  329.098574][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'.
[  329.111870][T15237] sd 0:0:1:0: device reset
[  329.189906][T15237] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3586'.
[  329.349309][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'.
[  329.374343][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'.
[  329.392981][T15243] loop3: detected capacity change from 0 to 1024
[  329.423732][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'.
[  329.459910][T15243] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  329.470929][T15243] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.3587: missing EA_INODE flag
[  329.486159][T15252] netlink: 'syz.2.3592': attribute type 9 has an invalid length.
[  329.494015][T15252] netlink: 'syz.2.3592': attribute type 6 has an invalid length.
[  329.501183][T15243] EXT4-fs (loop3): Remounting filesystem read-only
[  329.501914][T15252] netlink: 'syz.2.3592': attribute type 7 has an invalid length.
[  329.501930][T15252] netlink: 'syz.2.3592': attribute type 8 has an invalid length.
[  329.539782][T15257] netlink: 'syz.1.3593': attribute type 9 has an invalid length.
[  329.547695][T15257] netlink: 'syz.1.3593': attribute type 6 has an invalid length.
[  329.555493][T15257] netlink: 'syz.1.3593': attribute type 7 has an invalid length.
[  329.563346][T15257] netlink: 'syz.1.3593': attribute type 8 has an invalid length.
[  329.628883][T15261] loop2: detected capacity change from 0 to 256
[  329.715449][T15267] loop1: detected capacity change from 0 to 256
[  329.769119][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'.
[  329.825548][T15261] FAT-fs (loop2): Directory bread(block 1285) failed
[  329.859422][T15262] Restarting kernel threads ...
[  329.869092][T15262] Done restarting kernel threads.
[  329.874497][T15262] netlink: 'syz.0.3594': attribute type 21 has an invalid length.
[  329.914785][T15267] FAT-fs (loop1): Directory bread(block 1285) failed
[  329.916844][T15252] FAT-fs (loop2): Directory bread(block 1285) failed
[  329.928943][T15252] FAT-fs (loop2): Directory bread(block 1285) failed
[  329.936029][T15252] FAT-fs (loop2): Directory bread(block 1285) failed
[  329.972606][T15257] FAT-fs (loop1): Directory bread(block 1285) failed
[  329.979535][T15257] FAT-fs (loop1): Directory bread(block 1285) failed
[  330.015140][T15257] FAT-fs (loop1): Directory bread(block 1285) failed
[  330.049510][T15276] sd 0:0:1:0: device reset
[  330.057916][T15276] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3598'.
[  330.094653][T15278] netlink: 'syz.3.3599': attribute type 1 has an invalid length.
[  330.123789][T15281] loop1: detected capacity change from 0 to 128
[  330.135974][T15281] loop1: detected capacity change from 0 to 512
[  330.149016][T15281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  330.185466][T15287] lo speed is unknown, defaulting to 1000
[  330.313154][T15281] EXT4-fs (loop1): 1 truncate cleaned up
[  330.385319][T15293] loop2: detected capacity change from 0 to 1024
[  330.405338][T15293] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.547318][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'.
[  330.628993][T15299] lo speed is unknown, defaulting to 1000
[  331.093844][T15302] loop1: detected capacity change from 0 to 512
[  331.124973][T15302] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.430588][   T29] kauditd_printk_skb: 153 callbacks suppressed
[  331.430607][   T29] audit: type=1400 audit(1752500756.039:17002): avc:  denied  { create } for  pid=15301 comm="syz.1.3606" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  331.549419][T15308] loop0: detected capacity change from 0 to 2048
[  331.883451][T15316] Restarting kernel threads ...
[  331.893394][T15316] Done restarting kernel threads.
[  331.965312][T15322] loop4: detected capacity change from 0 to 256
[  332.023049][T15324] loop3: detected capacity change from 0 to 512
[  332.083210][T15324] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.211843][T15322] FAT-fs (loop4): Directory bread(block 1285) failed
[  332.221150][T15328] sd 0:0:1:0: device reset
[  332.228490][T15328] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3612'.
[  332.281853][   T29] audit: type=1326 audit(1752500756.829:17003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.302319][T15319] FAT-fs (loop4): Directory bread(block 1285) failed
[  332.305660][   T29] audit: type=1326 audit(1752500756.829:17004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9f6cad290 code=0x7ffc0000
[  332.322409][T15319] FAT-fs (loop4): Directory bread(block 1285) failed
[  332.335789][   T29] audit: type=1326 audit(1752500756.829:17005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.363531][T15319] FAT-fs (loop4): Directory bread(block 1285) failed
[  332.366150][   T29] audit: type=1326 audit(1752500756.829:17006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.396433][   T29] audit: type=1326 audit(1752500756.839:17007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.420117][   T29] audit: type=1326 audit(1752500756.839:17008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.443880][   T29] audit: type=1326 audit(1752500756.839:17009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.467561][   T29] audit: type=1326 audit(1752500756.839:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.491287][   T29] audit: type=1326 audit(1752500756.839:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15327 comm="syz.0.3612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  332.673134][T15340] loop4: detected capacity change from 0 to 2048
[  332.742797][T15342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.750550][T15341] tipc: Resetting bearer <eth:syzkaller0>
[  332.764652][T15341] tipc: Disabling bearer <eth:syzkaller0>
[  333.193934][T15361] loop0: detected capacity change from 0 to 512
[  333.223857][T15361] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  333.431019][T15366] FAULT_INJECTION: forcing a failure.
[  333.431019][T15366] name failslab, interval 1, probability 0, space 0, times 0
[  333.443791][T15366] CPU: 0 UID: 0 PID: 15366 Comm: syz.0.3624 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  333.443820][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.443863][T15366] Call Trace:
[  333.443880][T15366]  <TASK>
[  333.443890][T15366]  __dump_stack+0x1d/0x30
[  333.443912][T15366]  dump_stack_lvl+0xe8/0x140
[  333.443932][T15366]  dump_stack+0x15/0x1b
[  333.443948][T15366]  should_fail_ex+0x265/0x280
[  333.444061][T15366]  should_failslab+0x8c/0xb0
[  333.444116][T15366]  kmem_cache_alloc_node_noprof+0x57/0x320
[  333.444146][T15366]  ? __alloc_skb+0x101/0x320
[  333.444182][T15366]  __alloc_skb+0x101/0x320
[  333.444227][T15366]  tipc_msg_create+0x47/0x230
[  333.444267][T15366]  ? tipc_node_remove_conn+0x1ba/0x270
[  333.444356][T15366]  __tipc_shutdown+0x8b0/0xbf0
[  333.444442][T15366]  ? __pfx_woken_wake_function+0x10/0x10
[  333.444479][T15366]  tipc_release+0x67/0xd10
[  333.444504][T15366]  ? task_work_add+0x268/0x2c0
[  333.444584][T15366]  sock_close+0x68/0x150
[  333.444606][T15366]  ? __pfx_sock_close+0x10/0x10
[  333.444633][T15366]  __fput+0x29b/0x650
[  333.444747][T15366]  ____fput+0x1c/0x30
[  333.444781][T15366]  task_work_run+0x131/0x1a0
[  333.444868][T15366]  exit_to_user_mode_loop+0xe4/0x100
[  333.444908][T15366]  do_syscall_64+0x1d6/0x200
[  333.444930][T15366]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  333.444963][T15366]  ? clear_bhb_loop+0x40/0x90
[  333.444988][T15366]  ? clear_bhb_loop+0x40/0x90
[  333.445076][T15366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.445130][T15366] RIP: 0033:0x7fa9f6cae929
[  333.445149][T15366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.445174][T15366] RSP: 002b:00007fa9f5317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000021
[  333.445201][T15366] RAX: 0000000000000005 RBX: 00007fa9f6ed5fa0 RCX: 00007fa9f6cae929
[  333.445270][T15366] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  333.445286][T15366] RBP: 00007fa9f5317090 R08: 0000000000000000 R09: 0000000000000000
[  333.445303][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.445319][T15366] R13: 0000000000000000 R14: 00007fa9f6ed5fa0 R15: 00007ffd7ed4a1f8
[  333.445348][T15366]  </TASK>
[  333.767642][T15359] Restarting kernel threads ...
[  333.773977][T15359] Done restarting kernel threads.
[  333.813544][T15375] loop1: detected capacity change from 0 to 2048
[  333.913507][T15383] loop4: detected capacity change from 0 to 2048
[  333.948249][T15384] loop0: detected capacity change from 0 to 256
[  334.293760][T15384] FAT-fs (loop0): Directory bread(block 1285) failed
[  334.491895][T15370] FAT-fs (loop0): Directory bread(block 1285) failed
[  334.532472][T15370] FAT-fs (loop0): Directory bread(block 1285) failed
[  334.539238][T15370] FAT-fs (loop0): Directory bread(block 1285) failed
[  334.598095][T15407] sg_read: process 426 (syz.1.3636) changed security contexts after opening file descriptor, this is not allowed.
[  334.621517][T15408] loop4: detected capacity change from 0 to 2048
[  334.664891][T15412] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  334.779299][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3639'.
[  334.809602][T15420] loop2: detected capacity change from 0 to 128
[  334.842258][T15415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3638'.
[  334.903653][T15420] loop2: detected capacity change from 0 to 512
[  334.918195][T15430] loop1: detected capacity change from 0 to 1024
[  334.925134][T15420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  334.945886][T15427] loop0: detected capacity change from 0 to 2048
[  334.954767][T15437] loop3: detected capacity change from 0 to 1024
[  334.963855][T15420] EXT4-fs (loop2): 1 truncate cleaned up
[  334.972736][T15430] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  335.012171][T15437] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  335.084086][T15454] validate_nla: 11 callbacks suppressed
[  335.084099][T15454] netlink: 'syz.3.3649': attribute type 9 has an invalid length.
[  335.097505][T15454] netlink: 'syz.3.3649': attribute type 6 has an invalid length.
[  335.105306][T15454] netlink: 'syz.3.3649': attribute type 7 has an invalid length.
[  335.113296][T15454] netlink: 'syz.3.3649': attribute type 8 has an invalid length.
[  335.159018][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'.
[  335.206114][T15459] loop0: detected capacity change from 0 to 2048
[  335.265551][T15471] loop3: detected capacity change from 0 to 256
[  335.389117][T15471] FAT-fs (loop3): Directory bread(block 1285) failed
[  335.396549][T15470] loop2: detected capacity change from 0 to 2048
[  335.404352][T15470] EXT4-fs: Ignoring removed mblk_io_submit option
[  335.420885][T15454] FAT-fs (loop3): Directory bread(block 1285) failed
[  335.428450][T15454] FAT-fs (loop3): Directory bread(block 1285) failed
[  335.436136][T15454] FAT-fs (loop3): Directory bread(block 1285) failed
[  335.505535][T15480] netlink: 'syz.1.3659': attribute type 9 has an invalid length.
[  335.513404][T15480] netlink: 'syz.1.3659': attribute type 6 has an invalid length.
[  335.521157][T15480] netlink: 'syz.1.3659': attribute type 7 has an invalid length.
[  335.529041][T15480] netlink: 'syz.1.3659': attribute type 8 has an invalid length.
[  335.531570][T15478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3657'.
[  335.689763][T15488] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.697153][T15488] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.727259][T15493] loop1: detected capacity change from 0 to 256
[  335.744343][T15495] loop3: detected capacity change from 0 to 128
[  335.804471][T15488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.827061][T15488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.943585][T15488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.952757][T15488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.961747][T15488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  335.970868][T15488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  336.074855][T15493] FAT-fs (loop1): Directory bread(block 1285) failed
[  336.092674][   T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 234: padding at end of block bitmap is not set
[  336.104778][T15480] FAT-fs (loop1): Directory bread(block 1285) failed
[  336.127355][T15480] FAT-fs (loop1): Directory bread(block 1285) failed
[  336.134546][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  336.139048][T15480] FAT-fs (loop1): Directory bread(block 1285) failed
[  336.146895][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  336.146895][   T37] 
[  336.170499][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  336.170527][T15503] loop0: detected capacity change from 0 to 128
[  336.185621][T15503] loop0: detected capacity change from 0 to 512
[  336.189751][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  336.189751][   T37] 
[  336.189771][   T37] EXT4-fs (loop2): Total free blocks count 0
[  336.211844][   T37] EXT4-fs (loop2): Free/Dirty block details
[  336.217932][   T37] EXT4-fs (loop2): free_blocks=0
[  336.222944][   T37] EXT4-fs (loop2): dirty_blocks=4096
[  336.228255][   T37] EXT4-fs (loop2): Block reservation details
[  336.234393][   T37] EXT4-fs (loop2): i_reserved_data_blocks=256
[  336.249174][T15503] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  336.285797][T15503] EXT4-fs (loop0): 1 truncate cleaned up
[  336.444358][   T29] kauditd_printk_skb: 179 callbacks suppressed
[  336.444375][   T29] audit: type=1400 audit(1752500761.059:17191): avc:  denied  { create } for  pid=15518 comm="syz.0.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  336.471408][   T29] audit: type=1400 audit(1752500761.069:17192): avc:  denied  { create } for  pid=15518 comm="syz.0.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  336.491044][   T29] audit: type=1400 audit(1752500761.079:17193): avc:  denied  { open } for  pid=15518 comm="syz.0.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  336.510551][   T29] audit: type=1400 audit(1752500761.079:17194): avc:  denied  { kernel } for  pid=15518 comm="syz.0.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  336.536877][T15523] loop1: detected capacity change from 0 to 128
[  336.567559][T15519] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3671'.
[  336.599703][   T29] audit: type=1400 audit(1752500761.109:17195): avc:  denied  { prog_run } for  pid=15516 comm="syz.4.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  336.618990][   T29] audit: type=1400 audit(1752500761.149:17196): avc:  denied  { read } for  pid=15522 comm="syz.1.3675" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  336.640362][   T29] audit: type=1400 audit(1752500761.149:17197): avc:  denied  { open } for  pid=15522 comm="syz.1.3675" path="net:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  336.663803][   T29] audit: type=1400 audit(1752500761.149:17198): avc:  denied  { create } for  pid=15522 comm="syz.1.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  336.683931][   T29] audit: type=1400 audit(1752500761.159:17199): avc:  denied  { remount } for  pid=15522 comm="syz.1.3675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  336.704051][   T29] audit: type=1400 audit(1752500761.169:17200): avc:  denied  { bind } for  pid=15518 comm="syz.0.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  337.086354][T15536] loop3: detected capacity change from 0 to 512
[  337.125541][T15536] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.359822][T15540] loop4: detected capacity change from 0 to 512
[  337.453636][T15540] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.057431][T15565] loop0: detected capacity change from 0 to 2048
[  338.617800][T15575] lo speed is unknown, defaulting to 1000
[  338.839358][T15580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3692'.
[  338.885799][T15581] lo speed is unknown, defaulting to 1000
[  338.968493][T15584] loop0: detected capacity change from 0 to 512
[  339.122582][T15584] EXT4-fs: quotafile must be on filesystem root
[  339.230459][T15592] loop0: detected capacity change from 0 to 256
[  339.266089][T15593] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  339.344491][T15592] Q�6��\b��Y�4��: renamed from lo
[  339.369009][T15592] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  339.379269][T15592] FAT-fs (loop0): Filesystem has been set read-only
[  339.400818][T15592] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  339.429939][T15592] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  339.481905][T15605] loop0: detected capacity change from 0 to 512
[  339.536033][T15605] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.928576][T15611] loop4: detected capacity change from 0 to 1024
[  339.993560][T15611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  340.017855][T15611] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3701: missing EA_INODE flag
[  340.093240][T15611] EXT4-fs (loop4): Remounting filesystem read-only
[  340.174683][T12995] EXT4-fs unmount: 57 callbacks suppressed
[  340.174703][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.216925][T15616] loop4: detected capacity change from 0 to 512
[  340.255663][T15616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.342213][T15616] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.104116][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.401797][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.444758][T15635] netlink: 'syz.4.3706': attribute type 9 has an invalid length.
[  341.452698][T15635] netlink: 'syz.4.3706': attribute type 6 has an invalid length.
[  341.460512][T15635] netlink: 'syz.4.3706': attribute type 7 has an invalid length.
[  341.468402][T15635] netlink: 'syz.4.3706': attribute type 8 has an invalid length.
[  341.482484][   T29] kauditd_printk_skb: 87 callbacks suppressed
[  341.482498][   T29] audit: type=1400 audit(1752500766.099:17288): avc:  denied  { write } for  pid=15634 comm="syz.4.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  341.631034][T15638] loop4: detected capacity change from 0 to 256
[  341.711120][   T29] audit: type=1400 audit(1752500766.319:17289): avc:  denied  { create } for  pid=15639 comm="syz.1.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  341.752889][   T29] audit: type=1400 audit(1752500766.349:17290): avc:  denied  { connect } for  pid=15639 comm="syz.1.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  341.772768][   T29] audit: type=1400 audit(1752500766.359:17291): avc:  denied  { name_connect } for  pid=15639 comm="syz.1.3707" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  341.808575][T15641] loop1: detected capacity change from 0 to 1024
[  341.816100][T15641] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  341.827747][T15638] FAT-fs (loop4): Directory bread(block 1285) failed
[  341.844521][T15635] FAT-fs (loop4): Directory bread(block 1285) failed
[  341.851967][T15635] FAT-fs (loop4): Directory bread(block 1285) failed
[  341.859051][T15635] FAT-fs (loop4): Directory bread(block 1285) failed
[  341.859605][T15641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.881975][   T29] audit: type=1400 audit(1752500766.489:17292): avc:  denied  { setattr } for  pid=15639 comm="syz.1.3707" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  341.988717][   T29] audit: type=1400 audit(1752500766.599:17293): avc:  denied  { create } for  pid=15647 comm="syz.3.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.008603][   T29] audit: type=1400 audit(1752500766.599:17294): avc:  denied  { setopt } for  pid=15647 comm="syz.3.3709" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.053314][T15650] netlink: 'syz.0.3710': attribute type 1 has an invalid length.
[  342.063322][   T29] audit: type=1400 audit(1752500766.679:17295): avc:  denied  { connect } for  pid=15649 comm="syz.0.3710" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.084225][   T29] audit: type=1400 audit(1752500766.679:17296): avc:  denied  { write } for  pid=15649 comm="syz.0.3710" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  342.115177][   T29] audit: type=1326 audit(1752500766.729:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  342.155290][T15655] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3712'.
[  342.258589][T15660] loop2: detected capacity change from 0 to 1024
[  342.276025][T15660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.330588][T15660] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  342.341451][T15660] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3714: missing EA_INODE flag
[  342.368359][T15660] EXT4-fs (loop2): Remounting filesystem read-only
[  342.381154][T15667] netlink: 'syz.4.3716': attribute type 1 has an invalid length.
[  342.490429][T15674] netlink: 'syz.3.3719': attribute type 9 has an invalid length.
[  342.498302][T15674] netlink: 'syz.3.3719': attribute type 6 has an invalid length.
[  342.506084][T15674] netlink: 'syz.3.3719': attribute type 7 has an invalid length.
[  342.513887][T15674] netlink: 'syz.3.3719': attribute type 8 has an invalid length.
[  342.533346][T15673] loop0: detected capacity change from 0 to 128
[  342.540272][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.546204][T15673] loop0: detected capacity change from 0 to 512
[  342.556325][T15673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  342.567920][T15673] EXT4-fs (loop0): 1 truncate cleaned up
[  342.574190][T15673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.575955][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.602333][T15673] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.647452][T15680] loop2: detected capacity change from 0 to 2048
[  342.657165][T15682] loop1: detected capacity change from 0 to 128
[  342.686987][T15680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.750974][T15685] loop3: detected capacity change from 0 to 256
[  342.838317][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.893862][T15695] loop2: detected capacity change from 0 to 1024
[  342.900829][T15685] FAT-fs (loop3): Directory bread(block 1285) failed
[  342.913636][T15675] Restarting kernel threads ...
[  342.917829][T15674] FAT-fs (loop3): Directory bread(block 1285) failed
[  342.927275][T15695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.939555][T15675] Done restarting kernel threads.
[  342.963926][T15674] FAT-fs (loop3): Directory bread(block 1285) failed
[  342.973218][T15674] FAT-fs (loop3): Directory bread(block 1285) failed
[  342.991603][T15695] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.149923][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3731'.
[  343.184657][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'.
[  343.214903][T15718] loop4: detected capacity change from 0 to 2048
[  343.235855][T15720] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3733'.
[  343.264508][T15718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.300620][T15724] loop3: detected capacity change from 0 to 512
[  343.323748][T15724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.343864][T15724] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.511809][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.768121][T15740] loop4: detected capacity change from 0 to 256
[  344.047604][T15748] FAULT_INJECTION: forcing a failure.
[  344.047604][T15748] name failslab, interval 1, probability 0, space 0, times 0
[  344.060324][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.1.3740 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  344.060358][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  344.060374][T15748] Call Trace:
[  344.060383][T15748]  <TASK>
[  344.060393][T15748]  __dump_stack+0x1d/0x30
[  344.060419][T15748]  dump_stack_lvl+0xe8/0x140
[  344.060442][T15748]  dump_stack+0x15/0x1b
[  344.060459][T15748]  should_fail_ex+0x265/0x280
[  344.060497][T15748]  should_failslab+0x8c/0xb0
[  344.060526][T15748]  kmem_cache_alloc_noprof+0x50/0x310
[  344.060557][T15748]  ? vm_area_dup+0x33/0x2c0
[  344.060589][T15748]  ? __account_obj_stock+0x211/0x350
[  344.060616][T15748]  vm_area_dup+0x33/0x2c0
[  344.060650][T15748]  __split_vma+0xe9/0x650
[  344.060678][T15748]  ? __rcu_read_unlock+0x4f/0x70
[  344.060700][T15748]  ? avc_has_perm_noaudit+0x1b1/0x200
[  344.060730][T15748]  vms_gather_munmap_vmas+0x172/0x7a0
[  344.060765][T15748]  ? selinux_file_open+0x2df/0x330
[  344.060796][T15748]  do_vmi_align_munmap+0x1a4/0x3d0
[  344.060830][T15748]  do_vmi_munmap+0x1db/0x220
[  344.060852][T15748]  do_munmap+0x8a/0xc0
[  344.060890][T15748]  mremap_to+0x35b/0x540
[  344.060920][T15748]  __se_sys_mremap+0x549/0x6f0
[  344.060949][T15748]  ? ksys_write+0x192/0x1a0
[  344.060981][T15748]  __x64_sys_mremap+0x67/0x80
[  344.061010][T15748]  x64_sys_call+0x2ba9/0x2fb0
[  344.061030][T15748]  do_syscall_64+0xd2/0x200
[  344.061047][T15748]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  344.061085][T15748]  ? clear_bhb_loop+0x40/0x90
[  344.061111][T15748]  ? clear_bhb_loop+0x40/0x90
[  344.061137][T15748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.061158][T15748] RIP: 0033:0x7fb7eb48e929
[  344.061172][T15748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.061191][T15748] RSP: 002b:00007fb7e9af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  344.061214][T15748] RAX: ffffffffffffffda RBX: 00007fb7eb6b5fa0 RCX: 00007fb7eb48e929
[  344.061230][T15748] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000
[  344.061245][T15748] RBP: 00007fb7e9af7090 R08: 0000200000a00000 R09: 0000000000000000
[  344.061260][T15748] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  344.061275][T15748] R13: 0000000000000000 R14: 00007fb7eb6b5fa0 R15: 00007ffd28b86e08
[  344.061299][T15748]  </TASK>
[  344.306524][T15750] loop0: detected capacity change from 0 to 256
[  344.352292][T15740] FAT-fs (loop4): Directory bread(block 1285) failed
[  344.387768][T15737] FAT-fs (loop4): Directory bread(block 1285) failed
[  344.396146][T15737] FAT-fs (loop4): Directory bread(block 1285) failed
[  344.402963][T15737] FAT-fs (loop4): Directory bread(block 1285) failed
[  344.477345][T15752] loop1: detected capacity change from 0 to 512
[  344.488624][T15756] loop4: detected capacity change from 0 to 128
[  344.563882][T15750] FAT-fs (loop0): Directory bread(block 1285) failed
[  344.577817][T15744] FAT-fs (loop0): Directory bread(block 1285) failed
[  344.584901][T15744] FAT-fs (loop0): Directory bread(block 1285) failed
[  344.592232][T15744] FAT-fs (loop0): Directory bread(block 1285) failed
[  344.690808][T15767] loop1: detected capacity change from 0 to 2048
[  344.723525][T15767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.753834][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.764418][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.802495][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'.
[  344.824077][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'.
[  344.853360][T15780] loop3: detected capacity change from 0 to 128
[  344.910957][T15785] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3753'.
[  345.001290][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3754'.
[  345.011001][T15787] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.021865][T15787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.695266][T15808] lo speed is unknown, defaulting to 1000
[  345.725447][T15810] loop1: detected capacity change from 0 to 164
[  345.802752][T15810] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  345.889306][T15810] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  345.905702][T15810] rock: directory entry would overflow storage
[  345.912016][T15810] rock: sig=0x4f50, size=4, remaining=3
[  345.917612][T15810] iso9660: Corrupted directory entry in block 4 of inode 1792
[  345.944826][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.107135][T15814] SELinux:  truncated policydb string identifier
[  346.114789][T15815] loop0: detected capacity change from 0 to 2048
[  346.160133][T15815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.183278][T15814] SELinux: failed to load policy
[  346.188317][T15819] loop2: detected capacity change from 0 to 2048
[  346.214463][T15821] tipc: Started in network mode
[  346.214490][T15819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.219384][T15821] tipc: Node identity 5eb0cf887b56, cluster identity 4711
[  346.219439][T15821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.284806][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.395817][T15820] tipc: Disabling bearer <eth:syzkaller0>
[  346.413814][T15827] loop2: detected capacity change from 0 to 128
[  346.425366][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.666572][T15835] loop3: detected capacity change from 0 to 128
[  346.975473][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  346.975493][   T29] audit: type=1400 audit(1752500771.589:17344): avc:  denied  { read write } for  pid=12162 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  347.006051][   T29] audit: type=1400 audit(1752500771.589:17345): avc:  denied  { open } for  pid=12162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  347.045569][   T29] audit: type=1400 audit(1752500771.649:17346): avc:  denied  { ioctl } for  pid=12162 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  347.082170][   T29] audit: type=1400 audit(1752500771.689:17347): avc:  denied  { read } for  pid=15839 comm="syz.2.3769" dev="nsfs" ino=4026533402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  347.103642][   T29] audit: type=1400 audit(1752500771.689:17348): avc:  denied  { open } for  pid=15839 comm="syz.2.3769" path="net:[4026533402]" dev="nsfs" ino=4026533402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  347.118783][T15840] loop2: detected capacity change from 0 to 512
[  347.127155][   T29] audit: type=1400 audit(1752500771.689:17349): avc:  denied  { create } for  pid=15839 comm="syz.2.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  347.172145][   T29] audit: type=1400 audit(1752500771.779:17350): avc:  denied  { mounton } for  pid=15839 comm="syz.2.3769" path="/186/file1" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  347.173158][T15840] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  347.253247][T15840] EXT4-fs (loop2): 1 truncate cleaned up
[  347.262560][T15840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.285322][   T29] audit: type=1400 audit(1752500771.899:17351): avc:  denied  { mount } for  pid=15839 comm="syz.2.3769" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  347.321516][   T29] audit: type=1400 audit(1752500771.929:17352): avc:  denied  { prog_load } for  pid=15839 comm="syz.2.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  347.340913][   T29] audit: type=1400 audit(1752500771.929:17353): avc:  denied  { bpf } for  pid=15839 comm="syz.2.3769" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  347.406877][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'.
[  347.450459][T15849] loop3: detected capacity change from 0 to 1024
[  347.474018][T15849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.494497][T15854] loop1: detected capacity change from 0 to 2048
[  347.500167][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.512274][T15849] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.540575][T15860] validate_nla: 13 callbacks suppressed
[  347.540590][T15860] netlink: 'syz.2.3775': attribute type 1 has an invalid length.
[  347.555088][T15854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.632649][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'.
[  347.706568][T15873] netlink: 'syz.2.3780': attribute type 9 has an invalid length.
[  347.714418][T15873] netlink: 'syz.2.3780': attribute type 6 has an invalid length.
[  347.722199][T15873] netlink: 'syz.2.3780': attribute type 7 has an invalid length.
[  347.729959][T15873] netlink: 'syz.2.3780': attribute type 8 has an invalid length.
[  347.916580][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.931096][T15878] loop2: detected capacity change from 0 to 256
[  347.984705][T15880] loop1: detected capacity change from 0 to 128
[  348.019547][T15880] loop1: detected capacity change from 0 to 512
[  348.038486][T15880] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  348.064303][T15880] EXT4-fs (loop1): 1 truncate cleaned up
[  348.093645][T15880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.262910][T15878] FAT-fs (loop2): Directory bread(block 1285) failed
[  348.282158][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.345024][T15873] FAT-fs (loop2): Directory bread(block 1285) failed
[  348.362287][T15873] FAT-fs (loop2): Directory bread(block 1285) failed
[  348.369094][T15873] FAT-fs (loop2): Directory bread(block 1285) failed
[  348.597494][T15897] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  348.649468][T15900] netlink: 'syz.0.3788': attribute type 1 has an invalid length.
[  348.727251][T15904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3789'.
[  348.863968][T15910] tipc: Started in network mode
[  348.868996][T15910] tipc: Node identity 7e820fcac9cb, cluster identity 4711
[  348.876402][T15910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.895817][T15909] tipc: Disabling bearer <eth:syzkaller0>
[  349.243324][T15923] loop0: detected capacity change from 0 to 2048
[  349.251299][T15923] EXT4-fs: Ignoring removed mblk_io_submit option
[  349.265212][T15923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.370093][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'.
[  349.817135][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'.
[  349.875763][   T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 234: padding at end of block bitmap is not set
[  349.906927][   T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  349.919350][   T51] EXT4-fs (loop0): This should not happen!! Data will be lost
[  349.919350][   T51] 
[  349.958836][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  349.971795][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  349.971795][ T3425] 
[  349.981497][ T3425] EXT4-fs (loop0): Total free blocks count 0
[  349.987680][ T3425] EXT4-fs (loop0): Free/Dirty block details
[  349.993682][ T3425] EXT4-fs (loop0): free_blocks=0
[  349.998721][ T3425] EXT4-fs (loop0): dirty_blocks=4096
[  350.004161][ T3425] EXT4-fs (loop0): Block reservation details
[  350.238300][T15945] loop2: detected capacity change from 0 to 128
[  350.384603][T15938] Restarting kernel threads ...
[  350.391130][T15938] Done restarting kernel threads.
[  350.406391][T15938] netlink: 'syz.4.3802': attribute type 21 has an invalid length.
[  350.607591][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.658697][T15956] loop3: detected capacity change from 0 to 128
[  350.788120][T15960] netlink: 'syz.3.3810': attribute type 1 has an invalid length.
[  350.928203][T15964] netlink: 'syz.4.3809': attribute type 21 has an invalid length.
[  350.991544][T15976] loop0: detected capacity change from 0 to 2048
[  351.001455][T15975] 8021q: adding VLAN 0 to HW filter on device bond4
[  351.033111][T15976] EXT4-fs: Ignoring removed mblk_io_submit option
[  351.052210][T15978] 8021q: adding VLAN 0 to HW filter on device bond4
[  351.069035][T15976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.077133][T15978] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  351.116929][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'.
[  351.135225][T15978] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  351.182513][T15987] loop4: detected capacity change from 0 to 1024
[  351.195420][T15987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.213267][T15987] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.245100][T15994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  351.324696][T15998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3822'.
[  351.361618][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3819'.
[  351.507622][T16009] loop1: detected capacity change from 0 to 512
[  351.516678][   T31] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 234: padding at end of block bitmap is not set
[  351.531986][   T31] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  351.534684][T16009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.544466][   T31] EXT4-fs (loop0): This should not happen!! Data will be lost
[  351.544466][   T31] 
[  351.549155][   T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  351.565351][T16009] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.566709][   T51] EXT4-fs (loop0): This should not happen!! Data will be lost
[  351.566709][   T51] 
[  351.599714][   T51] EXT4-fs (loop0): Total free blocks count 0
[  351.605759][   T51] EXT4-fs (loop0): Free/Dirty block details
[  351.611707][   T51] EXT4-fs (loop0): free_blocks=0
[  351.616753][   T51] EXT4-fs (loop0): dirty_blocks=4096
[  351.622257][   T51] EXT4-fs (loop0): Block reservation details
[  351.736613][T16015] loop3: detected capacity change from 0 to 128
[  352.356040][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3830'.
[  352.451291][T16026] lo speed is unknown, defaulting to 1000
[  352.495661][T16027] loop3: detected capacity change from 0 to 2048
[  352.593631][T16027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.660159][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  352.660174][   T29] audit: type=1400 audit(1752500777.269:17545): avc:  denied  { read write open } for  pid=16024 comm="syz.3.3831" path="/185/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  352.757147][T16034] loop0: detected capacity change from 0 to 512
[  352.798535][T16034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  352.812988][T16034] EXT4-fs (loop0): 1 truncate cleaned up
[  352.819182][T16034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  352.854706][   T29] audit: type=1400 audit(1752500777.469:17546): avc:  denied  { setattr } for  pid=16033 comm="syz.0.3833" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  352.884043][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.912979][   T29] audit: type=1400 audit(1752500777.469:17547): avc:  denied  { ioctl } for  pid=16033 comm="syz.0.3833" path="/108/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  352.923539][T16037] loop0: detected capacity change from 0 to 512
[  352.975081][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.994582][T16037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  353.008115][T16037] EXT4-fs (loop0): 1 truncate cleaned up
[  353.014241][T16037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.026840][T16039] loop3: detected capacity change from 0 to 2048
[  353.044806][T16039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.108611][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.139408][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.189258][   T29] audit: type=1326 audit(1752500777.799:17548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.224983][   T29] audit: type=1326 audit(1752500777.809:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.248847][   T29] audit: type=1326 audit(1752500777.809:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.272752][   T29] audit: type=1326 audit(1752500777.809:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.298117][T16053] loop0: detected capacity change from 0 to 2048
[  353.305467][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.315851][T16053] EXT4-fs: Ignoring removed mblk_io_submit option
[  353.328545][   T29] audit: type=1326 audit(1752500777.939:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.352266][   T29] audit: type=1326 audit(1752500777.939:17553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16050 comm="syz.0.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f6cae929 code=0x7ffc0000
[  353.360282][T16057] usb usb1: usbfs: process 16057 (syz.3.3839) did not claim interface 1 before use
[  353.376052][   T29] audit: type=1400 audit(1752500777.969:17554): avc:  denied  { read write } for  pid=16056 comm="syz.3.3839" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  353.410067][T16053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.652268][T16065] loop3: detected capacity change from 0 to 128
[  354.055693][T16069] validate_nla: 2 callbacks suppressed
[  354.055714][T16069] netlink: 'syz.2.3842': attribute type 1 has an invalid length.
[  354.079861][T16072] netlink: 'syz.1.3844': attribute type 1 has an invalid length.
[  354.090970][  T149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 234: padding at end of block bitmap is not set
[  354.107499][  T149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  354.119962][  T149] EXT4-fs (loop0): This should not happen!! Data will be lost
[  354.119962][  T149] 
[  354.136136][  T149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  354.149049][  T149] EXT4-fs (loop0): This should not happen!! Data will be lost
[  354.149049][  T149] 
[  354.158771][  T149] EXT4-fs (loop0): Total free blocks count 0
[  354.164803][  T149] EXT4-fs (loop0): Free/Dirty block details
[  354.170723][  T149] EXT4-fs (loop0): free_blocks=0
[  354.175764][  T149] EXT4-fs (loop0): dirty_blocks=3424
[  354.181091][  T149] EXT4-fs (loop0): Block reservation details
[  354.194681][T16074] netlink: 'syz.1.3846': attribute type 1 has an invalid length.
[  354.205575][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.206778][T16076] loop2: detected capacity change from 0 to 2048
[  354.234291][T16076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.253554][T16081] loop4: detected capacity change from 0 to 512
[  354.319985][T16083] loop0: detected capacity change from 0 to 2048
[  354.331759][T16081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.346107][T16081] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.362799][T16088] loop3: detected capacity change from 0 to 1024
[  354.363830][T16089] loop1: detected capacity change from 0 to 1024
[  354.377195][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.390201][T16088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.404012][T16083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.493387][T16089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.505517][T16088] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  354.515664][T16088] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.3849: missing EA_INODE flag
[  354.533979][T16089] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  354.542166][T16088] EXT4-fs (loop3): Remounting filesystem read-only
[  354.543455][T16089] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.3850: missing EA_INODE flag
[  354.565431][T16089] EXT4-fs (loop1): Remounting filesystem read-only
[  354.604057][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'.
[  354.651419][T13125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.670839][T14505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.755729][T12701] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.809577][T16110] loop0: detected capacity change from 0 to 2048
[  354.827730][T16110] EXT4-fs: Ignoring removed mblk_io_submit option
[  354.843629][T16115] netlink: 'syz.1.3856': attribute type 1 has an invalid length.
[  354.878464][T16120] netlink: 'syz.1.3857': attribute type 1 has an invalid length.
[  354.892480][T16110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.004326][T16123] loop1: detected capacity change from 0 to 164
[  355.025441][T16123] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  355.041306][T16123] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  355.050087][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'.
[  355.050399][T16123] rock: directory entry would overflow storage
[  355.065582][T16123] rock: sig=0x4f50, size=4, remaining=3
[  355.071158][T16123] iso9660: Corrupted directory entry in block 4 of inode 1792
[  355.104030][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'.
[  355.339926][T16130] loop1: detected capacity change from 0 to 128
[  355.541072][T16132] loop2: detected capacity change from 0 to 512
[  355.586144][T16132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  355.659936][T16132] EXT4-fs (loop2): 1 truncate cleaned up
[  355.703618][T16132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.734297][ T3425] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 234: padding at end of block bitmap is not set
[  355.754166][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  355.766616][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  355.766616][ T3425] 
[  355.800634][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3864'.
[  355.820785][T12162] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.838281][T12995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.845397][   T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  355.860232][   T51] EXT4-fs (loop0): This should not happen!! Data will be lost
[  355.860232][   T51] 
[  355.864567][T16139] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3865'.
[  355.869959][   T51] EXT4-fs (loop0): Total free blocks count 0
[  355.885013][   T51] EXT4-fs (loop0): Free/Dirty block details
[  355.891033][   T51] EXT4-fs (loop0): free_blocks=0
[  355.896074][   T51] EXT4-fs (loop0): dirty_blocks=3104
[  355.901445][   T51] EXT4-fs (loop0): Block reservation details
[  355.935780][T16143] loop2: detected capacity change from 0 to 2048
[  355.976053][T16149] loop3: detected capacity change from 0 to 512
[  356.035968][T16149] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.042728][T16151] loop1: detected capacity change from 0 to 2048
[  356.241179][T16166] loop1: detected capacity change from 0 to 512
[  356.249115][T16166] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  356.279886][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3862'.
[  356.289028][T16153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3862'.
[  356.298099][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3862'.
[  356.308574][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3862'.
[  356.323671][T16166] EXT4-fs (loop1): 1 truncate cleaned up
[  356.350411][T16171] loop4: detected capacity change from 0 to 2048
[  356.378766][T16171] EXT4-fs: Ignoring removed mblk_io_submit option
[  356.776173][T16179] loop1: detected capacity change from 0 to 512
[  356.783775][T16179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  356.798107][T16179] EXT4-fs (loop1): 1 truncate cleaned up
[  356.922900][T16184] loop3: detected capacity change from 0 to 164
[  356.957091][T16184] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  356.983541][T16184] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  356.991860][T16190] FAULT_INJECTION: forcing a failure.
[  356.991860][T16190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  357.004965][T16190] CPU: 1 UID: 0 PID: 16190 Comm: syz.2.3881 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  357.005000][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  357.005108][T16190] Call Trace:
[  357.005118][T16190]  <TASK>
[  357.005127][T16190]  __dump_stack+0x1d/0x30
[  357.005150][T16190]  dump_stack_lvl+0xe8/0x140
[  357.005175][T16190]  dump_stack+0x15/0x1b
[  357.005241][T16190]  should_fail_ex+0x265/0x280
[  357.005272][T16190]  should_fail+0xb/0x20
[  357.005305][T16190]  should_fail_usercopy+0x1a/0x20
[  357.005384][T16190]  _copy_from_iter+0xcf/0xe40
[  357.005417][T16190]  ? __build_skb_around+0x1a0/0x200
[  357.005452][T16190]  ? __alloc_skb+0x223/0x320
[  357.005536][T16190]  netlink_sendmsg+0x471/0x6b0
[  357.005593][T16190]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.005617][T16190]  __sock_sendmsg+0x145/0x180
[  357.005647][T16190]  ____sys_sendmsg+0x31e/0x4e0
[  357.005727][T16190]  ___sys_sendmsg+0x17b/0x1d0
[  357.005797][T16190]  __x64_sys_sendmsg+0xd4/0x160
[  357.005843][T16190]  x64_sys_call+0x2999/0x2fb0
[  357.005904][T16190]  do_syscall_64+0xd2/0x200
[  357.005923][T16190]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  357.005956][T16190]  ? clear_bhb_loop+0x40/0x90
[  357.005983][T16190]  ? clear_bhb_loop+0x40/0x90
[  357.006023][T16190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.006048][T16190] RIP: 0033:0x7fa5bc01e929
[  357.006064][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.006082][T16190] RSP: 002b:00007fa5ba687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.006119][T16190] RAX: ffffffffffffffda RBX: 00007fa5bc245fa0 RCX: 00007fa5bc01e929
[  357.006135][T16190] RDX: 0000000004000000 RSI: 0000200000000680 RDI: 0000000000000006
[  357.006151][T16190] RBP: 00007fa5ba687090 R08: 0000000000000000 R09: 0000000000000000
[  357.006168][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.006184][T16190] R13: 0000000000000000 R14: 00007fa5bc245fa0 R15: 00007ffe38cc12a8
[  357.006208][T16190]  </TASK>
[  357.218277][T16184] rock: directory entry would overflow storage
[  357.224561][T16184] rock: sig=0x4f50, size=4, remaining=3
[  357.230306][T16184] iso9660: Corrupted directory entry in block 4 of inode 1792
[  357.237512][T16194] loop0: detected capacity change from 0 to 2048
[  357.266616][  T149] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 234: padding at end of block bitmap is not set
[  357.304509][  T149] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  357.316971][  T149] EXT4-fs (loop4): This should not happen!! Data will be lost
[  357.316971][  T149] 
[  357.331307][ T3439] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  357.344197][ T3439] EXT4-fs (loop4): This should not happen!! Data will be lost
[  357.344197][ T3439] 
[  357.354045][ T3439] EXT4-fs (loop4): Total free blocks count 0
[  357.354810][T16201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'.
[  357.360123][ T3439] EXT4-fs (loop4): Free/Dirty block details
[  357.360184][ T3439] EXT4-fs (loop4): free_blocks=0
[  357.360195][ T3439] EXT4-fs (loop4): dirty_blocks=4096
[  357.385489][ T3439] EXT4-fs (loop4): Block reservation details
[  357.391692][ T3439] EXT4-fs (loop4): i_reserved_data_blocks=256
[  357.468400][T16207] loop4: detected capacity change from 0 to 128
[  357.523975][T16204] lo speed is unknown, defaulting to 1000
[  357.800356][T16220] loop3: detected capacity change from 0 to 512
[  357.843335][   T29] kauditd_printk_skb: 114 callbacks suppressed
[  357.843353][   T29] audit: type=1400 audit(1752500782.459:17669): avc:  denied  { create } for  pid=16212 comm="syz.0.3889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  357.880179][T16220] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.020529][   T29] audit: type=1400 audit(1752500782.539:17670): avc:  denied  { execmem } for  pid=16219 comm="syz.3.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  358.066124][T16230] netlink: 'syz.0.3893': attribute type 1 has an invalid length.
[  358.140994][   T29] audit: type=1400 audit(1752500782.709:17671): avc:  denied  { read write } for  pid=12701 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.165696][   T29] audit: type=1400 audit(1752500782.709:17672): avc:  denied  { open } for  pid=12701 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.190211][   T29] audit: type=1400 audit(1752500782.709:17673): avc:  denied  { ioctl } for  pid=12701 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.216156][   T29] audit: type=1400 audit(1752500782.709:17674): avc:  denied  { create } for  pid=16228 comm="syz.0.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  358.237314][   T29] audit: type=1400 audit(1752500782.709:17675): avc:  denied  { write } for  pid=16228 comm="syz.0.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  358.258188][   T29] audit: type=1400 audit(1752500782.709:17676): avc:  denied  { prog_load } for  pid=16228 comm="syz.0.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  358.277441][   T29] audit: type=1400 audit(1752500782.709:17677): avc:  denied  { bpf } for  pid=16228 comm="syz.0.3893" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  358.298383][   T29] audit: type=1400 audit(1752500782.709:17678): avc:  denied  { perfmon } for  pid=16228 comm="syz.0.3893" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  358.352849][T16235] loop2: detected capacity change from 0 to 512
[  358.424942][T16235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  358.506000][T16240] loop0: detected capacity change from 0 to 512
[  358.512946][T16240] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  358.525261][T16235] EXT4-fs (loop2): 1 truncate cleaned up
[  358.541897][T16243] loop4: detected capacity change from 0 to 512
[  358.550302][T16243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  358.566775][T16240] EXT4-fs (loop0): 1 truncate cleaned up
[  358.581600][T16243] EXT4-fs (loop4): 1 truncate cleaned up
[  358.619982][T16249] loop4: detected capacity change from 0 to 512
[  358.628326][T16249] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  358.690516][T16252] loop1: detected capacity change from 0 to 128
[  358.804880][T16249] EXT4-fs (loop4): 1 truncate cleaned up
[  359.228359][T16267] netlink: 'syz.0.3906': attribute type 9 has an invalid length.
[  359.236422][T16267] netlink: 'syz.0.3906': attribute type 6 has an invalid length.
[  359.244286][T16267] netlink: 'syz.0.3906': attribute type 7 has an invalid length.
[  359.252058][T16267] netlink: 'syz.0.3906': attribute type 8 has an invalid length.
[  359.386309][T16278] loop0: detected capacity change from 0 to 256
[  359.395657][T16277] loop1: detected capacity change from 0 to 512
[  359.414328][T16277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  359.438747][T16275] loop2: detected capacity change from 0 to 2048
[  359.447332][T16262] netlink: 'syz.4.3903': attribute type 21 has an invalid length.
[  359.465655][T16284] netlink: 'syz.3.3912': attribute type 9 has an invalid length.
[  359.473495][T16284] netlink: 'syz.3.3912': attribute type 6 has an invalid length.
[  359.481289][T16284] netlink: 'syz.3.3912': attribute type 7 has an invalid length.
[  359.489121][T16284] netlink: 'syz.3.3912': attribute type 8 has an invalid length.
[  359.497992][T16277] EXT4-fs (loop1): 1 truncate cleaned up
[  359.641025][T16291] __nla_validate_parse: 2 callbacks suppressed
[  359.641075][T16291] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3913'.
[  359.661433][T16292] loop3: detected capacity change from 0 to 256
[  359.703088][T16294] loop1: detected capacity change from 0 to 2048
[  359.703664][T16296] netlink: 'syz.4.3915': attribute type 1 has an invalid length.
[  359.774495][T16278] FAT-fs (loop0): Directory bread(block 1285) failed
[  359.832394][T16301] loop2: detected capacity change from 0 to 1024
[  359.839595][T16267] FAT-fs (loop0): Directory bread(block 1285) failed
[  359.846939][T16267] FAT-fs (loop0): Directory bread(block 1285) failed
[  359.847102][T16292] FAT-fs (loop3): Directory bread(block 1285) failed
[  359.853840][T16267] FAT-fs (loop0): Directory bread(block 1285) failed
[  359.911604][T16301] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  359.947978][T16301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3916: missing EA_INODE flag
[  360.083459][T16301] EXT4-fs (loop2): Remounting filesystem read-only
[  360.108299][T16284] FAT-fs (loop3): Directory bread(block 1285) failed
[  360.118378][T16284] FAT-fs (loop3): Directory bread(block 1285) failed
[  360.129393][T16284] FAT-fs (loop3): Directory bread(block 1285) failed
[  360.942932][T16316] loop4: detected capacity change from 0 to 128
[  361.009284][T16318] loop1: detected capacity change from 0 to 164
[  361.112335][T16318] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  361.146957][T16318] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  361.161755][T16322] loop2: detected capacity change from 0 to 1024
[  361.182662][T16318] rock: directory entry would overflow storage
[  361.188963][T16318] rock: sig=0x4f50, size=4, remaining=3
[  361.194605][T16318] iso9660: Corrupted directory entry in block 4 of inode 1792
[  361.275425][T16322] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  361.286966][T16327] loop0: detected capacity change from 0 to 256
[  361.297442][T16329] loop3: detected capacity change from 0 to 512
[  361.305307][T16322] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.3923: missing EA_INODE flag
[  361.318774][T16322] EXT4-fs (loop2): Remounting filesystem read-only
[  361.324320][T16329] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  361.339592][T16331] loop4: detected capacity change from 0 to 512
[  361.343987][T16329] EXT4-fs (loop3): 1 truncate cleaned up
[  361.351678][T16327] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  361.361998][T16327] FAT-fs (loop0): Filesystem has been set read-only
[  361.368956][T16327] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  361.379349][T16327] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  361.380894][T16331] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.556086][T16343] loop3: detected capacity change from 0 to 512
[  361.583263][T16343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  361.596494][T16343] EXT4-fs (loop3): 1 truncate cleaned up
[  361.601675][T16351] loop0: detected capacity change from 0 to 256
[  362.134415][T16359] Restarting kernel threads ...
[  362.197232][T16359] Done restarting kernel threads.
[  362.336200][T16380] loop1: detected capacity change from 0 to 2048
[  362.827003][T16402] loop4: detected capacity change from 0 to 1024
[  362.859218][   T29] kauditd_printk_skb: 178 callbacks suppressed
[  362.859239][   T29] audit: type=1400 audit(1752500787.469:17857): avc:  denied  { remount } for  pid=16400 comm="syz.4.3949" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  362.885382][   T29] audit: type=1400 audit(1752500787.479:17858): avc:  denied  { create } for  pid=16408 comm="syz.1.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  362.905214][   T29] audit: type=1400 audit(1752500787.479:17859): avc:  denied  { open } for  pid=16408 comm="syz.1.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  362.906292][T16402] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  362.924710][   T29] audit: type=1400 audit(1752500787.479:17860): avc:  denied  { perfmon } for  pid=16408 comm="syz.1.3952" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  362.924749][   T29] audit: type=1400 audit(1752500787.479:17861): avc:  denied  { kernel } for  pid=16408 comm="syz.1.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  362.924780][   T29] audit: type=1400 audit(1752500787.479:17862): avc:  denied  { tracepoint } for  pid=16408 comm="syz.1.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  362.996861][T16402] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3949: missing EA_INODE flag
[  363.011176][T16402] EXT4-fs (loop4): Remounting filesystem read-only
[  363.019108][   T29] audit: type=1400 audit(1752500787.639:17863): avc:  denied  { read write } for  pid=16410 comm="syz.0.3953" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  363.043198][   T29] audit: type=1400 audit(1752500787.639:17864): avc:  denied  { open } for  pid=16410 comm="syz.0.3953" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  363.069928][T16411] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64
[  363.077723][T16411] audit: out of memory in audit_log_start
[  363.129956][T16419] loop1: detected capacity change from 0 to 164
[  363.134947][T16422] loop0: detected capacity change from 0 to 512
[  363.136515][T16420] loop4: detected capacity change from 0 to 512
[  363.149828][T16419] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.159455][T16419] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  363.164678][T16422] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.168166][T16419] rock: directory entry would overflow storage
[  363.184626][T16419] rock: sig=0x4f50, size=4, remaining=3
[  363.190394][T16419] iso9660: Corrupted directory entry in block 4 of inode 1792
[  363.194614][T16420] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.338707][T16414] loop2: detected capacity change from 0 to 2048
[  363.370105][T16430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3959'.
[  364.673362][T16453] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  364.851478][T16461] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3971'.
[  364.875744][T16465] loop3: detected capacity change from 0 to 164
[  364.896308][T16465] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  364.907436][T16463] loop0: detected capacity change from 0 to 1024
[  364.918437][T16465] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  364.932726][T16467] loop1: detected capacity change from 0 to 2048
[  364.943699][T16465] rock: directory entry would overflow storage
[  364.949928][T16465] rock: sig=0x4f50, size=4, remaining=3
[  364.952896][T16473] loop2: detected capacity change from 0 to 512
[  364.955555][T16465] iso9660: Corrupted directory entry in block 4 of inode 1792
[  364.964673][T16473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  364.981424][T16463] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.3967: missing EA_INODE flag
[  365.002892][T16463] EXT4-fs (loop0): Remounting filesystem read-only
[  365.034526][T16473] EXT4-fs (loop2): 1 truncate cleaned up
[  365.128072][T16481] loop0: detected capacity change from 0 to 256
[  365.157250][T16485] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.157862][T16487] loop1: detected capacity change from 0 to 164
[  365.193576][T16487] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  365.202931][T16487] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  365.213511][T16487] rock: directory entry would overflow storage
[  365.219818][T16487] rock: sig=0x4f50, size=4, remaining=3
[  365.225461][T16487] iso9660: Corrupted directory entry in block 4 of inode 1792
[  365.238384][T16483] loop4: detected capacity change from 0 to 2048
[  365.246351][T16483] EXT4-fs: Ignoring removed mblk_io_submit option
[  365.265270][T16492] loop0: detected capacity change from 0 to 512
[  365.283637][T16492] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  365.298128][T16492] EXT4-fs (loop0): 1 truncate cleaned up
[  365.367355][T16504] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3985'.
[  365.410858][T16508] loop3: detected capacity change from 0 to 1024
[  365.670296][T16508] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  365.705615][T16508] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.3987: missing EA_INODE flag
[  365.737969][T16513] loop1: detected capacity change from 0 to 512
[  365.768585][T16508] EXT4-fs (loop3): Remounting filesystem read-only
[  365.790446][T16513] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.835933][ T3389] ==================================================================
[  365.844097][ T3389] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages
[  365.852391][ T3389] 
[  365.854744][ T3389] read-write to 0xffff8881005f0570 of 8 bytes by task 14505 on cpu 0:
[  365.863063][ T3389]  __filemap_remove_folio+0x1bc/0x2a0
[  365.868492][ T3389]  __remove_mapping+0x338/0x460
[  365.873451][ T3389]  remove_mapping+0x22/0x90
[  365.877987][ T3389]  mapping_try_invalidate+0x26a/0x3f0
[  365.883380][ T3389]  invalidate_mapping_pages+0x27/0x40
[  365.888777][ T3389]  invalidate_bdev+0x58/0x70
[  365.893421][ T3389]  ext4_put_super+0x624/0x7d0
[  365.898125][ T3389]  generic_shutdown_super+0xe6/0x210
[  365.903438][ T3389]  kill_block_super+0x2a/0x70
[  365.908154][ T3389]  ext4_kill_sb+0x42/0x80
[  365.912644][ T3389]  deactivate_locked_super+0x75/0x1c0
[  365.918052][ T3389]  deactivate_super+0x97/0xa0
[  365.922760][ T3389]  cleanup_mnt+0x269/0x2e0
[  365.927208][ T3389]  __cleanup_mnt+0x19/0x20
[  365.931644][ T3389]  task_work_run+0x131/0x1a0
[  365.936263][ T3389]  exit_to_user_mode_loop+0xe4/0x100
[  365.941574][ T3389]  do_syscall_64+0x1d6/0x200
[  365.946238][ T3389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.952156][ T3389] 
[  365.954493][ T3389] read to 0xffff8881005f0570 of 8 bytes by task 3389 on cpu 1:
[  365.962048][ T3389]  nr_blockdev_pages+0x7e/0xd0
[  365.966845][ T3389]  si_meminfo+0x87/0xd0
[  365.971026][ T3389]  update_defense_level+0x47/0x5c0
[  365.976169][ T3389]  defense_work_handler+0x1f/0x80
[  365.981215][ T3389]  process_scheduled_works+0x4cb/0x9d0
[  365.986699][ T3389]  worker_thread+0x582/0x770
[  365.991317][ T3389]  kthread+0x489/0x510
[  365.995399][ T3389]  ret_from_fork+0xda/0x150
[  365.999916][ T3389]  ret_from_fork_asm+0x1a/0x30
[  366.004702][ T3389] 
[  366.007037][ T3389] value changed: 0x0000000000000017 -> 0x0000000000000011
[  366.014159][ T3389] 
[  366.016495][ T3389] Reported by Kernel Concurrency Sanitizer on:
[  366.022658][ T3389] CPU: 1 UID: 0 PID: 3389 Comm: kworker/1:3 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) 
[  366.033452][ T3389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  366.043536][ T3389] Workqueue: events_long defense_work_handler
[  366.049705][ T3389] ==================================================================
[  366.083179][T16518] validate_nla: 6 callbacks suppressed
[  366.083201][T16518] netlink: 'syz.0.3988': attribute type 9 has an invalid length.
[  366.096566][T16518] netlink: 'syz.0.3988': attribute type 6 has an invalid length.
[  366.104437][T16518] netlink: 'syz.0.3988': attribute type 7 has an invalid length.
[  366.112272][T16518] netlink: 'syz.0.3988': attribute type 8 has an invalid length.
[  366.218367][ T3439] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 234: padding at end of block bitmap is not set
[  366.249315][ T3439] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  366.261734][ T3439] EXT4-fs (loop4): This should not happen!! Data will be lost
[  366.261734][ T3439] 
[  366.297399][  T149] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28
[  366.310341][  T149] EXT4-fs (loop4): This should not happen!! Data will be lost
[  366.310341][  T149] 
[  366.320071][  T149] EXT4-fs (loop4): Total free blocks count 0
[  366.326189][  T149] EXT4-fs (loop4): Free/Dirty block details
[  366.332132][  T149] EXT4-fs (loop4): free_blocks=0
[  366.337099][  T149] EXT4-fs (loop4): dirty_blocks=2816
[  366.342476][  T149] EXT4-fs (loop4): Block reservation details
[  366.348509][  T149] EXT4-fs (loop4): i_reserved_data_blocks=176
[  366.425956][T16523] loop0: detected capacity change from 0 to 256
[  366.510214][T16523] FAT-fs (loop0): Directory bread(block 1285) failed
[  366.523941][T16518] FAT-fs (loop0): Directory bread(block 1285) failed
[  366.531286][T16518] FAT-fs (loop0): Directory bread(block 1285) failed
[  366.538999][T16518] FAT-fs (loop0): Directory bread(block 1285) failed