last executing test programs:

2.910523148s ago: executing program 2 (id=5854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

2.874122008s ago: executing program 2 (id=5856):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0)

2.63661528s ago: executing program 2 (id=5861):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xc, 0x7, 0x4, 0x10000}, {0x2, 0x4, 0x5, 0x4}, {0x8f3, 0xa, 0x0, 0x1}]})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x7, 0x4f1f, 0x5}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
r0 = socket(0x10, 0x400000000080803, 0x0)
fcntl$dupfd(r0, 0x0, r0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)

1.800999056s ago: executing program 4 (id=5877):
r0 = socket(0x840000000002, 0x3, 0xfa)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r4, &(0x7f0000003c40)=[{{&(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000006c40)=ANY=[], 0x50}}], 0x1, 0x4800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0xca02})
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c72fffffffffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r10}, &(0x7f00000004c0), &(0x7f00000005c0)=r11}, 0x20)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="bc030000", @ANYRES16=r12, @ANYBLOB="100027bd7000fddbdf25120000000c00028008000100040000001c0102804400038008000200ff01000008000200010000000800010009000000080001000300000008000100400000000800010029050000080002000400000008000100f5000000040004001c000380280001000300000008000200eafbffff080002000500000034000380080001000200000008000100020000000800010062000000080002000e000000080001000300000008000200040000000800020000000000080001007f000000080001000800000008000100538f00004400038008000200090000000800010068550000080001000000008008000100aed10000080001007f00000008000100bb000000080002008000000008000100040000001c0003800800010005000000080001000008000008000200030000005c00068004000500460004002adc364245e5cbc6f167636d28616573290000000000000000000000000000000000000000000000001e00000027b63a9730dc1cba31349688bfe0a20bad1597dad73e7b8419cfd566be8000000400050008000600010000001c000980080001000400000000002c0007800c00040008000000000000000c00040002000000000000000800010002800000080002000800535a9de44422d299ed0000780002800800010001f90f0604934a233700010007000000080001000b00000008000200100000000800010005000000040004002c0003800800010003000000080002000900000008000100310b00000800020003000000080002000000000004000400080002005d1a0000080001000010000004000400a80004800900010073797a30000000000900010073797a30000000000c00078008000200010000000900010073797a31000000000c00078008000200733605989d2ac92173797a30000000000900010073797a05000000007a300000000044000780080004000200000008000300000000390800030002000000080001000f0000000800030009000000080001000f00000008000200010000000800040001010000bc0004801300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a3004f96a2854000780080001000d00000008000200060000000800010009000000080004000200000008000300050000000800030000010000080001001a0000000800020003000000080003006a61000008000300050000001300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a3000000000090001000000000000"], 0x3bc}, 0x1, 0x0, 0x0, 0x48000}, 0x14)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

1.616751128s ago: executing program 4 (id=5879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0)

1.572123178s ago: executing program 2 (id=5881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@newtaction={0x14, 0x30, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004051}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2})
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x8957)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r4, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

1.571429958s ago: executing program 4 (id=5882):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1b, 0x0, &(0x7f0000000180)="8b7327b0b04d2058009483fe8c7885b074af261181e01d708e0aa8", 0x0, 0x6}, 0x50)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.494653689s ago: executing program 2 (id=5884):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1b, 0x0, &(0x7f0000000180)="8b7327b0b04d2058009483fe8c7885b074af261181e01d708e0aa8", 0x0, 0x6}, 0x50)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.481231069s ago: executing program 0 (id=5885):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000006b8af8ff000010364c1807515228170000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000ffffb70200"/92], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r1 = dup(r0)
write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = creat(&(0x7f0000000380)='./file0\x00', 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20)

1.433726919s ago: executing program 0 (id=5887):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r1 = syz_open_dev$usbfs(0x0, 0x77, 0x141341)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0})

1.423632349s ago: executing program 3 (id=5888):
getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2)

1.36295783s ago: executing program 0 (id=5889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9bb4de75d30699c4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r2, &(0x7f0000000100)=[{&(0x7f0000001400)=""/214, 0xd6}, {0x0}], 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

1.236517491s ago: executing program 0 (id=5890):
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}})
io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0)

1.103898561s ago: executing program 4 (id=5891):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}]}, 0x1, 0x4f7, &(0x7f0000000540)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xc, 0x7, 0x4, 0x10000}, {0x2, 0x4, 0x5, 0x4}, {0x8f3, 0xa, 0x0, 0x1}]})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0x7, 0x4f1f, 0x5}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
r0 = socket(0x10, 0x400000000080803, 0x0)
fcntl$dupfd(r0, 0x0, r0)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000008500000023000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)

649.194235ms ago: executing program 1 (id=5893):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0) (async, rerun: 64)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000880)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000006}}, {@noblock_validity}, {@usrquota}, {@grpjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@errors_remount}, {@nolazytime}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0x4}, 0x32}]}, 0x1b, 0x4f5, &(0x7f0000000a00)="$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")
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000080)) (async)
fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) (async)
write$P9_RLERRORu(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16], 0x52) (async)
fchdir(0xffffffffffffffff) (async, rerun: 32)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32)
mount_setattr(r1, &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000005c0)={0x0, 0x31, 0x140000}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0xffe4, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2)

603.720365ms ago: executing program 1 (id=5894):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xe, 0x7, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0xc8, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (fail_nth: 5)

583.937476ms ago: executing program 1 (id=5895):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, 0x0, 0x0)
listen(r2, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10)
kexec_load(0x3e00, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
close(r5)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
socket(0x21, 0x80000, 0x3e53beab)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0)

185.487179ms ago: executing program 1 (id=5896):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b000000070021006262"], 0x1c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x50)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

184.874469ms ago: executing program 3 (id=5897):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000006b8af8ff000010364c1807515228170000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000ffffb70200"/92], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x80)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20)

184.091109ms ago: executing program 4 (id=5898):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
close(r2)

146.055629ms ago: executing program 0 (id=5899):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18)
setreuid(0xee00, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0xc0000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x1b}, 0x8000, 0xffffffff, 0x0, 0x9, 0x0, 0x268, 0xfff9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "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"})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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")
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000fff50000000000deffffff00feff000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
creat(&(0x7f0000000400)='./file0/../file0\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x4, 0x0, 0x1000f8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7)
creat(&(0x7f0000000ec0)='./file0\x00', 0x90)

131.513679ms ago: executing program 2 (id=5900):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9bb4de75d30699c4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r2, &(0x7f0000000100)=[{&(0x7f0000001400)=""/214, 0xd6}, {0x0}], 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})

123.936319ms ago: executing program 4 (id=5901):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mlockall(0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680))
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0xfffffffffffffccd)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=@newtaction={0x1b8, 0x30, 0x300, 0x80000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x1a4, 0x1, [@m_mirred={0x148, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x6}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x3, 0x7, 0x6}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x200, 0x1, 0x57b, 0x9}, 0x1, r5}}]}, {0xbb, 0xa, "f6388c92747e56686d9521cae3d6f6b724f90431f67813e55ce9ff193e608d5a4f14b1f726910cad1f4a2a344c1051581b9a78fcc1ee7786f10d9a93acd79b375f9e78a13b676db3223d75e71245a2b396b7743e524c25dc222eb010f268c2c371c4676ac1e8514dc4bcdca4d8a272139a16945e29d80daafa3a4bbd64edd6fbf95af46d665735986563cf877796f8799687e401914bd3747b09e208bbf446a7bc128735ced6a6d7bf07272a71207426fdb9b6e314cdd2"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x58, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}]}, {0x1d, 0x6, "85f5c5d9b77e55376753adac7dbdd17dff83b2ea9bbaca08b5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1b8}}, 0x0)
tkill(r1, 0x2e)
ptrace$peeksig(0x4209, r1, &(0x7f0000000340)={0x0, 0x0, 0x2e}, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'geneve1\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r7)

123.027149ms ago: executing program 3 (id=5902):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'})

79.910819ms ago: executing program 1 (id=5903):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000)

79.52706ms ago: executing program 1 (id=5904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002"], 0x9c}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

77.92695ms ago: executing program 3 (id=5905):
r0 = epoll_create1(0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x400)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x8004550f, &(0x7f0000002a40))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0xd0000015})
epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)

21.17062ms ago: executing program 3 (id=5906):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}]}}]}, 0x434}}, 0x0)

11.26141ms ago: executing program 0 (id=5907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@bh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@auto_da_alloc}, {@quota}]}, 0x7, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x1)
unlink(&(0x7f0000000180)='./file1\x00')

0s ago: executing program 3 (id=5908):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r1 = socket$packet(0x11, 0xa, 0x300)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x88040, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2d03f81cc0b001ed37ffdc2b99a12479000000", @ANYRES16=0x0, @ANYBLOB="0100030000000000000025000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r3 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f0000000040))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0)
r6 = socket$inet(0xa, 0x1, 0x84)
listen(r6, 0x8)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000700000000000000040000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x97, &(0x7f0000000140)=""/151, 0x41100, 0x31, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x8, 0x80, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r5], &(0x7f00000006c0)=[{0x3, 0x5, 0x9, 0x4}, {0x0, 0x5, 0x9}, {0x1, 0x2, 0xf, 0x1}, {0x5, 0x5, 0x9, 0x3a8a561f71cb645d}], 0x10, 0xffffff91, @void, @value}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000020000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000700)='cachefiles_ondemand_open\x00', r8}, 0x18)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x18)
fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xd, 0x673c})
fcntl$lock(r9, 0x26, &(0x7f0000001880)={0x2, 0x0, 0x6, 0x8})
r10 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x11e)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
sendfile(r10, r11, 0x0, 0x200)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x3}, 0x1c)
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'gre0\x00'})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)

kernel console output (not intermixed with test programs):

to 512
[  303.415891][T17593] EXT4-fs: Ignoring removed i_version option
[  303.479220][T17593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.491925][T17593] ext4 filesystem being mounted at /451/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.511979][T17593] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #4: comm syz.0.5252: corrupted inode contents
[  303.526827][T17593] EXT4-fs (loop0): Remounting filesystem read-only
[  303.554866][T17598] loop1: detected capacity change from 0 to 164
[  303.562766][T17598] ISOFS: unable to read i-node block
[  303.568288][T17598] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  303.587143][T17598] isofs_fill_super: get root inode failed
[  303.846273][T17616] loop3: detected capacity change from 0 to 2048
[  303.883155][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.907234][T17616] Alternate GPT is invalid, using primary GPT.
[  303.913577][T17616]  loop3: p1 p2 p3
[  304.118935][T17633] loop3: detected capacity change from 0 to 512
[  304.125893][T17631] loop0: detected capacity change from 0 to 2048
[  304.133542][T17633] EXT4-fs: Ignoring removed bh option
[  304.139003][T17633] EXT4-fs: Ignoring removed mblk_io_submit option
[  304.277264][T17631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.295747][T17631] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.377182][T17633] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  304.415538][T17633] System zones: 0-2, 18-18, 34-35
[  304.421606][T17633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.435077][T17633] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  304.464352][T17638] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5265: bg 0: block 345: padding at end of block bitmap is not set
[  304.528938][   T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  304.541873][   T37] EXT4-fs (loop0): This should not happen!! Data will be lost
[  304.541873][   T37] 
[  304.553580][T17641] loop1: detected capacity change from 0 to 512
[  304.565413][T17641] EXT4-fs: Ignoring removed i_version option
[  304.583964][T17641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.596705][T17641] ext4 filesystem being mounted at /491/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  304.616596][T17641] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #4: comm syz.1.5267: corrupted inode contents
[  304.628688][T17641] EXT4-fs (loop1): Remounting filesystem read-only
[  304.663114][  T374] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 656 with error 28
[  304.675863][  T374] EXT4-fs (loop0): This should not happen!! Data will be lost
[  304.675863][  T374] 
[  304.685542][  T374] EXT4-fs (loop0): Total free blocks count 0
[  304.691562][  T374] EXT4-fs (loop0): Free/Dirty block details
[  304.697501][  T374] EXT4-fs (loop0): free_blocks=0
[  304.702467][  T374] EXT4-fs (loop0): dirty_blocks=672
[  304.707774][  T374] EXT4-fs (loop0): Block reservation details
[  304.929028][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.966396][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.020937][T17670] 9pnet_fd: Insufficient options for proto=fd
[  305.301514][T17695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5285'.
[  305.312549][T17695] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5285'.
[  305.355003][T17699] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.446841][T17699] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.471255][T17706] loop2: detected capacity change from 0 to 1024
[  305.478319][T17706] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  305.489288][T17706] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  305.500922][T17706] JBD2: no valid journal superblock found
[  305.506767][T17706] EXT4-fs (loop2): Could not load journal inode
[  305.513475][T17701] loop1: detected capacity change from 0 to 1024
[  305.521074][T17699] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.528751][T17701] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  305.558124][T17706] loop2: detected capacity change from 0 to 2048
[  305.577264][T17699] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.591986][T17706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.616458][T17701] lo speed is unknown, defaulting to 1000
[  305.662409][T17699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.692169][T17699] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.727811][T17699] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.761134][T17699] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.032822][T17735] loop0: detected capacity change from 0 to 128
[  306.039755][T17735] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  306.052444][T17735] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  306.096824][ T2276] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  306.124839][T17738] loop0: detected capacity change from 0 to 512
[  306.134468][T17738] EXT4-fs: Ignoring removed i_version option
[  306.158420][T17738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.181942][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'.
[  306.191776][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'.
[  306.236400][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.257323][T17738] ext4 filesystem being mounted at /469/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.269067][T17748] loop3: detected capacity change from 0 to 512
[  306.275704][T17748] EXT4-fs: Ignoring removed i_version option
[  306.279158][T17738] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #4: comm syz.0.5302: corrupted inode contents
[  306.306235][T17738] EXT4-fs (loop0): Remounting filesystem read-only
[  306.318122][T17748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.345657][T17748] ext4 filesystem being mounted at /394/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.385541][T17748] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #4: comm syz.3.5307: corrupted inode contents
[  306.435824][T17766] loop2: detected capacity change from 0 to 164
[  306.570252][T17748] EXT4-fs (loop3): Remounting filesystem read-only
[  306.577042][T17766] ISOFS: unable to read i-node block
[  306.582354][T17766] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  306.589268][T17748] __quota_error: 35 callbacks suppressed
[  306.589284][T17748] Quota error (device loop3): write_blk: dquota write failed
[  306.604429][T17748] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  306.613528][T17748] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  306.666107][T17766] isofs_fill_super: get root inode failed
[  306.720064][T17778] loop1: detected capacity change from 0 to 164
[  306.747427][T17778] ISOFS: unable to read i-node block
[  306.752776][T17778] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  306.763972][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.779971][T17776] loop2: detected capacity change from 0 to 2048
[  306.790089][T17778] isofs_fill_super: get root inode failed
[  306.827666][T17776] Alternate GPT is invalid, using primary GPT.
[  306.834098][T17776]  loop2: p1 p2 p3
[  306.909294][T17789] loop0: detected capacity change from 0 to 1024
[  306.916647][T17789] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  306.927696][T17789] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  306.949155][T17789] JBD2: no valid journal superblock found
[  306.954948][T17789] EXT4-fs (loop0): Could not load journal inode
[  306.966143][T17791] loop1: detected capacity change from 0 to 1024
[  306.985180][T17789] loop0: detected capacity change from 0 to 2048
[  306.987715][T17791] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  307.013680][T17789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.076739][T17798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17798 comm=syz.4.5323
[  307.114248][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.134430][T17791] lo speed is unknown, defaulting to 1000
[  307.165694][   T30] audit: type=1326 audit(1742077959.462:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17797 comm="syz.4.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  307.189439][   T30] audit: type=1326 audit(1742077959.462:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17797 comm="syz.4.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  307.212984][   T30] audit: type=1326 audit(1742077959.462:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17797 comm="syz.4.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  307.236569][   T30] audit: type=1326 audit(1742077959.462:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17797 comm="syz.4.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  307.260663][   T30] audit: type=1326 audit(1742077959.462:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17797 comm="syz.4.5323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  307.727170][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.064642][T17818] loop3: detected capacity change from 0 to 2048
[  308.189519][   T30] audit: type=1326 audit(1742077960.492:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.2.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f560d169 code=0x7ffc0000
[  308.213213][   T30] audit: type=1326 audit(1742077960.492:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17821 comm="syz.2.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1f560d169 code=0x7ffc0000
[  308.240991][T17818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.280235][T17818] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.306718][T17820] syz.1.5328: attempt to access beyond end of device
[  308.306718][T17820] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  308.378787][T17834] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  308.398524][T17835] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5330: bg 0: block 345: padding at end of block bitmap is not set
[  308.426209][T17820] loop1: detected capacity change from 0 to 2048
[  308.434891][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'.
[  308.444485][T17839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5336'.
[  308.469329][T17820] Alternate GPT is invalid, using primary GPT.
[  308.475762][T17841] 9pnet_fd: Insufficient options for proto=fd
[  308.475773][T17820]  loop1: p1 p2 p3
[  308.498229][T17843] loop2: detected capacity change from 0 to 512
[  308.504740][T17843] EXT4-fs: Ignoring removed bh option
[  308.510205][T17843] EXT4-fs: Ignoring removed mblk_io_submit option
[  308.545860][ T2276] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1372 with error 117
[  308.558595][ T2276] EXT4-fs (loop3): This should not happen!! Data will be lost
[  308.558595][ T2276] 
[  308.577293][T17848] siw: device registration error -23
[  308.587617][T17843] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  308.599771][T17843] System zones: 0-2, 18-18, 34-35
[  308.606723][T17843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.619477][T17843] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  308.698027][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.753345][T17865] loop1: detected capacity change from 0 to 2048
[  308.764566][T17868] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  308.783887][T17865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.791941][T17856] syz.4.5343: attempt to access beyond end of device
[  308.791941][T17856] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  308.809448][T17865] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.883186][T17873] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5347: bg 0: block 345: padding at end of block bitmap is not set
[  308.901182][T17875] 9pnet_fd: Insufficient options for proto=fd
[  308.926999][   T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1474 with error 117
[  308.939716][   T37] EXT4-fs (loop1): This should not happen!! Data will be lost
[  308.939716][   T37] 
[  308.957196][T17881] can0: slcan on ttyS3.
[  308.994255][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.003548][T17881] can0 (unregistered): slcan off ttyS3.
[  309.035903][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'.
[  309.044994][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'.
[  309.136410][T17898] syz.3.5360: attempt to access beyond end of device
[  309.136410][T17898] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  309.163053][T17898] loop3: detected capacity change from 0 to 2048
[  309.297679][T17898] Alternate GPT is invalid, using primary GPT.
[  309.304064][T17898]  loop3: p1 p2 p3
[  309.362609][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.498964][T17908] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  309.561465][T17910] loop0: detected capacity change from 0 to 2048
[  309.571780][T17914] 9pnet_fd: Insufficient options for proto=fd
[  309.590170][T17910] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.613036][T17918] can0: slcan on ttyS3.
[  309.661317][T17923] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5365: bg 0: block 345: padding at end of block bitmap is not set
[  309.665719][T17918] can0 (unregistered): slcan off ttyS3.
[  309.750013][   T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1126 with error 117
[  309.762732][   T37] EXT4-fs (loop0): This should not happen!! Data will be lost
[  309.762732][   T37] 
[  309.876057][T17929] loop3: detected capacity change from 0 to 1024
[  309.895837][T17929] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  309.988374][T17929] lo speed is unknown, defaulting to 1000
[  310.476219][T17960] netlink: 'syz.1.5382': attribute type 13 has an invalid length.
[  310.502174][T17960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.645195][T17967] loop3: detected capacity change from 0 to 164
[  310.652239][T17967] ISOFS: unable to read i-node block
[  310.657581][T17967] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  310.666849][T17967] isofs_fill_super: get root inode failed
[  310.798936][T17971] loop3: detected capacity change from 0 to 1024
[  310.806318][T17971] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  310.817238][T17971] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  310.828121][T17971] JBD2: no valid journal superblock found
[  310.833883][T17971] EXT4-fs (loop3): Could not load journal inode
[  310.851656][T17971] loop3: detected capacity change from 0 to 2048
[  310.867029][T17971] EXT4-fs mount: 2 callbacks suppressed
[  310.867041][T17971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.077962][T17975] 9pnet_fd: Insufficient options for proto=fd
[  311.121116][T17981] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  311.135200][T17983] loop0: detected capacity change from 0 to 164
[  311.143615][T17983] ISOFS: unable to read i-node block
[  311.148967][T17983] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  311.158913][T17983] isofs_fill_super: get root inode failed
[  311.232497][T17997] can0: slcan on ttyS3.
[  311.275345][T18000] 9pnet_fd: Insufficient options for proto=fd
[  311.275696][T17997] can0 (unregistered): slcan off ttyS3.
[  311.338398][T18008] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  311.366875][T18012] loop0: detected capacity change from 0 to 164
[  311.374232][T18012] ISOFS: unable to read i-node block
[  311.379635][T18012] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  311.390555][T18012] isofs_fill_super: get root inode failed
[  311.513086][T18010] syz.4.5404: attempt to access beyond end of device
[  311.513086][T18010] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  311.557864][T18027] netlink: 'syz.0.5410': attribute type 13 has an invalid length.
[  311.574876][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.594087][T18027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.635351][T18031] syz.3.5412: attempt to access beyond end of device
[  311.635351][T18031] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  311.664364][T18031] loop3: detected capacity change from 0 to 2048
[  311.716851][T18031] Alternate GPT is invalid, using primary GPT.
[  311.723238][T18031]  loop3: p1 p2 p3
[  311.774455][T18042] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  312.475337][T18069] syz.0.5427: attempt to access beyond end of device
[  312.475337][T18069] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  312.503875][T18069] loop0: detected capacity change from 0 to 2048
[  312.547073][T18069] Alternate GPT is invalid, using primary GPT.
[  312.553471][T18069]  loop0: p1 p2 p3
[  312.596320][T18073] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  312.607955][T18075] loop3: detected capacity change from 0 to 164
[  312.615028][T18075] ISOFS: unable to read i-node block
[  312.620431][T18075] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  312.630199][T18075] isofs_fill_super: get root inode failed
[  312.653318][T18079] 9pnet_fd: Insufficient options for proto=fd
[  312.967428][T18096] loop3: detected capacity change from 0 to 1024
[  312.988621][T18096] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  313.102050][T18105] 9pnet_fd: Insufficient options for proto=fd
[  313.246106][T18106] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  313.490522][T18125] syz.2.5450: attempt to access beyond end of device
[  313.490522][T18125] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  313.544297][T18125] loop2: detected capacity change from 0 to 2048
[  313.545930][T18132] syz.1.5443: attempt to access beyond end of device
[  313.545930][T18132] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  313.591863][T18112] loop1: detected capacity change from 0 to 2048
[  313.596594][T18125] Alternate GPT is invalid, using primary GPT.
[  313.604592][T18125]  loop2: p1 p2 p3
[  313.640122][T18112] Alternate GPT is invalid, using primary GPT.
[  313.646513][T18112]  loop1: p1 p2 p3
[  313.669196][T18137] loop2: detected capacity change from 0 to 512
[  313.676839][T18137] EXT4-fs: Ignoring removed i_version option
[  313.718647][T18140] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  313.727649][T18137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.745796][T18137] ext4 filesystem being mounted at /544/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  313.754103][T18144] loop3: detected capacity change from 0 to 512
[  313.766254][T18137] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.5453: corrupted inode contents
[  313.770986][T18144] EXT4-fs: Ignoring removed bh option
[  313.783575][T18144] EXT4-fs: Ignoring removed mblk_io_submit option
[  313.790344][T18137] EXT4-fs (loop2): Remounting filesystem read-only
[  313.797918][T18137] __quota_error: 25 callbacks suppressed
[  313.797938][T18137] Quota error (device loop2): write_blk: dquota write failed
[  313.811190][T18137] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  313.820428][T18137] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  313.858590][T18144] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  313.869075][T18153] loop1: detected capacity change from 0 to 164
[  313.877079][T18153] ISOFS: unable to read i-node block
[  313.882392][T18153] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  313.891731][T18153] isofs_fill_super: get root inode failed
[  313.900031][T18144] System zones: 0-2, 18-18, 34-35
[  313.946114][T18144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.974267][T18144] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  314.031503][   T30] audit: type=1326 audit(1742077966.342:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18143 comm="syz.3.5454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f256efad169 code=0x0
[  314.134932][T18163] loop0: detected capacity change from 0 to 1024
[  314.171712][T18163] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  314.182671][T18163] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  314.227131][T18163] JBD2: no valid journal superblock found
[  314.232912][T18163] EXT4-fs (loop0): Could not load journal inode
[  314.276035][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.312049][T18163] loop0: detected capacity change from 0 to 2048
[  314.352346][T18177] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  314.372641][T18183] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  314.373536][T18163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.588067][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.630946][T18208] netlink: 'syz.1.5476': attribute type 13 has an invalid length.
[  314.649176][T18208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  314.716637][T18216] can0: slcan on ttyS3.
[  314.765505][T18216] can0 (unregistered): slcan off ttyS3.
[  314.819813][   T30] audit: type=1326 audit(1742077967.132:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18220 comm="syz.3.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  314.861821][   T30] audit: type=1326 audit(1742077967.132:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18220 comm="syz.3.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  314.885556][   T30] audit: type=1326 audit(1742077967.132:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18220 comm="syz.3.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  314.909128][   T30] audit: type=1326 audit(1742077967.132:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18220 comm="syz.3.5482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  314.944583][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.010935][   T30] audit: type=1326 audit(1742077967.322:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18233 comm="syz.4.5487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c5ff6d169 code=0x0
[  315.148396][T18239] syz.0.5489: attempt to access beyond end of device
[  315.148396][T18239] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  315.170619][T18239] loop0: detected capacity change from 0 to 2048
[  315.216805][T18239] Alternate GPT is invalid, using primary GPT.
[  315.223206][T18239]  loop0: p1 p2 p3
[  315.311960][   T30] audit: type=1326 audit(1742077967.622:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18252 comm="syz.0.5493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4e57d169 code=0x7ffc0000
[  315.358686][T18255] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  315.432459][T18261] can0: slcan on ttyS3.
[  315.490168][T18266] loop2: detected capacity change from 0 to 164
[  315.496641][T18261] can0 (unregistered): slcan off ttyS3.
[  315.512547][T18268] loop0: detected capacity change from 0 to 1024
[  315.519648][T18268] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  315.530588][T18268] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  315.534822][T18266] ISOFS: unable to read i-node block
[  315.545830][T18266] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  315.555894][T18268] JBD2: no valid journal superblock found
[  315.557057][T18266] isofs_fill_super: get root inode failed
[  315.561622][T18268] EXT4-fs (loop0): Could not load journal inode
[  315.597035][T18268] loop0: detected capacity change from 0 to 2048
[  315.604734][T18272] loop2: detected capacity change from 0 to 2048
[  315.620359][T18268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.634923][T18272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.671974][T18272] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.742089][T18280] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5501: bg 0: block 345: padding at end of block bitmap is not set
[  315.787865][ T1316] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1150 with error 117
[  315.800666][ T1316] EXT4-fs (loop2): This should not happen!! Data will be lost
[  315.800666][ T1316] 
[  315.917065][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.991672][T18291] 9pnet_fd: Insufficient options for proto=fd
[  316.043943][T18282] loop1: detected capacity change from 0 to 2048
[  316.069253][T18296] netlink: 'syz.4.5509': attribute type 13 has an invalid length.
[  316.086765][T18282] Alternate GPT is invalid, using primary GPT.
[  316.093128][T18282]  loop1: p1 p2 p3
[  316.100760][T18296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  316.188589][T18298] can0: slcan on ttyS3.
[  316.218859][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'.
[  316.228210][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'.
[  316.237228][T18298] can0 (unregistered): slcan off ttyS3.
[  316.237734][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'.
[  316.251847][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5510'.
[  316.273074][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.336220][T18308] loop0: detected capacity change from 0 to 512
[  316.344522][T18308] EXT4-fs: Ignoring removed bh option
[  316.350014][T18308] EXT4-fs: Ignoring removed mblk_io_submit option
[  316.377260][T18308] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  316.385417][T18308] System zones: 0-2, 18-18, 34-35
[  316.392097][T18308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.404866][T18308] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.429269][T18302] loop1: detected capacity change from 0 to 2048
[  316.487276][T18302] Alternate GPT is invalid, using primary GPT.
[  316.493624][T18302]  loop1: p1 p2 p3
[  316.567405][T18329] 9pnet_fd: Insufficient options for proto=fd
[  316.595194][T18333] loop1: detected capacity change from 0 to 512
[  316.601844][T18333] EXT4-fs: Ignoring removed i_version option
[  316.617081][T18333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.629763][T18333] ext4 filesystem being mounted at /544/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.641243][T18333] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #4: comm syz.1.5521: corrupted inode contents
[  316.653748][T18333] EXT4-fs (loop1): Remounting filesystem read-only
[  316.885060][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.906067][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'.
[  316.926149][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'.
[  316.945638][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'.
[  316.954706][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5525'.
[  316.966714][T18348] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  316.995561][T18349] loop2: detected capacity change from 0 to 1024
[  317.005650][T18349] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  317.148905][T18363] loop1: detected capacity change from 0 to 1024
[  317.179113][T18363] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  317.190075][T18363] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  317.200827][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.203528][T18363] JBD2: no valid journal superblock found
[  317.215858][T18363] EXT4-fs (loop1): Could not load journal inode
[  317.268710][T18363] loop1: detected capacity change from 0 to 2048
[  317.309859][T18363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.372919][T18376] loop0: detected capacity change from 0 to 512
[  317.390558][T18376] EXT4-fs: Ignoring removed i_version option
[  317.408490][T18376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  317.426308][T18376] ext4 filesystem being mounted at /512/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  317.438645][T18376] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #4: comm syz.0.5534: corrupted inode contents
[  317.450871][T18376] EXT4-fs (loop0): Remounting filesystem read-only
[  317.953769][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.977723][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.649635][T18410] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  318.718259][T18414] loop0: detected capacity change from 0 to 2048
[  318.732398][T18417] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  318.757728][T18414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.793766][T18414] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.808923][T18425] loop3: detected capacity change from 0 to 512
[  318.815879][T18425] EXT4-fs: Ignoring removed bh option
[  318.821380][T18425] EXT4-fs: Ignoring removed mblk_io_submit option
[  318.851314][T18425] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  318.862857][T18425] System zones: 0-2, 18-18, 34-35
[  318.870915][T18425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.885691][T18433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5546: bg 0: block 345: padding at end of block bitmap is not set
[  318.895875][T18425] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  318.931872][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  318.931887][   T30] audit: type=1326 audit(1742077971.232:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18424 comm="syz.3.5549" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f256efad169 code=0x0
[  318.988773][  T374] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  319.001474][  T374] EXT4-fs (loop0): This should not happen!! Data will be lost
[  319.001474][  T374] 
[  319.062454][T18450] loop1: detected capacity change from 0 to 164
[  319.069266][  T374] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 678 with error 28
[  319.081935][  T374] EXT4-fs (loop0): This should not happen!! Data will be lost
[  319.081935][  T374] 
[  319.081956][  T374] EXT4-fs (loop0): Total free blocks count 0
[  319.097672][  T374] EXT4-fs (loop0): Free/Dirty block details
[  319.097878][T18450] ISOFS: unable to read i-node block
[  319.103566][  T374] EXT4-fs (loop0): free_blocks=0
[  319.103584][  T374] EXT4-fs (loop0): dirty_blocks=688
[  319.108965][T18450] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  319.113814][  T374] EXT4-fs (loop0): Block reservation details
[  319.134311][T18450] isofs_fill_super: get root inode failed
[  319.176809][T18454] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  319.655290][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.885075][   T30] audit: type=1400 audit(1742077972.192:4809): avc:  denied  { shutdown } for  pid=18474 comm="syz.4.5568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  319.924241][T18482] FAULT_INJECTION: forcing a failure.
[  319.924241][T18482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.937534][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.3.5561 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  319.937564][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  319.937579][T18482] Call Trace:
[  319.937641][T18482]  <TASK>
[  319.937651][T18482]  dump_stack_lvl+0xf2/0x150
[  319.937698][T18482]  dump_stack+0x15/0x1a
[  319.937719][T18482]  should_fail_ex+0x24a/0x260
[  319.937817][T18482]  should_fail+0xb/0x10
[  319.937852][T18482]  should_fail_usercopy+0x1a/0x20
[  319.937922][T18482]  _copy_from_user+0x1c/0xa0
[  319.937999][T18482]  memdup_user+0x64/0xc0
[  319.938032][T18482]  proc_pid_attr_write+0x15d/0x220
[  319.938067][T18482]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  319.938156][T18482]  vfs_write+0x27d/0x920
[  319.938204][T18482]  ? __fget_files+0x17c/0x1c0
[  319.938242][T18482]  ksys_write+0xe8/0x1b0
[  319.938269][T18482]  __x64_sys_write+0x42/0x50
[  319.938307][T18482]  x64_sys_call+0x287e/0x2dc0
[  319.938339][T18482]  do_syscall_64+0xc9/0x1c0
[  319.938371][T18482]  ? clear_bhb_loop+0x55/0xb0
[  319.938415][T18482]  ? clear_bhb_loop+0x55/0xb0
[  319.938449][T18482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.938482][T18482] RIP: 0033:0x7f256efad169
[  319.938531][T18482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.938611][T18482] RSP: 002b:00007f256d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.938684][T18482] RAX: ffffffffffffffda RBX: 00007f256f1c5fa0 RCX: 00007f256efad169
[  319.938700][T18482] RDX: 000000000000001d RSI: 0000400000000100 RDI: 0000000000000005
[  319.938715][T18482] RBP: 00007f256d617090 R08: 0000000000000000 R09: 0000000000000000
[  319.938785][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.938800][T18482] R13: 0000000000000000 R14: 00007f256f1c5fa0 R15: 00007ffc98db7918
[  319.938903][T18482]  </TASK>
[  320.019518][T18480] syz.2.5569: attempt to access beyond end of device
[  320.019518][T18480] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  320.168240][T18480] loop2: detected capacity change from 0 to 2048
[  320.176760][T18493] can0: slcan on ttyS3.
[  320.207421][T18480] Alternate GPT is invalid, using primary GPT.
[  320.213742][T18480]  loop2: p1 p2 p3
[  320.218668][T18493] can0 (unregistered): slcan off ttyS3.
[  320.298196][T18503] loop1: detected capacity change from 0 to 128
[  320.317593][T18503] SELinux: security_context_str_to_sid ({ÿ) failed with errno=-22
[  320.335678][   T30] audit: type=1400 audit(1742077972.632:4810): avc:  denied  { mounton } for  pid=18502 comm="syz.1.5576" path="/558/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  320.345724][T18503] syz.1.5576: attempt to access beyond end of device
[  320.345724][T18503] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[  320.411896][T18512] syz.1.5576: attempt to access beyond end of device
[  320.411896][T18512] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128
[  320.425925][T18512] syz.1.5576: attempt to access beyond end of device
[  320.425925][T18512] loop1: rw=0, sector=145, nr_sectors = 8 limit=128
[  320.441291][T18514] syz.2.5579: attempt to access beyond end of device
[  320.441291][T18514] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  320.465659][T18514] loop2: detected capacity change from 0 to 2048
[  320.488951][   T30] audit: type=1400 audit(1742077972.782:4811): avc:  denied  { map } for  pid=18502 comm="syz.1.5576" path="socket:[62014]" dev="sockfs" ino=62014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  320.512566][   T30] audit: type=1400 audit(1742077972.782:4812): avc:  denied  { read } for  pid=18502 comm="syz.1.5576" path="socket:[62014]" dev="sockfs" ino=62014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  320.517657][T18514] Alternate GPT is invalid, using primary GPT.
[  320.542448][T18514]  loop2: p1 p2 p3
[  320.592362][T18521] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  320.800258][T18523] syz.0.5583: attempt to access beyond end of device
[  320.800258][T18523] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  320.826206][T18523] loop0: detected capacity change from 0 to 2048
[  320.868121][T18523] Alternate GPT is invalid, using primary GPT.
[  320.874527][T18523]  loop0: p1 p2 p3
[  320.976832][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'.
[  320.987124][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'.
[  321.111622][T18544] FAULT_INJECTION: forcing a failure.
[  321.111622][T18544] name failslab, interval 1, probability 0, space 0, times 0
[  321.124434][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.3.5592 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  321.124585][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  321.124599][T18544] Call Trace:
[  321.124606][T18544]  <TASK>
[  321.124613][T18544]  dump_stack_lvl+0xf2/0x150
[  321.124644][T18544]  dump_stack+0x15/0x1a
[  321.124670][T18544]  should_fail_ex+0x24a/0x260
[  321.124707][T18544]  ? slhc_init+0x57/0x380
[  321.124759][T18544]  should_failslab+0x8f/0xb0
[  321.124804][T18544]  __kmalloc_cache_noprof+0x4e/0x320
[  321.124904][T18544]  slhc_init+0x57/0x380
[  321.124933][T18544]  slip_open+0x54b/0x920
[  321.124960][T18544]  ? up_write+0x30/0xf0
[  321.125060][T18544]  tty_ldisc_open+0x65/0xb0
[  321.125092][T18544]  tty_set_ldisc+0x205/0x3b0
[  321.125125][T18544]  tiocsetd+0x52/0x60
[  321.125170][T18544]  tty_ioctl+0xa94/0xbe0
[  321.125199][T18544]  ? __pfx_tty_ioctl+0x10/0x10
[  321.125232][T18544]  __se_sys_ioctl+0xc9/0x140
[  321.125264][T18544]  __x64_sys_ioctl+0x43/0x50
[  321.125387][T18544]  x64_sys_call+0x1690/0x2dc0
[  321.125418][T18544]  do_syscall_64+0xc9/0x1c0
[  321.125459][T18544]  ? clear_bhb_loop+0x55/0xb0
[  321.125567][T18544]  ? clear_bhb_loop+0x55/0xb0
[  321.125602][T18544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  321.125635][T18544] RIP: 0033:0x7f256efad169
[  321.125654][T18544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.125772][T18544] RSP: 002b:00007f256d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.125796][T18544] RAX: ffffffffffffffda RBX: 00007f256f1c5fa0 RCX: 00007f256efad169
[  321.125810][T18544] RDX: 00004000000002c0 RSI: 0000000000005423 RDI: 0000000000000005
[  321.125825][T18544] RBP: 00007f256d617090 R08: 0000000000000000 R09: 0000000000000000
[  321.125840][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  321.125853][T18544] R13: 0000000000000000 R14: 00007f256f1c5fa0 R15: 00007ffc98db7918
[  321.125872][T18544]  </TASK>
[  321.326728][T18547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5592'.
[  321.335796][T18547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5592'.
[  321.380624][T18541] loop0: detected capacity change from 0 to 1024
[  321.418251][T18541] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  321.429256][T18541] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  321.701008][T18541] JBD2: no valid journal superblock found
[  321.706878][T18541] EXT4-fs (loop0): Could not load journal inode
[  321.728018][T18551] loop2: detected capacity change from 0 to 2048
[  321.741932][T18559] 9pnet: Could not find request transport: fd0x0000000000000003
[  321.787279][T18541] loop0: detected capacity change from 0 to 2048
[  321.807609][T18551] Alternate GPT is invalid, using primary GPT.
[  321.813913][T18551]  loop2: p1 p2 p3
[  321.837090][T18541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.879153][T18566] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  321.903694][T18568] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.938848][T18570] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  321.953549][T18572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.979770][T18568] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.027192][T18572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.049381][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.067098][T18568] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.096684][T18582] can0: slcan on ttyS3.
[  322.102464][T18572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.148469][T18568] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.186058][T18582] can0 (unregistered): slcan off ttyS3.
[  322.192718][T18572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.220638][T18586] 9pnet: Could not find request transport: fd0x0000000000000003
[  322.237063][T18568] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.248649][T18568] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.267545][T18568] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.283364][T18572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.294002][T18591] loop3: detected capacity change from 0 to 2048
[  322.294806][T18568] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.312813][T18572] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.324962][T18572] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.337633][T18572] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.364195][T18591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.392070][T18598] loop2: detected capacity change from 0 to 128
[  322.397120][T18600] loop1: detected capacity change from 0 to 512
[  322.404976][T18600] EXT4-fs: Ignoring removed i_version option
[  322.411863][T18591] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.428676][T18591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5608: bg 0: block 345: padding at end of block bitmap is not set
[  322.444954][T18600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.457762][T18600] ext4 filesystem being mounted at /563/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.469010][T18598] FAULT_INJECTION: forcing a failure.
[  322.469010][T18598] name failslab, interval 1, probability 0, space 0, times 0
[  322.470043][T18600] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #4: comm syz.1.5611: corrupted inode contents
[  322.481672][T18598] CPU: 1 UID: 0 PID: 18598 Comm: syz.2.5610 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  322.481705][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  322.481720][T18598] Call Trace:
[  322.481729][T18598]  <TASK>
[  322.481742][T18598]  dump_stack_lvl+0xf2/0x150
[  322.481774][T18598]  dump_stack+0x15/0x1a
[  322.481801][T18598]  should_fail_ex+0x24a/0x260
[  322.481858][T18598]  should_failslab+0x8f/0xb0
[  322.481900][T18598]  kmem_cache_alloc_noprof+0x52/0x320
[  322.481963][T18598]  ? getname_flags+0x81/0x3b0
[  322.482006][T18598]  ? should_fail_ex+0xd7/0x260
[  322.482044][T18598]  getname_flags+0x81/0x3b0
[  322.482088][T18598]  user_path_at+0x26/0x120
[  322.482132][T18598]  __se_sys_mount+0x24b/0x2d0
[  322.482171][T18598]  ? fput+0x1c4/0x200
[  322.482200][T18598]  __x64_sys_mount+0x67/0x80
[  322.482284][T18598]  x64_sys_call+0x2c84/0x2dc0
[  322.482319][T18598]  do_syscall_64+0xc9/0x1c0
[  322.482433][T18598]  ? clear_bhb_loop+0x55/0xb0
[  322.482469][T18598]  ? clear_bhb_loop+0x55/0xb0
[  322.482503][T18598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.482538][T18598] RIP: 0033:0x7fe1f560d169
[  322.482559][T18598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.482656][T18598] RSP: 002b:00007fe1f3c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  322.482702][T18598] RAX: ffffffffffffffda RBX: 00007fe1f5825fa0 RCX: 00007fe1f560d169
[  322.482718][T18598] RDX: 00004000000000c0 RSI: 0000400000000240 RDI: 0000000000000000
[  322.482733][T18598] RBP: 00007fe1f3c77090 R08: 0000400000000000 R09: 0000000000000000
[  322.482750][T18598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.482817][T18598] R13: 0000000000000000 R14: 00007fe1f5825fa0 R15: 00007ffddd3b17a8
[  322.482839][T18598]  </TASK>
[  322.500854][T18598] syz.2.5610: attempt to access beyond end of device
[  322.500854][T18598] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[  322.505968][T18600] EXT4-fs (loop1): Remounting filesystem read-only
[  322.540283][T18598] syz.2.5610: attempt to access beyond end of device
[  322.540283][T18598] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128
[  322.636663][T18600] Quota error (device loop1): write_blk: dquota write failed
[  322.643272][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.649234][T18600] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  322.666034][T18598] syz.2.5610: attempt to access beyond end of device
[  322.666034][T18598] loop2: rw=0, sector=145, nr_sectors = 8 limit=128
[  322.673212][T18600] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  322.908934][T18620] can0: slcan on ttyS3.
[  322.976376][T18620] can0 (unregistered): slcan off ttyS3.
[  323.032823][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.033698][T18627] 9pnet: Could not find request transport: fd0x0000000000000003
[  323.183103][T18630] syz.3.5620: attempt to access beyond end of device
[  323.183103][T18630] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  323.206819][T18630] loop3: detected capacity change from 0 to 2048
[  323.224618][T18635] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  323.247115][T18630] Alternate GPT is invalid, using primary GPT.
[  323.253467][T18630]  loop3: p1 p2 p3
[  323.275121][T18637] 9pnet_fd: Insufficient options for proto=fd
[  323.428465][T18645] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  323.458820][T18649] loop3: detected capacity change from 0 to 128
[  323.484393][T18652] can0: slcan on ttyS3.
[  323.538323][T18655] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.545599][T18652] can0 (unregistered): slcan off ttyS3.
[  323.587131][T18655] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.649731][T18655] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.697074][T18655] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.716119][T18665] 9pnet_fd: Insufficient options for proto=fd
[  323.949387][T18683] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  324.163075][   T30] audit: type=1326 audit(1742077976.472:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.186676][   T30] audit: type=1326 audit(1742077976.472:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.229583][   T30] audit: type=1326 audit(1742077976.522:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.253164][   T30] audit: type=1326 audit(1742077976.522:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.276708][   T30] audit: type=1326 audit(1742077976.522:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.300198][   T30] audit: type=1326 audit(1742077976.522:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.323806][   T30] audit: type=1326 audit(1742077976.522:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.347258][   T30] audit: type=1326 audit(1742077976.532:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18689 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f256efdfa25 code=0x7ffc0000
[  324.370752][   T30] audit: type=1326 audit(1742077976.532:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.394296][   T30] audit: type=1326 audit(1742077976.532:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.3.5642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  324.915345][T18704] FAULT_INJECTION: forcing a failure.
[  324.915345][T18704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.928508][T18704] CPU: 1 UID: 0 PID: 18704 Comm: syz.0.5646 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  324.928534][T18704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  324.928547][T18704] Call Trace:
[  324.928553][T18704]  <TASK>
[  324.928560][T18704]  dump_stack_lvl+0xf2/0x150
[  324.928677][T18704]  dump_stack+0x15/0x1a
[  324.928709][T18704]  should_fail_ex+0x24a/0x260
[  324.928745][T18704]  should_fail+0xb/0x10
[  324.928805][T18704]  should_fail_usercopy+0x1a/0x20
[  324.928910][T18704]  _copy_from_user+0x1c/0xa0
[  324.928934][T18704]  copy_msghdr_from_user+0x54/0x2a0
[  324.928972][T18704]  ? __fget_files+0x17c/0x1c0
[  324.929014][T18704]  __sys_sendmsg+0x13e/0x230
[  324.929053][T18704]  __x64_sys_sendmsg+0x46/0x50
[  324.929108][T18704]  x64_sys_call+0x2734/0x2dc0
[  324.929190][T18704]  do_syscall_64+0xc9/0x1c0
[  324.929222][T18704]  ? clear_bhb_loop+0x55/0xb0
[  324.929252][T18704]  ? clear_bhb_loop+0x55/0xb0
[  324.929285][T18704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.929377][T18704] RIP: 0033:0x7efd4e57d169
[  324.929395][T18704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.929418][T18704] RSP: 002b:00007efd4cbe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.929440][T18704] RAX: ffffffffffffffda RBX: 00007efd4e795fa0 RCX: 00007efd4e57d169
[  324.929455][T18704] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003
[  324.929469][T18704] RBP: 00007efd4cbe7090 R08: 0000000000000000 R09: 0000000000000000
[  324.929480][T18704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.929496][T18704] R13: 0000000000000000 R14: 00007efd4e795fa0 R15: 00007ffc8e0fffe8
[  324.929515][T18704]  </TASK>
[  324.930985][T18703] 9pnet_fd: Insufficient options for proto=fd
[  325.154233][T18709] 9pnet_fd: Insufficient options for proto=fd
[  325.195332][T18716] loop0: detected capacity change from 0 to 128
[  325.241709][T18723] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  325.263015][T18716] bio_check_eod: 1 callbacks suppressed
[  325.263033][T18716] syz.0.5651: attempt to access beyond end of device
[  325.263033][T18716] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128
[  325.274526][T18725] loop3: detected capacity change from 0 to 2048
[  325.307308][T18725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.318153][T18716] FAULT_INJECTION: forcing a failure.
[  325.318153][T18716] name failslab, interval 1, probability 0, space 0, times 0
[  325.319615][T18725] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.331957][T18716] CPU: 0 UID: 0 PID: 18716 Comm: syz.0.5651 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  325.331992][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  325.332008][T18716] Call Trace:
[  325.332016][T18716]  <TASK>
[  325.332028][T18716]  dump_stack_lvl+0xf2/0x150
[  325.332065][T18716]  dump_stack+0x15/0x1a
[  325.332094][T18716]  should_fail_ex+0x24a/0x260
[  325.332133][T18716]  should_failslab+0x8f/0xb0
[  325.332173][T18716]  kmem_cache_alloc_noprof+0x52/0x320
[  325.332200][T18716]  ? vm_area_dup+0x98/0x130
[  325.332233][T18716]  vm_area_dup+0x98/0x130
[  325.332262][T18716]  __split_vma+0xf7/0x6a0
[  325.332294][T18716]  vma_modify+0x1a2/0x200
[  325.332317][T18716]  vma_modify_flags+0xf1/0x120
[  325.332346][T18716]  mlock_fixup+0x113/0x450
[  325.332383][T18716]  apply_vma_lock_flags+0x194/0x240
[  325.332424][T18716]  do_mlock+0x3f4/0x570
[  325.332463][T18716]  ? fput+0x1c4/0x200
[  325.332488][T18716]  ? ksys_write+0x176/0x1b0
[  325.332523][T18716]  __x64_sys_mlock2+0x72/0x90
[  325.332555][T18716]  x64_sys_call+0x971/0x2dc0
[  325.332589][T18716]  do_syscall_64+0xc9/0x1c0
[  325.332630][T18716]  ? clear_bhb_loop+0x55/0xb0
[  325.332665][T18716]  ? clear_bhb_loop+0x55/0xb0
[  325.332699][T18716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.332734][T18716] RIP: 0033:0x7efd4e57d169
[  325.332755][T18716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.332777][T18716] RSP: 002b:00007efd4cbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145
[  325.332803][T18716] RAX: ffffffffffffffda RBX: 00007efd4e795fa0 RCX: 00007efd4e57d169
[  325.332819][T18716] RDX: 0000000000000000 RSI: 00000000000040ef RDI: 0000400000004000
[  325.332834][T18716] RBP: 00007efd4cbe7090 R08: 0000000000000000 R09: 0000000000000000
[  325.332850][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.332865][T18716] R13: 0000000000000000 R14: 00007efd4e795fa0 R15: 00007ffc8e0fffe8
[  325.332887][T18716]  </TASK>
[  325.562193][T18725] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5654: bg 0: block 345: padding at end of block bitmap is not set
[  325.600857][T18735] syz.2.5658: attempt to access beyond end of device
[  325.600857][T18735] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  325.622005][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.640755][T18735] loop2: detected capacity change from 0 to 2048
[  325.687470][T18735] Alternate GPT is invalid, using primary GPT.
[  325.693881][T18735]  loop2: p1 p2 p3
[  325.749642][T18745] 9pnet_fd: Insufficient options for proto=fd
[  325.771966][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5661'.
[  326.001736][T18743] lo speed is unknown, defaulting to 1000
[  326.182098][T18770] siw: device registration error -23
[  326.899167][T18788] 9pnet_fd: Insufficient options for proto=fd
[  326.926202][T18792] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5675'.
[  326.946324][T18792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5675'.
[  326.955376][T18792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5675'.
[  327.012577][T18798] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  327.036258][T18801] FAULT_INJECTION: forcing a failure.
[  327.036258][T18801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.049512][T18801] CPU: 1 UID: 0 PID: 18801 Comm: syz.2.5678 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  327.049543][T18801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  327.049558][T18801] Call Trace:
[  327.049566][T18801]  <TASK>
[  327.049576][T18801]  dump_stack_lvl+0xf2/0x150
[  327.049685][T18801]  dump_stack+0x15/0x1a
[  327.049729][T18801]  should_fail_ex+0x24a/0x260
[  327.049838][T18801]  should_fail+0xb/0x10
[  327.049872][T18801]  should_fail_usercopy+0x1a/0x20
[  327.049907][T18801]  _copy_from_iter+0xd5/0xd00
[  327.050073][T18801]  ? alloc_pages_mpol+0x208/0x260
[  327.050107][T18801]  copy_page_from_iter+0x14f/0x280
[  327.050146][T18801]  tun_get_user+0x68b/0x25c0
[  327.050174][T18801]  ? _parse_integer+0x27/0x30
[  327.050274][T18801]  ? ref_tracker_alloc+0x1f5/0x2f0
[  327.050330][T18801]  tun_chr_write_iter+0x188/0x240
[  327.050361][T18801]  vfs_write+0x77b/0x920
[  327.050385][T18801]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  327.050409][T18801]  ksys_write+0xe8/0x1b0
[  327.050486][T18801]  __x64_sys_write+0x42/0x50
[  327.050516][T18801]  x64_sys_call+0x287e/0x2dc0
[  327.050598][T18801]  do_syscall_64+0xc9/0x1c0
[  327.050624][T18801]  ? clear_bhb_loop+0x55/0xb0
[  327.050697][T18801]  ? clear_bhb_loop+0x55/0xb0
[  327.050720][T18801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.050743][T18801] RIP: 0033:0x7fe1f560bc1f
[  327.050756][T18801] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  327.050772][T18801] RSP: 002b:00007fe1f3c77000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  327.050843][T18801] RAX: ffffffffffffffda RBX: 00007fe1f5825fa0 RCX: 00007fe1f560bc1f
[  327.050854][T18801] RDX: 000000000000003e RSI: 0000400000000000 RDI: 00000000000000c8
[  327.050864][T18801] RBP: 00007fe1f3c77090 R08: 0000000000000000 R09: 0000000000000000
[  327.050875][T18801] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001
[  327.050885][T18801] R13: 0000000000000000 R14: 00007fe1f5825fa0 R15: 00007ffddd3b17a8
[  327.050901][T18801]  </TASK>
[  327.269549][T18655] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.286671][T18655] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.300963][T18655] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.314897][T18655] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.385087][T18817] loop2: detected capacity change from 0 to 512
[  327.391633][T18817] EXT4-fs: Ignoring removed i_version option
[  327.399684][T18820] loop1: detected capacity change from 0 to 512
[  327.418337][T18820] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.5686: casefold flag without casefold feature
[  327.418544][T18817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.431820][T18820] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.5686: couldn't read orphan inode 15 (err -117)
[  327.445170][T18817] ext4 filesystem being mounted at /592/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.456095][T18820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.472859][T18817] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.5685: corrupted inode contents
[  327.491509][T18817] EXT4-fs (loop2): Remounting filesystem read-only
[  327.558038][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.577058][T18827] syz.1.5687: attempt to access beyond end of device
[  327.577058][T18827] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  327.600143][T18827] loop1: detected capacity change from 0 to 2048
[  327.646338][T18827] Alternate GPT is invalid, using primary GPT.
[  327.652686][T18827]  loop1: p1 p2 p3
[  327.683754][T18829] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  327.758857][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.848634][T18831] syz.1.5689: attempt to access beyond end of device
[  327.848634][T18831] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  327.854920][T18846] 9pnet_fd: Insufficient options for proto=fd
[  327.869058][T18844] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.879577][T18831] loop1: detected capacity change from 0 to 2048
[  327.927467][T18844] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.938214][T18831] Alternate GPT is invalid, using primary GPT.
[  327.944667][T18831]  loop1: p1 p2 p3
[  327.988113][T18844] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.037476][T18844] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.058830][T18862] FAULT_INJECTION: forcing a failure.
[  328.058830][T18862] name failslab, interval 1, probability 0, space 0, times 0
[  328.059954][T18861] loop2: detected capacity change from 0 to 512
[  328.071607][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.1.5701 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  328.071642][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  328.071739][T18862] Call Trace:
[  328.071749][T18862]  <TASK>
[  328.071759][T18862]  dump_stack_lvl+0xf2/0x150
[  328.071871][T18862]  dump_stack+0x15/0x1a
[  328.071899][T18862]  should_fail_ex+0x24a/0x260
[  328.071940][T18862]  should_failslab+0x8f/0xb0
[  328.071973][T18862]  __kmalloc_node_noprof+0xad/0x410
[  328.072026][T18862]  ? __kvmalloc_node_noprof+0x72/0x170
[  328.072068][T18862]  __kvmalloc_node_noprof+0x72/0x170
[  328.072106][T18862]  io_sqe_buffers_register+0xc6/0x4e0
[  328.072145][T18862]  ? __fget_files+0x17c/0x1c0
[  328.072255][T18862]  __se_sys_io_uring_register+0x908/0x1ef0
[  328.072291][T18862]  ? kstrtouint_from_user+0xb0/0xe0
[  328.072456][T18862]  ? rtl92ce_phy_rf6052_set_ofdm_txpower+0x912/0xc20
[  328.072489][T18862]  ? 0xffffffff81000000
[  328.072508][T18862]  ? selinux_file_permission+0x22a/0x360
[  328.072549][T18862]  ? get_pid_task+0x8e/0xc0
[  328.072585][T18862]  ? proc_fail_nth_write+0x12a/0x150
[  328.072626][T18862]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  328.072704][T18862]  ? vfs_write+0x644/0x920
[  328.072737][T18862]  ? putname+0xcf/0xf0
[  328.072760][T18862]  ? __fget_files+0x17c/0x1c0
[  328.072803][T18862]  ? fput+0x1c4/0x200
[  328.072888][T18862]  ? ksys_write+0x176/0x1b0
[  328.072924][T18862]  __x64_sys_io_uring_register+0x55/0x70
[  328.072961][T18862]  x64_sys_call+0x2c52/0x2dc0
[  328.073048][T18862]  do_syscall_64+0xc9/0x1c0
[  328.073131][T18862]  ? clear_bhb_loop+0x55/0xb0
[  328.073230][T18862]  ? clear_bhb_loop+0x55/0xb0
[  328.073265][T18862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.073301][T18862] RIP: 0033:0x7f2ccd8bd169
[  328.073357][T18862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  328.073380][T18862] RSP: 002b:00007f2ccbf27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  328.073480][T18862] RAX: ffffffffffffffda RBX: 00007f2ccdad5fa0 RCX: 00007f2ccd8bd169
[  328.073498][T18862] RDX: 0000400000000380 RSI: 0000000000000000 RDI: 0000000000000006
[  328.073514][T18862] RBP: 00007f2ccbf27090 R08: 0000000000000000 R09: 0000000000000000
[  328.073529][T18862] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  328.073544][T18862] R13: 0000000000000000 R14: 00007f2ccdad5fa0 R15: 00007ffe0bae9738
[  328.073591][T18862]  </TASK>
[  328.219286][T18865] loop1: detected capacity change from 0 to 512
[  328.220108][T18861] EXT4-fs: Ignoring removed i_version option
[  328.225013][T18865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  328.237489][T18861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.255698][T18865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc018, mo2=0002]
[  328.268492][T18861] ext4 filesystem being mounted at /599/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.326741][T18865] System zones: 
[  328.367375][T18861] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #4: comm syz.2.5702: corrupted inode contents
[  328.373106][T18865] 1-12
[  328.386190][T18861] EXT4-fs (loop2): Remounting filesystem read-only
[  328.388458][T18865] 
[  328.406193][T18865] EXT4-fs (loop1): 1 truncate cleaned up
[  328.412397][T18865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.426887][T18844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.448780][T18844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.503966][T18844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.516222][T18844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.590422][T18870] loop3: detected capacity change from 0 to 1024
[  328.608551][T18881] can0: slcan on ttyS3.
[  328.615187][T18870] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  328.655638][T18881] can0 (unregistered): slcan off ttyS3.
[  328.689219][T18870] lo speed is unknown, defaulting to 1000
[  328.710614][ T9804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.925100][T18883] syz.0.5709: attempt to access beyond end of device
[  328.925100][T18883] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  328.926629][T18887] lo speed is unknown, defaulting to 1000
[  328.992116][T18896] loop0: detected capacity change from 0 to 2048
[  329.018175][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.026716][T18896] Alternate GPT is invalid, using primary GPT.
[  329.033456][T18896]  loop0: p1 p2 p3
[  329.044319][  T374] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.059685][T18887] chnl_net:caif_netlink_parms(): no params data found
[  329.108626][  T374] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.173808][T18904] lo speed is unknown, defaulting to 1000
[  329.180706][  T374] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.206767][T18887] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.213926][T18887] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.234535][T18887] bridge_slave_0: entered allmulticast mode
[  329.241492][T18887] bridge_slave_0: entered promiscuous mode
[  329.250266][T18887] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.257484][T18887] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.264861][T18887] bridge_slave_1: entered allmulticast mode
[  329.271503][T18887] bridge_slave_1: entered promiscuous mode
[  329.289947][  T374] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.311451][T18887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.320729][T18914] loop0: detected capacity change from 0 to 2048
[  329.322779][T18887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.355572][T18887] team0: Port device team_slave_0 added
[  329.360777][T18914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.362985][T18887] team0: Port device team_slave_1 added
[  329.385826][T18914] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.403918][T18920] netlink: 'syz.4.5717': attribute type 1 has an invalid length.
[  329.404284][T18904] block device autoloading is deprecated and will be removed.
[  329.412007][T18914] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5716: bg 0: block 345: padding at end of block bitmap is not set
[  329.422512][T18904] syz.1.5712: attempt to access beyond end of device
[  329.422512][T18904] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  329.457365][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.464252][T18920] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.477013][T18887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.484108][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.510112][T18887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.521788][T18887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.528817][T18887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.554820][T18887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.595191][T18887] hsr_slave_0: entered promiscuous mode
[  329.601475][T18887] hsr_slave_1: entered promiscuous mode
[  329.608188][T18887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.615841][T18887] Cannot create hsr debugfs directory
[  329.626631][  T374] bridge_slave_1: left allmulticast mode
[  329.632322][  T374] bridge_slave_1: left promiscuous mode
[  329.638132][  T374] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.646276][  T374] bridge_slave_0: left allmulticast mode
[  329.651954][  T374] bridge_slave_0: left promiscuous mode
[  329.657662][  T374] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.737656][  T374] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.748788][  T374] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.750483][   T30] kauditd_printk_skb: 209 callbacks suppressed
[  329.750500][   T30] audit: type=1326 audit(1742077982.062:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.786744][   T30] audit: type=1326 audit(1742077982.072:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.787722][  T374] 
 (unregistering): Released all slaves
[  329.810245][   T30] audit: type=1326 audit(1742077982.072:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5ff6bad0 code=0x7ffc0000
[  329.810281][   T30] audit: type=1326 audit(1742077982.072:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.863117][   T30] audit: type=1326 audit(1742077982.072:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.886662][   T30] audit: type=1326 audit(1742077982.072:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.910132][   T30] audit: type=1326 audit(1742077982.072:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.933671][   T30] audit: type=1326 audit(1742077982.072:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.957197][   T30] audit: type=1326 audit(1742077982.072:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  329.980756][   T30] audit: type=1326 audit(1742077982.072:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18930 comm="syz.4.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  330.066579][  T374] tipc: Left network mode
[  330.074252][  T374] hsr_slave_0: left promiscuous mode
[  330.079959][  T374] hsr_slave_1: left promiscuous mode
[  330.085617][  T374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  330.093148][  T374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  330.104078][  T374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.111553][  T374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.138078][  T374] veth1_macvtap: left promiscuous mode
[  330.143624][  T374] veth0_macvtap: left promiscuous mode
[  330.149221][  T374] veth1_vlan: left promiscuous mode
[  330.154469][  T374] veth0_vlan: left promiscuous mode
[  330.222231][  T374] team0 (unregistering): Port device team_slave_1 removed
[  330.232169][  T374] team0 (unregistering): Port device team_slave_0 removed
[  330.268448][   T10] lo speed is unknown, defaulting to 1000
[  330.271443][T18948] FAULT_INJECTION: forcing a failure.
[  330.271443][T18948] name failslab, interval 1, probability 0, space 0, times 0
[  330.274236][   T10] infiniband syz2: ib_query_port failed (-19)
[  330.293026][T18948] CPU: 1 UID: 0 PID: 18948 Comm: syz.4.5725 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  330.293128][T18948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  330.293138][T18948] Call Trace:
[  330.293144][T18948]  <TASK>
[  330.293207][T18948]  dump_stack_lvl+0xf2/0x150
[  330.293258][T18948]  dump_stack+0x15/0x1a
[  330.293276][T18948]  should_fail_ex+0x24a/0x260
[  330.293302][T18948]  ? __hw_addr_add_ex+0x15a/0x430
[  330.293330][T18948]  should_failslab+0x8f/0xb0
[  330.293390][T18948]  __kmalloc_cache_noprof+0x4e/0x320
[  330.293417][T18948]  ? __memcg_slab_post_alloc_hook+0x510/0x660
[  330.293450][T18948]  __hw_addr_add_ex+0x15a/0x430
[  330.293524][T18948]  ? __pfx_bond_setup+0x10/0x10
[  330.293636][T18948]  dev_addr_init+0xb2/0x120
[  330.293666][T18948]  ? __pfx_bond_setup+0x10/0x10
[  330.293689][T18948]  alloc_netdev_mqs+0x225/0xab0
[  330.293711][T18948]  rtnl_create_link+0x232/0x720
[  330.293757][T18948]  rtnl_newlink_create+0x133/0x5d0
[  330.293850][T18948]  rtnl_newlink+0xe9f/0x1250
[  330.293875][T18948]  ? rtl92ce_phy_rf6052_set_ofdm_txpower+0x912/0xc20
[  330.293937][T18948]  ? bpf_trace_run3+0x12b/0x1d0
[  330.293959][T18948]  ? __kfree_skb+0x102/0x150
[  330.293979][T18948]  ? __rcu_read_unlock+0x4e/0x70
[  330.294073][T18948]  ? __kfree_skb+0x102/0x150
[  330.294092][T18948]  ? __rcu_read_unlock+0x4e/0x70
[  330.294248][T18948]  ? avc_has_perm_noaudit+0x1cc/0x210
[  330.294345][T18948]  ? selinux_capable+0x1f2/0x260
[  330.294368][T18948]  ? security_capable+0x81/0x90
[  330.294398][T18948]  ? ns_capable+0x7d/0xb0
[  330.294417][T18948]  ? __pfx_rtnl_newlink+0x10/0x10
[  330.294460][T18948]  rtnetlink_rcv_msg+0x651/0x710
[  330.294484][T18948]  ? ref_tracker_free+0x3a5/0x410
[  330.294522][T18948]  netlink_rcv_skb+0x12c/0x230
[  330.294561][T18948]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  330.294627][T18948]  rtnetlink_rcv+0x1c/0x30
[  330.294656][T18948]  netlink_unicast+0x599/0x670
[  330.294699][T18948]  netlink_sendmsg+0x5cc/0x6e0
[  330.294731][T18948]  ? __pfx_netlink_sendmsg+0x10/0x10
[  330.294780][T18948]  __sock_sendmsg+0x140/0x180
[  330.294808][T18948]  ____sys_sendmsg+0x326/0x4b0
[  330.294834][T18948]  __sys_sendmsg+0x19d/0x230
[  330.294869][T18948]  __x64_sys_sendmsg+0x46/0x50
[  330.294934][T18948]  x64_sys_call+0x2734/0x2dc0
[  330.294958][T18948]  do_syscall_64+0xc9/0x1c0
[  330.294987][T18948]  ? clear_bhb_loop+0x55/0xb0
[  330.295034][T18948]  ? clear_bhb_loop+0x55/0xb0
[  330.295058][T18948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.295204][T18948] RIP: 0033:0x7f2c5ff6d169
[  330.295218][T18948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  330.295307][T18948] RSP: 002b:00007f2c5e5d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  330.295323][T18948] RAX: ffffffffffffffda RBX: 00007f2c60185fa0 RCX: 00007f2c5ff6d169
[  330.295413][T18948] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000006
[  330.295424][T18948] RBP: 00007f2c5e5d1090 R08: 0000000000000000 R09: 0000000000000000
[  330.295478][T18948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.295569][T18948] R13: 0000000000000000 R14: 00007f2c60185fa0 R15: 00007ffd993bee78
[  330.295593][T18948]  </TASK>
[  330.628247][T18951] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  330.814494][T18887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  330.824185][T18887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  330.834414][T18887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  330.848873][T18887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  330.887552][T18965] loop3: detected capacity change from 0 to 1024
[  330.895359][T18965] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  331.528599][T18975] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  331.570041][T18887] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.588428][T18887] 8021q: adding VLAN 0 to HW filter on device team0
[  331.621604][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.628758][  T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.653867][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.661044][  T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.679459][T18887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  331.689936][T18887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.727861][T18982] veth1_macvtap: left promiscuous mode
[  331.733445][T18982] macsec0: entered promiscuous mode
[  331.840123][T18996] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  331.853876][T18887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.871177][T18999] 9pnet: bogus RWRITE count (38144 > 32)
[  331.895343][T19004] 9pnet_fd: Insufficient options for proto=fd
[  331.915663][T19008] loop3: detected capacity change from 0 to 512
[  331.922448][T19008] EXT4-fs: Ignoring removed i_version option
[  331.948407][T18887] veth0_vlan: entered promiscuous mode
[  331.957704][T19008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.971038][T19020] lo: entered promiscuous mode
[  331.975862][T19020] lo: entered allmulticast mode
[  331.976844][T19008] ext4 filesystem being mounted at /484/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.991353][T19020] loop1: detected capacity change from 0 to 512
[  331.992808][T18887] veth1_vlan: entered promiscuous mode
[  332.004344][T19020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.018721][T18887] veth0_macvtap: entered promiscuous mode
[  332.026054][T19008] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #4: comm syz.3.5744: corrupted inode contents
[  332.027461][T18887] veth1_macvtap: entered promiscuous mode
[  332.047780][T19008] EXT4-fs (loop3): Remounting filesystem read-only
[  332.051874][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.064843][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.074749][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.085254][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.095109][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.105633][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.116426][T18887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.118541][T19020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.124808][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.146799][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.156693][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.161968][T19020] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.167213][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.187551][T18887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.198005][T18887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.208932][T18887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.221488][T19020] FAULT_INJECTION: forcing a failure.
[  332.221488][T19020] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.234698][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.1.5747 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  332.234728][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  332.234743][T19020] Call Trace:
[  332.234749][T19020]  <TASK>
[  332.234786][T19020]  dump_stack_lvl+0xf2/0x150
[  332.234816][T19020]  dump_stack+0x15/0x1a
[  332.234844][T19020]  should_fail_ex+0x24a/0x260
[  332.234879][T19020]  should_fail+0xb/0x10
[  332.234936][T19020]  should_fail_usercopy+0x1a/0x20
[  332.234973][T19020]  _copy_from_user+0x1c/0xa0
[  332.234996][T19020]  input_event_from_user+0x126/0x1e0
[  332.235018][T19020]  ? input_inject_event+0x41/0x110
[  332.235123][T19020]  evdev_write+0x29d/0x440
[  332.235179][T19020]  ? __pfx_evdev_write+0x10/0x10
[  332.235227][T19020]  vfs_write+0x27d/0x920
[  332.235305][T19020]  ? putname+0xcf/0xf0
[  332.235323][T19020]  ? __fget_files+0x17c/0x1c0
[  332.235444][T19020]  ksys_write+0xe8/0x1b0
[  332.235478][T19020]  __x64_sys_write+0x42/0x50
[  332.235585][T19020]  x64_sys_call+0x287e/0x2dc0
[  332.235617][T19020]  do_syscall_64+0xc9/0x1c0
[  332.235696][T19020]  ? clear_bhb_loop+0x55/0xb0
[  332.235798][T19020]  ? clear_bhb_loop+0x55/0xb0
[  332.235905][T19020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.235938][T19020] RIP: 0033:0x7f2ccd8bd169
[  332.235956][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.235978][T19020] RSP: 002b:00007f2ccbf27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  332.236001][T19020] RAX: ffffffffffffffda RBX: 00007f2ccdad5fa0 RCX: 00007f2ccd8bd169
[  332.236016][T19020] RDX: 00000000000012d8 RSI: 0000400000000040 RDI: 000000000000000b
[  332.236029][T19020] RBP: 00007f2ccbf27090 R08: 0000000000000000 R09: 0000000000000000
[  332.236089][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.236101][T19020] R13: 0000000000000000 R14: 00007f2ccdad5fa0 R15: 00007ffe0bae9738
[  332.236120][T19020]  </TASK>
[  332.326504][T18887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.441020][T18887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.449760][T18887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.458620][T18887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.479938][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.548769][T19034] netlink: 'syz.1.5750': attribute type 1 has an invalid length.
[  332.608909][T19034] 8021q: adding VLAN 0 to HW filter on device bond1
[  332.643933][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.728212][T19051] FAULT_INJECTION: forcing a failure.
[  332.728212][T19051] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.741438][T19051] CPU: 0 UID: 0 PID: 19051 Comm: syz.3.5751 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  332.741465][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  332.741477][T19051] Call Trace:
[  332.741486][T19051]  <TASK>
[  332.741495][T19051]  dump_stack_lvl+0xf2/0x150
[  332.741530][T19051]  dump_stack+0x15/0x1a
[  332.741601][T19051]  should_fail_ex+0x24a/0x260
[  332.741632][T19051]  should_fail+0xb/0x10
[  332.741743][T19051]  should_fail_usercopy+0x1a/0x20
[  332.741789][T19051]  _copy_to_user+0x20/0xa0
[  332.741873][T19051]  simple_read_from_buffer+0xa0/0x110
[  332.741910][T19051]  proc_fail_nth_read+0xf9/0x140
[  332.742000][T19051]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  332.742031][T19051]  vfs_read+0x19b/0x6f0
[  332.742056][T19051]  ? __rcu_read_unlock+0x4e/0x70
[  332.742081][T19051]  ? __fget_files+0x17c/0x1c0
[  332.742152][T19051]  ksys_read+0xe8/0x1b0
[  332.742188][T19051]  __x64_sys_read+0x42/0x50
[  332.742220][T19051]  x64_sys_call+0x2874/0x2dc0
[  332.742247][T19051]  do_syscall_64+0xc9/0x1c0
[  332.742278][T19051]  ? clear_bhb_loop+0x55/0xb0
[  332.742316][T19051]  ? clear_bhb_loop+0x55/0xb0
[  332.742351][T19051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.742383][T19051] RIP: 0033:0x7f256efabb7c
[  332.742401][T19051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  332.742423][T19051] RSP: 002b:00007f256d617030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  332.742459][T19051] RAX: ffffffffffffffda RBX: 00007f256f1c5fa0 RCX: 00007f256efabb7c
[  332.742471][T19051] RDX: 000000000000000f RSI: 00007f256d6170a0 RDI: 0000000000000005
[  332.742483][T19051] RBP: 00007f256d617090 R08: 0000000000000000 R09: 0000000000000000
[  332.742498][T19051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.742510][T19051] R13: 0000000000000000 R14: 00007f256f1c5fa0 R15: 00007ffc98db7918
[  332.742528][T19051]  </TASK>
[  332.988655][T19054] 9pnet: bogus RWRITE count (38144 > 32)
[  333.033340][T19060] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  333.094543][T19077] netlink: 'syz.2.5763': attribute type 1 has an invalid length.
[  333.123002][T19080] FAULT_INJECTION: forcing a failure.
[  333.123002][T19080] name failslab, interval 1, probability 0, space 0, times 0
[  333.135781][T19080] CPU: 1 UID: 0 PID: 19080 Comm: syz.4.5766 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  333.135857][T19080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.135869][T19080] Call Trace:
[  333.135876][T19080]  <TASK>
[  333.135884][T19080]  dump_stack_lvl+0xf2/0x150
[  333.135911][T19080]  dump_stack+0x15/0x1a
[  333.135940][T19080]  should_fail_ex+0x24a/0x260
[  333.136042][T19080]  should_failslab+0x8f/0xb0
[  333.136071][T19080]  kmem_cache_alloc_lru_noprof+0x57/0x320
[  333.136144][T19080]  ? __d_alloc+0x3d/0x350
[  333.136171][T19080]  __d_alloc+0x3d/0x350
[  333.136225][T19080]  d_alloc_pseudo+0x1e/0x80
[  333.136251][T19080]  alloc_file_pseudo+0x73/0x160
[  333.136278][T19080]  __shmem_file_setup+0x1bb/0x1f0
[  333.136325][T19080]  shmem_file_setup+0x3b/0x50
[  333.136357][T19080]  __se_sys_memfd_create+0x2e1/0x5a0
[  333.136386][T19080]  __x64_sys_memfd_create+0x31/0x40
[  333.136417][T19080]  x64_sys_call+0x2d4c/0x2dc0
[  333.136449][T19080]  do_syscall_64+0xc9/0x1c0
[  333.136487][T19080]  ? clear_bhb_loop+0x55/0xb0
[  333.136629][T19080]  ? clear_bhb_loop+0x55/0xb0
[  333.136655][T19080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.136681][T19080] RIP: 0033:0x7f2c5ff6d169
[  333.136697][T19080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.136786][T19080] RSP: 002b:00007f2c5e5d0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  333.136808][T19080] RAX: ffffffffffffffda RBX: 00000000000001c5 RCX: 00007f2c5ff6d169
[  333.136823][T19080] RDX: 00007f2c5e5d0ef0 RSI: 0000000000000000 RDI: 00007f2c5ffeec3c
[  333.136835][T19080] RBP: 0000400000000b00 R08: 00007f2c5e5d0bb7 R09: 00007f2c5e5d0e40
[  333.136847][T19080] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000004c0
[  333.136858][T19080] R13: 00007f2c5e5d0ef0 R14: 00007f2c5e5d0eb0 R15: 0000400000000700
[  333.136882][T19080]  </TASK>
[  333.371073][T19087] loop1: detected capacity change from 0 to 128
[  333.487018][T19103] loop3: detected capacity change from 0 to 1024
[  333.519478][T19103] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  333.546460][T19106] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  333.694301][T19119] 9pnet_fd: Insufficient options for proto=fd
[  333.742186][T19123] FAULT_INJECTION: forcing a failure.
[  333.742186][T19123] name failslab, interval 1, probability 0, space 0, times 0
[  333.755028][T19123] CPU: 0 UID: 0 PID: 19123 Comm: syz.1.5782 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  333.755059][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  333.755073][T19123] Call Trace:
[  333.755080][T19123]  <TASK>
[  333.755094][T19123]  dump_stack_lvl+0xf2/0x150
[  333.755124][T19123]  dump_stack+0x15/0x1a
[  333.755145][T19123]  should_fail_ex+0x24a/0x260
[  333.755176][T19123]  should_failslab+0x8f/0xb0
[  333.755248][T19123]  kmem_cache_alloc_node_noprof+0x59/0x320
[  333.755277][T19123]  ? __alloc_skb+0x10b/0x310
[  333.755305][T19123]  __alloc_skb+0x10b/0x310
[  333.755410][T19123]  ? audit_log_start+0x34c/0x6b0
[  333.755456][T19123]  audit_log_start+0x368/0x6b0
[  333.755528][T19123]  audit_seccomp+0x4b/0x130
[  333.755558][T19123]  __seccomp_filter+0x6fa/0x1180
[  333.755584][T19123]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  333.755619][T19123]  ? vfs_write+0x644/0x920
[  333.755717][T19123]  __secure_computing+0x9f/0x1c0
[  333.755745][T19123]  syscall_trace_enter+0xd1/0x1f0
[  333.755776][T19123]  do_syscall_64+0xaa/0x1c0
[  333.755882][T19123]  ? clear_bhb_loop+0x55/0xb0
[  333.755921][T19123]  ? clear_bhb_loop+0x55/0xb0
[  333.756024][T19123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.756054][T19123] RIP: 0033:0x7f2ccd8bd169
[  333.756073][T19123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.756094][T19123] RSP: 002b:00007f2ccbf27038 EFLAGS: 00000246 ORIG_RAX: 000000000000000e
[  333.756113][T19123] RAX: ffffffffffffffda RBX: 00007f2ccdad5fa0 RCX: 00007f2ccd8bd169
[  333.756125][T19123] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000000
[  333.756160][T19123] RBP: 00007f2ccbf27090 R08: 0000000000000000 R09: 0000000000000000
[  333.756174][T19123] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  333.756189][T19123] R13: 0000000000000000 R14: 00007f2ccdad5fa0 R15: 00007ffe0bae9738
[  333.756208][T19123]  </TASK>
[  334.056686][T19127] FAULT_INJECTION: forcing a failure.
[  334.056686][T19127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.069939][T19127] CPU: 1 UID: 0 PID: 19127 Comm: syz.4.5781 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  334.069970][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  334.069984][T19127] Call Trace:
[  334.069991][T19127]  <TASK>
[  334.069999][T19127]  dump_stack_lvl+0xf2/0x150
[  334.070105][T19127]  dump_stack+0x15/0x1a
[  334.070126][T19127]  should_fail_ex+0x24a/0x260
[  334.070157][T19127]  should_fail+0xb/0x10
[  334.070184][T19127]  should_fail_usercopy+0x1a/0x20
[  334.070240][T19127]  _copy_from_user+0x1c/0xa0
[  334.070259][T19127]  kstrtouint_from_user+0x76/0xe0
[  334.070343][T19127]  ? 0xffffffff81000000
[  334.070356][T19127]  ? selinux_file_permission+0x22a/0x360
[  334.070443][T19127]  proc_fail_nth_write+0x4f/0x150
[  334.070523][T19127]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  334.070554][T19127]  vfs_write+0x27d/0x920
[  334.070579][T19127]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  334.070689][T19127]  ? __fget_files+0x17c/0x1c0
[  334.070737][T19127]  ksys_write+0xe8/0x1b0
[  334.070765][T19127]  __x64_sys_write+0x42/0x50
[  334.070792][T19127]  x64_sys_call+0x287e/0x2dc0
[  334.070958][T19127]  do_syscall_64+0xc9/0x1c0
[  334.070990][T19127]  ? clear_bhb_loop+0x55/0xb0
[  334.071108][T19127]  ? clear_bhb_loop+0x55/0xb0
[  334.071137][T19127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.071243][T19127] RIP: 0033:0x7f2c5ff6bc1f
[  334.071258][T19127] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  334.071276][T19127] RSP: 002b:00007f2c5e58f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  334.071295][T19127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c5ff6bc1f
[  334.071307][T19127] RDX: 0000000000000001 RSI: 00007f2c5e58f0a0 RDI: 000000000000000b
[  334.071319][T19127] RBP: 00007f2c5e58f090 R08: 0000000000000000 R09: 0000000000000000
[  334.071331][T19127] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  334.071357][T19127] R13: 0000000000000000 R14: 00007f2c60186160 R15: 00007ffd993bee78
[  334.071376][T19127]  </TASK>
[  334.323012][T19134] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  334.530637][T19149] 9pnet: bogus RWRITE count (38144 > 32)
[  334.661544][ T1316] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.709799][ T1316] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.757169][ T1316] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.778831][T19152] chnl_net:caif_netlink_parms(): no params data found
[  334.828903][ T1316] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.861178][T19152] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.868335][T19152] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.875768][T19152] bridge_slave_0: entered allmulticast mode
[  334.882273][T19152] bridge_slave_0: entered promiscuous mode
[  334.889280][T19152] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.896397][T19152] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.903591][T19152] bridge_slave_1: entered allmulticast mode
[  334.910397][T19152] bridge_slave_1: entered promiscuous mode
[  334.938592][T19152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.961363][T19152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.981462][ T1316] bridge_slave_1: left allmulticast mode
[  334.987277][ T1316] bridge_slave_1: left promiscuous mode
[  334.992975][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.016293][ T1316] bridge_slave_0: left allmulticast mode
[  335.022052][ T1316] bridge_slave_0: left promiscuous mode
[  335.027814][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.168801][ T1316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.179245][ T1316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.199696][ T1316] bond0 (unregistering): Released all slaves
[  335.218533][ T1316] bond1 (unregistering): Released all slaves
[  335.247980][T19152] team0: Port device team_slave_0 added
[  335.256055][T19152] team0: Port device team_slave_1 added
[  335.298910][T19152] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.306091][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.332152][T19152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.357965][ T1316] hsr_slave_0: left promiscuous mode
[  335.365393][ T1316] hsr_slave_1: left promiscuous mode
[  335.371200][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.378715][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.387839][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.395313][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.404741][ T1316] veth1_macvtap: left promiscuous mode
[  335.410576][ T1316] veth0_macvtap: left promiscuous mode
[  335.416259][ T1316] veth1_vlan: left promiscuous mode
[  335.421559][ T1316] veth0_vlan: left promiscuous mode
[  335.500819][T19182] syz.0.5798: attempt to access beyond end of device
[  335.500819][T19182] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  335.514169][ T1316] team0 (unregistering): Port device team_slave_1 removed
[  335.523559][T19184] loop2: detected capacity change from 0 to 164
[  335.532133][ T1316] team0 (unregistering): Port device team_slave_0 removed
[  335.543500][T19180] loop0: detected capacity change from 0 to 2048
[  335.550007][T19184] ISOFS: unable to read i-node block
[  335.555373][T19184] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  335.565106][T19152] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.565320][T19184] isofs_fill_super: get root inode failed
[  335.572218][T19152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.603963][T19152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.620912][T19180] Alternate GPT is invalid, using primary GPT.
[  335.623820][T19178] lo speed is unknown, defaulting to 1000
[  335.627326][T19180]  loop0: p1 p2 p3
[  335.633011][T19178] lo speed is unknown, defaulting to 1000
[  335.679092][T19178] lo speed is unknown, defaulting to 1000
[  335.687315][T19152] hsr_slave_0: entered promiscuous mode
[  335.694788][T19178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  335.704001][T19152] hsr_slave_1: entered promiscuous mode
[  335.724634][T19178] lo speed is unknown, defaulting to 1000
[  335.738383][T19178] lo speed is unknown, defaulting to 1000
[  335.757079][T19178] lo speed is unknown, defaulting to 1000
[  335.767439][T19196] syz.3.5805: attempt to access beyond end of device
[  335.767439][T19196] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  335.795326][T19196] loop3: detected capacity change from 0 to 2048
[  335.798478][T19199] 9pnet_fd: Insufficient options for proto=fd
[  335.808612][T19178] lo speed is unknown, defaulting to 1000
[  335.836690][T19196] Alternate GPT is invalid, using primary GPT.
[  335.843067][T19196]  loop3: p1 p2 p3
[  335.859838][T19178] lo speed is unknown, defaulting to 1000
[  335.887033][T19203] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.901112][T19205] loop2: detected capacity change from 0 to 164
[  335.908468][T19205] ISOFS: unable to read i-node block
[  335.913804][T19205] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  335.923377][T19205] isofs_fill_super: get root inode failed
[  335.928835][T19207] loop3: detected capacity change from 0 to 512
[  335.942533][T19207] EXT4-fs: Ignoring removed bh option
[  335.948005][T19207] EXT4-fs: Ignoring removed mblk_io_submit option
[  335.967194][T19207] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  335.975362][T19207] System zones: 0-2, 18-18, 34-35
[  335.981777][T19207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.996772][T19203] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.996937][T19207] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.020678][   T30] kauditd_printk_skb: 94 callbacks suppressed
[  336.020715][   T30] audit: type=1326 audit(1742077988.332:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.3.5809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f256efad169 code=0x0
[  336.086966][T19203] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.169881][T19219] loop2: detected capacity change from 0 to 1024
[  336.187412][T19203] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.206409][T19219] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  336.244038][T19152] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  336.283332][T19203] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.294879][T19203] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.307350][T19203] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.319048][T19203] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.351295][T19152] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  336.353640][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'.
[  336.367283][T19224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5815'.
[  336.369321][T19152] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  336.387851][T19152] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  336.393856][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'.
[  336.412468][T19224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5815'.
[  336.455034][T19152] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.492097][T19152] 8021q: adding VLAN 0 to HW filter on device team0
[  336.508670][  T374] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.515783][  T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.538899][  T374] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.546024][  T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.598727][T19152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.609150][T19152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.918669][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.960633][T19238] loop3: detected capacity change from 0 to 512
[  336.989378][T19152] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.998108][T19238] EXT4-fs: Ignoring removed i_version option
[  337.037651][T19238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.055517][T19238] ext4 filesystem being mounted at /496/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  337.089177][T19238] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #4: comm syz.3.5818: corrupted inode contents
[  337.136796][T19249] FAULT_INJECTION: forcing a failure.
[  337.136796][T19249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.149985][T19249] CPU: 1 UID: 0 PID: 19249 Comm: syz.2.5819 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  337.150010][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  337.150023][T19249] Call Trace:
[  337.150030][T19249]  <TASK>
[  337.150038][T19249]  dump_stack_lvl+0xf2/0x150
[  337.150066][T19249]  dump_stack+0x15/0x1a
[  337.150092][T19249]  should_fail_ex+0x24a/0x260
[  337.150152][T19249]  should_fail+0xb/0x10
[  337.150180][T19249]  should_fail_usercopy+0x1a/0x20
[  337.150217][T19249]  _copy_from_user+0x1c/0xa0
[  337.150240][T19249]  copy_msghdr_from_user+0x54/0x2a0
[  337.150343][T19249]  ? __fget_files+0x17c/0x1c0
[  337.150384][T19249]  __sys_sendmmsg+0x1e8/0x4b0
[  337.150475][T19249]  __x64_sys_sendmmsg+0x57/0x70
[  337.150636][T19249]  x64_sys_call+0x29aa/0x2dc0
[  337.150664][T19249]  do_syscall_64+0xc9/0x1c0
[  337.150740][T19249]  ? clear_bhb_loop+0x55/0xb0
[  337.150814][T19249]  ? clear_bhb_loop+0x55/0xb0
[  337.150847][T19249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.150880][T19249] RIP: 0033:0x7f85cd42d169
[  337.150959][T19249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.151008][T19249] RSP: 002b:00007f85cba91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  337.151026][T19249] RAX: ffffffffffffffda RBX: 00007f85cd645fa0 RCX: 00007f85cd42d169
[  337.151038][T19249] RDX: 0000000000000001 RSI: 0000400000005200 RDI: 0000000000000003
[  337.151050][T19249] RBP: 00007f85cba91090 R08: 0000000000000000 R09: 0000000000000000
[  337.151062][T19249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.151073][T19249] R13: 0000000000000000 R14: 00007f85cd645fa0 R15: 00007ffc37be0ed8
[  337.151093][T19249]  </TASK>
[  337.339354][T19238] EXT4-fs (loop3): Remounting filesystem read-only
[  337.365799][T19238] Quota error (device loop3): write_blk: dquota write failed
[  337.373393][T19238] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  337.382641][T19238] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  337.386138][T19152] veth0_vlan: entered promiscuous mode
[  337.442208][T19152] veth1_vlan: entered promiscuous mode
[  337.486384][T19152] veth0_macvtap: entered promiscuous mode
[  337.504399][T19152] veth1_macvtap: entered promiscuous mode
[  337.534791][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.545319][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.555191][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.565696][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.575612][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.586124][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.598931][   T30] audit: type=1326 audit(1742077989.882:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.602352][T19152] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.622627][   T30] audit: type=1326 audit(1742077989.882:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.653409][   T30] audit: type=1326 audit(1742077989.882:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.677139][   T30] audit: type=1326 audit(1742077989.882:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.700985][   T30] audit: type=1326 audit(1742077989.882:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.708417][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.724797][   T30] audit: type=1326 audit(1742077989.882:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19225 comm="syz.4.5814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5ff6d169 code=0x7ffc0000
[  337.734974][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.734991][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.778839][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.788723][T19152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.799314][T19152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.819997][T19259] 9pnet: bogus RWRITE count (38144 > 32)
[  337.834120][T19152] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.854646][T19152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.863507][T19152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.872257][T19152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.881018][T19152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.890535][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.943637][T19270] loop3: detected capacity change from 0 to 512
[  337.950396][T19270] EXT4-fs: Ignoring removed bh option
[  337.955916][T19270] EXT4-fs: Ignoring removed mblk_io_submit option
[  337.982387][T19270] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  337.991067][T19270] System zones: 0-2, 18-18, 34-35
[  337.999571][T19274] loop0: detected capacity change from 0 to 2048
[  338.011821][T19270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.024998][T19270] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  338.071480][T19274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.095891][T19274] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.141966][T19274] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5829: bg 0: block 345: padding at end of block bitmap is not set
[  338.165804][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5831'.
[  338.174911][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5831'.
[  338.184465][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5831'.
[  338.193768][T19289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5831'.
[  338.391724][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.434573][T19298] loop0: detected capacity change from 0 to 512
[  338.441404][T19298] EXT4-fs: Ignoring removed i_version option
[  338.457170][T19298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.518361][T19298] ext4 filesystem being mounted at /579/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.537473][T19298] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #4: comm syz.0.5834: corrupted inode contents
[  338.590676][T19298] EXT4-fs (loop0): Remounting filesystem read-only
[  338.660842][T19307] lo speed is unknown, defaulting to 1000
[  338.801042][T12329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.248382][T19323] syz.1.5842: attempt to access beyond end of device
[  339.248382][T19323] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  339.289260][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.301566][T19323] loop1: detected capacity change from 0 to 2048
[  339.322465][T19329] can0: slcan on ttyS3.
[  339.357270][T19323] Alternate GPT is invalid, using primary GPT.
[  339.363580][T19323]  loop1: p1 p2 p3
[  339.423868][T19335] loop1: detected capacity change from 0 to 512
[  339.430360][T19329] can0 (unregistered): slcan off ttyS3.
[  339.475866][T19335] EXT4-fs: Ignoring removed bh option
[  339.481303][T19335] EXT4-fs: Ignoring removed mblk_io_submit option
[  339.531500][T19335] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  339.545487][T19335] System zones: 0-2, 18-18, 34-35
[  339.551802][T19335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.569670][T19335] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  339.651431][T19345] loop2: detected capacity change from 0 to 1024
[  339.677729][T19345] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  339.688757][T19345] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  339.780996][T19345] JBD2: no valid journal superblock found
[  339.786866][T19345] EXT4-fs (loop2): Could not load journal inode
[  339.945610][T19345] loop2: detected capacity change from 0 to 2048
[  339.959026][T19345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.257456][T19152] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.268723][T18887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.371495][T19380] loop2: detected capacity change from 0 to 2048
[  340.388894][T19380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.401078][T19380] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.609279][T19308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set
[  340.624217][T19308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117
[  340.637018][T19308] EXT4-fs (loop2): This should not happen!! Data will be lost
[  340.637018][T19308] 
[  340.684580][T19308] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28
[  340.697340][T19308] EXT4-fs (loop2): This should not happen!! Data will be lost
[  340.697340][T19308] 
[  340.707113][T19308] EXT4-fs (loop2): Total free blocks count 0
[  340.713141][T19308] EXT4-fs (loop2): Free/Dirty block details
[  340.719110][T19308] EXT4-fs (loop2): free_blocks=0
[  340.724058][T19308] EXT4-fs (loop2): dirty_blocks=2048
[  340.729425][T19308] EXT4-fs (loop2): Block reservation details
[  340.747096][T19395] loop1: detected capacity change from 0 to 1024
[  340.761902][T19395] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  340.806889][T19397] loop2: detected capacity change from 0 to 512
[  340.822044][T19397] EXT4-fs: Ignoring removed bh option
[  340.827611][T19397] EXT4-fs: Ignoring removed mblk_io_submit option
[  340.857487][T19397] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c018, mo2=0002]
[  340.871884][T19397] System zones: 0-2, 18-18, 34-35
[  340.895534][T19397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.909387][T19397] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  341.238509][T19412] syz.0.5867: attempt to access beyond end of device
[  341.238509][T19412] md30: rw=2048, sector=0, nr_sectors = 8 limit=0
[  341.261085][T19412] loop0: detected capacity change from 0 to 2048
[  341.285313][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  341.285332][   T30] audit: type=1326 audit(1742077993.592:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.315106][   T30] audit: type=1326 audit(1742077993.592:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.338774][   T30] audit: type=1326 audit(1742077993.602:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.339001][T19432] loop3: detected capacity change from 0 to 2048
[  341.362430][   T30] audit: type=1326 audit(1742077993.602:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.392238][   T30] audit: type=1326 audit(1742077993.602:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.415761][   T30] audit: type=1326 audit(1742077993.602:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.439711][   T30] audit: type=1326 audit(1742077993.602:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.463487][   T30] audit: type=1326 audit(1742077993.602:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.487034][   T30] audit: type=1326 audit(1742077993.602:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.498006][T19412] Alternate GPT is invalid, using primary GPT.
[  341.510438][   T30] audit: type=1326 audit(1742077993.602:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19430 comm="syz.3.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256efad169 code=0x7ffc0000
[  341.516719][T19412]  loop0: p1 p2 p3
[  341.647544][T18887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.691461][T19444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.715906][T19447] loop3: detected capacity change from 0 to 164
[  341.723121][T19447] ISOFS: unable to read i-node block
[  341.728584][T19447] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  341.739955][T19448] siw: device registration error -23
[  341.740037][T19447] isofs_fill_super: get root inode failed
[  341.753050][T19444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.769370][T19452] 9pnet_fd: Insufficient options for proto=fd
[  341.784107][T19450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.828696][T19444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.860073][T19450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.897074][T19444] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.938676][T19450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.987320][T19444] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.009080][T19444] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.069779][T19444] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.081614][T19450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.097685][T19444] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.572194][T19472] loop1: detected capacity change from 0 to 512
[  342.588000][T19472] EXT4-fs: quotafile must be on filesystem root
[  342.958230][T19450] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.004965][T19450] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.026870][T19450] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.038787][T19450] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.120898][T19491] loop0: detected capacity change from 0 to 128
[  343.171605][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.190039][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.199075][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.217120][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.237666][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.246656][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'.
[  343.259149][T19507] ==================================================================
[  343.267258][T19507] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace
[  343.274042][T19507] 
[  343.276365][T19507] write to 0xffff888104a70700 of 8 bytes by task 19509 on cpu 0:
[  343.284081][T19507]  mas_wmb_replace+0x222/0x14d0
[  343.288940][T19507]  mas_wr_store_entry+0x1530/0x23f0
[  343.294153][T19507]  mas_store_prealloc+0x6bf/0x960
[  343.299195][T19507]  mmap_region+0xf4e/0x1620
[  343.303703][T19507]  do_mmap+0x98a/0xc30
[  343.307785][T19507]  vm_mmap_pgoff+0x16d/0x2d0
[  343.312390][T19507]  ksys_mmap_pgoff+0xd0/0x330
[  343.317088][T19507]  x64_sys_call+0x1940/0x2dc0
[  343.321787][T19507]  do_syscall_64+0xc9/0x1c0
[  343.326311][T19507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.332219][T19507] 
[  343.334544][T19507] read to 0xffff888104a70700 of 8 bytes by task 19507 on cpu 1:
[  343.342175][T19507]  mas_walk+0x123/0x320
[  343.346344][T19507]  lock_vma_under_rcu+0x95/0x270
[  343.351289][T19507]  exc_page_fault+0x150/0x650
[  343.355980][T19507]  asm_exc_page_fault+0x26/0x30
[  343.360842][T19507] 
[  343.363172][T19507] value changed: 0xffff888116a152c1 -> 0xffff888104a70700
[  343.370281][T19507] 
[  343.372604][T19507] Reported by Kernel Concurrency Sanitizer on:
[  343.378751][T19507] CPU: 1 UID: 0 PID: 19507 Comm: syz.0.5907 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0
[  343.389513][T19507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  343.399574][T19507] ==================================================================
[  343.410929][T19506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19506 comm=syz.3.5908
[  343.424332][T19509] loop0: detected capacity change from 0 to 512
[  343.432593][T19509] EXT4-fs: Ignoring removed bh option
[  343.446306][T19509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  343.465396][T19509] EXT4-fs (loop0): 1 truncate cleaned up
[  343.475177][T19509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.498432][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.