last executing test programs:

2.686689859s ago: executing program 2 (id=780):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

2.6059749s ago: executing program 2 (id=783):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b81400800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000240201802400028008000340000000000800034000000000080003400000000008000180000000003c00028008000340000000000800018000000000080003400000000008000340000000000900020073797a30000000000900020073797a310000000044000280080003400000000008001340000000010900020073797a320000000008000340000000000800034000000001080003400000003400028008000180000000000900020073797a310000000008000340000000000900020073797a320000000008000340000000000c0002800800034000000000400002800900020073797a310000000008000340000000000900020073797a32000000000900020073797a3200000000080001800000000008000180fffffffcfc0001"], 0x159c}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1001}, 0x18)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, <r7=>0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x10e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x4000000000000000, 0x0, 0x0, 0x100000000000, 0x3, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, r7, 0xafffffdfffffffff, 0xffffffffffffffff, 0x2)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x8000}, 0x0)
r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x110)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[], 0x15)
r13 = dup(r12)
write$P9_RLERRORu(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r13, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x2060010, &(0x7f0000000680)=ANY=[@ANYRES64=r10, @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYRES8=0x0, @ANYRESDEC=r8, @ANYRES16=r12, @ANYRESHEX=r5])
syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a815008100480008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000002100000040100000000000000080022eb000000c98f03d999e046838b8f0020000000020000000000000400050000080065ce0ce68f3c0000e4f47c95cc4ae87fda7f5249bac09b4cb8f026e2917b0a6035876f559bade3897293a2c0651cdc91c11d62573bf4eee2b1cd"], 0x0)

2.6046926s ago: executing program 1 (id=784):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x1018e58, &(0x7f0000001700)={[{@debug_want_extra_isize}, {@journal_path={'journal_path', 0x3d, './cgroup'}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@dioread_nolock}, {@i_version}]}, 0x6, 0x611, &(0x7f00000017c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ff"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x3082000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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")

2.064194388s ago: executing program 2 (id=788):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="100a0600090901000c001a800800058004"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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")
r6 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
lsm_get_self_attr(0x69, &(0x7f0000001740)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f00000004c0)=0x1020, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0xfffefff7, @private2, 0x80004}, 0x1c)
r7 = dup2(r6, r6)
connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
syz_mount_image$ext4(&(0x7f0000000700)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100), 0x3, 0x4fa, &(0x7f0000002780)="$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")
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
getrandom(0x0, 0x0, 0x1)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
dup(r9)

1.995179759s ago: executing program 1 (id=789):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005"], 0x84}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

1.868654611s ago: executing program 1 (id=790):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008080, &(0x7f0000000100)={[{@block_validity}, {@auto_da_alloc}, {@usrquota}]}, 0x5, 0x4df, &(0x7f0000000c40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1\x01\x00\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf\x94_\xe1\x7f3:\x99\x1e\xac`\xc3\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00', 0x2)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000040000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = creat(0x0, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r9, 0x0, 0x4d, 0x20004000, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f0000000540)=""/51, 0x1329000, 0x1000, 0x8, 0x3}, 0x20)
sendmmsg$inet(r10, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d2446dda1471848cf6b4da31af41e18082cd959e70439b16353b8aedf04000c9924bf89b5b259fcabe8a71283e0da2f03d3f55ae4b182494f79296ecf32287745a1cabf939352aafa5606b98cff8542a9a16badab2fb7d34030278ba8e725da52aa33169b84f9f2c3ec1dd49b3b65c553", 0x90}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="59739e145fb6c69f9db91a2370fda8a65518551e269b19b4d784fcccae1d7cc0111703843d7cf71d8c1132b0250ab85bcf2bbe14de82dabdadf12e63c4c2d38cb64d78651d0b2b887a10c80838c8eaaeadf260860a4c786394646abc86dcc9e8d7e300e697e617ddf46fb7d9be7655f89d2c23735a9ba3ac6df37b537085eef98b31d083d8619e8462bc58ae8e2e922c774deb3c27ea6f4ca714", 0x9a}, {&(0x7f0000000bc0)="27117c3709d044884fa6fec6bd8852068a1e26cffa2bf563855869d702176fbd80bc73c0ed6712e5990a6b5456f35fdc3186f0e25ae4e6a75d5011d67923646ef7828b21eabf17f4ad996750a39105c9b14c67915a4aefdbcb5e608c8790f6001229a7f480677ce0aeb2b2de4dace61f98ab96b6229080658a938237485d617cfdb605b16db592c15d00e394a0fdc1b23b9131bf3c76e9bb6588f2c97a36fe2e477c0ff90698b7d4e14b24e7362febbc03346ebfe930f309d14c90590e6d08025235c54c93128437846c8dd028204c74ddb1cacc22abecf3bb", 0xd9}, {&(0x7f0000000400)="a7669181f275f55ea18ed85e74db7b73bedcb923f94c1c1068041ae833512d6993133d72293c5b93081f36c396f97b8bd31e3033733466", 0x37}, {&(0x7f0000000cc0)="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", 0xfc}], 0x4, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x3, 0x4004040)
getdents(r0, &(0x7f00000000c0)=""/43, 0x2b)

1.602201355s ago: executing program 0 (id=793):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_cancel(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1.469785667s ago: executing program 1 (id=798):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1001}, 0x18)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, <r7=>0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x10e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x4000000000000000, 0x0, 0x0, 0x100000000000, 0x3, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, r7, 0xafffffdfffffffff, 0xffffffffffffffff, 0x2)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x8000}, 0x0)
r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x110)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[], 0x15)
r13 = dup(r12)
write$P9_RLERRORu(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r13, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x2060010, &(0x7f0000000680)=ANY=[@ANYRES64=r10, @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYRES8=0x0, @ANYRESDEC=r8, @ANYRES16=r12, @ANYRESHEX=r5])
syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a815008100480008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000002100000040100000000000000080022eb000000c98f03d999e046838b8f0020000000020000000000000400050000080065ce0ce68f3c0000e4f47c95cc4ae87fda7f5249bac09b4cb8f026e2917b0a6035876f559bade3897293a2c0651cdc91c11d62573bf4eee2b1cd"], 0x0)

1.469410097s ago: executing program 2 (id=799):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.362318859s ago: executing program 3 (id=801):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x1018e58, &(0x7f0000001700)={[{@debug_want_extra_isize}, {@journal_path={'journal_path', 0x3d, './cgroup'}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@dioread_nolock}, {@i_version}]}, 0x6, 0x611, &(0x7f00000017c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ff"], 0xfc}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x3082000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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")

1.2909075s ago: executing program 1 (id=803):
add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="ffffffffffffffdfb70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb74d8d5fd5e4d6f676a513e95103000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x6, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)

1.171291301s ago: executing program 1 (id=804):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
io_uring_setup(0x54a5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x3}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000082bf06000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b4b, &(0x7f0000000200))
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB], 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x4040140}, 0x240008c4)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
syz_emit_ethernet(0x0, 0x0, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

1.137437532s ago: executing program 3 (id=805):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.124648232s ago: executing program 2 (id=807):
unshare(0x2c020400)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.100787302s ago: executing program 0 (id=808):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008080, &(0x7f0000000100)={[{@block_validity}, {@auto_da_alloc}, {@usrquota}]}, 0x5, 0x4df, &(0x7f0000000c40)="$eJzs3M9vFFUcAPDvbLtt+aUVEQVRCmhsTGyhoHDwgomJJpoY8SDHpq0EKWBoD0KIlMTgmcS78Wi8aeJVj8aTfwAePJgYEmK4AJ7WzO5Muz/b3bJdqPv5JNu+N/Nm3vvuzJt9Oy+zAfStsfRPErE9Im5FxJOVbG2Bscq/+3evzjy4e3UmlkqlU/8k5XL30nwm325blhkvRBS+TOp2WLFw+cq56fn5uUtZfnLx/GeTC5evvHb2/PSZuTNzF6ZOnDh29MjxN6Ze7zyoJvWlcd3b+8XFfXveOX3z/ZnBfPlI9r86jqHOa2xqbJV1L3epjsfFjqp0Mtiw+lpPG0Pb0vM/PVzFtP9fnT94+lE3COiZUqlUGm69eqlU73rDEmDTSmKdG25f74bA4yH/oE+//+avHg09Hgt3Tla+AKVx389elTWDUcjKFOu+33bTWER8vPTvN+kr6u5D1PhzgxoAAPSdX07mI8H68V8hdleVeyKbQxmNiKciYmdEPB0RuyLimYhy2Wcj4rn6CpKI0ir176rLr9T/YzaLULj90EGuIh3/vZnNbdWO//LRX4wOZLkdEfmAee5w9p6MR3H4k7Pzc0da7H+tuaTq8V/6SuvPx4JZO24P1t2gm51enF5ftI3uXI/YO1gffzKYHrh8GieJiD0RsbeD/Y5Wpc+++t2+5Uyxttza8ZeVmkzpRTTOM3Ws9G3EK5XjvxQ1x3+lxmT1+cnJkZifOzyZngWHm9bx2+83PmhV/5rx//RX/SZvH//51MOGvSw9/lurzv/I529X4h9NIpLl+dqFiNJAZ3Xc+OOr8n7HDjWuW+/5P5R8VE7n/evz6cXFS0cihpL3GpdPrWyb5/Pyafzjh5r3/52x8kY8HxHpSfxCRLwYEfuzth+IiIMR0SS0Zb++9dKnTRa/O9T++b9h0vhnm17/ao7/ynx9m4l843TJwLkDtx60uHi0d/yPlVPj2ZLm17+k5hLRZksLD/fuAQAAwOaQfgHeHlGYWE4XChMTlXtAu2JrYf7iwuL+iLgwW3lGYDSKhfxOV+V+cDHJ73+OVuWn6vJHs/vGXw9sKecnZi7Ozz7q4KHPbSv3+aSh/6f+7vA+L7AJdWEeDdik1ur/u2/2qCFAz/n8h/5V1f+XWhRZWuhVY4Ce8vkP/atZ/78W36/67IJrBmx+JX0Z+pr+D/1rMD5cTpefiGv6tC3wf7Tuz/9id9sB9FSnz/V3ligNN181Ek1+MWBkY5qxpb6u0djIkFsn0pFVF3eYXnvbK7xlPVXkQ8DWv/BQ6GyHw9G4aiBW2ypp/3cclhPpu7Jm4TO7u37y57+J0u3T5oeVflps83B3KfFILkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd918AAAD//xhA048=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1\x01\x00\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf\x94_\xe1\x7f3:\x99\x1e\xac`\xc3\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00', 0x2)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000040000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = creat(0x0, 0x0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r9, 0x0, 0x4d, 0x20004000, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f0000000540)=""/51, 0x1329000, 0x1000, 0x8, 0x3}, 0x20)
sendmmsg$inet(r10, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d2446dda1471848cf6b4da31af41e18082cd959e70439b16353b8aedf04000c9924bf89b5b259fcabe8a71283e0da2f03d3f55ae4b182494f79296ecf32287745a1cabf939352aafa5606b98cff8542a9a16badab2fb7d34030278ba8e725da52aa33169b84f9f2c3ec1dd49b3b65c553", 0x90}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="59739e145fb6c69f9db91a2370fda8a65518551e269b19b4d784fcccae1d7cc0111703843d7cf71d8c1132b0250ab85bcf2bbe14de82dabdadf12e63c4c2d38cb64d78651d0b2b887a10c80838c8eaaeadf260860a4c786394646abc86dcc9e8d7e300e697e617ddf46fb7d9be7655f89d2c23735a9ba3ac6df37b537085eef98b31d083d8619e8462bc58ae8e2e922c774deb3c27ea6f4ca714", 0x9a}, {&(0x7f0000000bc0)="27117c3709d044884fa6fec6bd8852068a1e26cffa2bf563855869d702176fbd80bc73c0ed6712e5990a6b5456f35fdc3186f0e25ae4e6a75d5011d67923646ef7828b21eabf17f4ad996750a39105c9b14c67915a4aefdbcb5e608c8790f6001229a7f480677ce0aeb2b2de4dace61f98ab96b6229080658a938237485d617cfdb605b16db592c15d00e394a0fdc1b23b9131bf3c76e9bb6588f2c97a36fe2e477c0ff90698b7d4e14b24e7362febbc03346ebfe930f309d14c90590e6d08025235c54c93128437846c8dd028204c74ddb1cacc22abecf3bb", 0xd9}, {&(0x7f0000000400)="a7669181f275f55ea18ed85e74db7b73bedcb923f94c1c1068041ae833512d6993133d72293c5b93081f36c396f97b8bd31e3033733466", 0x37}, {&(0x7f0000000cc0)="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", 0xfc}], 0x4, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x3, 0x4004040)
getdents(r0, &(0x7f00000000c0)=""/43, 0x2b)

1.066256443s ago: executing program 2 (id=809):
syz_open_procfs$namespace(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, r2, 0x0, 0x46)
socket$packet(0x11, 0x3, 0x300)
close(r2)
socket$igmp6(0xa, 0x3, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r5, 0x0, 0x4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$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")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000fef0ff3f000000000000000085100004000000660800000000000018000002000000000000000000000000950000000000000095000000000000009500000000000000000000000000000000748b3991a2445b40f4f6b7c1ded59f04a5250f7e649271c77fdd7d802a089d271136840740857d940e0ead78c3bdbca10ea8ea0545ca5b41741d5b5891acf8e07a19073d047318bd6eedd04d4b724e10f8056aa15fcf5793d85dba69a030c1e1971d5b370f869d8bcef3438ef9a715e4e9db791b3c8e4ac22920e0eb017c911ae463a1e07b069bb5e1be90d9dc3b9f8e10632645b637f75d20018e3cbe25b1d65c"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

959.954065ms ago: executing program 3 (id=811):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = epoll_create(0x3ff)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)

959.391145ms ago: executing program 3 (id=812):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c00028005"], 0x84}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r0 = socket$key(0xf, 0x3, 0x2)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

951.252295ms ago: executing program 4 (id=813):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x100, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @window, @sack_perm, @sack_perm, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x0, 0x85}], 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$inet6(0xa, 0x3, 0x3)
r2 = socket$inet6(0xa, 0x2, 0x20000002)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
fcntl$setown(r1, 0x8, r3)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2)
sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0)
r4 = syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x2, 0x7f4, &(0x7f0000000d80)="$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")
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r7 = syz_open_dev$vcsa(&(0x7f0000000300), 0x8, 0x143a02)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xfe, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x7, 0x700, 0x80000000, 0xdb}})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, r8}, 0x94)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4)
getdents64(r9, &(0x7f00000001c0)=""/48, 0x30)
getdents64(r9, 0xfffffffffffffffe, 0x29)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0xc, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0xe4, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYRES8=r9, @ANYRESOCT=r4, @ANYBLOB="db7ee437908fe11c2ca368072a73febe854d94318230ee8a48fdfca4ea402f246f6440f9acd97550ac1a7448267471605cca434861db0443deddf2f53d8eabf7ecf3249069d4d546398d049d2ffd48064d7f756011b5f793210b220c4340ab76eacb05e19c4bbed76d41c077d1fdbcc41d3ecd705e741955575c2465ad51ec5d81c8b1d04f59a73d8bbc25d0268f74a7e2748a5242fe37e568e62ee5b2d88babefe6277d5f"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180100002020702500000020207b1af8ff00000000bfa100004000000007010000f8ffffffb702000008000000b7030000020000008500000006000000851000000200000018490000000000184a0000020000000000000000000000182200"/108, @ANYRES32=r9, @ANYBLOB="00000000fdffffff"], &(0x7f0000000940)='syzkaller\x00', 0x7, 0x61, &(0x7f0000000980)=""/97, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, r9, 0x8, &(0x7f0000000b00)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r7, 0x2, &(0x7f0000000b40)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x1, 0x4, 0x3}, {0x1, 0x5, 0x10, 0x3}]}, 0x94)

840.916147ms ago: executing program 4 (id=814):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x159c}}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1001}, 0x18)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, <r7=>0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x10e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x4000000000000000, 0x0, 0x0, 0x100000000000, 0x3, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, r7, 0xafffffdfffffffff, 0xffffffffffffffff, 0x2)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)}], 0x2, 0x0, 0x0, 0x8000}, 0x0)
r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x110)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15)
pipe2$9p(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r12, &(0x7f0000000300)=ANY=[], 0x15)
r13 = dup(r12)
write$P9_RLERRORu(r13, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r13, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r13, &(0x7f0000000340)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x2060010, &(0x7f0000000680)=ANY=[@ANYRES64=r10, @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYRES8=0x0, @ANYRESDEC=r8, @ANYRES16=r12, @ANYRESHEX=r5])
syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088a815008100480008004500005800000000002f907800000000e0000001248081000000000010000800000086dd080088be81000002100000040100000000000000080022eb000000c98f03d999e046838b8f0020000000020000000000000400050000080065ce0ce68f3c0000e4f47c95cc4ae87fda7f5249bac09b4cb8f026e2917b0a6035876f559bade3897293a2c0651cdc91c11d62573bf4eee2b1cd"], 0x0)

835.726686ms ago: executing program 3 (id=815):
add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="ffffffffffffffdfb70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb74d8d5fd5e4d6f676a513e95103000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xf}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000540), 0x84)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x6, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0x40, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)

739.031988ms ago: executing program 4 (id=816):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file0/../file0\x00', 0x1018e58, &(0x7f0000001700)={[{@debug_want_extra_isize}, {@journal_path={'journal_path', 0x3d, './cgroup'}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@dioread_nolock}, {@i_version}]}, 0x6, 0x611, &(0x7f00000017c0)="$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")
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00')
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000002001000000ffffffffffffffeb000000ac1414aa000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ff"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x3082000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2b, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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")

710.939039ms ago: executing program 0 (id=817):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x0, 0x1000, 0x4a}, 0x2c)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) (fail_nth: 6)

570.537371ms ago: executing program 3 (id=818):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
rt_sigpending(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

566.981221ms ago: executing program 4 (id=819):
unshare(0x2c020400)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

343.071564ms ago: executing program 0 (id=820):
syz_create_resource$binfmt(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x3, 0xffffffff}, 0x5})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)

297.866005ms ago: executing program 4 (id=821):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

197.859306ms ago: executing program 4 (id=822):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008080, &(0x7f0000000100)={[{@block_validity}, {@auto_da_alloc}, {@usrquota}]}, 0x5, 0x4df, &(0x7f0000000c40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')
r1 = memfd_create(&(0x7f0000001140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1\x01\x00\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf\x94_\xe1\x7f3:\x99\x1e\xac`\xc3\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00', 0x2)
write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r1, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000040000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = creat(0x0, 0x0)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r10, 0x0, 0x4d, 0x20004000, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10)
sendto$inet(r10, 0x0, 0x0, 0x200087fd, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000680)={&(0x7f0000000540)=""/51, 0x1329000, 0x1000, 0x8, 0x3}, 0x20)
sendmmsg$inet(r11, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be57aff9352b356be67ca2746357d1787b351f0fda2d3d656bc3a2a75e0d2446dda1471848cf6b4da31af41e18082cd959e70439b16353b8aedf04000c9924bf89b5b259fcabe8a71283e0da2f03d3f55ae4b182494f79296ecf32287745a1cabf939352aafa5606b98cff8542a9a16badab2fb7d34030278ba8e725da52aa33169b84f9f2c3ec1dd49b3b65c553", 0x90}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000840)="59739e145fb6c69f9db91a2370fda8a65518551e269b19b4d784fcccae1d7cc0111703843d7cf71d8c1132b0250ab85bcf2bbe14de82dabdadf12e63c4c2d38cb64d78651d0b2b887a10c80838c8eaaeadf260860a4c786394646abc86dcc9e8d7e300e697e617ddf46fb7d9be7655f89d2c23735a9ba3ac6df37b537085eef98b31d083d8619e8462bc58ae8e2e922c774deb3c27ea6f4ca714", 0x9a}, {&(0x7f0000000bc0)="27117c3709d044884fa6fec6bd8852068a1e26cffa2bf563855869d702176fbd80bc73c0ed6712e5990a6b5456f35fdc3186f0e25ae4e6a75d5011d67923646ef7828b21eabf17f4ad996750a39105c9b14c67915a4aefdbcb5e608c8790f6001229a7f480677ce0aeb2b2de4dace61f98ab96b6229080658a938237485d617cfdb605b16db592c15d00e394a0fdc1b23b9131bf3c76e9bb6588f2c97a36fe2e477c0ff90698b7d4e14b24e7362febbc03346ebfe930f309d14c90590e6d08025235c54c93128437846c8dd028204c74ddb1cacc22abecf3bb", 0xd9}, {&(0x7f0000000400)="a7669181f275f55ea18ed85e74db7b73bedcb923f94c1c1068041ae833512d6993133d72293c5b93081f36c396f97b8bd31e3033733466", 0x37}, {&(0x7f0000000cc0)="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", 0xfc}], 0x4, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}], 0x20}}], 0x3, 0x4004040)
getdents(r0, &(0x7f00000000c0)=""/43, 0x2b)

101.364648ms ago: executing program 0 (id=823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = epoll_create(0x3ff)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)

0s ago: executing program 0 (id=824):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

kernel console output (not intermixed with test programs):

06559][ T3984] EXT4-fs (loop2): orphan cleanup on readonly fs
[   49.917954][ T3984] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.190: bg 0: block 248: padding at end of block bitmap is not set
[   49.933692][ T3984] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.190: Failed to acquire dquot type 1
[   49.970782][ T3984] EXT4-fs (loop2): 1 truncate cleaned up
[   49.990083][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.007972][ T3984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.087436][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.110480][ T3991] loop4: detected capacity change from 0 to 1024
[   50.119202][ T3991] EXT4-fs: Ignoring removed nobh option
[   50.125023][ T3991] EXT4-fs: Ignoring removed oldalloc option
[   50.146972][ T3993] netem: change failed
[   50.162635][ T3991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.171914][ T3999] blktrace: Concurrent blktraces are not allowed on sg0
[   50.218452][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.243857][ T4004] loop1: detected capacity change from 0 to 512
[   50.270200][ T4007] loop2: detected capacity change from 0 to 512
[   50.281693][ T4004] EXT4-fs (loop1): 1 orphan inode deleted
[   50.288107][ T4004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.300784][   T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   50.301380][ T4004] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.366107][ T4007] EXT4-fs (loop2): 1 orphan inode deleted
[   50.372340][ T4007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.381295][ T3415] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   50.442877][ T4022] loop0: detected capacity change from 0 to 1024
[   50.443062][ T3999] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   50.462489][ T4022] loop0: detected capacity change from 0 to 512
[   50.469394][ T4022] EXT4-fs: Ignoring removed orlov option
[   50.478911][ T4007] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.489068][ T4022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   50.510786][ T4022] EXT4-fs (loop0): orphan cleanup on readonly fs
[   50.519164][ T4022] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.203: bg 0: block 248: padding at end of block bitmap is not set
[   50.542061][ T4027] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.205'.
[   50.553571][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.554375][ T4022] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.203: Failed to acquire dquot type 1
[   50.573896][ T4027] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.205'.
[   50.582988][ T4027] netlink: 380 bytes leftover after parsing attributes in process `syz.3.205'.
[   50.593749][ T4027] blktrace: Concurrent blktraces are not allowed on sg0
[   50.604283][ T4022] EXT4-fs (loop0): 1 truncate cleaned up
[   50.608886][ T4001] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   50.622197][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   50.664281][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.678033][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.793691][ T4042] warn_alloc: 2 callbacks suppressed
[   50.793709][ T4042] syz.3.212: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   50.813585][ T4042] CPU: 0 UID: 0 PID: 4042 Comm: syz.3.212 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   50.813672][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   50.813708][ T4042] Call Trace:
[   50.813715][ T4042]  <TASK>
[   50.813723][ T4042]  __dump_stack+0x1d/0x30
[   50.813744][ T4042]  dump_stack_lvl+0xe8/0x140
[   50.813766][ T4042]  dump_stack+0x15/0x1b
[   50.813802][ T4042]  warn_alloc+0x12b/0x1a0
[   50.813853][ T4042]  __vmalloc_node_range_noprof+0x9c/0xe00
[   50.813892][ T4042]  ? __futex_wait+0x1ff/0x260
[   50.813924][ T4042]  ? __pfx_futex_wake_mark+0x10/0x10
[   50.814038][ T4042]  ? __rcu_read_unlock+0x4f/0x70
[   50.814059][ T4042]  ? avc_has_perm_noaudit+0x1b1/0x200
[   50.814179][ T4042]  ? should_fail_ex+0x30/0x280
[   50.814211][ T4042]  ? xskq_create+0x36/0xe0
[   50.814242][ T4042]  vmalloc_user_noprof+0x7d/0xb0
[   50.814277][ T4042]  ? xskq_create+0x80/0xe0
[   50.814345][ T4042]  xskq_create+0x80/0xe0
[   50.814374][ T4042]  xsk_init_queue+0x95/0xf0
[   50.814402][ T4042]  xsk_setsockopt+0x35c/0x510
[   50.814429][ T4042]  ? __pfx_xsk_setsockopt+0x10/0x10
[   50.814454][ T4042]  __sys_setsockopt+0x181/0x200
[   50.814529][ T4042]  __x64_sys_setsockopt+0x64/0x80
[   50.814567][ T4042]  x64_sys_call+0x2bd5/0x2fb0
[   50.814589][ T4042]  do_syscall_64+0xd2/0x200
[   50.814644][ T4042]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   50.814670][ T4042]  ? clear_bhb_loop+0x40/0x90
[   50.814694][ T4042]  ? clear_bhb_loop+0x40/0x90
[   50.814769][ T4042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.814795][ T4042] RIP: 0033:0x7f81a401e929
[   50.814816][ T4042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.814883][ T4042] RSP: 002b:00007f81a2687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   50.814901][ T4042] RAX: ffffffffffffffda RBX: 00007f81a4245fa0 RCX: 00007f81a401e929
[   50.814915][ T4042] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   50.814931][ T4042] RBP: 00007f81a40a0b39 R08: 0000000000000004 R09: 0000000000000000
[   50.814991][ T4042] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   50.815007][ T4042] R13: 0000000000000000 R14: 00007f81a4245fa0 R15: 00007ffe43439a78
[   50.815032][ T4042]  </TASK>
[   50.815040][ T4042] Mem-Info:
[   50.945315][ T4040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.950882][ T4042] active_anon:3743 inactive_anon:0 isolated_anon:0
[   50.950882][ T4042]  active_file:5821 inactive_file:2198 isolated_file:0
[   50.950882][ T4042]  unevictable:0 dirty:52 writeback:0
[   50.950882][ T4042]  slab_reclaimable:2888 slab_unreclaimable:13609
[   50.950882][ T4042]  mapped:28818 shmem:176 pagetables:956
[   50.950882][ T4042]  sec_pagetables:0 bounce:0
[   50.950882][ T4042]  kernel_misc_reclaimable:0
[   50.950882][ T4042]  free:1851907 free_pcp:63100 free_cma:0
[   51.104496][ T4042] Node 0 active_anon:15204kB inactive_anon:0kB active_file:23284kB inactive_file:8792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115388kB dirty:208kB writeback:0kB shmem:704kB writeback_tmp:0kB kernel_stack:3264kB pagetables:3940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   51.133163][ T4042] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   51.161903][ T4042] lowmem_reserve[]: 0 2882 7860 7860
[   51.167545][ T4042] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB
[   51.197954][ T4042] lowmem_reserve[]: 0 0 4978 4978
[   51.203158][ T4042] Node 0 Normal free:4444540kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15204kB inactive_anon:0kB active_file:23284kB inactive_file:8792kB unevictable:0kB writepending:208kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:248692kB local_pcp:141708kB free_cma:0kB
[   51.235223][ T4042] lowmem_reserve[]: 0 0 0 0
[   51.239831][ T4042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   51.252745][ T4042] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB
[   51.268993][ T4042] Node 0 Normal: 1389*4kB (UME) 645*8kB (UME) 324*16kB (UME) 201*32kB (UME) 129*64kB (UME) 102*128kB (UME) 71*256kB (UME) 38*512kB (UME) 25*1024kB (UME) 14*2048kB (UE) 1052*4096kB (UM) = 4444540kB
[   51.288544][ T4042] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   51.298067][ T4042] 8192 total pagecache pages
[   51.302716][ T4042] 1 pages in swap cache
[   51.306916][ T4042] Free swap  = 124992kB
[   51.311332][ T4042] Total swap = 124996kB
[   51.315489][ T4042] 2097051 pages RAM
[   51.319314][ T4042] 0 pages HighMem/MovableOnly
[   51.323988][ T4042] 80812 pages reserved
[   51.402472][ T4058] netlink: 'syz.2.216': attribute type 2 has an invalid length.
[   51.410357][ T4058] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.216'.
[   51.428769][ T4058] netlink: 88 bytes leftover after parsing attributes in process `syz.2.216'.
[   51.445664][ T4058] loop2: detected capacity change from 0 to 512
[   51.454781][ T4058] EXT4-fs: Ignoring removed nomblk_io_submit option
[   51.469115][ T4063] loop3: detected capacity change from 0 to 1024
[   51.484027][ T4058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.484607][ T4068] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.220'.
[   51.497948][ T4058] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   51.521367][ T4069] loop1: detected capacity change from 0 to 512
[   51.523263][ T4058] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4058 comm=syz.2.216
[   51.542812][ T4068] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.220'.
[   51.552051][ T4068] netlink: 380 bytes leftover after parsing attributes in process `syz.4.220'.
[   51.568877][ T4063] loop3: detected capacity change from 0 to 512
[   51.576043][ T4063] EXT4-fs: Ignoring removed orlov option
[   51.582262][ T4063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   51.591513][ T4068] blktrace: Concurrent blktraces are not allowed on sg0
[   51.605519][ T4063] EXT4-fs (loop3): orphan cleanup on readonly fs
[   51.613542][ T4063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.219: bg 0: block 248: padding at end of block bitmap is not set
[   51.623948][ T4069] EXT4-fs (loop1): 1 orphan inode deleted
[   51.634749][ T3415] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   51.646713][ T4063] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.219: Failed to acquire dquot type 1
[   51.648115][ T4069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.679029][ T4069] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.695261][ T4063] EXT4-fs (loop3): 1 truncate cleaned up
[   51.707786][ T4082] SELinux: syz.4.222 (4082) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.722809][ T4063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   51.788865][ T4061] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   51.810627][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.927763][ T4103] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.075876][ T4110] loop1: detected capacity change from 0 to 512
[   52.097618][ T4110] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.229: iget: bad i_size value: 38620345925642
[   52.113789][ T4110] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.229: couldn't read orphan inode 15 (err -117)
[   52.128299][ T4115] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.233'.
[   52.130575][ T4117] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   52.148144][ T4117] Cannot find set identified by id 65534 to match
[   52.155408][ T4117] netlink: 'syz.0.232': attribute type 6 has an invalid length.
[   52.172347][ T4113] loop2: detected capacity change from 0 to 1024
[   52.179208][ T4113] EXT4-fs: Ignoring removed nobh option
[   52.184806][ T4113] EXT4-fs: Ignoring removed oldalloc option
[   52.185932][ T4115] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.233'.
[   52.264145][ T4122] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.229: iget: bad i_size value: 38620345925642
[   52.322358][ T4124] SELinux: syz.2.235 (4124) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   52.415123][ T4129] loop2: detected capacity change from 0 to 1024
[   52.437776][ T4129] loop2: detected capacity change from 0 to 512
[   52.444774][ T4129] EXT4-fs: Ignoring removed orlov option
[   52.451744][ T4129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   52.473607][ T4122] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.229: path /35/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   52.697702][ T4129] EXT4-fs (loop2): orphan cleanup on readonly fs
[   52.705494][ T4129] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.236: bg 0: block 248: padding at end of block bitmap is not set
[   52.786063][ T4129] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.236: Failed to acquire dquot type 1
[   52.843809][ T4129] EXT4-fs (loop2): 1 truncate cleaned up
[   52.913208][ T4143] netlink: 'syz.2.241': attribute type 9 has an invalid length.
[   52.944665][ T4146] loop4: detected capacity change from 0 to 512
[   53.008306][ T4146] EXT4-fs (loop4): 1 orphan inode deleted
[   53.015908][ T4146] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.040758][  T294] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   53.056072][ T4159] SELinux: syz.1.246 (4159) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.094983][ T4161] loop0: detected capacity change from 0 to 1024
[   53.101939][ T4161] EXT4-fs: Ignoring removed nobh option
[   53.109866][ T4161] EXT4-fs: Ignoring removed oldalloc option
[   53.127569][ T4140] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   53.150907][ T4163] blktrace: Concurrent blktraces are not allowed on sg0
[   53.275045][ T4177] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   53.293134][ T4177] loop1: detected capacity change from 0 to 128
[   53.304315][   T29] kauditd_printk_skb: 1268 callbacks suppressed
[   53.304332][   T29] audit: type=1400 audit(1751113231.445:2392): avc:  denied  { read write } for  pid=4183 comm="syz.2.256" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   53.334531][   T29] audit: type=1400 audit(1751113231.445:2393): avc:  denied  { open } for  pid=4183 comm="syz.2.256" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   53.334839][ T4184] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   53.361083][ T4188] SELinux: syz.4.259 (4188) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.396122][   T29] audit: type=1400 audit(1751113231.535:2394): avc:  denied  { name_bind } for  pid=4189 comm="syz.3.260" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[   53.418513][ T4177] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   53.436546][   T29] audit: type=1400 audit(1751113231.585:2395): avc:  denied  { create } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.460113][ T4195] loop4: detected capacity change from 0 to 512
[   53.483854][ T4184] loop2: detected capacity change from 0 to 164
[   53.495196][   T29] audit: type=1400 audit(1751113231.635:2396): avc:  denied  { write open } for  pid=4175 comm="syz.1.255" path="/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   53.540180][ T4184] iso9660: Unexpected value for 'nojoliet'
[   53.549224][   T29] audit: type=1400 audit(1751113231.695:2397): avc:  denied  { bind } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.575387][   T29] audit: type=1400 audit(1751113231.695:2398): avc:  denied  { listen } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.595000][   T29] audit: type=1400 audit(1751113231.695:2399): avc:  denied  { connect } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.614673][   T29] audit: type=1400 audit(1751113231.695:2400): avc:  denied  { write } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.634241][   T29] audit: type=1400 audit(1751113231.695:2401): avc:  denied  { accept } for  pid=4183 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   53.659785][ T4201] loop3: detected capacity change from 0 to 512
[   53.675289][ T4177] netlink: 'syz.1.255': attribute type 4 has an invalid length.
[   53.688760][ T4201] EXT4-fs (loop3): 1 orphan inode deleted
[   53.695220][ T4201] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.708366][ T3415] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   53.749261][ T4201] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   53.822350][ T4219] SELinux: syz.1.272 (4219) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.909944][ T4232] loop3: detected capacity change from 0 to 1024
[   53.927940][ T4236] blktrace: Concurrent blktraces are not allowed on sg0
[   53.929620][ T4232] loop3: detected capacity change from 0 to 512
[   53.943127][ T4232] EXT4-fs: Ignoring removed orlov option
[   53.949842][ T4232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   53.961104][ T4232] EXT4-fs (loop3): orphan cleanup on readonly fs
[   53.969689][ T4232] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.277: bg 0: block 248: padding at end of block bitmap is not set
[   53.998525][ T4232] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.277: Failed to acquire dquot type 1
[   54.020972][ T4232] EXT4-fs (loop3): 1 truncate cleaned up
[   54.062867][ T4248] SELinux: syz.3.284 (4248) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   54.099998][ T4249] loop2: detected capacity change from 0 to 512
[   54.125142][ T4249] EXT4-fs (loop2): 1 orphan inode deleted
[   54.143768][ T4249] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.154849][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   54.195558][ T4242] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   54.264879][ T4269] blktrace: Concurrent blktraces are not allowed on sg0
[   54.327735][ T4276] loop0: detected capacity change from 0 to 1024
[   54.346985][ T4279] SELinux: syz.3.297 (4279) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   54.376340][ T4276] loop0: detected capacity change from 0 to 512
[   54.383202][ T4276] EXT4-fs: Ignoring removed orlov option
[   54.415824][ T4276] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.457047][ T4276] EXT4-fs (loop0): orphan cleanup on readonly fs
[   54.476418][ T4276] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.295: bg 0: block 248: padding at end of block bitmap is not set
[   54.511564][ T4276] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.295: Failed to acquire dquot type 1
[   54.526745][ T4276] EXT4-fs (loop0): 1 truncate cleaned up
[   54.585447][ T4298] loop4: detected capacity change from 0 to 128
[   54.599101][ T4300] loop0: detected capacity change from 0 to 1024
[   54.606017][ T4300] EXT4-fs: Ignoring removed nobh option
[   54.611933][ T4300] EXT4-fs: Ignoring removed oldalloc option
[   54.649122][ T4298] FAT-fs (loop4): Directory bread(block 11554) failed
[   54.671245][ T4298] FAT-fs (loop4): Directory bread(block 11555) failed
[   54.681342][ T4298] FAT-fs (loop4): Directory bread(block 11556) failed
[   54.688508][ T4298] FAT-fs (loop4): Directory bread(block 11557) failed
[   54.689167][ T4314] SELinux: syz.1.312 (4314) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   54.695553][ T4298] FAT-fs (loop4): Directory bread(block 11558) failed
[   54.715937][ T4298] FAT-fs (loop4): Directory bread(block 11559) failed
[   54.722910][ T4315] loop2: detected capacity change from 0 to 128
[   54.723109][ T4298] FAT-fs (loop4): Directory bread(block 11560) failed
[   54.736736][ T4315] process 'syz.2.313' launched '/dev/fd/9' with NULL argv: empty string added
[   54.737004][ T4298] FAT-fs (loop4): Directory bread(block 11561) failed
[   54.752684][ T4298] FAT-fs (loop4): Directory bread(block 11562) failed
[   54.759721][ T4298] FAT-fs (loop4): Directory bread(block 11563) failed
[   54.809320][ T4322] loop1: detected capacity change from 0 to 1024
[   54.823117][ T4322] loop1: detected capacity change from 0 to 512
[   54.831211][ T4322] EXT4-fs: Ignoring removed orlov option
[   54.839537][ T4322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   54.853056][ T4322] EXT4-fs (loop1): orphan cleanup on readonly fs
[   54.862310][ T4322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.317: bg 0: block 248: padding at end of block bitmap is not set
[   54.882841][ T4329] loop3: detected capacity change from 0 to 512
[   54.889626][ T4322] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.317: Failed to acquire dquot type 1
[   54.915574][ T4322] EXT4-fs (loop1): 1 truncate cleaned up
[   54.944819][ T4329] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.319: iget: bad i_size value: 38620345925642
[   54.964272][ T4329] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.319: couldn't read orphan inode 15 (err -117)
[   55.000801][ T4340] loop0: detected capacity change from 0 to 1024
[   55.009017][ T4340] EXT4-fs: Ignoring removed nobh option
[   55.014717][ T4340] EXT4-fs: Ignoring removed oldalloc option
[   55.039211][ T4348] SELinux: syz.1.327 (4348) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   55.100247][ T4354] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   55.174416][ T4360] loop1: detected capacity change from 0 to 256
[   55.191331][ T4360] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   55.235672][ T4360] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   55.244295][ T4360] FAT-fs (loop1): Filesystem has been set read-only
[   55.280162][ T4368] loop0: detected capacity change from 0 to 512
[   55.287171][ T4357] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.319: iget: bad i_size value: 38620345925642
[   55.319434][ T4368] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.332: Parent and EA inode have the same ino 15
[   55.347110][ T4368] EXT4-fs (loop0): Remounting filesystem read-only
[   55.388638][ T4368] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   55.401765][ T4368] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[   55.427227][ T4366] loop2: detected capacity change from 0 to 512
[   55.459055][ T4368] EXT4-fs (loop0): 1 orphan inode deleted
[   55.480358][ T4357] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.3.319: path /71/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   55.597266][ T4366] EXT4-fs (loop2): 1 orphan inode deleted
[   55.617696][ T3435] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   55.649566][ T4366] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.670553][ T4398] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   55.708875][ T4398] loop0: detected capacity change from 0 to 128
[   55.711735][ T4402] __nla_validate_parse: 28 callbacks suppressed
[   55.711758][ T4402] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.339'.
[   55.733476][ T4398] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   55.745135][ T4402] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.339'.
[   55.774728][ T4402] netlink: 380 bytes leftover after parsing attributes in process `syz.1.339'.
[   55.792039][ T4398] netlink: 'syz.0.338': attribute type 4 has an invalid length.
[   55.806014][ T4366] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   55.871611][ T4410] SELinux: syz.0.340 (4410) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   55.938903][ T4416] loop4: detected capacity change from 0 to 1024
[   55.945631][ T4416] EXT4-fs: Ignoring removed nobh option
[   55.964237][ T4416] EXT4-fs: Ignoring removed oldalloc option
[   56.063492][ T4437] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   56.091466][ T4437] loop2: detected capacity change from 0 to 128
[   56.117255][ T4437] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   56.155135][ T4444] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.353'.
[   56.168821][ T4434] ------------[ cut here ]------------
[   56.174356][ T4434] WARNING: CPU: 0 PID: 4434 at kernel/events/core.c:7211 perf_pending_task+0x206/0x210
[   56.184172][ T4434] Modules linked in:
[   56.188195][ T4434] CPU: 0 UID: 0 PID: 4434 Comm: syz.1.344 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   56.200616][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   56.210754][ T4434] RIP: 0010:perf_pending_task+0x206/0x210
[   56.216847][ T4434] Code: 10 f0 fc ff 41 88 6c 1d 00 eb 05 e8 44 ec e2 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 f2 ee 03 cc e8 2b ec e2 ff 90 <0f> 0b 90 eb 86 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90
[   56.230987][ T4433] loop4: detected capacity change from 0 to 512
[   56.236877][ T4434] RSP: 0018:ffffc9000f05fc30 EFLAGS: 00010293
[   56.236902][ T4434] RAX: ffffffff8174d6a5 RBX: 0000000000000000 RCX: ffff88810a109040
[   56.236919][ T4434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88812214c488
[   56.236935][ T4434] RBP: 000000007ec4976a R08: 000188812214c48f R09: 0000000000000000
[   56.237021][ T4434] R10: ffff888105ac7cc0 R11: ffffffff8174d4a0 R12: ffff88811aa472b0
[   56.237038][ T4434] R13: ffff88810a109040 R14: ffff88811aa473f8 R15: ffff88812214c400
[   56.237054][ T4434] FS:  0000000000000000(0000) GS:ffff8882aee30000(0000) knlGS:0000000000000000
[   56.237073][ T4434] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   56.237089][ T4434] CR2: 0000200000003000 CR3: 000000011a222000 CR4: 00000000003506f0
[   56.237137][ T4434] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[   56.237153][ T4434] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
[   56.237169][ T4434] Call Trace:
[   56.237176][ T4434]  <TASK>
[   56.237188][ T4434]  task_work_run+0x12e/0x1a0
[   56.260422][ T4444] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.353'.
[   56.265693][ T4434]  do_exit+0x483/0x1590
[   56.273833][ T4444] netlink: 380 bytes leftover after parsing attributes in process `syz.0.353'.
[   56.281834][ T4434]  do_group_exit+0xff/0x140
[   56.368177][ T4434]  ? get_signal+0xe51/0xf70
[   56.372790][ T4434]  get_signal+0xe59/0xf70
[   56.377285][ T4434]  arch_do_signal_or_restart+0x96/0x480
[   56.382880][ T4434]  exit_to_user_mode_loop+0x7a/0x100
[   56.388239][ T4434]  do_syscall_64+0x1d6/0x200
[   56.393308][ T4434]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   56.399133][ T4434]  ? clear_bhb_loop+0x40/0x90
[   56.403855][ T4434]  ? clear_bhb_loop+0x40/0x90
[   56.408674][ T4434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.414756][ T4434] RIP: 0033:0x7f14ba32e929
[   56.419245][ T4434] Code: Unable to access opcode bytes at 0x7f14ba32e8ff.
[   56.420915][ T4433] EXT4-fs (loop4): 1 orphan inode deleted
[   56.426356][ T4434] RSP: 002b:00007f14b89760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   56.426383][ T4434] RAX: fffffffffffffe00 RBX: 00007f14ba556088 RCX: 00007f14ba32e929
[   56.426400][ T4434] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14ba556088
[   56.426416][ T4434] RBP: 00007f14ba556080 R08: 0000000000000000 R09: 0000000000000000
[   56.426432][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14ba55608c
[   56.426477][ T4434] R13: 0000000000000000 R14: 00007ffcc5e1dee0 R15: 00007ffcc5e1dfc8
[   56.426571][ T4434]  </TASK>
[   56.426579][ T4434] ---[ end trace 0000000000000000 ]---
[   56.437218][ T4437] netlink: 'syz.2.351': attribute type 4 has an invalid length.
[   56.498933][  T294] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   56.504138][ T4457] blktrace: Concurrent blktraces are not allowed on sg0
[   56.522392][ T4433] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.582309][ T4433] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   56.597545][ T4463] loop0: detected capacity change from 0 to 512
[   56.603024][ T4465] loop1: detected capacity change from 0 to 1024
[   56.611084][ T4465] EXT4-fs: Ignoring removed orlov option
[   56.617089][ T4465] EXT4-fs: Ignoring removed nomblk_io_submit option
[   56.624028][ T4463] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.359: iget: bad i_size value: 38620345925642
[   56.644566][ T4463] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.359: couldn't read orphan inode 15 (err -117)
[   56.728334][ T4480] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.359: iget: bad i_size value: 38620345925642
[   56.794137][ T4484] loop1: detected capacity change from 0 to 1024
[   56.817791][ T4484] EXT4-fs: Ignoring removed nobh option
[   56.832415][ T4484] EXT4-fs: Ignoring removed oldalloc option
[   56.869125][ T4490] sel_write_user: 1 callbacks suppressed
[   56.869141][ T4490] SELinux: syz.2.369 (4490) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   56.950858][ T4494] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.371'.
[   56.960222][ T4494] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.371'.
[   56.969462][ T4494] netlink: 380 bytes leftover after parsing attributes in process `syz.1.371'.
[   57.084700][ T4501] loop2: detected capacity change from 0 to 512
[   57.136180][ T4501] EXT4-fs (loop2): 1 orphan inode deleted
[   57.153221][ T4501] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.164027][   T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   57.177022][ T4504] loop1: detected capacity change from 0 to 2048
[   57.200600][ T4496] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   57.228218][ T4504]  loop1: p1 < > p4
[   57.233004][ T4504] loop1: p4 size 8388608 extends beyond EOD, truncated
[   57.454550][ T4521] SELinux: syz.3.382 (4521) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   57.459797][ T4517] loop2: detected capacity change from 0 to 1024
[   57.501687][ T4517] EXT4-fs: Ignoring removed nobh option
[   57.513858][ T4517] EXT4-fs: Ignoring removed oldalloc option
[   57.518020][ T4525] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.384'.
[   57.535436][ T4525] blktrace: Concurrent blktraces are not allowed on sg0
[   57.553656][ T4523] loop1: detected capacity change from 0 to 128
[   57.736247][ T4462] syz.0.359 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[   57.747382][ T4462] CPU: 1 UID: 0 PID: 4462 Comm: syz.0.359 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   57.747483][ T4462] Tainted: [W]=WARN
[   57.747490][ T4462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   57.747502][ T4462] Call Trace:
[   57.747510][ T4462]  <TASK>
[   57.747519][ T4462]  __dump_stack+0x1d/0x30
[   57.747545][ T4462]  dump_stack_lvl+0xe8/0x140
[   57.747569][ T4462]  dump_stack+0x15/0x1b
[   57.747656][ T4462]  dump_header+0x81/0x220
[   57.747728][ T4462]  oom_kill_process+0x334/0x3f0
[   57.747767][ T4462]  out_of_memory+0x979/0xb80
[   57.747807][ T4462]  try_charge_memcg+0x5e6/0x9e0
[   57.747840][ T4462]  charge_memcg+0x51/0xc0
[   57.747902][ T4462]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[   57.748013][ T4462]  __read_swap_cache_async+0x1df/0x350
[   57.748046][ T4462]  swap_cluster_readahead+0x277/0x3e0
[   57.748114][ T4462]  swapin_readahead+0xde/0x6f0
[   57.748145][ T4462]  ? __filemap_get_folio+0x4f7/0x6b0
[   57.748181][ T4462]  ? __rcu_read_unlock+0x34/0x70
[   57.748203][ T4462]  ? swap_cache_get_folio+0x77/0x200
[   57.748297][ T4462]  do_swap_page+0x301/0x2430
[   57.748317][ T4462]  ? css_rstat_updated+0xcd/0x5b0
[   57.748354][ T4462]  ? __pfx_default_wake_function+0x10/0x10
[   57.748454][ T4462]  handle_mm_fault+0x9a5/0x2be0
[   57.748476][ T4462]  ? mas_walk+0xf2/0x120
[   57.748516][ T4462]  do_user_addr_fault+0x636/0x1090
[   57.748607][ T4462]  exc_page_fault+0x62/0xa0
[   57.748719][ T4462]  asm_exc_page_fault+0x26/0x30
[   57.748739][ T4462] RIP: 0033:0x7f8c985d4854
[   57.748754][ T4462] Code: 01 f2 80 7a 20 00 0f 85 c3 0d 00 00 48 8b 74 24 10 80 3d a2 0e e8 00 00 4c 89 2d 37 17 35 00 c7 42 0c 00 00 00 00 48 89 72 10 <48> 8b 74 24 08 48 89 72 18 0f 85 fd 05 00 00 48 63 fd 48 8d 35 33
[   57.748776][ T4462] RSP: 002b:00007ffdafdd3750 EFLAGS: 00010202
[   57.748795][ T4462] RAX: 00000000000001c0 RBX: 00007f8c98926168 RCX: 00007f8c986b5f37
[   57.748810][ T4462] RDX: 00007f8c98926160 RSI: 00007f8c98170869 RDI: 0000000000000002
[   57.748871][ T4462] RBP: 0000000000000002 R08: 00007f8c98925fa0 R09: 00007ffdafdd35e7
[   57.748886][ T4462] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f8c9892616c
[   57.748899][ T4462] R13: 00007f8c98926160 R14: 000000000000009d R15: 0000000000000003
[   57.748916][ T4462]  </TASK>
[   57.748924][ T4462] memory: usage 307200kB, limit 307200kB, failcnt 603
[   57.977629][ T4462] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0
[   57.985661][ T4462] kmem: usage 305480kB, limit 9007199254740988kB, failcnt 0
[   57.993147][ T4462] Memory cgroup stats for /syz0:
[   57.996371][ T4462] cache 1761280
[   58.005063][ T4462] rss 0
[   58.007938][ T4462] shmem 1757184
[   58.011416][ T4462] mapped_file 0
[   58.014900][ T4462] dirty 0
[   58.017914][ T4462] writeback 0
[   58.021228][ T4462] workingset_refault_anon 124
[   58.025995][ T4462] workingset_refault_file 406
[   58.030696][ T4462] swap 466944
[   58.034018][ T4462] swapcached 0
[   58.037619][ T4462] pgpgin 18284
[   58.041168][ T4462] pgpgout 17854
[   58.044703][ T4462] pgfault 21860
[   58.048268][ T4462] pgmajfault 101
[   58.051836][ T4462] inactive_anon 966656
[   58.056037][ T4462] active_anon 790528
[   58.059953][ T4462] inactive_file 0
[   58.063711][ T4462] active_file 0
[   58.067211][ T4462] unevictable 0
[   58.070692][ T4462] hierarchical_memory_limit 314572800
[   58.076110][ T4462] hierarchical_memsw_limit 9223372036854771712
[   58.082312][ T4462] total_cache 1761280
[   58.086453][ T4462] total_rss 0
[   58.089756][ T4462] total_shmem 1757184
[   58.093762][ T4462] total_mapped_file 0
[   58.097789][ T4462] total_dirty 0
[   58.101274][ T4462] total_writeback 0
[   58.105172][ T4462] total_workingset_refault_anon 124
[   58.110419][ T4462] total_workingset_refault_file 406
[   58.115666][ T4462] total_swap 466944
[   58.119574][ T4462] total_swapcached 0
[   58.123500][ T4462] total_pgpgin 18284
[   58.127452][ T4462] total_pgpgout 17854
[   58.131486][ T4462] total_pgfault 21860
[   58.135494][ T4462] total_pgmajfault 101
[   58.139619][ T4462] total_inactive_anon 966656
[   58.144239][ T4462] total_active_anon 790528
[   58.148702][ T4462] total_inactive_file 0
[   58.153205][ T4462] total_active_file 0
[   58.157581][ T4462] total_unevictable 0
[   58.161578][ T4462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.359,pid=4462,uid=0
[   58.176226][ T4462] Memory cgroup out of memory: Killed process 4462 (syz.0.359) total-vm:95932kB, anon-rss:936kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[   58.225348][ T4067] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   58.329488][   T29] kauditd_printk_skb: 608 callbacks suppressed
[   58.329506][   T29] audit: type=1400 audit(1751113236.475:2999): avc:  denied  { create } for  pid=4561 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   58.382376][   T29] audit: type=1400 audit(1751113236.515:3000): avc:  denied  { write } for  pid=4564 comm="syz.4.396" name="tcp6" dev="proc" ino=4026532703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   58.405035][   T29] audit: type=1400 audit(1751113236.525:3001): avc:  denied  { create } for  pid=4564 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   58.424598][   T29] audit: type=1326 audit(1751113236.525:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.448184][   T29] audit: type=1326 audit(1751113236.525:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.503204][   T29] audit: type=1326 audit(1751113236.525:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.526708][   T29] audit: type=1326 audit(1751113236.525:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.550154][   T29] audit: type=1326 audit(1751113236.565:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.573738][   T29] audit: type=1326 audit(1751113236.625:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.597155][   T29] audit: type=1326 audit(1751113236.625:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.3.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   58.729271][ T4556] loop3: detected capacity change from 0 to 512
[   58.943972][ T4556] EXT4-fs (loop3): 1 orphan inode deleted
[   58.959778][  T294] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   58.988374][ T4556] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.042992][ T4556] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   59.178942][ T4609] FAULT_INJECTION: forcing a failure.
[   59.178942][ T4609] name failslab, interval 1, probability 0, space 0, times 1
[   59.191808][ T4609] CPU: 1 UID: 0 PID: 4609 Comm: syz.3.406 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   59.191963][ T4609] Tainted: [W]=WARN
[   59.191969][ T4609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   59.191981][ T4609] Call Trace:
[   59.191987][ T4609]  <TASK>
[   59.191996][ T4609]  __dump_stack+0x1d/0x30
[   59.192023][ T4609]  dump_stack_lvl+0xe8/0x140
[   59.192047][ T4609]  dump_stack+0x15/0x1b
[   59.192068][ T4609]  should_fail_ex+0x265/0x280
[   59.192230][ T4609]  should_failslab+0x8c/0xb0
[   59.192326][ T4609]  __kmalloc_noprof+0xa5/0x3e0
[   59.192353][ T4609]  ? ___neigh_create+0x4c9/0x1290
[   59.192377][ T4609]  ___neigh_create+0x4c9/0x1290
[   59.192398][ T4609]  ? ipt_do_table+0x9fb/0xab0
[   59.192490][ T4609]  ? netlbl_enabled+0x25/0x40
[   59.192511][ T4609]  ? selinux_ip_postroute+0x1b7/0xb50
[   59.192539][ T4609]  __neigh_create+0x54/0x70
[   59.192559][ T4609]  ip_neigh_gw4+0x12e/0x170
[   59.192588][ T4609]  ip_finish_output2+0x857/0x8b0
[   59.192682][ T4609]  ? __rcu_read_unlock+0x4f/0x70
[   59.192707][ T4609]  ip_finish_output+0x112/0x290
[   59.192731][ T4609]  ip_output+0xad/0x170
[   59.192784][ T4609]  ? __pfx_ip_finish_output+0x10/0x10
[   59.192808][ T4609]  ? __pfx_ip_output+0x10/0x10
[   59.192830][ T4609]  ip_send_skb+0x11d/0x140
[   59.192855][ T4609]  udp_send_skb+0x6e3/0xa40
[   59.192882][ T4609]  udp_sendmsg+0x1050/0x13b0
[   59.192975][ T4609]  ? __pfx_ip_generic_getfrag+0x10/0x10
[   59.193070][ T4609]  ? __pfx_udp_sendmsg+0x10/0x10
[   59.193091][ T4609]  inet_sendmsg+0xac/0xd0
[   59.193126][ T4609]  __sock_sendmsg+0x102/0x180
[   59.193184][ T4609]  ____sys_sendmsg+0x345/0x4e0
[   59.193222][ T4609]  ___sys_sendmsg+0x17b/0x1d0
[   59.193342][ T4609]  __sys_sendmmsg+0x178/0x300
[   59.193388][ T4609]  __x64_sys_sendmmsg+0x57/0x70
[   59.193436][ T4609]  x64_sys_call+0x2f2f/0x2fb0
[   59.193459][ T4609]  do_syscall_64+0xd2/0x200
[   59.193477][ T4609]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   59.193539][ T4609]  ? clear_bhb_loop+0x40/0x90
[   59.193625][ T4609]  ? clear_bhb_loop+0x40/0x90
[   59.193647][ T4609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.193669][ T4609] RIP: 0033:0x7f81a401e929
[   59.193685][ T4609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.193703][ T4609] RSP: 002b:00007f81a2687038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   59.193785][ T4609] RAX: ffffffffffffffda RBX: 00007f81a4245fa0 RCX: 00007f81a401e929
[   59.193867][ T4609] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[   59.193879][ T4609] RBP: 00007f81a2687090 R08: 0000000000000000 R09: 0000000000000000
[   59.193891][ T4609] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001
[   59.193903][ T4609] R13: 0000000000000000 R14: 00007f81a4245fa0 R15: 00007ffe43439a78
[   59.193923][ T4609]  </TASK>
[   59.640134][ T4625] loop0: detected capacity change from 0 to 1024
[   59.664924][ T4628] loop3: detected capacity change from 0 to 512
[   59.689472][ T4625] EXT4-fs: Ignoring removed nobh option
[   59.695177][ T4625] EXT4-fs: Ignoring removed oldalloc option
[   59.695230][ T4632] loop4: detected capacity change from 0 to 128
[   59.709841][ T4632] EXT4-fs: Ignoring removed oldalloc option
[   59.721261][ T4632] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.721838][ T4636] SELinux: syz.1.416 (4636) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   59.738075][ T4628] EXT4-fs (loop3): 1 orphan inode deleted
[   59.751551][   T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   59.763481][ T4632] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.772787][ T4628] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.809254][ T4623] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   59.820784][ T4645] blktrace: Concurrent blktraces are not allowed on sg0
[   59.921640][ T4650] loop1: detected capacity change from 0 to 512
[   60.068697][ T4650] EXT4-fs (loop1): 1 orphan inode deleted
[   60.075254][ T4650] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.086138][  T294] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   60.216728][ T4645] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   60.235517][ T4675] loop4: detected capacity change from 0 to 1024
[   60.324385][ T4678] loop3: detected capacity change from 0 to 1024
[   60.346060][ T4678] EXT4-fs: Ignoring removed nobh option
[   60.352886][ T4678] EXT4-fs: Ignoring removed oldalloc option
[   60.389812][ T4675] loop4: detected capacity change from 0 to 512
[   60.396846][ T4675] EXT4-fs: Ignoring removed orlov option
[   60.403411][ T4675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   60.447178][ T4675] EXT4-fs (loop4): orphan cleanup on readonly fs
[   60.454326][ T4675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.429: bg 0: block 248: padding at end of block bitmap is not set
[   60.470270][ T4675] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.429: Failed to acquire dquot type 1
[   60.482548][ T4675] EXT4-fs (loop4): 1 truncate cleaned up
[   60.620227][ T4701] loop4: detected capacity change from 0 to 512
[   60.634101][ T4704] 9pnet_fd: Insufficient options for proto=fd
[   60.649888][ T4701] EXT4-fs (loop4): 1 orphan inode deleted
[   60.657058][ T4701] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.672539][ T3435] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   60.712765][ T4694] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   60.801117][ T4717] SELinux: syz.0.444 (4717) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   60.848406][ T4714] loop1: detected capacity change from 0 to 1024
[   60.866182][ T4714] EXT4-fs: Ignoring removed nobh option
[   60.872094][ T4714] EXT4-fs: Ignoring removed oldalloc option
[   60.912543][ T4705] loop3: detected capacity change from 0 to 512
[   60.935874][ T4729] warn_alloc: 10 callbacks suppressed
[   60.935893][ T4729] syz.4.449: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   60.955942][ T4729] CPU: 0 UID: 0 PID: 4729 Comm: syz.4.449 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   60.956060][ T4729] Tainted: [W]=WARN
[   60.956144][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   60.956219][ T4729] Call Trace:
[   60.956225][ T4729]  <TASK>
[   60.956233][ T4729]  __dump_stack+0x1d/0x30
[   60.956256][ T4729]  dump_stack_lvl+0xe8/0x140
[   60.956284][ T4729]  dump_stack+0x15/0x1b
[   60.956299][ T4729]  warn_alloc+0x12b/0x1a0
[   60.956336][ T4729]  __vmalloc_node_range_noprof+0x9c/0xe00
[   60.956376][ T4729]  ? __futex_wait+0x1ff/0x260
[   60.956439][ T4729]  ? __pfx_futex_wake_mark+0x10/0x10
[   60.956493][ T4729]  ? __rcu_read_unlock+0x4f/0x70
[   60.956522][ T4729]  ? avc_has_perm_noaudit+0x1b1/0x200
[   60.956557][ T4729]  ? should_fail_ex+0x30/0x280
[   60.956598][ T4729]  ? xskq_create+0x36/0xe0
[   60.956622][ T4729]  vmalloc_user_noprof+0x7d/0xb0
[   60.956661][ T4729]  ? xskq_create+0x80/0xe0
[   60.956689][ T4729]  xskq_create+0x80/0xe0
[   60.956744][ T4729]  xsk_init_queue+0x95/0xf0
[   60.956831][ T4729]  xsk_setsockopt+0x35c/0x510
[   60.956929][ T4729]  ? __pfx_xsk_setsockopt+0x10/0x10
[   60.956956][ T4729]  __sys_setsockopt+0x181/0x200
[   60.957066][ T4729]  __x64_sys_setsockopt+0x64/0x80
[   60.957108][ T4729]  x64_sys_call+0x2bd5/0x2fb0
[   60.957136][ T4729]  do_syscall_64+0xd2/0x200
[   60.957158][ T4729]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   60.957263][ T4729]  ? clear_bhb_loop+0x40/0x90
[   60.957285][ T4729]  ? clear_bhb_loop+0x40/0x90
[   60.957306][ T4729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.957333][ T4729] RIP: 0033:0x7f246aaae929
[   60.957351][ T4729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.957374][ T4729] RSP: 002b:00007f2469117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   60.957398][ T4729] RAX: ffffffffffffffda RBX: 00007f246acd5fa0 RCX: 00007f246aaae929
[   60.957414][ T4729] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   60.957469][ T4729] RBP: 00007f246ab30b39 R08: 0000000000000004 R09: 0000000000000000
[   60.957485][ T4729] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   60.957500][ T4729] R13: 0000000000000000 R14: 00007f246acd5fa0 R15: 00007ffda9ef8c58
[   60.957571][ T4729]  </TASK>
[   60.957577][ T4729] Mem-Info:
[   61.193042][ T4729] active_anon:4017 inactive_anon:7 isolated_anon:0
[   61.193042][ T4729]  active_file:6159 inactive_file:2240 isolated_file:0
[   61.193042][ T4729]  unevictable:0 dirty:150 writeback:0
[   61.193042][ T4729]  slab_reclaimable:2922 slab_unreclaimable:13620
[   61.193042][ T4729]  mapped:28892 shmem:381 pagetables:980
[   61.193042][ T4729]  sec_pagetables:0 bounce:0
[   61.193042][ T4729]  kernel_misc_reclaimable:0
[   61.193042][ T4729]  free:1892762 free_pcp:22193 free_cma:0
[   61.237850][ T4729] Node 0 active_anon:16068kB inactive_anon:28kB active_file:24636kB inactive_file:8960kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115568kB dirty:600kB writeback:0kB shmem:1524kB writeback_tmp:0kB kernel_stack:3312kB pagetables:3920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.266952][ T4729] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   61.295664][ T4729] lowmem_reserve[]: 0 2882 7860 7860
[   61.301130][ T4729] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB
[   61.331400][ T4729] lowmem_reserve[]: 0 0 4978 4978
[   61.336569][ T4729] Node 0 Normal free:4607960kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16068kB inactive_anon:28kB active_file:24636kB inactive_file:8960kB unevictable:0kB writepending:600kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:85264kB local_pcp:40032kB free_cma:0kB
[   61.368851][ T4729] lowmem_reserve[]: 0 0 0 0
[   61.373475][ T4729] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   61.386243][ T4729] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB
[   61.402540][ T4729] Node 0 Normal: 1488*4kB (UME) 694*8kB (UM) 287*16kB (UM) 259*32kB (UME) 226*64kB (UM) 163*128kB (UME) 109*256kB (UME) 85*512kB (UM) 76*1024kB (UME) 50*2048kB (UME) 1049*4096kB (UM) = 4608064kB
[   61.422083][ T4729] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[   61.425030][ T4705] EXT4-fs (loop3): 1 orphan inode deleted
[   61.431426][ T4729] 8810 total pagecache pages
[   61.431439][ T4729] 34 pages in swap cache
[   61.431502][ T4729] Free swap  = 124856kB
[   61.431511][ T4729] Total swap = 124996kB
[   61.431521][ T4729] 2097051 pages RAM
[   61.431528][ T4729] 0 pages HighMem/MovableOnly
[   61.431537][ T4729] 80812 pages reserved
[   61.488940][ T3435] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   61.556845][ T4705] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.584876][ T4705] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   61.608767][ T4743] 9pnet_fd: Insufficient options for proto=fd
[   61.656118][ T4726] loop0: detected capacity change from 0 to 512
[   61.705952][ T4752] SELinux: syz.3.456 (4752) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   61.830808][ T4726] EXT4-fs (loop0): 1 orphan inode deleted
[   61.847633][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   61.920088][ T4726] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.920263][ T4769] loop1: detected capacity change from 0 to 1024
[   61.920650][ T4769] EXT4-fs: Ignoring removed nobh option
[   61.946086][ T4769] EXT4-fs: Ignoring removed oldalloc option
[   61.978023][ T4770] loop3: detected capacity change from 0 to 512
[   61.999363][ T4726] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   62.057774][ T4770] EXT4-fs (loop3): 1 orphan inode deleted
[   62.073843][ T4770] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.085630][ T4779] __nla_validate_parse: 8 callbacks suppressed
[   62.085648][ T4779] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.465'.
[   62.113026][  T294] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   62.128550][ T4780] 9pnet_fd: Insufficient options for proto=fd
[   62.156153][ T4782] blktrace: Concurrent blktraces are not allowed on sg0
[   62.164651][ T4779] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.465'.
[   62.173808][ T4779] netlink: 380 bytes leftover after parsing attributes in process `syz.2.465'.
[   62.204260][ T4765] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   62.306066][ T4795] SELinux: syz.1.472 (4795) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   62.341936][ T4789] loop0: detected capacity change from 0 to 512
[   62.345055][ T4800] loop1: detected capacity change from 0 to 512
[   62.361299][ T4801] loop4: detected capacity change from 0 to 512
[   62.368240][ T4800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   62.379832][ T4800] EXT4-fs (loop1): 1 truncate cleaned up
[   62.419730][ T4789] EXT4-fs (loop0): 1 orphan inode deleted
[   62.435936][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   62.456335][ T4789] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.511525][ T4782] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   62.522254][ T4801] EXT4-fs (loop4): 1 orphan inode deleted
[   62.535984][  T294] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   62.638927][ T4813] blktrace: Concurrent blktraces are not allowed on sg0
[   62.648368][ T4801] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.668416][ T4816] 9pnet_fd: Insufficient options for proto=fd
[   62.735586][ T4820] loop1: detected capacity change from 0 to 1024
[   62.757012][ T4820] EXT4-fs: Ignoring removed nobh option
[   62.771486][ T4820] EXT4-fs: Ignoring removed oldalloc option
[   62.801006][ T4794] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   62.814038][ T4813] loop2: detected capacity change from 0 to 512
[   62.880625][ T4827] loop3: detected capacity change from 0 to 512
[   62.906714][ T4829] SELinux: syz.0.484 (4829) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   62.985451][ T4813] EXT4-fs (loop2): 1 orphan inode deleted
[   62.994151][ T4827] EXT4-fs (loop3): 1 orphan inode deleted
[   63.003141][ T4840] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.486'.
[   63.013122][ T3415] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   63.040352][ T4827] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.067985][ T3415] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   63.084496][ T4840] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.486'.
[   63.093760][ T4840] netlink: 380 bytes leftover after parsing attributes in process `syz.1.486'.
[   63.109184][ T4844] loop4: detected capacity change from 0 to 128
[   63.113658][ T4813] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.145662][ T4840] blktrace: Concurrent blktraces are not allowed on sg0
[   63.163298][ T4813] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   63.193600][ T4822] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   63.219414][ T4849] loop0: detected capacity change from 0 to 1024
[   63.223822][ T4849] netlink: 68 bytes leftover after parsing attributes in process `syz.0.491'.
[   63.277180][ T4851] 9pnet_fd: Insufficient options for proto=fd
[   63.315314][ T4856] loop0: detected capacity change from 0 to 512
[   63.340678][ T4856] EXT4-fs: Ignoring removed orlov option
[   63.378576][ T4856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.400821][ T4858] loop2: detected capacity change from 0 to 1024
[   63.411801][ T4856] EXT4-fs (loop0): orphan cleanup on readonly fs
[   63.450307][ T4858] EXT4-fs: Ignoring removed nobh option
[   63.456127][ T4858] EXT4-fs: Ignoring removed oldalloc option
[   63.489196][ T4856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.491: bg 0: block 248: padding at end of block bitmap is not set
[   63.512361][ T4861] loop4: detected capacity change from 0 to 512
[   63.557910][ T4867] SELinux: syz.3.497 (4867) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   63.560674][ T4861] EXT4-fs (loop4): 1 orphan inode deleted
[   63.571626][ T4856] __quota_error: 543 callbacks suppressed
[   63.571646][ T4856] Quota error (device loop0): write_blk: dquota write failed
[   63.590683][ T4856] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   63.600800][ T4856] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.491: Failed to acquire dquot type 1
[   63.603041][   T51] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   63.621858][   T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   63.625888][ T4861] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.660739][   T29] audit: type=1400 audit(1751113241.805:3539): avc:  denied  { mounton } for  pid=4860 comm="syz.4.495" path="/95/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.670105][ T4874] can: request_module (can-proto-0) failed.
[   63.693730][ T4856] EXT4-fs (loop0): 1 truncate cleaned up
[   63.704693][   T29] audit: type=1400 audit(1751113241.835:3540): avc:  denied  { setattr } for  pid=4860 comm="syz.4.495" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   63.727003][   T29] audit: type=1326 audit(1751113241.835:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   63.728528][ T1100] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   63.750396][   T29] audit: type=1326 audit(1751113241.835:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   63.781056][   T29] audit: type=1326 audit(1751113241.835:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   63.789384][ T4877] loop1: detected capacity change from 0 to 1024
[   63.804504][   T29] audit: type=1326 audit(1751113241.835:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   63.834255][   T29] audit: type=1326 audit(1751113241.835:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.1.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   63.834799][ T4877] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.864597][ T4877] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.866395][ T4876] netlink: 44 bytes leftover after parsing attributes in process `syz.3.500'.
[   63.876257][ T4877] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[   63.880219][ T4876] netlink: 43 bytes leftover after parsing attributes in process `syz.3.500'.
[   63.889411][ T1100] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   63.897848][ T4876] netlink: 'syz.3.500': attribute type 5 has an invalid length.
[   63.915269][ T4876] netlink: 43 bytes leftover after parsing attributes in process `syz.3.500'.
[   63.949385][ T4880] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.495: iget: bad i_size value: 360287970189639690
[   63.967171][ T4880] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.495: iget: bad i_size value: 360287970189639690
[   64.009800][ T4889] 9pnet_fd: Insufficient options for proto=fd
[   64.068294][ T1100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1100 comm=kworker/1:2
[   64.084436][ T4885] loop0: detected capacity change from 0 to 128
[   64.128604][ T4901] SELinux: syz.1.509 (4901) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   64.200646][ T4883] loop3: detected capacity change from 0 to 512
[   64.278051][ T4911] loop4: detected capacity change from 0 to 512
[   64.292467][ T4911] EXT4-fs: Ignoring removed mblk_io_submit option
[   64.318357][ T4883] EXT4-fs (loop3): 1 orphan inode deleted
[   64.333265][ T4883] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.356559][ T4911] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   64.365293][ T3415] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   64.433743][ T4883] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   64.507996][ T4923] FAULT_INJECTION: forcing a failure.
[   64.507996][ T4923] name failslab, interval 1, probability 0, space 0, times 0
[   64.520774][ T4923] CPU: 0 UID: 0 PID: 4923 Comm: syz.2.516 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   64.520811][ T4923] Tainted: [W]=WARN
[   64.520817][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   64.520862][ T4923] Call Trace:
[   64.520869][ T4923]  <TASK>
[   64.520878][ T4923]  __dump_stack+0x1d/0x30
[   64.520901][ T4923]  dump_stack_lvl+0xe8/0x140
[   64.520919][ T4923]  dump_stack+0x15/0x1b
[   64.520990][ T4923]  should_fail_ex+0x265/0x280
[   64.521042][ T4923]  should_failslab+0x8c/0xb0
[   64.521071][ T4923]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[   64.521109][ T4923]  ? sidtab_sid2str_get+0xa0/0x130
[   64.521173][ T4923]  kmemdup_noprof+0x2b/0x70
[   64.521196][ T4923]  sidtab_sid2str_get+0xa0/0x130
[   64.521227][ T4923]  security_sid_to_context_core+0x1eb/0x2e0
[   64.521259][ T4923]  security_sid_to_context+0x27/0x40
[   64.521293][ T4923]  selinux_lsmprop_to_secctx+0x67/0xf0
[   64.521322][ T4923]  security_lsmprop_to_secctx+0x43/0x80
[   64.521398][ T4923]  audit_log_task_context+0x77/0x190
[   64.521457][ T4923]  audit_log_task+0xf4/0x250
[   64.521491][ T4923]  audit_seccomp+0x61/0x100
[   64.521581][ T4923]  ? __seccomp_filter+0x68c/0x10d0
[   64.521626][ T4923]  __seccomp_filter+0x69d/0x10d0
[   64.521657][ T4923]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   64.521751][ T4923]  ? vfs_write+0x75e/0x8e0
[   64.521789][ T4923]  __secure_computing+0x82/0x150
[   64.521811][ T4923]  syscall_trace_enter+0xcf/0x1e0
[   64.521839][ T4923]  do_syscall_64+0xac/0x200
[   64.521873][ T4923]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   64.521906][ T4923]  ? clear_bhb_loop+0x40/0x90
[   64.521996][ T4923]  ? clear_bhb_loop+0x40/0x90
[   64.522022][ T4923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.522117][ T4923] RIP: 0033:0x7f0f7751e929
[   64.522132][ T4923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   64.522151][ T4923] RSP: 002b:00007f0f75b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   64.522174][ T4923] RAX: ffffffffffffffda RBX: 00007f0f77745fa0 RCX: 00007f0f7751e929
[   64.522189][ T4923] RDX: 0000200000002800 RSI: 0000000000008982 RDI: 0000000000000007
[   64.522204][ T4923] RBP: 00007f0f75b87090 R08: 0000000000000000 R09: 0000000000000000
[   64.522219][ T4923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.522261][ T4923] R13: 0000000000000000 R14: 00007f0f77745fa0 R15: 00007ffd29b7f4a8
[   64.522280][ T4923]  </TASK>
[   64.783735][ T4922] 9pnet_fd: Insufficient options for proto=fd
[   64.792871][ T4927] loop0: detected capacity change from 0 to 512
[   64.806040][ T4927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   64.821958][ T4927] EXT4-fs (loop0): 1 truncate cleaned up
[   64.896781][ T4940] blktrace: Concurrent blktraces are not allowed on sg0
[   65.090162][ T4944] loop2: detected capacity change from 0 to 512
[   65.164048][ T4956] 9pnet_fd: Insufficient options for proto=fd
[   65.259363][ T4970] proc: Bad value for 'gid'
[   65.275677][ T4944] EXT4-fs (loop2): 1 orphan inode deleted
[   65.287875][   T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   65.309024][ T4944] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.342849][ T4944] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   65.385807][ T4976] blktrace: Concurrent blktraces are not allowed on sg0
[   65.400127][ T4981] loop4: detected capacity change from 0 to 1024
[   65.422407][ T4981] loop4: detected capacity change from 0 to 512
[   65.430735][ T4981] EXT4-fs: Ignoring removed orlov option
[   65.438477][ T4981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.451947][ T4981] EXT4-fs (loop4): orphan cleanup on readonly fs
[   65.468201][ T4981] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.540: bg 0: block 248: padding at end of block bitmap is not set
[   65.502078][ T4988] 9pnet_fd: Insufficient options for proto=fd
[   65.580841][ T4981] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.540: Failed to acquire dquot type 1
[   65.628396][ T4981] EXT4-fs (loop4): 1 truncate cleaned up
[   65.650563][ T5003] xt_hashlimit: size too large, truncated to 1048576
[   65.657378][ T5003] xt_hashlimit: max too large, truncated to 1048576
[   65.668973][ T4999] loop3: detected capacity change from 0 to 1024
[   65.688134][ T4999] EXT4-fs: Ignoring removed oldalloc option
[   65.694163][ T4999] EXT4-fs: Ignoring removed orlov option
[   65.723056][ T4999] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   65.824569][ T4990] loop2: detected capacity change from 0 to 512
[   65.917665][ T4990] EXT4-fs (loop2): 1 orphan inode deleted
[   65.937234][ T3435] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1
[   65.961085][ T4999] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.548: Allocating blocks 497-513 which overlap fs metadata
[   65.976707][ T4990] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.998671][ T4990] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   66.095400][ T5023] 9pnet_fd: Insufficient options for proto=fd
[   66.139587][ T5028] loop4: detected capacity change from 0 to 1024
[   66.222398][ T5028] loop4: detected capacity change from 0 to 512
[   66.231980][ T5028] EXT4-fs: Ignoring removed orlov option
[   66.238328][ T5028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   66.252261][ T5028] EXT4-fs (loop4): orphan cleanup on readonly fs
[   66.259608][ T5028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.561: bg 0: block 248: padding at end of block bitmap is not set
[   66.282885][ T5044] loop0: detected capacity change from 0 to 512
[   66.292799][ T5028] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.561: Failed to acquire dquot type 1
[   66.305686][ T5028] EXT4-fs (loop4): 1 truncate cleaned up
[   66.323188][ T5050] SELinux: syz.1.566 (5050) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   66.330610][ T5044] EXT4-fs (loop0): 1 orphan inode deleted
[   66.356331][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   66.357087][ T5044] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.392881][ T5043] vlan2: entered allmulticast mode
[   66.398406][ T5043] dummy0: entered allmulticast mode
[   66.404818][ T5035] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   66.465542][ T5055] syzkaller1: entered promiscuous mode
[   66.471276][ T5055] syzkaller1: entered allmulticast mode
[   66.607751][ T5069] 9pnet_fd: Insufficient options for proto=fd
[   66.658380][ T5079] 9pnet_fd: Insufficient options for proto=fd
[   66.659042][ T5074] SELinux: syz.3.577 (5074) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   66.764039][ T5095] FAULT_INJECTION: forcing a failure.
[   66.764039][ T5095] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   66.777456][ T5095] CPU: 0 UID: 0 PID: 5095 Comm: syz.2.580 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   66.777572][ T5095] Tainted: [W]=WARN
[   66.777580][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   66.777596][ T5095] Call Trace:
[   66.777605][ T5095]  <TASK>
[   66.777614][ T5095]  __dump_stack+0x1d/0x30
[   66.777648][ T5095]  dump_stack_lvl+0xe8/0x140
[   66.777667][ T5095]  dump_stack+0x15/0x1b
[   66.777754][ T5095]  should_fail_ex+0x265/0x280
[   66.777957][ T5095]  should_fail+0xb/0x20
[   66.777993][ T5095]  should_fail_usercopy+0x1a/0x20
[   66.778034][ T5095]  _copy_to_user+0x20/0xa0
[   66.778060][ T5095]  simple_read_from_buffer+0xb5/0x130
[   66.778126][ T5095]  proc_fail_nth_read+0x100/0x140
[   66.778164][ T5095]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   66.778286][ T5095]  vfs_read+0x1a0/0x6f0
[   66.778326][ T5095]  ? __rcu_read_unlock+0x4f/0x70
[   66.778362][ T5095]  ? __fget_files+0x184/0x1c0
[   66.778481][ T5095]  ksys_read+0xda/0x1a0
[   66.778523][ T5095]  __x64_sys_read+0x40/0x50
[   66.778565][ T5095]  x64_sys_call+0x2d77/0x2fb0
[   66.778593][ T5095]  do_syscall_64+0xd2/0x200
[   66.778634][ T5095]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   66.778663][ T5095]  ? clear_bhb_loop+0x40/0x90
[   66.778700][ T5095]  ? clear_bhb_loop+0x40/0x90
[   66.778721][ T5095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.778828][ T5095] RIP: 0033:0x7f0f7751d33c
[   66.778843][ T5095] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   66.778860][ T5095] RSP: 002b:00007f0f75b66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   66.778966][ T5095] RAX: ffffffffffffffda RBX: 00007f0f77746080 RCX: 00007f0f7751d33c
[   66.778983][ T5095] RDX: 000000000000000f RSI: 00007f0f75b660a0 RDI: 0000000000000004
[   66.778999][ T5095] RBP: 00007f0f75b66090 R08: 0000000000000000 R09: 0000000000000000
[   66.779014][ T5095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   66.779029][ T5095] R13: 0000000000000001 R14: 00007f0f77746080 R15: 00007ffd29b7f4a8
[   66.779052][ T5095]  </TASK>
[   67.050522][ T5103] vlan2: entered allmulticast mode
[   67.119778][ T5110] 9pnet_fd: Insufficient options for proto=fd
[   67.150905][ T5111] loop0: detected capacity change from 0 to 512
[   67.214760][ T5120] SELinux: syz.2.593 (5120) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   67.251540][ T5111] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.581: bg 0: block 248: padding at end of block bitmap is not set
[   67.298474][ T5125] loop3: detected capacity change from 0 to 512
[   67.351401][ T5111] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.581: Failed to acquire dquot type 1
[   67.425229][ T5125] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.595: iget: bad i_size value: 38620345925642
[   67.441702][ T5125] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.595: couldn't read orphan inode 15 (err -117)
[   67.469059][ T5111] EXT4-fs (loop0): 1 truncate cleaned up
[   67.485349][ T5111] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   67.621736][ T5134] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.595: iget: bad i_size value: 38620345925642
[   67.732219][ T5136] loop4: detected capacity change from 0 to 512
[   67.774496][ T5134] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.3.595: path /123/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   67.838501][ T5136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.597: bg 0: block 248: padding at end of block bitmap is not set
[   67.869774][ T5136] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.597: Failed to acquire dquot type 1
[   67.917428][ T5141] xt_hashlimit: size too large, truncated to 1048576
[   67.924185][ T5141] xt_hashlimit: max too large, truncated to 1048576
[   67.933857][ T5136] EXT4-fs (loop4): 1 truncate cleaned up
[   67.968481][ T5136] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   68.036530][ T5144] __nla_validate_parse: 11 callbacks suppressed
[   68.036550][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'.
[   68.058173][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.065844][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.074362][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.081818][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.089486][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.096927][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.104351][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.111894][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.119355][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.126836][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.134277][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.141861][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.149874][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.157409][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.164923][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.172446][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.179888][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.187454][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.194875][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.202328][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.209782][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.217264][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.224684][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.232191][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.239643][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.247152][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.254593][   T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   68.271918][ T5147] FAULT_INJECTION: forcing a failure.
[   68.271918][ T5147] name failslab, interval 1, probability 0, space 0, times 0
[   68.284650][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: syz.1.599 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   68.284689][ T5147] Tainted: [W]=WARN
[   68.284697][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   68.284713][ T5147] Call Trace:
[   68.284760][ T5147]  <TASK>
[   68.284768][ T5147]  __dump_stack+0x1d/0x30
[   68.284794][ T5147]  dump_stack_lvl+0xe8/0x140
[   68.284814][ T5147]  dump_stack+0x15/0x1b
[   68.284830][ T5147]  should_fail_ex+0x265/0x280
[   68.284906][ T5147]  should_failslab+0x8c/0xb0
[   68.284936][ T5147]  kmem_cache_alloc_noprof+0x50/0x310
[   68.285032][ T5147]  ? security_inode_alloc+0x37/0x100
[   68.285149][ T5147]  security_inode_alloc+0x37/0x100
[   68.285187][ T5147]  inode_init_always_gfp+0x4b7/0x500
[   68.285232][ T5147]  ? __pfx_shmem_alloc_inode+0x10/0x10
[   68.285318][ T5147]  alloc_inode+0x58/0x170
[   68.285428][ T5147]  new_inode+0x1d/0xe0
[   68.285451][ T5147]  shmem_get_inode+0x244/0x750
[   68.285487][ T5147]  __shmem_file_setup+0x113/0x210
[   68.285578][ T5147]  shmem_file_setup+0x3b/0x50
[   68.285615][ T5147]  __se_sys_memfd_create+0x2c3/0x590
[   68.285661][ T5147]  __x64_sys_memfd_create+0x31/0x40
[   68.285789][ T5147]  x64_sys_call+0x122f/0x2fb0
[   68.285818][ T5147]  do_syscall_64+0xd2/0x200
[   68.285840][ T5147]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   68.285969][ T5147]  ? clear_bhb_loop+0x40/0x90
[   68.285994][ T5147]  ? clear_bhb_loop+0x40/0x90
[   68.286049][ T5147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.286077][ T5147] RIP: 0033:0x7f14ba32e929
[   68.286096][ T5147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.286117][ T5147] RSP: 002b:00007f14b8996e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   68.286141][ T5147] RAX: ffffffffffffffda RBX: 0000000000000539 RCX: 00007f14ba32e929
[   68.286231][ T5147] RDX: 00007f14b8996ef0 RSI: 0000000000000000 RDI: 00007f14ba3b14cc
[   68.286247][ T5147] RBP: 0000200000001540 R08: 00007f14b8996bb7 R09: 00007f14b8996e40
[   68.286262][ T5147] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[   68.286331][ T5147] R13: 00007f14b8996ef0 R14: 00007f14b8996eb0 R15: 00002000000000c0
[   68.286355][ T5147]  </TASK>
[   68.582492][   T36] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   68.583945][   T29] kauditd_printk_skb: 625 callbacks suppressed
[   68.583962][   T29] audit: type=1400 audit(1751113246.725:4158): avc:  denied  { unmount } for  pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   68.626677][   T29] audit: type=1326 audit(1751113246.735:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7751e929 code=0x7ffc0000
[   68.650250][   T29] audit: type=1326 audit(1751113246.735:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5140 comm="syz.2.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f7751e929 code=0x7ffc0000
[   68.673728][   T29] audit: type=1400 audit(1751113246.765:4161): avc:  denied  { write } for  pid=5140 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   68.694213][   T29] audit: type=1400 audit(1751113246.765:4162): avc:  denied  { read } for  pid=5140 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   68.730960][ T5151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.602'.
[   68.742125][ T5153] 9pnet_fd: Insufficient options for proto=fd
[   68.770913][   T29] audit: type=1400 audit(1751113246.795:4163): avc:  denied  { validate_trans } for  pid=5148 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   68.787724][ T5155] netlink: 96 bytes leftover after parsing attributes in process `syz.4.601'.
[   68.791403][   T29] audit: type=1400 audit(1751113246.865:4164): avc:  denied  { create } for  pid=5150 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[   68.820485][   T29] audit: type=1326 audit(1751113246.905:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5154 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246aaae929 code=0x7ffc0000
[   68.843955][   T29] audit: type=1326 audit(1751113246.905:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5154 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246aaae929 code=0x7ffc0000
[   68.867327][   T29] audit: type=1326 audit(1751113246.905:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5154 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f246aaae929 code=0x7ffc0000
[   68.949840][ T5171] netlink: 64 bytes leftover after parsing attributes in process `syz.4.601'.
[   68.964394][ T5170] SELinux: syz.3.606 (5170) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   69.010055][ T5173] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.610'.
[   69.040987][ T5173] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.610'.
[   69.050258][ T5173] netlink: 380 bytes leftover after parsing attributes in process `syz.2.610'.
[   69.224732][ T5186] 9pnet_fd: Insufficient options for proto=fd
[   69.264080][ T5191] xt_hashlimit: size too large, truncated to 1048576
[   69.270858][ T5191] xt_hashlimit: max too large, truncated to 1048576
[   69.356464][ T5199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'.
[   69.399910][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.407509][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.415105][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.422561][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.430117][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.437640][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.445065][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.452557][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.460008][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.467531][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.474988][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.482427][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.524915][ T5213] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[   69.575572][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.583281][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.590730][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.598247][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.605670][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.613693][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.621529][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.628981][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.636450][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.643868][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.651321][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.658976][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.666604][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.674026][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.681698][ T1100] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   69.690121][ T1100] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   69.951046][ T5254] sch_fq: defrate 4294967295 ignored.
[   70.229371][ T5297] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.661'.
[   70.249227][ T5299] loop2: detected capacity change from 0 to 1024
[   70.276522][ T5299] netlink: 68 bytes leftover after parsing attributes in process `syz.2.662'.
[   70.355170][ T5299] loop2: detected capacity change from 0 to 512
[   70.385704][ T5299] EXT4-fs: Ignoring removed orlov option
[   70.407744][ T5299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.438718][ T5299] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.478060][ T5299] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.662: bg 0: block 248: padding at end of block bitmap is not set
[   70.518365][ T5299] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.662: Failed to acquire dquot type 1
[   70.579133][ T5299] EXT4-fs (loop2): 1 truncate cleaned up
[   70.605778][ T5299] EXT4-fs mount: 118 callbacks suppressed
[   70.605798][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.637927][ T5330] blktrace: Concurrent blktraces are not allowed on sg0
[   70.674132][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.701058][ T5334] loop0: detected capacity change from 0 to 1024
[   70.727175][ T5328] loop4: detected capacity change from 0 to 512
[   70.738066][ T5334] loop0: detected capacity change from 0 to 512
[   70.744764][ T5334] EXT4-fs: Ignoring removed orlov option
[   70.753048][ T5334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.756235][ T5336] 9pnet_fd: Insufficient options for proto=fd
[   70.763102][ T5334] EXT4-fs (loop0): orphan cleanup on readonly fs
[   70.776780][ T5334] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.676: bg 0: block 248: padding at end of block bitmap is not set
[   70.810279][ T5334] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.676: Failed to acquire dquot type 1
[   70.866670][ T5334] EXT4-fs (loop0): 1 truncate cleaned up
[   70.889864][ T5334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.917005][ T5328] EXT4-fs (loop4): 1 orphan inode deleted
[   70.931023][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.940501][ T5328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.953678][   T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   70.978415][ T5328] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.006613][ T5349] SELinux: syz.0.680 (5349) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   71.050660][ T5328] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   71.069609][ T5177] syz.1.612 (5177) used greatest stack depth: 6776 bytes left
[   71.209678][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.210502][ T5359] SELinux: syz.3.684 (5359) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   71.281652][ T5368] 9pnet_fd: Insufficient options for proto=fd
[   71.320948][ T5372] loop1: detected capacity change from 0 to 1024
[   71.342458][ T5372] loop1: detected capacity change from 0 to 512
[   71.366139][ T5372] EXT4-fs: Ignoring removed orlov option
[   71.373344][ T5376] SELinux: syz.4.692 (5376) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   71.392855][ T5372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   71.416148][ T5372] EXT4-fs (loop1): orphan cleanup on readonly fs
[   71.435417][ T5372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.690: bg 0: block 248: padding at end of block bitmap is not set
[   71.485299][ T5372] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.690: Failed to acquire dquot type 1
[   71.520047][ T5372] EXT4-fs (loop1): 1 truncate cleaned up
[   71.540834][ T5372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.600504][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.643998][ T5395] 9pnet_fd: Insufficient options for proto=fd
[   71.694163][ T5397] netlink: 'syz.1.699': attribute type 30 has an invalid length.
[   71.709729][ T5397] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.718613][ T5397] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.727486][ T5397] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.736253][ T5397] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.750291][ T5397] netlink: 'syz.1.699': attribute type 30 has an invalid length.
[   71.805957][ T5406] SELinux: syz.0.705 (5406) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   72.001077][ T5418] loop1: detected capacity change from 0 to 1024
[   72.014816][ T5416] loop0: detected capacity change from 0 to 512
[   72.022388][ T5416] journal_path: Non-blockdev passed as './file0'
[   72.028825][ T5416] EXT4-fs: error: could not find journal device path
[   72.047735][ T5418] loop1: detected capacity change from 0 to 512
[   72.055580][ T5418] EXT4-fs: Ignoring removed orlov option
[   72.074153][ T5418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.106179][ T5418] EXT4-fs (loop1): orphan cleanup on readonly fs
[   72.120570][ T5418] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.710: bg 0: block 248: padding at end of block bitmap is not set
[   72.146162][ T5418] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.710: Failed to acquire dquot type 1
[   72.161902][ T5425] 9pnet_fd: Insufficient options for proto=fd
[   72.169428][ T5418] EXT4-fs (loop1): 1 truncate cleaned up
[   72.203999][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.228880][ T5429] loop0: detected capacity change from 0 to 1024
[   72.245049][ T5429] loop0: detected capacity change from 0 to 512
[   72.252008][ T5429] EXT4-fs: Ignoring removed orlov option
[   72.262151][ T5429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.278184][ T5429] EXT4-fs (loop0): orphan cleanup on readonly fs
[   72.294487][ T5432] SELinux: syz.4.717 (5432) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   72.318289][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.328526][ T5429] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.715: bg 0: block 248: padding at end of block bitmap is not set
[   72.355754][ T5429] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.715: Failed to acquire dquot type 1
[   72.406759][ T5429] EXT4-fs (loop0): 1 truncate cleaned up
[   72.413361][ T5429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.486989][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.617016][ T5455] loop4: detected capacity change from 0 to 1024
[   72.631881][ T5455] loop4: detected capacity change from 0 to 512
[   72.641049][ T5457] loop2: detected capacity change from 0 to 512
[   72.648907][ T5459] SELinux: syz.1.728 (5459) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   72.653518][ T5455] EXT4-fs: Ignoring removed orlov option
[   72.679024][ T5455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.696262][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.727: iget: bad i_size value: 38620345925642
[   72.696974][ T5463] xt_hashlimit: size too large, truncated to 1048576
[   72.715632][ T5463] xt_hashlimit: max too large, truncated to 1048576
[   72.723122][ T5455] EXT4-fs (loop4): orphan cleanup on readonly fs
[   72.730030][ T5457] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.727: couldn't read orphan inode 15 (err -117)
[   72.744359][ T5457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.757705][ T5455] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.726: bg 0: block 248: padding at end of block bitmap is not set
[   72.820515][ T5455] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.726: Failed to acquire dquot type 1
[   72.842378][ T5469] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.727: iget: bad i_size value: 38620345925642
[   72.879720][ T5455] EXT4-fs (loop4): 1 truncate cleaned up
[   72.889258][ T5455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.973203][ T5470] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.2.727: path /161/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   73.047479][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.320694][ T5487] __nla_validate_parse: 25 callbacks suppressed
[   73.320713][ T5487] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.737'.
[   73.447186][ T5487] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.737'.
[   73.456446][ T5487] netlink: 380 bytes leftover after parsing attributes in process `syz.0.737'.
[   73.667989][   T29] kauditd_printk_skb: 430 callbacks suppressed
[   73.668066][   T29] audit: type=1326 audit(1751113251.815:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   73.714698][   T29] audit: type=1326 audit(1751113251.845:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   73.738310][   T29] audit: type=1326 audit(1751113251.845:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   73.761913][   T29] audit: type=1326 audit(1751113251.845:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   73.785553][   T29] audit: type=1326 audit(1751113251.845:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f14ba32e929 code=0x7ffc0000
[   73.809196][   T29] audit: type=1326 audit(1751113251.845:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.1.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f14ba32e963 code=0x7ffc0000
[   73.832487][   T29] audit: type=1400 audit(1751113251.855:4591): avc:  denied  { watch } for  pid=5498 comm="syz.0.740" path="/140/file0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.855048][   T29] audit: type=1400 audit(1751113251.855:4592): avc:  denied  { execute } for  pid=5498 comm="syz.0.740" name="file0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.877718][   T29] audit: type=1400 audit(1751113251.855:4593): avc:  denied  { execute_no_trans } for  pid=5498 comm="syz.0.740" path="/140/file0" dev="tmpfs" ino=783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   73.901254][   T29] audit: type=1400 audit(1751113251.855:4594): avc:  denied  { write } for  pid=5498 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   73.937179][ T5503] loop1: detected capacity change from 0 to 512
[   74.103641][ T5503] EXT4-fs (loop1): 1 orphan inode deleted
[   74.115884][  T294] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   74.137195][ T5503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.152923][ T5503] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.185253][ T5516] FAULT_INJECTION: forcing a failure.
[   74.185253][ T5516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   74.198509][ T5516] CPU: 1 UID: 0 PID: 5516 Comm: syz.0.743 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   74.198542][ T5516] Tainted: [W]=WARN
[   74.198549][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   74.198561][ T5516] Call Trace:
[   74.198574][ T5516]  <TASK>
[   74.198583][ T5516]  __dump_stack+0x1d/0x30
[   74.198607][ T5516]  dump_stack_lvl+0xe8/0x140
[   74.198696][ T5516]  dump_stack+0x15/0x1b
[   74.198717][ T5516]  should_fail_ex+0x265/0x280
[   74.198747][ T5516]  should_fail+0xb/0x20
[   74.198780][ T5516]  should_fail_usercopy+0x1a/0x20
[   74.198913][ T5516]  strncpy_from_user+0x25/0x230
[   74.198939][ T5516]  ? __kmalloc_cache_noprof+0x189/0x320
[   74.198990][ T5516]  __se_sys_memfd_create+0x1ff/0x590
[   74.199031][ T5516]  __x64_sys_memfd_create+0x31/0x40
[   74.199071][ T5516]  x64_sys_call+0x122f/0x2fb0
[   74.199124][ T5516]  do_syscall_64+0xd2/0x200
[   74.199144][ T5516]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   74.199177][ T5516]  ? clear_bhb_loop+0x40/0x90
[   74.199212][ T5516]  ? clear_bhb_loop+0x40/0x90
[   74.199240][ T5516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.199262][ T5516] RIP: 0033:0x7f8c986fe929
[   74.199288][ T5516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.199310][ T5516] RSP: 002b:00007f8c96d24e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   74.199352][ T5516] RAX: ffffffffffffffda RBX: 000000000000052a RCX: 00007f8c986fe929
[   74.199368][ T5516] RDX: 00007f8c96d24ef0 RSI: 0000000000000000 RDI: 00007f8c987814cc
[   74.199383][ T5516] RBP: 0000200000000a40 R08: 00007f8c96d24bb7 R09: 00007f8c96d24e40
[   74.199397][ T5516] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[   74.199442][ T5516] R13: 00007f8c96d24ef0 R14: 00007f8c96d24eb0 R15: 0000200000000080
[   74.199460][ T5516]  </TASK>
[   74.403281][ T5503] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   74.431806][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.464360][ T5519] loop1: detected capacity change from 0 to 1024
[   74.474576][ T5519] netlink: 68 bytes leftover after parsing attributes in process `syz.1.745'.
[   74.491736][ T5519] loop1: detected capacity change from 0 to 512
[   74.499260][ T5519] EXT4-fs: Ignoring removed orlov option
[   74.505799][ T5519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   74.515656][ T5519] EXT4-fs (loop1): orphan cleanup on readonly fs
[   74.524451][ T5519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.745: bg 0: block 248: padding at end of block bitmap is not set
[   74.540264][ T5519] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.745: Failed to acquire dquot type 1
[   74.564634][ T5519] EXT4-fs (loop1): 1 truncate cleaned up
[   74.588396][ T5519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.723708][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.124046][ T5509] Cannot find del_set index 3 as target
[   75.130808][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.277017][ T5553] blktrace: Concurrent blktraces are not allowed on sg0
[   75.333397][ T5556] loop2: detected capacity change from 0 to 256
[   75.340588][ T5556] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.369885][ T5556] FAT-fs (loop2): Directory bread(block 64) failed
[   75.376937][ T5556] FAT-fs (loop2): Directory bread(block 65) failed
[   75.384725][ T5556] FAT-fs (loop2): Directory bread(block 66) failed
[   75.391636][ T5559] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5559 comm=syz.0.758
[   75.392570][ T5556] FAT-fs (loop2): Directory bread(block 67) failed
[   75.411498][ T5556] FAT-fs (loop2): Directory bread(block 68) failed
[   75.418194][ T5556] FAT-fs (loop2): Directory bread(block 69) failed
[   75.424854][ T5556] FAT-fs (loop2): Directory bread(block 70) failed
[   75.450214][ T5553] loop3: detected capacity change from 0 to 512
[   75.493896][ T5556] FAT-fs (loop2): Directory bread(block 71) failed
[   75.528413][ T5556] FAT-fs (loop2): Directory bread(block 72) failed
[   75.546387][ T5556] FAT-fs (loop2): Directory bread(block 73) failed
[   75.589974][ T5575] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[   75.605526][ T1100] IPVS: starting estimator thread 0...
[   75.622724][ T5553] EXT4-fs (loop3): 1 orphan inode deleted
[   75.638288][ T5553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.656970][   T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   75.683686][ T5553] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.695855][ T5583] IPVS: using max 1920 ests per chain, 96000 per kthread
[   75.783117][ T5590] netlink: 'syz.4.769': attribute type 2 has an invalid length.
[   75.790949][ T5590] netlink: 120 bytes leftover after parsing attributes in process `syz.4.769'.
[   75.850022][ T5553] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   75.890152][ T5595] blktrace: Concurrent blktraces are not allowed on sg0
[   75.994024][ T5601] loop1: detected capacity change from 0 to 512
[   76.001674][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.022795][ T5601] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.772: iget: bad i_size value: 38620345925642
[   76.036024][ T5601] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.772: couldn't read orphan inode 15 (err -117)
[   76.048820][ T5601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.065414][ T5601] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.772: iget: bad i_size value: 38620345925642
[   76.139164][ T5599] loop4: detected capacity change from 0 to 512
[   76.167969][ T5605] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.772: path /149/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   76.274890][ T5599] EXT4-fs (loop4): 1 orphan inode deleted
[   76.287526][ T5599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.287625][  T294] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1
[   76.303725][ T5599] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.358453][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.409129][ T5595] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   76.456553][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.517036][ T5627] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.783'.
[   76.526573][ T5629] loop1: detected capacity change from 0 to 1024
[   76.538806][ T5627] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.783'.
[   76.547960][ T5627] netlink: 380 bytes leftover after parsing attributes in process `syz.2.783'.
[   76.562899][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.572338][ T5629] netlink: 68 bytes leftover after parsing attributes in process `syz.1.784'.
[   76.581584][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.593533][ T5631] FAULT_INJECTION: forcing a failure.
[   76.593533][ T5631] name failslab, interval 1, probability 0, space 0, times 0
[   76.606275][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: syz.4.782 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   76.606311][ T5631] Tainted: [W]=WARN
[   76.606360][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   76.606372][ T5631] Call Trace:
[   76.606379][ T5631]  <TASK>
[   76.606386][ T5631]  __dump_stack+0x1d/0x30
[   76.606410][ T5631]  dump_stack_lvl+0xe8/0x140
[   76.606433][ T5631]  dump_stack+0x15/0x1b
[   76.606451][ T5631]  should_fail_ex+0x265/0x280
[   76.606483][ T5631]  should_failslab+0x8c/0xb0
[   76.606590][ T5631]  kmem_cache_alloc_node_noprof+0x57/0x320
[   76.606603][ T5629] loop1: detected capacity change from 0 to 512
[   76.606628][ T5631]  ? __alloc_skb+0x101/0x320
[   76.606665][ T5631]  __alloc_skb+0x101/0x320
[   76.606757][ T5631]  ? avc_has_perm+0xd3/0x150
[   76.606857][ T5631]  alloc_skb_with_frags+0x7d/0x470
[   76.606901][ T5631]  ? selinux_file_open+0x2df/0x330
[   76.606983][ T5631]  ? __rcu_read_unlock+0x4f/0x70
[   76.607015][ T5631]  sock_alloc_send_pskb+0x43a/0x4f0
[   76.607049][ T5631]  ? terminate_walk+0x27f/0x2a0
[   76.607080][ T5631]  tun_get_user+0x8d3/0x2500
[   76.607127][ T5631]  ? avc_has_perm+0xd3/0x150
[   76.607167][ T5631]  ? ref_tracker_alloc+0x1f2/0x2f0
[   76.607220][ T5631]  ? selinux_file_permission+0x2f0/0x320
[   76.607255][ T5631]  tun_chr_write_iter+0x15e/0x210
[   76.607416][ T5631]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   76.607452][ T5631]  vfs_write+0x4a0/0x8e0
[   76.607566][ T5631]  ksys_write+0xda/0x1a0
[   76.607612][ T5631]  __x64_sys_write+0x40/0x50
[   76.607729][ T5631]  x64_sys_call+0x2cdd/0x2fb0
[   76.607787][ T5631]  do_syscall_64+0xd2/0x200
[   76.607811][ T5631]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   76.607849][ T5631]  ? clear_bhb_loop+0x40/0x90
[   76.607878][ T5631]  ? clear_bhb_loop+0x40/0x90
[   76.607908][ T5631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.607939][ T5631] RIP: 0033:0x7f246aaad3df
[   76.607961][ T5631] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   76.608062][ T5631] RSP: 002b:00007f2469117000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   76.608083][ T5631] RAX: ffffffffffffffda RBX: 00007f246acd5fa0 RCX: 00007f246aaad3df
[   76.608116][ T5631] RDX: 000000000000fed7 RSI: 0000200000000340 RDI: 00000000000000c8
[   76.608131][ T5631] RBP: 00007f2469117090 R08: 0000000000000000 R09: 0000000000000000
[   76.608150][ T5631] R10: 000000000000fed7 R11: 0000000000000293 R12: 0000000000000001
[   76.608168][ T5631] R13: 0000000000000000 R14: 00007f246acd5fa0 R15: 00007ffda9ef8c58
[   76.608232][ T5631]  </TASK>
[   76.900586][ T5629] EXT4-fs: Ignoring removed orlov option
[   76.912172][ T5629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.932135][ T5629] EXT4-fs (loop1): orphan cleanup on readonly fs
[   76.939278][ T5629] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.784: bg 0: block 248: padding at end of block bitmap is not set
[   76.959829][ T5629] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.784: Failed to acquire dquot type 1
[   76.978006][ T5629] EXT4-fs (loop1): 1 truncate cleaned up
[   76.984397][ T5629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.997260][ T5653] loop4: detected capacity change from 0 to 1024
[   77.009151][ T5653] netlink: 68 bytes leftover after parsing attributes in process `syz.4.787'.
[   77.061468][ T5655] loop2: detected capacity change from 0 to 1024
[   77.075184][ T5655] EXT4-fs (loop2): orphan cleanup on readonly fs
[   77.090750][ T5653] loop4: detected capacity change from 0 to 512
[   77.097572][ T5653] EXT4-fs: Ignoring removed orlov option
[   77.106231][ T5653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.117765][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.130774][ T5655] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.788: Failed to acquire dquot type 0
[   77.143573][ T5653] EXT4-fs (loop4): orphan cleanup on readonly fs
[   77.152493][ T5653] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.787: bg 0: block 248: padding at end of block bitmap is not set
[   77.168721][ T5655] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   77.187088][ T5655] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.788: corrupted inode contents
[   77.198962][ T5653] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.787: Failed to acquire dquot type 1
[   77.212395][ T5655] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #13: comm syz.2.788: mark_inode_dirty error
[   77.224290][ T5653] EXT4-fs (loop4): 1 truncate cleaned up
[   77.231250][ T5653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.243270][ T5655] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.788: corrupted inode contents
[   77.259844][ T5655] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.788: mark_inode_dirty error
[   77.274006][ T5661] loop1: detected capacity change from 0 to 512
[   77.281874][ T5655] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.788: corrupted inode contents
[   77.297543][ T5661] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.790: iget: bad i_size value: 38620345925642
[   77.310337][ T5655] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   77.321851][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.339192][ T5655] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #13: comm syz.2.788: corrupted inode contents
[   77.352032][ T5661] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.790: couldn't read orphan inode 15 (err -117)
[   77.380500][ T5661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.394549][ T5655] EXT4-fs error (device loop2): ext4_truncate:4597: inode #13: comm syz.2.788: mark_inode_dirty error
[   77.417674][ T5661] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.790: iget: bad i_size value: 38620345925642
[   77.446473][ T5655] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   77.492302][ T5667] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.1.790: path /153/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   77.527729][ T5655] EXT4-fs (loop2): 1 truncate cleaned up
[   77.534059][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.632502][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.643360][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.670687][ T5682] loop0: detected capacity change from 0 to 512
[   77.701478][ T5682] EXT4-fs (loop0): 1 orphan inode deleted
[   77.716468][   T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1
[   77.731832][ T5682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.769961][ T5690] 9pnet: Could not find request transport: fd0x0000000000000005
[   77.780123][ T5682] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.786664][ T5693] loop3: detected capacity change from 0 to 1024
[   77.831813][ T5693] loop3: detected capacity change from 0 to 512
[   77.842760][ T5693] EXT4-fs: Ignoring removed orlov option
[   77.853455][ T5693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   77.867675][ T5693] EXT4-fs (loop3): orphan cleanup on readonly fs
[   77.875001][ T5693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.801: bg 0: block 248: padding at end of block bitmap is not set
[   77.879065][ T5670] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   77.892083][ T5693] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.801: Failed to acquire dquot type 1
[   77.923493][ T5693] EXT4-fs (loop3): 1 truncate cleaned up
[   77.948451][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.976402][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.012685][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.059469][ T5714] loop0: detected capacity change from 0 to 512
[   78.097496][ T5714] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.808: iget: bad i_size value: 38620345925642
[   78.170160][ T5722] loop4: detected capacity change from 0 to 764
[   78.176585][ T5714] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.808: couldn't read orphan inode 15 (err -117)
[   78.189347][ T5722] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   78.201216][ T5722] Symlink component flag not implemented
[   78.207601][ T5722] Symlink component flag not implemented (7)
[   78.224649][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.238600][ T5725] 9pnet: Could not find request transport: fd0x0000000000000005
[   78.279635][ T5714] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.808: iget: bad i_size value: 38620345925642
[   78.348537][ T5714] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.0.808: path /153/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   78.383344][ T5734] loop4: detected capacity change from 0 to 1024
[   78.402736][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.412913][ T5734] __nla_validate_parse: 9 callbacks suppressed
[   78.412928][ T5734] netlink: 68 bytes leftover after parsing attributes in process `syz.4.816'.
[   78.440903][ T5734] loop4: detected capacity change from 0 to 512
[   78.447875][ T5734] EXT4-fs: Ignoring removed orlov option
[   78.454220][ T5734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   78.464308][ T5734] EXT4-fs (loop4): orphan cleanup on readonly fs
[   78.468815][ T3392] IPVS: starting estimator thread 0...
[   78.471448][ T5734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.816: bg 0: block 248: padding at end of block bitmap is not set
[   78.493620][ T5734] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.816: Failed to acquire dquot type 1
[   78.505463][ T5734] EXT4-fs (loop4): 1 truncate cleaned up
[   78.512931][ T5734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   78.543844][ T5736] loop0: detected capacity change from 0 to 164
[   78.551090][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.564669][ T5736] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[   78.582952][ T5740] loop3: detected capacity change from 0 to 512
[   78.595023][ T5736] FAULT_INJECTION: forcing a failure.
[   78.595023][ T5736] name failslab, interval 1, probability 0, space 0, times 0
[   78.607793][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: syz.0.817 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   78.607860][ T5736] Tainted: [W]=WARN
[   78.607867][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   78.607880][ T5736] Call Trace:
[   78.607887][ T5736]  <TASK>
[   78.607895][ T5736]  __dump_stack+0x1d/0x30
[   78.607940][ T5736]  dump_stack_lvl+0xe8/0x140
[   78.607966][ T5736]  dump_stack+0x15/0x1b
[   78.607983][ T5736]  should_fail_ex+0x265/0x280
[   78.608047][ T5736]  should_failslab+0x8c/0xb0
[   78.608074][ T5736]  kmem_cache_alloc_noprof+0x50/0x310
[   78.608141][ T5736]  ? getname_flags+0x80/0x3b0
[   78.608161][ T5736]  ? __seccomp_filter+0x69d/0x10d0
[   78.608201][ T5736]  getname_flags+0x80/0x3b0
[   78.608232][ T5736]  user_path_at+0x28/0x130
[   78.608343][ T5736]  do_utimes+0xd9/0x210
[   78.608368][ T5736]  __x64_sys_futimesat+0xd2/0x1a0
[   78.608393][ T5736]  ? syscall_trace_enter+0x102/0x1e0
[   78.608422][ T5736]  x64_sys_call+0x11da/0x2fb0
[   78.608495][ T5736]  do_syscall_64+0xd2/0x200
[   78.608518][ T5736]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   78.608570][ T5736]  ? clear_bhb_loop+0x40/0x90
[   78.608594][ T5736]  ? clear_bhb_loop+0x40/0x90
[   78.608616][ T5736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.608636][ T5736] RIP: 0033:0x7f8c986fe929
[   78.608680][ T5736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.608704][ T5736] RSP: 002b:00007f8c96d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105
[   78.608790][ T5736] RAX: ffffffffffffffda RBX: 00007f8c98925fa0 RCX: 00007f8c986fe929
[   78.608805][ T5736] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[   78.608820][ T5736] RBP: 00007f8c96d67090 R08: 0000000000000000 R09: 0000000000000000
[   78.608835][ T5736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   78.608872][ T5736] R13: 0000000000000000 R14: 00007f8c98925fa0 R15: 00007ffdafdd35e8
[   78.608895][ T5736]  </TASK>
[   78.608984][ T5738] IPVS: using max 2352 ests per chain, 117600 per kthread
[   78.764044][ T5740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.832305][ T5740] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   78.850075][   T29] kauditd_printk_skb: 370 callbacks suppressed
[   78.850092][   T29] audit: type=1326 audit(1751113256.995:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   78.879844][   T29] audit: type=1326 audit(1751113256.995:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   78.903352][   T29] audit: type=1326 audit(1751113256.995:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   78.927055][   T29] audit: type=1326 audit(1751113256.995:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   78.933544][ T5748] loop4: detected capacity change from 0 to 512
[   78.950447][   T29] audit: type=1326 audit(1751113256.995:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   78.980810][   T29] audit: type=1326 audit(1751113257.025:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   79.004228][   T29] audit: type=1326 audit(1751113257.025:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   79.029411][   T29] audit: type=1326 audit(1751113257.125:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   79.052832][   T29] audit: type=1326 audit(1751113257.125:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5739 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a401e929 code=0x7ffc0000
[   79.054216][ T5748] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.822: iget: bad i_size value: 38620345925642
[   79.113793][ T5708] ==================================================================
[   79.122101][ T5708] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode
[   79.130649][ T5708] 
[   79.132983][ T5708] read-write to 0xffff888100622460 of 4 bytes by task 294 on cpu 1:
[   79.140972][ T5708]  __writeback_single_inode+0x1e3/0x7c0
[   79.146549][ T5708]  writeback_sb_inodes+0x480/0xa20
[   79.151683][ T5708]  __writeback_inodes_wb+0x94/0x1a0
[   79.156915][ T5708]  wb_writeback+0x266/0x5c0
[   79.161459][ T5708]  wb_workfn+0x4c9/0x910
[   79.165725][ T5708]  process_scheduled_works+0x4ce/0x9d0
[   79.171221][ T5708]  worker_thread+0x582/0x770
[   79.175845][ T5708]  kthread+0x486/0x510
[   79.179940][ T5708]  ret_from_fork+0xda/0x150
[   79.184473][ T5708]  ret_from_fork_asm+0x1a/0x30
[   79.189271][ T5708] 
[   79.191603][ T5708] read to 0xffff888100622460 of 4 bytes by task 5708 on cpu 0:
[   79.199155][ T5708]  __mark_inode_dirty+0x18e/0x760
[   79.204196][ T5708]  mark_buffer_dirty+0x133/0x210
[   79.209158][ T5708]  block_page_mkwrite+0x287/0x3d0
[   79.214198][ T5708]  ext4_page_mkwrite+0x76b/0xba0
[   79.219157][ T5708]  do_wp_page+0xe5d/0x2400
[   79.223588][ T5708]  handle_mm_fault+0x77d/0x2be0
[   79.228461][ T5708]  do_user_addr_fault+0x636/0x1090
[   79.233596][ T5708]  exc_page_fault+0x62/0xa0
[   79.238124][ T5708]  asm_exc_page_fault+0x26/0x30
[   79.242991][ T5708] 
[   79.245319][ T5708] value changed: 0x0001002a -> 0x00000020
[   79.251047][ T5708] 
[   79.253398][ T5708] Reported by Kernel Concurrency Sanitizer on:
[   79.259558][ T5708] CPU: 0 UID: 0 PID: 5708 Comm: syz.2.809 Tainted: G        W           6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) 
[   79.273468][ T5708] Tainted: [W]=WARN
[   79.277283][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   79.287355][ T5708] ==================================================================
[   79.299214][ T5748] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.822: couldn't read orphan inode 15 (err -117)
[   79.318137][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.327620][ T5748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.413051][   T29] audit: type=1326 audit(1751113257.555:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c986fe929 code=0x7ffc0000
[   79.441487][ T5758] loop0: detected capacity change from 0 to 512
[   79.454990][ T5759] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.822: iget: bad i_size value: 38620345925642
[   79.477909][ T5758] EXT4-fs (loop0): 1 orphan inode deleted
[   79.495914][   T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1
[   79.507941][ T5758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.526948][ T5346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[   79.546968][ T5762] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.4.822: path /157/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[   79.575907][ T5758] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.620768][ T5757] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   79.670768][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.077858][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.174829][ T5701] Set syz1 is full, maxelem 65536 reached