last executing test programs:

4m48.930046283s ago: executing program 1 (id=1733):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
personality(0x5000004)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="fd71e502c6c5d0f7be16ac21832ea623923958f16e01a1a1bd81b11d8bb8ffa2e7068c11799473c35802cbba576dfe09e50b92f58748925f32df4970905898cdd6a8a5950257f4ec1fe03c561eb5a53c2ab152932f0a594cbf5d806afc8c40", @ANYRES32, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
unshare(0x26000400)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f0000000400)=0x60)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', <r4=>0x0, 0x755ecc7f7c55598d, 0x7800, 0x7, 0x1000, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x67, 0x0, 0xe, 0x2d, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x2b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @remote, @rand_addr=0x64010101, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
bind$packet(r0, &(0x7f0000000240)={0x11, 0x8, r4, 0x1, 0xa2, 0x6, @broadcast}, 0x14)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$UHID_CREATE2(r5, 0x0, 0x8)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x4000000)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}, {&(0x7f0000000540)}], 0x2, 0x0)

4m48.071172006s ago: executing program 1 (id=1748):
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x902r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
mq_timedreceive(r3, &(0x7f000001d600)=""/102382, 0x18fee, 0x9000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x2}, &(0x7f0000000440)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
shmget(0x3, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

4m47.18770645s ago: executing program 1 (id=1759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40000000, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x401}}}}}}, 0x0)

4m47.1582251s ago: executing program 1 (id=1761):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x1, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}], 0x1}}], 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000dfffffff00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4, 0x0, 0xfffffffffffffffc}, 0x11)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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")
truncate(&(0x7f0000000640)='./file2\x00', 0xa00)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$eJzs3d9rW1UcAPDvTX/tl7aCoPOpIGhhLLWzbgo+VHwQwcFAn91CmpXZtBlNOtZS0CGCL4KKb/qyZ3/MN1/98ar/hQ/imNoNJz5I5abJmq1Jl25pMs3nA7c9596bnPO9P849yT3cBNC3xtM/mYjDEfFhEjFam59ExFA1NRgxs7nezfW1fDolsbHx+u9JdZ0b62v5aHhN6mAt83hEfP9exJHM9nLLK6vzuWKxsFTLT1YWzk+WV1aPnlvIzRXmCovHp6anj5147sTxzsX650+rh65+9MrTX838/e5jVz74IYmZOFRb1hhHp4zHeG2bDKWb8DYvd7qwHkt6XQHuSXpqDmye5XE4RmOgmgIA/s/ejogNAKDPJK7/ANBn6t8D3Fhfy9en3n4j0V3XXoqIfZvx1+9vbi4ZrN2z21e9D3rgRnLbnZEkIsY6UP54RHz2zZtfpFPs0X1IgGbeuRQRZ8bGt7f/ybYxC7v1zA7Lhmv/x++Yr/2D7vk27f8836z/l7nV/4km/Z+RJufuvai+x/BWftv5v78Dhewg7f+92DC27WZD/DVjA7XcQ9U+31By9lyxkLZtD0fERAyNpPmpHcqYuP7P9VbLGvt/f3z81udp+en/rTUyvw6O3P6a2Vwldz8xN7p2KeKJwWbxJ7f2f9Ki/3uqzTJefeH9T1stS+NP461P2+OP2uikvbFxOeKppvt/a0RbsuP4xMnq4TBZPyia+Prn1vVv3P/plJZf/yzQDen+P7Bz/GNJ43jN8u7L+PHy6Hetlt09/ubH/3DyRjVdbzou5iqVpamI4eS17fOPbb22nq+vn8Y/8WTz83+n4z/9THimzfgHr/725b3Hv7fS+Gd3tf93n7hyc36gVfnt7f/pamqiNqed9q/dCt7PtgMAAAAAAAAAAAAAAAAAAAAAAACAdmUi4lAkmeytdCaTzW7+hvejcSBTLJUrR86Wlhdno/pb2WMxlKk/6nK04XmoU7Xn4dfzx+7IPxsRj0TEJyP7k/pzFGd7HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1B1s8fv/qV9Gel07AGDP7Ot1BQCArnP9B4D+4/oPAP3H9R8A+o/rPwD0H9d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tipkyfTaeOv9bV8mp+9sLI8X7pwdLZQns8uLOez+dLS+excqTRXLGTzpYW7vV+xVDo/HYvLFycrhXJlsryyenqhtLxYOX1uITdXOF0Y6kpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA75ZXV+VyxWFiS2EqkG6atlTd6XtUOJGY68D4DtcPpAQin+4nkwahGhxPNWovhrrZNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8F/wYAAP//hNkgcA==")
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003e00)=ANY=[@ANYBLOB="ec210000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf256500000008000300", @ANYRES32, @ANYBLOB="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"], 0x21ec}, 0x1, 0x0, 0x0, 0x200000a1}, 0x4004001)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000040)="410492e41ba89b190300", 0x76200}], 0x0, 0x7c00, 0x6, 0x2)
syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0)

4m46.977127083s ago: executing program 1 (id=1764):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

4m46.701872198s ago: executing program 1 (id=1768):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

4m46.679114818s ago: executing program 32 (id=1768):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

2m31.276766953s ago: executing program 3 (id=4736):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r4], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES16=r5], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000000)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x4000000, 0x0, {{@in=@private=0xa010102, @in=@multicast1}, {@in, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r10 = dup(r9)
sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0)
read$char_usb(r10, &(0x7f0000000080)=""/139, 0xfdef)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)

2m31.179961204s ago: executing program 3 (id=4738):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000), 0x0)

2m31.122161046s ago: executing program 3 (id=4740):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000200)='./file1\x00', 0x62000776)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xfffbffec, 0x294, 0x40, 0x3e5, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe2, 0x1, 0x3}], "", ['\x00']}, 0x178)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

2m30.207566179s ago: executing program 3 (id=4753):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0xca9a3b00000000, 0x0, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040))
r2 = syz_open_procfs(0x0, 0x0)
getdents(r2, 0x0, 0x0)
r3 = socket(0x11, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @dev}, 0x14)
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/240)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f00000000c0)=0x80)

2m29.364791393s ago: executing program 3 (id=4775):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000017000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x3, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket(0x80000000000000a, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0)
r5 = accept$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
accept4$packet(r5, 0x0, &(0x7f00000001c0), 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

2m29.348606013s ago: executing program 3 (id=4776):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0], 0xa0}, 0x4004881)
recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x40, 0x3, 0x30cf}, 0x7, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x9, 0x0, 0x7})
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
creat(&(0x7f0000000080)='./file0\x00', 0xc7) (async)
close(r0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async)
gettid() (async)
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0], 0xa0}, 0x4004881) (async)
recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x40, 0x3, 0x30cf}, 0x7, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x9, 0x0, 0x7}) (async)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async)

2m16.567987933s ago: executing program 4 (id=4987):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

2m16.446024474s ago: executing program 4 (id=4992):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xcfa1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0)

2m16.414918924s ago: executing program 4 (id=4994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x40, 0x14)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")

2m16.341467576s ago: executing program 4 (id=4996):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
timer_create(0x7, &(0x7f0000000680)={0x0, 0x30, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000006c0)=<r3=>0x0)
timer_gettime(r3, &(0x7f00000007c0))
write$tun(r1, &(0x7f0000000dc0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x100}}}}}}}}}, 0x4a)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2})
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0x5, 0x2c6, &(0x7f0000000380)="$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")
r6 = syz_clone(0x100, &(0x7f00000001c0)="1422bdf3e3b7c974e714ad404071801697d9d3803ca919e35f5ca5ac63cd92ae4c37df4ded2b649808a71d2d9271cab06fa461eeed38b96f70664624a28e1e621e13ba79f4c8b2a147ac81abf8fb40160331b76db1dabc4ce52f6f1fee0a533358da1210ecd892840071bb5bc9b0d860", 0x70, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)="201b8fe5d62caa590fa28e4aeaecaf5734431c7fcc2fcd99d88fecf81d10b090c31739b16bbd9b6f2ee3eb87c63d7844ffd941ba6826d512794556ff2370c44b3bed09061fc7ab696ae0435df2032bcb20ef48e40c13e6738dc5483013a9e6d80f37478d8b08cffdc56bbf0cda8d8c9ca0a36740c193538ede757a0ce6c29033f7b7f9ad9412b5331b4d837fe050f5ccb6fb4dcceac21b175b8e672c066bdd1160db7ed9c5b2d907bf83ee90e3490c5c31c93e681b61c36c1e345a5b4844bed6466de4cc0ac03aee86497bc5068b87ef11c325bb1e45bb3d87e315d7")
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x80000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000840)={'wg2\x00', {0x2, 0x0, @broadcast}})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_free\x00', r8}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f7ffffffffffffff000000009500010053492500"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130)
r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0x400200, 0x114)
write$9p(r9, &(0x7f0000001400)="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", 0x200)
sendfile(r9, r10, 0x0, 0xe065)
connect$l2tp(r9, &(0x7f0000000800)={0x2, 0x0, @multicast2, 0x1}, 0x10)

2m16.239443218s ago: executing program 4 (id=5001):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2)

2m15.947592982s ago: executing program 4 (id=5004):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

2m15.913500312s ago: executing program 33 (id=5004):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

2m14.308377657s ago: executing program 34 (id=4776):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = gettid()
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0], 0xa0}, 0x4004881)
recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x40, 0x3, 0x30cf}, 0x7, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x9, 0x0, 0x7})
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
creat(&(0x7f0000000080)='./file0\x00', 0xc7) (async)
close(r0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async)
gettid() (async)
sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0], 0xa0}, 0x4004881) (async)
recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x1, 0x40, 0x3, 0x30cf}, 0x7, 0x3, 'id1\x00', 'timer1\x00', 0x0, 0x6, 0x9, 0x0, 0x7}) (async)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}}, 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async)

2.455396292s ago: executing program 0 (id=7805):
syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=<r0=>0x0, &(0x7f0000000280)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
listen(r4, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000002300)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x41, 0x40000c0}, 0x4000004)
sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c0}, 0x4801)
accept4(r4, 0x0, 0x0, 0x400000000000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = syz_pidfd_open(0x0, 0x0)
flistxattr(r8, &(0x7f00000004c0)=""/93, 0x5d)

1.90633696s ago: executing program 7 (id=7812):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)

1.738618753s ago: executing program 7 (id=7815):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, 0x0, 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

1.583619435s ago: executing program 0 (id=7816):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x2, 0xff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=<r1=>0xffffffffffffffff], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1f, 0x2, 0x200000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = epoll_create1(0x80000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r4}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c3cd5ced94b7de4fcb7894e1bf7ae28edaa61def1a5f85d8e9f3e4", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0xfffffffffffffd3b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYRESHEX=r8, @ANYRES16=r4, @ANYRESOCT=r4, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=r1], 0xfe3a)
syz_io_uring_setup(0x264c, &(0x7f0000000140)={0x0, 0x5882, 0x8000, 0x2, 0x1c2, 0x0, r6}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000400)=0x1340, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

1.30428221s ago: executing program 7 (id=7818):
r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
personality(0x5000004)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="fd71e502c6c5d0f7be16ac21832ea623923958f16e01a1a1bd81b11d8bb8ffa2e7068c11799473c35802cbba576dfe09e50b92f58748925f32df4970905898cdd6a8a5950257f4ec1fe03c561eb5a53c2ab152932f0a594cbf5d806afc8c40", @ANYRES32, @ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
unshare(0x26000400)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
accept$nfc_llcp(r3, &(0x7f0000000340), &(0x7f0000000400)=0x60)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', <r4=>0x0, 0x755ecc7f7c55598d, 0x7800, 0x7, 0x1000, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x67, 0x0, 0xe, 0x2d, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x2b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010102, @remote, @rand_addr=0x64010101, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
bind$packet(r0, &(0x7f0000000240)={0x11, 0x8, r4, 0x1, 0xa2, 0x6, @broadcast}, 0x14)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x4000000)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)

981.724915ms ago: executing program 2 (id=7820):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x1202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

943.027866ms ago: executing program 5 (id=7821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x2, 0x0, &(0x7f0000000100)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r1, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r4, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11)
syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x9, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700})
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0)

888.138726ms ago: executing program 2 (id=7823):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001640)="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", 0x17a}], 0x1, 0x0, 0x0, 0x20000090}}], 0x1, 0x4801)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
ioperm(0x1, 0x2, 0x6)
socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)

848.365097ms ago: executing program 2 (id=7824):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fsync(0xffffffffffffffff)

809.629397ms ago: executing program 2 (id=7825):
bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, 0x0, 0x0, 0x0)

710.354219ms ago: executing program 6 (id=7828):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10)
sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r0, 0x1)

686.036919ms ago: executing program 6 (id=7829):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigpending(0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)

651.269079ms ago: executing program 6 (id=7830):
getpid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file2\x00', 0x10080, &(0x7f0000000280), 0xfe, 0x468, &(0x7f0000000b80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x5fed0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./bus\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101002, 0x0)
pwrite64(r4, &(0x7f0000000000)='2', 0x1, 0x4fed0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000025c0)={0x17c04, 0xffffffffffffffff, 0x4ffa3, 0x800})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000"], 0x50)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

503.706752ms ago: executing program 0 (id=7831):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES8=r2, @ANYRES8=r1])

491.891632ms ago: executing program 5 (id=7832):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0xfffffffe}}], 0x38)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket$inet6_udp(0xa, 0x2, 0x0)

456.215913ms ago: executing program 0 (id=7833):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x1202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

356.568414ms ago: executing program 2 (id=7834):
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_user}], [], 0x6b}})

355.599905ms ago: executing program 5 (id=7835):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1e, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r3}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000340))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="bababf728fd06cc9480bef2b979ea227bc535549a143842d517f50da2f29bd557c9a17abf39fc174a94e681ce4223f25640089ce9ad2b6769ed9fb1bad44b5ec4183e28272788172fbd914a58d3dc76b3f1e1163ebea5feaab106a7dcf655efc6ede69290c35f4a4e68dfec2a7f2", @ANYRES8=r2, @ANYRESOCT=r5, @ANYRES8=r7, @ANYRES64=r6, @ANYBLOB="ca7bb1dc3adc3bbe6290e9317aff1c81fa1df5fd78ea74075e21695732ab135d9b44e41e190818cf1152cb8d82a71ad3754c941d583846fe7193aca6d902b182f52f81f4e1756df5af27d67ecb94888231e50a4d5cd5ddabe6b97386719f2fc82f246438bafde377033acb067a5f8ccf2ac1feb9aa4d1e154df7f337decda14021d7c26dc1aa996af2143b2d51168accbb7de7b8ee7d9ec1ead187eb9a376035179adbf39097702c68b140864e2014a0296d2e549b5ff4ea11a3e54ee2e48bb94c553adfa2c56de4a5"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)=ANY=[])
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=@base={0x14, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r10}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x34}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x6, 0x4, {{0x9, 0x4, 0x2, 0x0, 0x24, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast2, @broadcast, {[@lsrr={0x83, 0xf, 0x29, [@remote, @broadcast, @loopback]}, @noop]}}}}})

318.910195ms ago: executing program 5 (id=7836):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000300"/28], 0x50)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x3, 0x1e, 0xfe, &(0x7f0000000400)=""/240})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20)
open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000580)=r5, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x14, 0x32, 0x101}, 0x14}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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")
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

317.994925ms ago: executing program 0 (id=7837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0xce)
pipe2$9p(&(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

297.133455ms ago: executing program 2 (id=7838):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea20}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x404, &(0x7f0000000f00)={[{@nogrpid}, {@jqfmt_vfsv0}, {@grpquota}, {@debug}, {@nodioread_nolock}, {@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3ff}}, {}, {@debug}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xe0000000)

288.912155ms ago: executing program 6 (id=7839):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x482040, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000005000000020000000400000000040000", @ANYRES32=r1, @ANYBLOB="0600000000000000000000000000235539b61cde", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000040000000200"/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaa0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x2, 0xd, 0x5, 0xfffffffffffffff0, 0xfffffffffffffffe}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x3, 0xe6, &(0x7f0000000580)=""/230, 0x41000, 0x66f61a63a5023199, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x1, 0x9, 0x3}, 0x10, 0x2340d, r3, 0x6, &(0x7f00000006c0)=[r1, r1], &(0x7f0000000700)=[{0x1, 0x2, 0x2, 0x7}, {0x3, 0x2, 0xd, 0xd}, {0x1, 0x3, 0xe}, {0x3, 0x2, 0x9, 0x3}, {0x4, 0x4, 0x9, 0xb}, {0x3, 0x2, 0x5}], 0x10, 0x8, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r6}, 0x18)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)
sync()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="9500000000000000181b0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000759f10000000000000200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018220000", @ANYRES32=r2, @ANYBLOB="0000000009e30f3d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000400)=0x13)

288.486295ms ago: executing program 7 (id=7840):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x40, 0x14)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")

229.230076ms ago: executing program 0 (id=7841):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
setuid(0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x2, 0xff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=<r1=>0xffffffffffffffff], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x1f, 0x2, 0x200000)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = epoll_create1(0x80000)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r6, &(0x7f0000001980)=""/179, 0xb3)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000))
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r4}, 0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c3cd5ced94b7de4fcb7894e1bf7ae28edaa61def1a5f85d8e9f3e4", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0xfffffffffffffd3b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[@ANYRES8=r5, @ANYRESHEX=r8, @ANYRES16=r4, @ANYRESOCT=r4, @ANYRESDEC=r7, @ANYRESHEX=r3, @ANYRES32=r1], 0xfe3a)
syz_io_uring_setup(0x264c, &(0x7f0000000140)={0x0, 0x5882, 0x8000, 0x2, 0x1c2, 0x0, r6}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000400)=0x1340, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

182.810997ms ago: executing program 5 (id=7842):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) (fail_nth: 2)

174.244467ms ago: executing program 5 (id=7843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x2, 0x0, &(0x7f0000000100)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r1, &(0x7f0000000080))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r4, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11)
syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x9, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700})
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0)

141.230498ms ago: executing program 7 (id=7844):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

17.628099ms ago: executing program 6 (id=7845):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="e5a133f044fa2b5bc01c3a6341230b72dec86c7289e022548887d1d61aba9755a5a8b6fecf72c1bab25d5a0e533e85d0092e28dc69b2f4da2fbb77fc27ca531a94d64aae9d1a25c1af953d12faca7ec9c44d9bd84c0d63fb7ac33210ec7e88fd25d60bcd42f9c9573e76cfee6efe262d18213d1efd8a33b87b4f81f5430a7d2cd9c68e8aace0c6076b76605d012c62c217b21df38eef056e24c3b6db9680693f0fb13db288f9c74965070a561bdb8d665f7dff551c8733af0b42b5f906030d8968f3901469e867b2475d5cc867b307ac021d5fd95b926d2ccc", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0xc00, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001b40), 0x101000, 0x0)
preadv(r2, &(0x7f0000001f00)=[{&(0x7f0000001b80)=""/254, 0xfe}], 0x1, 0x9, 0x8000)

17.12936ms ago: executing program 7 (id=7846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

0s ago: executing program 6 (id=7847):
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="b062211cd658774a63d20bc7ac5b712132950b305b05bf28fe4b4ca281c272310b8a3b3f52cf990dd80bb32d6ff436efcab1ae2e53388e5a21abdecd0e9225fc8be591b6eb9ed3f2546a7c640b944553014e70c616da24ea2101ac19d15f31"], 0x0, 0x2d2, &(0x7f0000000580)="$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") (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) (async)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffff7, 0x5ecd2918a900b922) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x1000)
setreuid(0x0, r2) (async)
stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4)
chown(&(0x7f0000000240)='./file0\x00', r3, r4)
listen(r0, 0x81) (async)
ioctl$TCXONC(r1, 0x540a, 0x2) (async)
socket$inet6(0xa, 0x3, 0x3) (async)
socket$inet6(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x3}, 0x18)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0xf}, 0x18)
gettid()

kernel console output (not intermixed with test programs):

928664 (level 1)
[  408.577545][T23483] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  408.592456][T23481] EXT4-fs (loop2): Remounting filesystem read-only
[  408.599522][T23483] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6732: invalid indirect mapped block 2683928664 (level 1)
[  408.620336][T23483] EXT4-fs (loop6): Remounting filesystem read-only
[  408.623399][T23490] netlink: 'syz.7.6735': attribute type 21 has an invalid length.
[  408.627153][T23483] EXT4-fs (loop6): 1 truncate cleaned up
[  408.640781][T23483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.657597][T23481] EXT4-fs (loop2): 1 truncate cleaned up
[  408.663450][T23490] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6735'.
[  408.663982][T23481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.672502][T23490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6735'.
[  408.695633][T23492] vlan0: entered allmulticast mode
[  408.764560][T23494] netlink: 'syz.5.6736': attribute type 21 has an invalid length.
[  408.772816][T23494] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6736'.
[  408.782004][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6736'.
[  408.813997][T23501] FAULT_INJECTION: forcing a failure.
[  408.813997][T23501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.827105][T23501] CPU: 0 UID: 0 PID: 23501 Comm: syz.7.6739 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  408.827193][T23501] Tainted: [W]=WARN
[  408.827201][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  408.827217][T23501] Call Trace:
[  408.827224][T23501]  <TASK>
[  408.827232][T23501]  __dump_stack+0x1d/0x30
[  408.827257][T23501]  dump_stack_lvl+0xe8/0x140
[  408.827371][T23501]  dump_stack+0x15/0x1b
[  408.827435][T23501]  should_fail_ex+0x265/0x280
[  408.827530][T23501]  should_fail+0xb/0x20
[  408.827564][T23501]  should_fail_usercopy+0x1a/0x20
[  408.827602][T23501]  _copy_to_user+0x20/0xa0
[  408.827700][T23501]  __se_sys_newstat+0x220/0x280
[  408.827745][T23501]  __x64_sys_newstat+0x31/0x40
[  408.827779][T23501]  x64_sys_call+0x781/0x2fb0
[  408.827806][T23501]  do_syscall_64+0xd2/0x200
[  408.827848][T23501]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  408.827880][T23501]  ? clear_bhb_loop+0x40/0x90
[  408.827901][T23501]  ? clear_bhb_loop+0x40/0x90
[  408.827926][T23501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.827979][T23501] RIP: 0033:0x7fbcd3bae929
[  408.827994][T23501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  408.828090][T23501] RSP: 002b:00007fbcd2217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  408.828110][T23501] RAX: ffffffffffffffda RBX: 00007fbcd3dd5fa0 RCX: 00007fbcd3bae929
[  408.828183][T23501] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000200000000600
[  408.828195][T23501] RBP: 00007fbcd2217090 R08: 0000000000000000 R09: 0000000000000000
[  408.828217][T23501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.828229][T23501] R13: 0000000000000000 R14: 00007fbcd3dd5fa0 R15: 00007fffd59b5d28
[  408.828247][T23501]  </TASK>
[  408.876298][T23505] loop7: detected capacity change from 0 to 512
[  408.881785][T23505] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  408.886834][T23505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  408.886896][T23505] System zones: 1-12
[  408.887138][T23505] EXT4-fs (loop7): 1 truncate cleaned up
[  408.887594][T23505] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.002353][T23509] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  409.353943][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6747'.
[  409.397802][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.409954][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.489045][   T29] kauditd_printk_skb: 133 callbacks suppressed
[  409.489063][   T29] audit: type=1326 audit(1750640850.451:37056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.518606][   T29] audit: type=1326 audit(1750640850.451:37057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.541664][   T29] audit: type=1326 audit(1750640850.451:37058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.564758][   T29] audit: type=1326 audit(1750640850.451:37059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.587881][   T29] audit: type=1326 audit(1750640850.451:37060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.611132][   T29] audit: type=1326 audit(1750640850.451:37061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.634108][   T29] audit: type=1326 audit(1750640850.451:37062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.640803][T23532] loop5: detected capacity change from 0 to 512
[  409.657297][   T29] audit: type=1326 audit(1750640850.451:37063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.666481][T23532] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[  409.686684][   T29] audit: type=1326 audit(1750640850.451:37064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.696457][T23532] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.6751: iget: bad i_size value: 12154757448730
[  409.717835][   T29] audit: type=1326 audit(1750640850.451:37065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  409.734255][T23532] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.6751: couldn't read orphan inode 13 (err -117)
[  409.817066][T23532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.851441][T23532] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  409.868910][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.875827][T23539] loop2: detected capacity change from 0 to 1024
[  409.907060][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.916464][T23539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  409.947676][T23539] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  409.963602][T23539] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  409.975846][T23539] EXT4-fs (loop2): This should not happen!! Data will be lost
[  409.975846][T23539] 
[  409.985663][T23539] EXT4-fs (loop2): Total free blocks count 0
[  409.991735][T23539] EXT4-fs (loop2): Free/Dirty block details
[  409.997725][T23539] EXT4-fs (loop2): free_blocks=68451041280
[  410.003704][T23539] EXT4-fs (loop2): dirty_blocks=16
[  410.008834][T23539] EXT4-fs (loop2): Block reservation details
[  410.010456][T23549] syzkaller0: entered allmulticast mode
[  410.014895][T23539] EXT4-fs (loop2): i_reserved_data_blocks=1
[  410.059542][T23555] netlink: 'syz.0.6758': attribute type 3 has an invalid length.
[  410.063912][T23557] loop6: detected capacity change from 0 to 512
[  410.077762][T23549] loop5: detected capacity change from 0 to 512
[  410.087620][T23554] loop7: detected capacity change from 0 to 512
[  410.095081][T23549] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  410.105848][T23554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  410.117035][T23557] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  410.126267][T23557] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6760: invalid indirect mapped block 2683928664 (level 1)
[  410.140632][T23557] EXT4-fs (loop6): Remounting filesystem read-only
[  410.148128][T23557] EXT4-fs (loop6): 1 truncate cleaned up
[  410.154445][T23557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.171144][T23560] loop0: detected capacity change from 0 to 512
[  410.186229][T23554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  410.194311][T23554] System zones: 1-12
[  410.194433][T23560] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  410.209073][T23549] EXT4-fs (loop5): 1 truncate cleaned up
[  410.209094][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.216713][T23549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.223861][T23554] EXT4-fs (loop7): 1 truncate cleaned up
[  410.239141][T23560] EXT4-fs (loop0): 1 truncate cleaned up
[  410.242272][T23554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.248650][T23560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.278395][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.281419][T23560] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.285935][T23549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.302910][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.310373][T23549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.440144][T23568] loop2: detected capacity change from 0 to 128
[  410.447126][T23568] vfat: Unknown parameter 'uni_xlaue'
[  410.467152][T23560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23560 comm=syz.0.6758
[  410.480408][T23548] syzkaller0: left allmulticast mode
[  410.486770][T23560] netem: incorrect gi model size
[  410.491800][T23560] netem: change failed
[  410.520076][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.546619][T23570] loop5: detected capacity change from 0 to 512
[  410.553774][T23570] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  410.569005][T23570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  410.579988][T23570] System zones: 1-12
[  410.584590][T23570] EXT4-fs (loop5): 1 truncate cleaned up
[  410.590901][T23570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  410.625304][T23575] loop2: detected capacity change from 0 to 2048
[  410.712425][T23575] Alternate GPT is invalid, using primary GPT.
[  410.718876][T23575]  loop2: p2 p3 p7
[  410.876182][T23588] loop2: detected capacity change from 0 to 1024
[  410.928658][T23588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  410.943970][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.957352][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.981343][T23588] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  411.001589][T23588] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  411.013972][T23588] EXT4-fs (loop2): This should not happen!! Data will be lost
[  411.013972][T23588] 
[  411.023775][T23588] EXT4-fs (loop2): Total free blocks count 0
[  411.029823][T23588] EXT4-fs (loop2): Free/Dirty block details
[  411.035790][T23588] EXT4-fs (loop2): free_blocks=68451041280
[  411.041805][T23588] EXT4-fs (loop2): dirty_blocks=16
[  411.047016][T23588] EXT4-fs (loop2): Block reservation details
[  411.053124][T23588] EXT4-fs (loop2): i_reserved_data_blocks=1
[  411.211590][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.246405][T23612] loop6: detected capacity change from 0 to 2048
[  411.283372][T23615] siw: device registration error -23
[  411.299255][T23615] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  411.318366][T23612] Alternate GPT is invalid, using primary GPT.
[  411.324774][T23612]  loop6: p2 p3 p7
[  411.464694][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.487058][T23617] 9pnet_fd: p9_fd_create_unix (23617): problem connecting socket: ./file0: -111
[  411.592056][T23617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6783'.
[  411.954939][T23656] loop0: detected capacity change from 0 to 512
[  411.964803][T23656] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[  411.971778][T23657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6801'.
[  411.977198][T23656] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.6800: iget: bad i_size value: 12154757448730
[  412.033495][T23656] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.6800: couldn't read orphan inode 13 (err -117)
[  412.047376][T23668] loop2: detected capacity change from 0 to 1024
[  412.054805][T23656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.075011][T23656] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  412.094694][T23668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.116479][T20401] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.149521][T23668] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  412.176722][T23681] loop0: detected capacity change from 0 to 128
[  412.182314][T23668] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  412.195256][T23668] EXT4-fs (loop2): This should not happen!! Data will be lost
[  412.195256][T23668] 
[  412.205045][T23668] EXT4-fs (loop2): Total free blocks count 0
[  412.211103][T23668] EXT4-fs (loop2): Free/Dirty block details
[  412.217071][T23668] EXT4-fs (loop2): free_blocks=68451041280
[  412.221231][T23684] loop7: detected capacity change from 0 to 128
[  412.222910][T23668] EXT4-fs (loop2): dirty_blocks=16
[  412.231072][T23684] vfat: Unknown parameter 'uni_xlaue'
[  412.234390][T23668] EXT4-fs (loop2): Block reservation details
[  412.234406][T23668] EXT4-fs (loop2): i_reserved_data_blocks=1
[  412.253596][T23681] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  412.266008][T23681] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  412.277234][T23681] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  412.340700][T23691] syz_tun: entered allmulticast mode
[  412.353138][T23691] dvmrp0: entered allmulticast mode
[  412.361798][T23691] dvmrp0: left allmulticast mode
[  412.368253][T23691] syz_tun: left allmulticast mode
[  412.378042][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.472217][T23702] loop0: detected capacity change from 0 to 2048
[  412.536106][T23702] Alternate GPT is invalid, using primary GPT.
[  412.542616][T23702]  loop0: p2 p3 p7
[  412.809320][T23746] loop6: detected capacity change from 0 to 512
[  412.822475][T23746] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  412.831640][T23746] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.6834: iget: bad i_size value: 12154757448730
[  412.845681][T23746] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.6834: couldn't read orphan inode 13 (err -117)
[  412.868353][T23746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.885330][T23746] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  412.912292][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.961208][T23756] loop6: detected capacity change from 0 to 1024
[  412.968490][T23758] lo speed is unknown, defaulting to 1000
[  412.968946][T23756] EXT4-fs: Ignoring removed i_version option
[  412.981516][T23756] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  412.995562][T23756] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6839: Invalid block bitmap block 0 in block_group 0
[  413.010630][T23756] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6839: Failed to acquire dquot type 0
[  413.022361][T23756] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.6839: Freeing blocks not in datazone - block = 0, count = 4096
[  413.036678][T23756] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6839: Invalid inode bitmap blk 0 in block_group 0
[  413.049819][T23756] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  413.058874][T23756] EXT4-fs (loop6): 1 orphan inode deleted
[  413.064903][T10076] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0
[  413.076753][T23756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.105646][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.291169][T23775] loop6: detected capacity change from 0 to 1024
[  413.298020][T23775] EXT4-fs: Ignoring removed i_version option
[  413.305896][T23775] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  413.318867][T23775] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6846: Invalid block bitmap block 0 in block_group 0
[  413.333933][T23775] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6846: Failed to acquire dquot type 0
[  413.345732][T23775] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.6846: Freeing blocks not in datazone - block = 0, count = 4096
[  413.359534][T23775] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6846: Invalid inode bitmap blk 0 in block_group 0
[  413.372396][T10104] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0
[  413.372454][T23775] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  413.392788][T23775] EXT4-fs (loop6): 1 orphan inode deleted
[  413.399165][T23775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.435591][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.468666][T23786] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  413.480814][T23784] syz_tun: entered allmulticast mode
[  413.490551][T23784] dvmrp0: entered allmulticast mode
[  413.496868][T23784] dvmrp0: left allmulticast mode
[  413.501920][T23784] syz_tun: left allmulticast mode
[  413.508830][T23788] loop6: detected capacity change from 0 to 1024
[  413.516864][T23788] EXT4-fs: Ignoring removed i_version option
[  413.523410][T23788] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  413.536087][T23788] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6851: Invalid block bitmap block 0 in block_group 0
[  413.549839][T23788] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6851: Failed to acquire dquot type 0
[  413.561568][T23788] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.6851: Freeing blocks not in datazone - block = 0, count = 4096
[  413.575327][T23788] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6851: Invalid inode bitmap blk 0 in block_group 0
[  413.588587][T23788] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  413.597569][T23788] EXT4-fs (loop6): 1 orphan inode deleted
[  413.603456][T10128] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0
[  413.604946][T23788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.686254][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.754692][T23810] loop6: detected capacity change from 0 to 512
[  413.765123][T23810] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  413.773374][T23810] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6861: invalid indirect mapped block 2683928664 (level 1)
[  413.793086][T23810] EXT4-fs (loop6): Remounting filesystem read-only
[  413.801401][T23810] EXT4-fs (loop6): 1 truncate cleaned up
[  413.809434][T23810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  413.840285][T23816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6862'.
[  413.859878][T23816] vlan0: entered allmulticast mode
[  413.871747][T23818] loop7: detected capacity change from 0 to 128
[  413.879726][T23818] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.908355][T23823] netlink: 'syz.2.6862': attribute type 21 has an invalid length.
[  413.917348][T23823] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6862'.
[  413.926535][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6862'.
[  413.935651][T23822] syz_tun: entered allmulticast mode
[  413.941402][T23822] syz_tun: left allmulticast mode
[  414.053077][T23836] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  414.144684][T23846] loop2: detected capacity change from 0 to 2048
[  414.152599][T23847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6875'.
[  414.192234][T23837] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6870'.
[  414.203770][T23846] Alternate GPT is invalid, using primary GPT.
[  414.210397][T23846]  loop2: p2 p3 p7
[  414.216421][T23854] loop7: detected capacity change from 0 to 512
[  414.223877][T23854] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  414.234593][T23854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  414.242578][T23854] System zones: 1-12
[  414.247300][T23854] EXT4-fs (loop7): 1 truncate cleaned up
[  414.275895][T23859] loop2: detected capacity change from 0 to 164
[  414.373886][T23866] loop5: detected capacity change from 0 to 1024
[  414.398324][T23866] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  414.415970][T23866] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  414.428223][T23866] EXT4-fs (loop5): This should not happen!! Data will be lost
[  414.428223][T23866] 
[  414.438042][T23866] EXT4-fs (loop5): Total free blocks count 0
[  414.444236][T23866] EXT4-fs (loop5): Free/Dirty block details
[  414.450166][T23866] EXT4-fs (loop5): free_blocks=68451041280
[  414.456080][T23866] EXT4-fs (loop5): dirty_blocks=16
[  414.461189][T23866] EXT4-fs (loop5): Block reservation details
[  414.467184][T23866] EXT4-fs (loop5): i_reserved_data_blocks=1
[  414.496624][T23870] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  414.536504][   T29] kauditd_printk_skb: 548 callbacks suppressed
[  414.536521][   T29] audit: type=1400 audit(1750641368.515:37605): avc:  denied  { read write } for  pid=17868 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  414.568730][   T29] audit: type=1400 audit(1750641368.515:37606): avc:  denied  { open } for  pid=17868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  414.593151][   T29] audit: type=1400 audit(1750641368.515:37607): avc:  denied  { ioctl } for  pid=17868 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  414.618996][   T29] audit: type=1400 audit(1750641368.525:37608): avc:  denied  { create } for  pid=23878 comm="syz.5.6887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  414.639838][   T29] audit: type=1400 audit(1750641368.525:37609): avc:  denied  { prog_load } for  pid=23878 comm="syz.5.6887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  414.659171][   T29] audit: type=1400 audit(1750641368.525:37610): avc:  denied  { bpf } for  pid=23878 comm="syz.5.6887" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  414.679923][   T29] audit: type=1400 audit(1750641368.525:37611): avc:  denied  { map_create } for  pid=23878 comm="syz.5.6887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  414.699420][   T29] audit: type=1400 audit(1750641368.525:37612): avc:  denied  { map_read map_write } for  pid=23878 comm="syz.5.6887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  414.719488][   T29] audit: type=1400 audit(1750641368.525:37613): avc:  denied  { perfmon } for  pid=23878 comm="syz.5.6887" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  414.740553][   T29] audit: type=1400 audit(1750641368.525:37614): avc:  denied  { prog_run } for  pid=23878 comm="syz.5.6887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  414.870768][T23894] loop6: detected capacity change from 0 to 1024
[  414.899867][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6895'.
[  414.932852][T23894] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  414.950214][T23894] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  414.962513][T23894] EXT4-fs (loop6): This should not happen!! Data will be lost
[  414.962513][T23894] 
[  414.972196][T23894] EXT4-fs (loop6): Total free blocks count 0
[  414.978246][T23894] EXT4-fs (loop6): Free/Dirty block details
[  414.984308][T23894] EXT4-fs (loop6): free_blocks=68451041280
[  414.990150][T23894] EXT4-fs (loop6): dirty_blocks=16
[  414.995715][T23894] EXT4-fs (loop6): Block reservation details
[  415.001730][T23894] EXT4-fs (loop6): i_reserved_data_blocks=1
[  415.011698][T23904] vlan0: entered allmulticast mode
[  415.062606][T23899] netlink: 'syz.5.6895': attribute type 21 has an invalid length.
[  415.070703][T23899] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6895'.
[  415.079966][T23899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6895'.
[  415.106065][T23906] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  415.148878][T23908] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6897'.
[  415.475558][T23949] 9pnet_fd: p9_fd_create_unix (23949): problem connecting socket: ./file0: -111
[  415.523040][T23951] loop5: detected capacity change from 0 to 512
[  415.538866][T23949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6912'.
[  415.551147][T23949] 9pnet_fd: Insufficient options for proto=fd
[  415.556480][T23951] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[  415.568893][T23959] loop6: detected capacity change from 0 to 512
[  415.585979][T23951] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.6913: iget: bad i_size value: 12154757448730
[  415.599684][T23959] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  415.614956][T23951] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.6913: couldn't read orphan inode 13 (err -117)
[  415.628102][T23959] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.6916: iget: bad i_size value: 12154757448730
[  415.680116][T23959] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.6916: couldn't read orphan inode 13 (err -117)
[  415.698694][T23951] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  415.708038][T23959] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  415.848208][T23987] siw: device registration error -23
[  415.914343][T23987] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  415.940888][T23997] 9pnet_fd: p9_fd_create_unix (23997): problem connecting socket: ./file0: -111
[  415.961707][T23997] 9pnet_fd: Insufficient options for proto=fd
[  416.250677][T24014] IPVS: Error joining to the multicast group
[  416.514651][T24049] bond0: (slave dummy0): Releasing backup interface
[  416.555511][T24049] bond0: (slave bond_slave_0): Releasing backup interface
[  416.584735][T24049] bond0: (slave bond_slave_1): Releasing backup interface
[  416.661371][T24049] team0: Port device team_slave_0 removed
[  416.681119][T24049] team0: Port device team_slave_1 removed
[  416.748255][T24059] lo speed is unknown, defaulting to 1000
[  416.803589][T24064] sock: sock_set_timeout: `syz.5.6955' (pid 24064) tries to set negative timeout
[  416.994894][T24075] loop2: detected capacity change from 0 to 512
[  417.001552][T24065] lo speed is unknown, defaulting to 1000
[  417.045721][T24075] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  417.066074][T24087] netlink: 'syz.0.6963': attribute type 4 has an invalid length.
[  417.086429][T24075] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.6957: iget: bad i_size value: 12154757448730
[  417.159565][T24075] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.6957: couldn't read orphan inode 13 (err -117)
[  417.167721][T24094] loop5: detected capacity change from 0 to 164
[  417.190662][T24075] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  417.246558][T24100] loop5: detected capacity change from 0 to 1024
[  417.265459][T24100] EXT4-fs: Ignoring removed i_version option
[  417.277222][T24100] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  417.294404][T24100] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6965: Invalid block bitmap block 0 in block_group 0
[  417.313941][T24100] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6965: Failed to acquire dquot type 0
[  417.337435][T24100] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.6965: Freeing blocks not in datazone - block = 0, count = 4096
[  417.352440][T24100] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6965: Invalid inode bitmap blk 0 in block_group 0
[  417.365828][T24100] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  417.377718][  T176] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  417.390330][T24100] EXT4-fs (loop5): 1 orphan inode deleted
[  417.481981][T24130] loop7: detected capacity change from 0 to 164
[  417.543215][T24135] lo speed is unknown, defaulting to 1000
[  417.606210][T24142] loop6: detected capacity change from 0 to 2048
[  417.657649][T24142] Alternate GPT is invalid, using primary GPT.
[  417.664134][T24142]  loop6: p2 p3 p7
[  417.792177][T24150] 9pnet_fd: p9_fd_create_unix (24150): problem connecting socket: ./file0: -111
[  417.810470][T24152] loop7: detected capacity change from 0 to 1024
[  417.819437][T24152] EXT4-fs: Ignoring removed i_version option
[  417.838681][T24152] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  417.854615][T24152] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.6984: Invalid block bitmap block 0 in block_group 0
[  417.875342][T24152] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.6984: Failed to acquire dquot type 0
[  417.888744][T24152] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.6984: Freeing blocks not in datazone - block = 0, count = 4096
[  417.903214][T24152] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.6984: Invalid inode bitmap blk 0 in block_group 0
[  417.916119][T10076] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0
[  417.929725][T24152] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  417.939010][T24152] EXT4-fs (loop7): 1 orphan inode deleted
[  417.955574][T24158] vlan0: entered allmulticast mode
[  418.006449][T24160] netlink: 'syz.2.6986': attribute type 21 has an invalid length.
[  418.037507][T24165] loop7: detected capacity change from 0 to 2048
[  418.076901][T24165] Alternate GPT is invalid, using primary GPT.
[  418.083365][T24165]  loop7: p2 p3 p7
[  418.270269][T24185] 9pnet_fd: p9_fd_create_unix (24185): problem connecting socket: ./file0: -111
[  418.282954][T24185] 9pnet_fd: Insufficient options for proto=fd
[  418.347081][T24195] loop6: detected capacity change from 0 to 2048
[  418.353582][T24197] loop7: detected capacity change from 0 to 512
[  418.355277][T24197] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  418.368544][T24197] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #13: comm syz.7.7004: iget: bad i_size value: 12154757448730
[  418.381595][T24197] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7004: couldn't read orphan inode 13 (err -117)
[  418.398348][T24197] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  418.410480][T24195] Alternate GPT is invalid, using primary GPT.
[  418.419218][T24195]  loop6: p2 p3 p7
[  418.562849][T24221] loop7: detected capacity change from 0 to 128
[  418.576953][T24224] 9pnet_fd: p9_fd_create_unix (24224): problem connecting socket: ./file0: -111
[  418.595077][T24221] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.645626][T24224] 9pnet_fd: Insufficient options for proto=fd
[  418.743089][T24233] loop6: detected capacity change from 0 to 1024
[  418.749996][T24233] EXT4-fs: Ignoring removed nobh option
[  418.755665][T24233] EXT4-fs: Ignoring removed bh option
[  419.047142][T24243] loop7: detected capacity change from 0 to 512
[  419.057960][T24233] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  419.106343][T24243] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  419.163229][T24233] EXT4-fs (loop6): Remounting filesystem read-only
[  419.186255][T24243] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  419.227290][T24243] System zones: 1-12
[  419.234573][T24243] EXT4-fs (loop7): 1 truncate cleaned up
[  419.246555][T24252] netlink: 'syz.5.7021': attribute type 4 has an invalid length.
[  419.338413][T24264] loop2: detected capacity change from 0 to 128
[  419.346374][T24264] FAT-fs (loop2): bogus number of reserved sectors
[  419.352933][T24264] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  419.362318][T24264] FAT-fs (loop2): Can't find a valid FAT filesystem
[  419.495130][   T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[  419.506334][T24282] lo speed is unknown, defaulting to 1000
[  419.543505][   T29] kauditd_printk_skb: 2007 callbacks suppressed
[  419.543550][   T29] audit: type=1326 audit(1750641373.525:39616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.593067][   T29] audit: type=1326 audit(1750641373.555:39617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6be2c58e7 code=0x7ffc0000
[  419.616635][   T29] audit: type=1326 audit(1750641373.555:39618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6be26ab19 code=0x7ffc0000
[  419.616679][   T29] audit: type=1326 audit(1750641373.555:39619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.616722][   T29] audit: type=1326 audit(1750641373.555:39620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.616797][   T29] audit: type=1326 audit(1750641373.555:39621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.616838][   T29] audit: type=1326 audit(1750641373.555:39622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.616869][   T29] audit: type=1326 audit(1750641373.555:39623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  419.616901][   T29] audit: type=1326 audit(1750641373.565:39624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6be2c58e7 code=0x7ffc0000
[  419.616933][   T29] audit: type=1326 audit(1750641373.565:39625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24275 comm="syz.6.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6be26ab19 code=0x7ffc0000
[  419.936655][T24295] program syz.7.7034 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.067695][T24311] netlink: 'syz.0.7038': attribute type 4 has an invalid length.
[  420.360593][T24343] loop6: detected capacity change from 0 to 512
[  420.375019][T24343] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  420.384429][T24343] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7049: invalid indirect mapped block 2683928664 (level 1)
[  420.416711][T24343] EXT4-fs (loop6): Remounting filesystem read-only
[  420.430237][T24343] EXT4-fs (loop6): 1 truncate cleaned up
[  420.437718][T24349] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.453936][T24350] siw: device registration error -23
[  420.462998][T24350] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  420.708657][T24358] loop7: detected capacity change from 0 to 128
[  420.718669][T24358] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  420.992589][T24397] netlink: 'syz.7.7068': attribute type 4 has an invalid length.
[  421.116669][T24407] rdma_rxe: rxe_newlink: failed to add lo
[  421.522841][T24430] loop6: detected capacity change from 0 to 1024
[  421.538650][T24430] EXT4-fs: Ignoring removed i_version option
[  421.546617][T24430] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  421.559167][T24430] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7077: Invalid block bitmap block 0 in block_group 0
[  421.565510][T24436] netlink: 'syz.5.7080': attribute type 4 has an invalid length.
[  421.572985][T24430] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7077: Failed to acquire dquot type 0
[  421.593221][T24430] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.7077: Freeing blocks not in datazone - block = 0, count = 4096
[  421.614258][T24430] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7077: Invalid inode bitmap blk 0 in block_group 0
[  421.634236][   T51] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  421.651526][T24430] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  421.660345][T24430] EXT4-fs (loop6): 1 orphan inode deleted
[  421.680753][T24453] loop7: detected capacity change from 0 to 512
[  421.698306][T24453] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  421.716621][T24453] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  421.726011][T24453] System zones: 1-12
[  421.797638][T24453] EXT4-fs (loop7): 1 truncate cleaned up
[  422.037868][T24477] loop5: detected capacity change from 0 to 128
[  422.054570][T24477] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.164675][T24502] loop5: detected capacity change from 0 to 1024
[  422.185481][T24494] __nla_validate_parse: 14 callbacks suppressed
[  422.185499][T24494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7097'.
[  422.215491][T24502] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  422.237040][T24502] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  422.249358][T24502] EXT4-fs (loop5): This should not happen!! Data will be lost
[  422.249358][T24502] 
[  422.252651][T24513] loop2: detected capacity change from 0 to 164
[  422.259116][T24502] EXT4-fs (loop5): Total free blocks count 0
[  422.259135][T24502] EXT4-fs (loop5): Free/Dirty block details
[  422.277337][T24502] EXT4-fs (loop5): free_blocks=68451041280
[  422.283202][T24502] EXT4-fs (loop5): dirty_blocks=16
[  422.288362][T24502] EXT4-fs (loop5): Block reservation details
[  422.294448][T24502] EXT4-fs (loop5): i_reserved_data_blocks=1
[  422.313040][T24515] 9pnet_fd: p9_fd_create_unix (24515): problem connecting socket: ./file0: -111
[  422.467317][T24532] loop2: detected capacity change from 0 to 1024
[  422.484807][T24532] EXT4-fs: Ignoring removed i_version option
[  422.491389][T24532] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  422.494192][T24538] loop5: detected capacity change from 0 to 164
[  422.506343][T24532] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7113: Invalid block bitmap block 0 in block_group 0
[  422.536390][T24532] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7113: Failed to acquire dquot type 0
[  422.554768][T24532] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7113: Freeing blocks not in datazone - block = 0, count = 4096
[  422.568537][T24532] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7113: Invalid inode bitmap blk 0 in block_group 0
[  422.585504][T24532] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  422.593876][T10128] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0
[  422.594335][T24532] EXT4-fs (loop2): 1 orphan inode deleted
[  422.672798][T24551] loop7: detected capacity change from 0 to 512
[  422.690884][T24551] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  422.703503][T24551] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #13: comm syz.7.7122: iget: bad i_size value: 12154757448730
[  422.716736][T24551] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7122: couldn't read orphan inode 13 (err -117)
[  422.738051][T24551] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  422.753223][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7123'.
[  422.829365][T24565] vlan0: entered allmulticast mode
[  422.833587][T24573] loop2: detected capacity change from 0 to 512
[  422.890522][T24575] netlink: 'syz.5.7127': attribute type 21 has an invalid length.
[  422.898518][T24575] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7127'.
[  422.907685][T24575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7127'.
[  423.012089][T24583] loop6: detected capacity change from 0 to 512
[  423.019974][T24581] loop2: detected capacity change from 0 to 512
[  423.038485][T24583] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  423.040902][T24581] EXT4-fs: Ignoring removed orlov option
[  423.054467][T24581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  423.063126][T24583] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.7133: iget: bad i_size value: 12154757448730
[  423.080621][T24581] EXT4-fs (loop2): orphan cleanup on readonly fs
[  423.094715][T24581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7130: bg 0: block 248: padding at end of block bitmap is not set
[  423.114178][T24583] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7133: couldn't read orphan inode 13 (err -117)
[  423.118293][T24581] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7130: Failed to acquire dquot type 1
[  423.139170][T24581] EXT4-fs (loop2): 1 truncate cleaned up
[  423.146972][T24583] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  423.181603][T24581] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  423.216060][T24581] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  423.233446][T24581] ext4 filesystem being remounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  423.250776][T24596] bond0: (slave dummy0): Releasing backup interface
[  423.284999][T24596] bond0: (slave bond_slave_0): Releasing backup interface
[  423.311611][T24596] bond0: (slave bond_slave_1): Releasing backup interface
[  423.354077][T24596] team0: Port device team_slave_0 removed
[  423.374113][T24596] team0: Port device team_slave_1 removed
[  423.475724][T24613] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  423.650645][T24637] 9pnet_fd: p9_fd_create_unix (24637): problem connecting socket: ./file0: -111
[  423.711216][T24644] loop2: detected capacity change from 0 to 1024
[  423.718545][T24644] EXT4-fs: Ignoring removed i_version option
[  423.742208][T24644] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  423.767307][T24647] lo speed is unknown, defaulting to 1000
[  423.806337][T24644] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7154: Invalid block bitmap block 0 in block_group 0
[  423.823665][T24644] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7154: Failed to acquire dquot type 0
[  423.852272][T24644] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7154: Freeing blocks not in datazone - block = 0, count = 4096
[  423.875502][T24644] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7154: Invalid inode bitmap blk 0 in block_group 0
[  423.888614][T24644] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  423.899027][T10104] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0
[  423.899033][T24644] EXT4-fs (loop2): 1 orphan inode deleted
[  423.939414][T24660] loop5: detected capacity change from 0 to 128
[  423.980518][T24660] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.055971][T24672] loop2: detected capacity change from 0 to 128
[  424.071362][T24672] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.082535][T24668] lo speed is unknown, defaulting to 1000
[  424.469488][T24693] lo speed is unknown, defaulting to 1000
[  424.553435][   T29] kauditd_printk_skb: 637 callbacks suppressed
[  424.553453][   T29] audit: type=1326 audit(1750641378.515:40252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.581940][T24701] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  424.583333][   T29] audit: type=1326 audit(1750641378.515:40253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.615792][   T29] audit: type=1326 audit(1750641378.515:40254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8055d290 code=0x7ffc0000
[  424.628293][T24703] loop7: detected capacity change from 0 to 1024
[  424.639433][   T29] audit: type=1326 audit(1750641378.515:40255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8055d290 code=0x7ffc0000
[  424.669488][   T29] audit: type=1326 audit(1750641378.515:40256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.671208][T24706] loop6: detected capacity change from 0 to 128
[  424.693087][   T29] audit: type=1326 audit(1750641378.515:40257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.723027][   T29] audit: type=1326 audit(1750641378.515:40258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.746692][   T29] audit: type=1326 audit(1750641378.515:40259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.770450][   T29] audit: type=1326 audit(1750641378.515:40260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8055e929 code=0x7ffc0000
[  424.794052][   T29] audit: type=1326 audit(1750641378.515:40261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24690 comm="syz.0.7172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8055d290 code=0x7ffc0000
[  424.811843][T24711] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  424.830616][T24703] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  424.857408][T24706] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  424.896633][T24712] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  424.908964][T24712] EXT4-fs (loop7): This should not happen!! Data will be lost
[  424.908964][T24712] 
[  424.918643][T24712] EXT4-fs (loop7): Total free blocks count 0
[  424.924666][T24712] EXT4-fs (loop7): Free/Dirty block details
[  424.930674][T24712] EXT4-fs (loop7): free_blocks=68451041280
[  424.936575][T24712] EXT4-fs (loop7): dirty_blocks=16
[  424.941902][T24712] EXT4-fs (loop7): Block reservation details
[  424.947980][T24712] EXT4-fs (loop7): i_reserved_data_blocks=1
[  425.100202][T24717] loop6: detected capacity change from 0 to 512
[  425.138847][T24717] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  425.168811][T24717] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7180: invalid indirect mapped block 2683928664 (level 1)
[  425.224283][T24717] EXT4-fs (loop6): Remounting filesystem read-only
[  425.266517][T24717] EXT4-fs (loop6): 1 truncate cleaned up
[  425.315279][T24728] netlink: 'syz.7.7183': attribute type 4 has an invalid length.
[  425.360760][T24733] loop2: detected capacity change from 0 to 164
[  425.499424][T24749] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  425.536707][T24753] syz_tun: entered allmulticast mode
[  425.542571][T24753] syz_tun: left allmulticast mode
[  425.556959][T24757] syz_tun: entered allmulticast mode
[  425.562778][T24757] syz_tun: left allmulticast mode
[  425.591299][T24763] loop5: detected capacity change from 0 to 512
[  425.599379][T24763] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[  425.608539][T24763] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.7195: iget: bad i_size value: 12154757448730
[  425.621902][T24763] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.7195: couldn't read orphan inode 13 (err -117)
[  425.643823][T24763] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  425.678995][T24771] loop5: detected capacity change from 0 to 164
[  425.685990][T24769] lo speed is unknown, defaulting to 1000
[  425.875746][T24785] syz_tun: entered allmulticast mode
[  425.881388][T24785] syz_tun: left allmulticast mode
[  426.047446][T24800] lo speed is unknown, defaulting to 1000
[  426.073157][T24805] loop6: detected capacity change from 0 to 164
[  426.243264][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7216'.
[  426.503272][T24837] 9pnet_fd: p9_fd_create_unix (24837): problem connecting socket: ./file0: -111
[  426.718286][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7230'.
[  426.761394][T24860] 9pnet_fd: p9_fd_create_unix (24860): problem connecting socket: ./file0: -111
[  426.834510][T24863] netlink: 'syz.5.7233': attribute type 4 has an invalid length.
[  426.880939][T24869] loop7: detected capacity change from 0 to 128
[  426.889567][T24869] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  426.991153][T24877] lo speed is unknown, defaulting to 1000
[  426.993095][T24879] loop5: detected capacity change from 0 to 512
[  427.026581][T24879] loop5: detected capacity change from 0 to 512
[  427.034457][T24879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  427.045765][T24879] EXT4-fs (loop5): 1 truncate cleaned up
[  427.174413][T24889] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  427.306168][T24907] loop5: detected capacity change from 0 to 512
[  427.313238][T24907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  427.324447][T24907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  427.332381][T24907] System zones: 1-12
[  427.336828][T24907] EXT4-fs (loop5): 1 truncate cleaned up
[  427.459221][T24921] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7254'.
[  427.510888][T24925] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  427.596815][T24935] netlink: 'syz.2.7260': attribute type 4 has an invalid length.
[  428.172618][T24942] lo speed is unknown, defaulting to 1000
[  428.501188][T24956] loop7: detected capacity change from 0 to 128
[  428.511095][T24956] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.642851][T24977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7275'.
[  428.654481][T24981] netlink: 'syz.2.7276': attribute type 4 has an invalid length.
[  429.204567][T25005] lo speed is unknown, defaulting to 1000
[  429.296619][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7287'.
[  429.596019][   T29] kauditd_printk_skb: 863 callbacks suppressed
[  429.596032][   T29] audit: type=1326 audit(1750641383.575:41125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25028 comm="syz.6.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  429.650733][   T29] audit: type=1326 audit(1750641383.615:41126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25028 comm="syz.6.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be2ce929 code=0x7ffc0000
[  429.741419][T25037] siw: device registration error -23
[  429.753755][T25037] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  429.779499][   T29] audit: type=1326 audit(1750641383.715:41127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.803177][   T29] audit: type=1326 audit(1750641383.715:41128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.827004][   T29] audit: type=1326 audit(1750641383.715:41129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.850609][   T29] audit: type=1326 audit(1750641383.715:41130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.874308][   T29] audit: type=1326 audit(1750641383.715:41131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.898051][   T29] audit: type=1326 audit(1750641383.715:41132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.921641][   T29] audit: type=1326 audit(1750641383.715:41133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  429.945241][   T29] audit: type=1326 audit(1750641383.715:41134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25024 comm="syz.2.7293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  430.031944][T25030] lo speed is unknown, defaulting to 1000
[  430.272051][T25066] loop6: detected capacity change from 0 to 1024
[  430.323887][T25066] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  430.350346][T25073] syz_tun: entered allmulticast mode
[  430.357030][T25073] syz_tun: left allmulticast mode
[  430.533833][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.542892][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.558731][T25094] lo speed is unknown, defaulting to 1000
[  430.564639][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.605441][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.614426][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.636635][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.657845][T25104] syz_tun: entered allmulticast mode
[  430.665283][T25104] syz_tun: left allmulticast mode
[  430.683152][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7317'.
[  430.927262][T25132] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  431.052680][T25149] lo speed is unknown, defaulting to 1000
[  431.238662][T25161] openvswitch: netlink: Message has 6 unknown bytes.
[  431.291046][T25161] loop2: detected capacity change from 0 to 1024
[  431.328269][T25161] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  431.367038][T25168] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  431.430057][T25172] loop2: detected capacity change from 0 to 1024
[  431.436882][T25172] EXT4-fs: Ignoring removed i_version option
[  431.444379][T25172] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  431.458695][T25172] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7347: Invalid block bitmap block 0 in block_group 0
[  431.474613][T25172] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7347: Failed to acquire dquot type 0
[  431.497732][T25172] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7347: Freeing blocks not in datazone - block = 0, count = 4096
[  431.511427][T25172] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7347: Invalid inode bitmap blk 0 in block_group 0
[  431.524190][T10066] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0
[  431.538533][T25172] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  431.547282][T25172] EXT4-fs (loop2): 1 orphan inode deleted
[  431.800697][T25192] siw: device registration error -23
[  431.818452][T25192] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  431.875159][T25194] bridge_slave_0: left promiscuous mode
[  431.880930][T25194] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.964724][T25194] bridge_slave_1: left allmulticast mode
[  431.970469][T25194] bridge_slave_1: left promiscuous mode
[  431.976163][T25194] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.052540][T25194] bond0: (slave bond_slave_0): Releasing backup interface
[  432.099747][T25194] bond0: (slave bond_slave_1): Releasing backup interface
[  432.167608][T25194] team0: Port device team_slave_0 removed
[  432.176879][T25194] team0: Port device team_slave_1 removed
[  432.202002][T25201] loop6: detected capacity change from 0 to 8192
[  432.209074][T25194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.216853][T25194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.517381][T25201] FAT-fs (loop6): error, corrupted directory (invalid entries)
[  432.525159][T25201] FAT-fs (loop6): Filesystem has been set read-only
[  432.562714][T25210] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  432.578423][T25217] loop7: detected capacity change from 0 to 1024
[  432.585159][T25217] EXT4-fs: Ignoring removed i_version option
[  432.591687][T25217] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  432.622711][T25217] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7363: Invalid block bitmap block 0 in block_group 0
[  432.632561][T25201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.639724][T25217] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7363: Failed to acquire dquot type 0
[  432.644735][T25201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.664161][T25217] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.7363: Freeing blocks not in datazone - block = 0, count = 4096
[  432.679912][T25222] loop5: detected capacity change from 0 to 128
[  432.687366][T25217] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7363: Invalid inode bitmap blk 0 in block_group 0
[  432.701391][T25222] EXT4-fs mount: 75 callbacks suppressed
[  432.701409][T25222] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  432.719242][  T176] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0
[  432.719596][T25222] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.735846][T25217] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  432.742153][T25222] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  432.753328][T25217] EXT4-fs (loop7): 1 orphan inode deleted
[  432.765946][T25217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.795194][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.970667][T25261] __nla_validate_parse: 2 callbacks suppressed
[  432.970693][T25261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7378'.
[  433.240559][T25307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7393'.
[  433.899576][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7406'.
[  433.995688][T25359] loop2: detected capacity change from 0 to 1024
[  434.002573][T25359] EXT4-fs: Ignoring removed i_version option
[  434.013379][T25359] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  434.035824][T25359] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7409: Invalid block bitmap block 0 in block_group 0
[  434.059806][T25359] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7409: Failed to acquire dquot type 0
[  434.086740][T25359] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7409: Freeing blocks not in datazone - block = 0, count = 4096
[  434.106427][T25359] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7409: Invalid inode bitmap blk 0 in block_group 0
[  434.120618][T25367] IPv6: Can't replace route, no match found
[  434.124742][T10104] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0
[  434.139408][T25359] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  434.148646][T25359] EXT4-fs (loop2): 1 orphan inode deleted
[  434.154894][T25359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.215734][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.248386][T25373] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  434.261440][T25373] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[  434.394952][T25383] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  434.512780][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7418'.
[  434.865524][   T29] kauditd_printk_skb: 320 callbacks suppressed
[  434.865541][   T29] audit: type=1326 audit(1750641388.845:41446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.7.7422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcd3bae929 code=0x0
[  434.970187][T25399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25399 comm=syz.7.7422
[  434.990085][   T29] audit: type=1400 audit(1750641388.965:41447): avc:  denied  { create } for  pid=25397 comm="syz.7.7422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  435.033211][   T29] audit: type=1400 audit(1750641389.005:41448): avc:  denied  { associate } for  pid=25400 comm="syz.0.7423" name="352" dev="tmpfs" ino=1886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  435.071941][   T29] audit: type=1400 audit(1750641389.045:41449): avc:  denied  { remove_name } for  pid=20401 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  435.099310][   T29] audit: type=1400 audit(1750641389.045:41450): avc:  denied  { rmdir } for  pid=20401 comm="syz-executor" name="352" dev="tmpfs" ino=1886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  435.145317][T25407] syz_tun: entered allmulticast mode
[  435.150955][T25407] syz_tun: left allmulticast mode
[  435.181082][   T29] audit: type=1326 audit(1750641389.155:41451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  435.204779][   T29] audit: type=1326 audit(1750641389.155:41452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  435.228486][   T29] audit: type=1326 audit(1750641389.155:41453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  435.252146][   T29] audit: type=1326 audit(1750641389.155:41454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  435.275885][   T29] audit: type=1326 audit(1750641389.155:41455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25410 comm="syz.5.7428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  435.402588][T25426] lo speed is unknown, defaulting to 1000
[  435.403145][T25424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7434'.
[  435.433714][T25428] lo speed is unknown, defaulting to 1000
[  435.615188][T25441] lo speed is unknown, defaulting to 1000
[  435.795765][T25459] netlink: 'syz.5.7446': attribute type 21 has an invalid length.
[  435.804448][T25459] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7446'.
[  435.982247][T25476] netlink: 'syz.2.7453': attribute type 3 has an invalid length.
[  435.997912][T25476] vlan0: entered allmulticast mode
[  436.046340][T25480] netlink: 'syz.2.7453': attribute type 21 has an invalid length.
[  436.072894][T25480] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7453'.
[  436.082199][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7453'.
[  436.156482][T25481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7447'.
[  436.270687][T25493] syz_tun: entered allmulticast mode
[  436.274538][T25495] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  436.277121][T25493] syz_tun: left allmulticast mode
[  436.329085][T25503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7464'.
[  436.357749][T25506] netlink: 'syz.2.7466': attribute type 3 has an invalid length.
[  436.372177][T25506] vlan0: entered allmulticast mode
[  436.416136][T25506] netlink: 'syz.2.7466': attribute type 21 has an invalid length.
[  436.477690][T25520] loop6: detected capacity change from 0 to 1024
[  436.484443][T25520] EXT4-fs: Ignoring removed i_version option
[  436.490893][T25520] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  436.502671][T25520] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7472: Invalid block bitmap block 0 in block_group 0
[  436.517615][T25520] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7472: Failed to acquire dquot type 0
[  436.529758][T25520] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.7472: Freeing blocks not in datazone - block = 0, count = 4096
[  436.536749][T25523] syz_tun: entered allmulticast mode
[  436.549417][T25520] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7472: Invalid inode bitmap blk 0 in block_group 0
[  436.551805][T25523] syz_tun: left allmulticast mode
[  436.567422][   T51] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0
[  436.579797][T25520] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem
[  436.599574][T25520] EXT4-fs (loop6): 1 orphan inode deleted
[  436.611979][T25520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  436.669471][T25527] loop2: detected capacity change from 0 to 1024
[  436.695958][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.828010][T25527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.852624][T25544] netlink: 'syz.5.7482': attribute type 3 has an invalid length.
[  436.924189][T25546] siw: device registration error -23
[  436.937190][T25546] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  437.048843][T25527] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  437.109250][T25548] vlan0: entered allmulticast mode
[  437.155190][T25551] netlink: 'syz.5.7482': attribute type 21 has an invalid length.
[  437.247853][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.272817][T25557] loop5: detected capacity change from 0 to 1024
[  437.280915][T25557] EXT4-fs: Ignoring removed orlov option
[  437.286865][T25555] lo speed is unknown, defaulting to 1000
[  437.312928][T25560] syz_tun: entered allmulticast mode
[  437.331902][T25557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.338132][T25560] syz_tun: left allmulticast mode
[  437.350021][T25557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.547396][T25582] loop2: detected capacity change from 0 to 1024
[  437.567241][T25582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.609933][T25582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  437.640162][T25589] loop5: detected capacity change from 0 to 512
[  437.647888][T25589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  437.667934][T25589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  437.676173][T25589] System zones: 1-12
[  437.680595][T25589] EXT4-fs (loop5): 1 truncate cleaned up
[  437.690005][T25589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.719344][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.814770][T25605] syz_tun: entered allmulticast mode
[  437.820451][T25605] syz_tun: left allmulticast mode
[  437.865766][T25610] loop2: detected capacity change from 0 to 512
[  437.873560][T25610] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  437.881888][T25610] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.7501: iget: bad i_size value: 12154757448730
[  437.894881][T25610] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7501: couldn't read orphan inode 13 (err -117)
[  437.907392][T25610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  437.922251][T25610] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  437.949269][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.075266][T25619] __nla_validate_parse: 4 callbacks suppressed
[  438.075285][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'.
[  438.212476][T25629] netlink: 'syz.2.7508': attribute type 3 has an invalid length.
[  438.228761][T25629] vlan0: entered allmulticast mode
[  438.275442][T25629] netlink: 'syz.2.7508': attribute type 21 has an invalid length.
[  438.284528][T25629] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7508'.
[  438.293669][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7508'.
[  438.338369][T25631] loop2: detected capacity change from 0 to 128
[  438.348037][T25631] loop2: detected capacity change from 0 to 256
[  438.354849][T25631] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  438.367381][T25631] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  438.487632][T25645] loop2: detected capacity change from 0 to 128
[  438.495731][T25645] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  438.511297][T25645] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.526046][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  438.536080][T25645] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  438.568913][T25654] loop2: detected capacity change from 0 to 512
[  438.572195][T25650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7517'.
[  438.578193][T25654] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  438.603775][T25654] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.7519: invalid indirect mapped block 2683928664 (level 1)
[  438.643644][T25654] EXT4-fs (loop2): Remounting filesystem read-only
[  438.652184][T25654] EXT4-fs (loop2): 1 truncate cleaned up
[  438.664212][T25654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.949014][T25672] loop7: detected capacity change from 0 to 1024
[  438.974832][T25672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  438.997464][T25672] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  439.013349][T25672] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  439.025788][T25672] EXT4-fs (loop7): This should not happen!! Data will be lost
[  439.025788][T25672] 
[  439.035590][T25672] EXT4-fs (loop7): Total free blocks count 0
[  439.041576][T25672] EXT4-fs (loop7): Free/Dirty block details
[  439.047496][T25672] EXT4-fs (loop7): free_blocks=68451041280
[  439.053301][T25672] EXT4-fs (loop7): dirty_blocks=16
[  439.058479][T25672] EXT4-fs (loop7): Block reservation details
[  439.064482][T25672] EXT4-fs (loop7): i_reserved_data_blocks=1
[  439.081732][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.133388][T25680] IPv6: Can't replace route, no match found
[  439.241485][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7530'.
[  439.408939][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.480190][T25701] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  439.596653][T25712] lo speed is unknown, defaulting to 1000
[  439.644677][T25716] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7541'.
[  439.688303][T25721] loop5: detected capacity change from 0 to 512
[  439.710936][T25721] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  439.730863][T25721] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.7543: invalid indirect mapped block 2683928664 (level 1)
[  439.821631][T25721] EXT4-fs (loop5): Remounting filesystem read-only
[  439.853513][T25721] EXT4-fs (loop5): 1 truncate cleaned up
[  439.862968][T25730] netlink: 'syz.2.7546': attribute type 3 has an invalid length.
[  439.872529][T25721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  439.919835][T25730] vlan0: entered allmulticast mode
[  439.949522][T25733] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7546'.
[  439.958627][T25733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7546'.
[  440.053755][T25738] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  440.077948][T25740] loop2: detected capacity change from 0 to 128
[  440.085790][T25740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  440.098205][T25740] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.109560][T25740] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  440.251827][   T29] kauditd_printk_skb: 637 callbacks suppressed
[  440.251842][   T29] audit: type=1326 audit(1750641394.225:42090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.282595][   T29] audit: type=1326 audit(1750641394.225:42091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.306275][   T29] audit: type=1326 audit(1750641394.225:42092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.329969][   T29] audit: type=1326 audit(1750641394.225:42093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.353606][   T29] audit: type=1326 audit(1750641394.225:42094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.377372][   T29] audit: type=1326 audit(1750641394.225:42095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.401118][   T29] audit: type=1326 audit(1750641394.225:42096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.424828][   T29] audit: type=1326 audit(1750641394.225:42097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25751 comm="syz.2.7554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  440.454021][T25754] loop2: detected capacity change from 0 to 512
[  440.469197][T25754] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  440.484976][T25754] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.7555: iget: bad i_size value: 12154757448730
[  440.498641][T25754] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7555: couldn't read orphan inode 13 (err -117)
[  440.511910][T25754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.529303][T25754] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  440.564508][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.588055][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.815460][   T29] audit: type=1326 audit(1750641394.765:42098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz.5.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  440.839092][   T29] audit: type=1326 audit(1750641394.765:42099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz.5.7559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7c104e929 code=0x7ffc0000
[  440.868898][T25779] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  441.299165][T25799] loop6: detected capacity change from 0 to 1024
[  441.318478][T25799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.364627][T25799] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  441.427602][T25811] loop7: detected capacity change from 0 to 512
[  441.435543][T25811] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  441.448433][T25811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  441.457130][T25811] System zones: 1-12
[  441.459528][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.470268][T25811] EXT4-fs (loop7): 1 truncate cleaned up
[  441.476658][T25811] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.495843][T25814] loop6: detected capacity change from 0 to 128
[  441.551679][T25814] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  441.565296][T25814] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.576531][T25814] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  441.616916][T25822] loop6: detected capacity change from 0 to 512
[  441.625162][T25822] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  441.634403][T25822] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #13: comm syz.6.7580: iget: bad i_size value: 12154757448730
[  441.647792][T25822] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.7580: couldn't read orphan inode 13 (err -117)
[  441.661780][T25822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.677670][T25822] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  441.703932][T25826] lo speed is unknown, defaulting to 1000
[  441.710777][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.747068][T25828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7582'.
[  441.966720][T25839] loop2: detected capacity change from 0 to 1024
[  441.973483][T25839] EXT4-fs: Ignoring removed i_version option
[  441.980244][T25839] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  441.992344][T25839] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7586: Invalid block bitmap block 0 in block_group 0
[  442.006544][T25839] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7586: Failed to acquire dquot type 0
[  442.018777][T25839] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7586: Freeing blocks not in datazone - block = 0, count = 4096
[  442.032654][T25839] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7586: Invalid inode bitmap blk 0 in block_group 0
[  442.047687][T25842] IPv6: Can't replace route, no match found
[  442.048456][T25839] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  442.062169][T10076] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0
[  442.075387][T25839] EXT4-fs (loop2): 1 orphan inode deleted
[  442.081645][T25839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.109131][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.129361][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7591'.
[  442.324319][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.506659][T25877] siw: device registration error -23
[  442.517431][T25877] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  442.864552][T25879] IPv6: Can't replace route, no match found
[  442.989447][T25896] loop5: detected capacity change from 0 to 512
[  443.002079][T25896] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  443.076610][T25896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  443.135224][T25904] FAULT_INJECTION: forcing a failure.
[  443.135224][T25904] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.148409][T25904] CPU: 1 UID: 0 PID: 25904 Comm: syz.7.7610 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  443.148524][T25904] Tainted: [W]=WARN
[  443.148533][T25904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  443.148548][T25904] Call Trace:
[  443.148556][T25904]  <TASK>
[  443.148562][T25904]  __dump_stack+0x1d/0x30
[  443.148581][T25904]  dump_stack_lvl+0xe8/0x140
[  443.148599][T25904]  dump_stack+0x15/0x1b
[  443.148682][T25904]  should_fail_ex+0x265/0x280
[  443.148776][T25904]  should_fail+0xb/0x20
[  443.148850][T25904]  should_fail_usercopy+0x1a/0x20
[  443.148878][T25904]  _copy_from_user+0x1c/0xb0
[  443.148896][T25904]  ___sys_sendmsg+0xc1/0x1d0
[  443.149041][T25904]  __x64_sys_sendmsg+0xd4/0x160
[  443.149116][T25904]  x64_sys_call+0x2999/0x2fb0
[  443.149134][T25904]  do_syscall_64+0xd2/0x200
[  443.149193][T25904]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  443.149220][T25904]  ? clear_bhb_loop+0x40/0x90
[  443.149244][T25904]  ? clear_bhb_loop+0x40/0x90
[  443.149269][T25904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.149287][T25904] RIP: 0033:0x7fbcd3bae929
[  443.149382][T25904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  443.149398][T25904] RSP: 002b:00007fbcd2217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.149415][T25904] RAX: ffffffffffffffda RBX: 00007fbcd3dd5fa0 RCX: 00007fbcd3bae929
[  443.149430][T25904] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  443.149459][T25904] RBP: 00007fbcd2217090 R08: 0000000000000000 R09: 0000000000000000
[  443.149471][T25904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.149483][T25904] R13: 0000000000000000 R14: 00007fbcd3dd5fa0 R15: 00007fffd59b5d28
[  443.149502][T25904]  </TASK>
[  443.149988][T25896] System zones: 1-12
[  443.432481][T25896] EXT4-fs (loop5): 1 truncate cleaned up
[  443.440499][T25896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  443.931934][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.028781][T25924] loop5: detected capacity change from 0 to 1024
[  444.053323][T25924] EXT4-fs: Ignoring removed i_version option
[  444.074607][T25924] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  444.103565][T25924] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7615: Invalid block bitmap block 0 in block_group 0
[  444.120450][T25924] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7615: Failed to acquire dquot type 0
[  444.142247][T25924] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.7615: Freeing blocks not in datazone - block = 0, count = 4096
[  444.162926][T25924] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7615: Invalid inode bitmap blk 0 in block_group 0
[  444.176770][T10067] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0
[  444.188489][T25924] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  444.198138][T25924] EXT4-fs (loop5): 1 orphan inode deleted
[  444.204728][T25924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.231160][T17868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.019556][T25973] IPv6: Can't replace route, no match found
[  445.260435][   T29] kauditd_printk_skb: 196 callbacks suppressed
[  445.260452][   T29] audit: type=1400 audit(1750641399.235:42290): avc:  denied  { setopt } for  pid=25991 comm="syz.2.7641" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  445.260484][T25992] syz_tun: entered allmulticast mode
[  445.296313][T25992] syz_tun: left allmulticast mode
[  445.341695][T25994] validate_nla: 1 callbacks suppressed
[  445.341710][T25994] netlink: 'syz.2.7642': attribute type 3 has an invalid length.
[  445.359396][   T29] audit: type=1326 audit(1750641399.335:42291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.7.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd3bae929 code=0x7ffc0000
[  445.383137][   T29] audit: type=1326 audit(1750641399.335:42292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.7.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd3bae929 code=0x7ffc0000
[  445.406998][   T29] audit: type=1326 audit(1750641399.335:42293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.7.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbcd3bae929 code=0x7ffc0000
[  445.430623][   T29] audit: type=1400 audit(1750641399.335:42294): avc:  denied  { tracepoint } for  pid=25978 comm="syz.7.7635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  445.454476][T25996] siw: device registration error -23
[  445.462994][T25996] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  445.490386][T25997] vlan0: entered allmulticast mode
[  445.536757][T25994] netlink: 'syz.2.7642': attribute type 21 has an invalid length.
[  445.563208][T25994] __nla_validate_parse: 1 callbacks suppressed
[  445.563227][T25994] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7642'.
[  445.578655][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7642'.
[  445.795180][   T29] audit: type=1400 audit(1750641399.435:42295): avc:  denied  { write } for  pid=25978 comm="syz.7.7635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  445.815805][   T29] audit: type=1326 audit(1750641399.455:42296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.7.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd3bae929 code=0x7ffc0000
[  445.839499][   T29] audit: type=1326 audit(1750641399.455:42297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25978 comm="syz.7.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd3bae929 code=0x7ffc0000
[  445.863136][   T29] audit: type=1400 audit(1750641399.455:42298): avc:  denied  { append } for  pid=25993 comm="syz.2.7642" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  445.887131][   T29] audit: type=1400 audit(1750641399.455:42299): avc:  denied  { create } for  pid=25993 comm="syz.2.7642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  446.014192][T26003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7645'.
[  446.048349][T26009] loop2: detected capacity change from 0 to 512
[  446.060998][T26009] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  446.099729][T26014] IPv6: Can't replace route, no match found
[  446.108636][T26009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  446.116687][T26019] loop6: detected capacity change from 0 to 1024
[  446.123393][T26009] System zones: 1-12
[  446.129278][T26009] EXT4-fs (loop2): 1 truncate cleaned up
[  446.137119][T26019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.148838][T26009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.163456][T26026] $Hÿ: renamed from bond0 (while UP)
[  446.171333][T26026] $Hÿ: entered promiscuous mode
[  446.176516][T26026] bond_slave_0: entered promiscuous mode
[  446.182280][T26026] bond_slave_1: entered promiscuous mode
[  446.216063][T26019] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  446.234712][T26019] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  446.246969][T26019] EXT4-fs (loop6): This should not happen!! Data will be lost
[  446.246969][T26019] 
[  446.256636][T26019] EXT4-fs (loop6): Total free blocks count 0
[  446.262704][T26019] EXT4-fs (loop6): Free/Dirty block details
[  446.268635][T26019] EXT4-fs (loop6): free_blocks=68451041280
[  446.274468][T26019] EXT4-fs (loop6): dirty_blocks=16
[  446.279594][T26019] EXT4-fs (loop6): Block reservation details
[  446.285616][T26019] EXT4-fs (loop6): i_reserved_data_blocks=1
[  446.370024][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.951618][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.969198][T26038] loop7: detected capacity change from 0 to 128
[  446.990665][T26038] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  447.022215][T26041] loop2: detected capacity change from 0 to 1024
[  447.033664][T26038] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.057602][T26038] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  447.068412][T26041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  447.190164][T26045] loop7: detected capacity change from 0 to 512
[  447.222163][T26045] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -13
[  447.239053][T26045] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #13: comm syz.7.7662: iget: bad i_size value: 12154757448730
[  447.298093][T26041] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  447.325950][T26045] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7662: couldn't read orphan inode 13 (err -117)
[  447.347850][T26045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.371254][T26041] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  447.383596][T26041] EXT4-fs (loop2): This should not happen!! Data will be lost
[  447.383596][T26041] 
[  447.386365][T26045] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, 
[  447.393220][T26041] EXT4-fs (loop2): Total free blocks count 0
[  447.393241][T26041] EXT4-fs (loop2): Free/Dirty block details
[  447.401543][T26045] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  447.407669][T26041] EXT4-fs (loop2): free_blocks=68451041280
[  447.427890][T26041] EXT4-fs (loop2): dirty_blocks=16
[  447.433019][T26041] EXT4-fs (loop2): Block reservation details
[  447.439126][T26041] EXT4-fs (loop2): i_reserved_data_blocks=1
[  447.536155][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.594445][T26056] syz_tun: entered allmulticast mode
[  447.616511][T26056] syz_tun: left allmulticast mode
[  447.658710][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.688951][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7671'.
[  448.075719][T26110] siw: device registration error -23
[  448.131640][T26114] FAULT_INJECTION: forcing a failure.
[  448.131640][T26114] name failslab, interval 1, probability 0, space 0, times 0
[  448.144404][T26114] CPU: 1 UID: 0 PID: 26114 Comm: syz.0.7688 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  448.144444][T26114] Tainted: [W]=WARN
[  448.144450][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  448.144462][T26114] Call Trace:
[  448.144472][T26114]  <TASK>
[  448.144481][T26114]  __dump_stack+0x1d/0x30
[  448.144507][T26114]  dump_stack_lvl+0xe8/0x140
[  448.144531][T26114]  dump_stack+0x15/0x1b
[  448.144550][T26114]  should_fail_ex+0x265/0x280
[  448.144591][T26114]  ? __se_sys_mount+0xef/0x2e0
[  448.144614][T26114]  should_failslab+0x8c/0xb0
[  448.144640][T26114]  __kmalloc_cache_noprof+0x4c/0x320
[  448.144698][T26114]  ? memdup_user+0x99/0xd0
[  448.144723][T26114]  __se_sys_mount+0xef/0x2e0
[  448.144741][T26114]  ? trace_reschedule_exit+0xd/0xc0
[  448.144789][T26114]  __x64_sys_mount+0x67/0x80
[  448.144811][T26114]  x64_sys_call+0xd36/0x2fb0
[  448.144910][T26114]  do_syscall_64+0xd2/0x200
[  448.144932][T26114]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  448.144968][T26114]  ? clear_bhb_loop+0x40/0x90
[  448.144986][T26114]  ? clear_bhb_loop+0x40/0x90
[  448.145011][T26114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.145036][T26114] RIP: 0033:0x7f6f8055e929
[  448.145119][T26114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.145137][T26114] RSP: 002b:00007f6f7ebc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  448.145154][T26114] RAX: ffffffffffffffda RBX: 00007f6f80785fa0 RCX: 00007f6f8055e929
[  448.145164][T26114] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000
[  448.145183][T26114] RBP: 00007f6f7ebc7090 R08: 0000200000000280 R09: 0000000000000000
[  448.145197][T26114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  448.145212][T26114] R13: 0000000000000000 R14: 00007f6f80785fa0 R15: 00007ffe6df2e6f8
[  448.145245][T26114]  </TASK>
[  448.410835][T26119] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7690'.
[  448.576827][T26131] tc_dump_action: action bad kind
[  448.787298][T26144] loop7: detected capacity change from 0 to 1024
[  448.793985][T26144] EXT4-fs: Ignoring removed i_version option
[  448.800269][T26144] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  448.817966][T26144] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7700: Invalid block bitmap block 0 in block_group 0
[  448.831797][T26144] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7700: Failed to acquire dquot type 0
[  448.844353][T26144] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.7700: Freeing blocks not in datazone - block = 0, count = 4096
[  448.863086][T26144] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7700: Invalid inode bitmap blk 0 in block_group 0
[  448.876067][T10084] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 0
[  448.876727][T26144] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem
[  448.896494][T26149] loop6: detected capacity change from 0 to 512
[  448.903152][T26144] EXT4-fs (loop7): 1 orphan inode deleted
[  448.909701][T26149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  448.919709][T26144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.935102][T26149] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  448.944609][T26149] System zones: 0-2, 18-18, 34-34
[  448.951682][T26149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.966565][T26149] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.977921][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.988528][T26158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7703'.
[  449.075602][T18240] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.086627][T26167] $Hÿ: renamed from bond0 (while UP)
[  449.087172][T26164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7706'.
[  449.103489][T26167] $Hÿ: entered promiscuous mode
[  449.162093][T26177] loop6: detected capacity change from 0 to 128
[  449.174517][T26179] loop7: detected capacity change from 0 to 512
[  449.183534][T26179] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  449.191749][T26179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7711: invalid indirect mapped block 2683928664 (level 1)
[  449.206765][T26179] EXT4-fs (loop7): Remounting filesystem read-only
[  449.213481][T26179] EXT4-fs (loop7): 1 truncate cleaned up
[  449.219846][T26179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.233142][T26177] SELinux: ebitmap: truncated map
[  449.240050][T26177] SELinux: failed to load policy
[  449.246651][T26182] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  449.277857][T26186] loop2: detected capacity change from 0 to 512
[  449.284790][T26186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  449.295464][T26186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  449.303470][T26186] System zones: 1-12
[  449.307780][T26186] EXT4-fs (loop2): 1 truncate cleaned up
[  449.314419][T26186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.388385][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7717'.
[  449.397503][T26195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.412928][T26195] batman_adv: batadv0: Removing interface: batadv_slave_1
[  449.579077][T26215] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  450.013521][T18332] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.069248][T26226] loop7: detected capacity change from 0 to 512
[  450.077137][T26226] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  450.085412][T26226] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.7729: invalid indirect mapped block 2683928664 (level 1)
[  450.099579][T26226] EXT4-fs (loop7): Remounting filesystem read-only
[  450.106196][T26226] EXT4-fs (loop7): 1 truncate cleaned up
[  450.112416][T26226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.156956][T19882] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.176215][T26231] loop2: detected capacity change from 0 to 512
[  450.184313][T26231] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  450.192904][T26231] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.7731: iget: bad i_size value: 12154757448730
[  450.206443][T26231] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7731: couldn't read orphan inode 13 (err -117)
[  450.219207][T26231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.235859][T26231] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  450.242413][T26235] loop5: detected capacity change from 0 to 1024
[  450.276832][   T29] kauditd_printk_skb: 163 callbacks suppressed
[  450.276847][   T29] audit: type=1326 audit(1750641404.255:42460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.307085][T26239] loop2: detected capacity change from 0 to 512
[  450.310887][   T29] audit: type=1326 audit(1750641404.255:42461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.337075][   T29] audit: type=1326 audit(1750641404.255:42462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.360825][   T29] audit: type=1326 audit(1750641404.255:42463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.362460][T26235] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, 
[  450.384528][   T29] audit: type=1326 audit(1750641404.255:42464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.384678][   T29] audit: type=1326 audit(1750641404.255:42465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.392932][T26235] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  450.416483][   T29] audit: type=1326 audit(1750641404.255:42466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.416525][   T29] audit: type=1326 audit(1750641404.255:42467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.456622][T26235] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  450.472515][   T29] audit: type=1326 audit(1750641404.255:42468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.472549][   T29] audit: type=1326 audit(1750641404.255:42469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26238 comm="syz.2.7733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f608724e929 code=0x7ffc0000
[  450.496134][T26235] EXT4-fs (loop5): This should not happen!! Data will be lost
[  450.496134][T26235] 
[  450.565427][T26235] EXT4-fs (loop5): Total free blocks count 0
[  450.565513][T26235] EXT4-fs (loop5): Free/Dirty block details
[  450.565526][T26235] EXT4-fs (loop5): free_blocks=68451041280
[  450.565550][T26235] EXT4-fs (loop5): dirty_blocks=16
[  450.565562][T26235] EXT4-fs (loop5): Block reservation details
[  450.565572][T26235] EXT4-fs (loop5): i_reserved_data_blocks=1
[  450.591719][T26239] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  450.591786][T26239] EXT4-fs (loop2): orphan cleanup on readonly fs
[  450.598050][T26239] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  450.598251][T26239] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  450.598429][T26239] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #16: comm syz.2.7733: iget: immutable or append flags not allowed on symlinks
[  450.598580][T26239] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.7733: couldn't read orphan inode 16 (err -117)
[  450.656822][T26246] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  450.788842][T26258] loop2: detected capacity change from 0 to 512
[  450.800994][T26258] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  450.818423][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7743'.
[  450.847173][T26258] EXT4-fs (loop2): 1 truncate cleaned up
[  450.875513][T26271] loop6: detected capacity change from 0 to 1024
[  450.935150][T26278] lo speed is unknown, defaulting to 1000
[  450.941216][T26280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7750'.
[  450.962584][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7751'.
[  450.972039][T26271] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  450.996043][T26271] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  451.008392][T26271] EXT4-fs (loop6): This should not happen!! Data will be lost
[  451.008392][T26271] 
[  451.018088][T26271] EXT4-fs (loop6): Total free blocks count 0
[  451.024117][T26271] EXT4-fs (loop6): Free/Dirty block details
[  451.030031][T26271] EXT4-fs (loop6): free_blocks=68451041280
[  451.035963][T26271] EXT4-fs (loop6): dirty_blocks=16
[  451.041111][T26271] EXT4-fs (loop6): Block reservation details
[  451.047141][T26271] EXT4-fs (loop6): i_reserved_data_blocks=1
[  451.199657][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7752'.
[  451.277979][T26296] loop7: detected capacity change from 0 to 128
[  451.334935][T26296] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.394675][T26302] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  451.401312][T26302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  451.408998][T26302] vhci_hcd vhci_hcd.0: Device attached
[  451.435389][T26302] lo speed is unknown, defaulting to 1000
[  451.441223][T26302] lo speed is unknown, defaulting to 1000
[  451.450980][T26302] lo speed is unknown, defaulting to 1000
[  451.458670][T26302] infiniband swz0: RDMA CMA: cma_listen_on_dev, error -98
[  451.469480][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7755'.
[  451.474963][T26302] lo speed is unknown, defaulting to 1000
[  451.490413][T26305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.499522][T26302] lo speed is unknown, defaulting to 1000
[  451.504918][T26305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.506293][T26302] lo speed is unknown, defaulting to 1000
[  451.522444][T26302] lo speed is unknown, defaulting to 1000
[  451.532307][T26302] lo speed is unknown, defaulting to 1000
[  451.538789][T26302] lo speed is unknown, defaulting to 1000
[  451.560145][T26303] vhci_hcd: connection closed
[  451.560331][T10108] vhci_hcd: stop threads
[  451.569400][T10108] vhci_hcd: release socket
[  451.573932][T10108] vhci_hcd: disconnect device
[  451.593475][   T10] vhci_hcd: vhci_device speed not set
[  451.667194][T26318] lo speed is unknown, defaulting to 1000
[  451.735296][T26318] lo speed is unknown, defaulting to 1000
[  452.024061][T26336] netlink: 'syz.2.7769': attribute type 3 has an invalid length.
[  452.039586][T26336] vlan0: entered allmulticast mode
[  452.089099][T26336] netlink: 'syz.2.7769': attribute type 21 has an invalid length.
[  452.091863][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7770'.
[  452.097166][T26336] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7769'.
[  452.115045][T26336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7769'.
[  452.200537][T26352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7774'.
[  452.214159][T26358] loop2: detected capacity change from 0 to 1024
[  452.220895][T26358] EXT4-fs: Ignoring removed i_version option
[  452.227566][T26358] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  452.239724][T26358] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7776: Invalid block bitmap block 0 in block_group 0
[  452.253754][T26358] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7776: Failed to acquire dquot type 0
[  452.266814][T26358] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7776: Freeing blocks not in datazone - block = 0, count = 4096
[  452.269574][T26364] netlink: 'syz.0.7778': attribute type 3 has an invalid length.
[  452.281684][T26358] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7776: Invalid inode bitmap blk 0 in block_group 0
[  452.301027][T10108] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0
[  452.313857][T26358] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  452.322484][T26358] EXT4-fs (loop2): 1 orphan inode deleted
[  452.341284][T26366] loop7: detected capacity change from 0 to 128
[  452.349773][T26364] vlan3: entered allmulticast mode
[  452.356429][T26366] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.385148][T26370] netlink: 'syz.0.7778': attribute type 21 has an invalid length.
[  452.394194][T26370] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7778'.
[  452.446524][T26381] loop7: detected capacity change from 0 to 128
[  452.461380][T26381] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.556160][T26400] netlink: 'syz.5.7792': attribute type 3 has an invalid length.
[  452.563778][T26394] lo speed is unknown, defaulting to 1000
[  452.620239][T26400] vlan0: entered allmulticast mode
[  452.634171][T26404] lo speed is unknown, defaulting to 1000
[  452.659019][T26400] netlink: 'syz.5.7792': attribute type 21 has an invalid length.
[  452.680575][T26394] lo speed is unknown, defaulting to 1000
[  452.692759][T26413] lo speed is unknown, defaulting to 1000
[  452.777991][T26404] lo speed is unknown, defaulting to 1000
[  452.867165][T26413] lo speed is unknown, defaulting to 1000
[  452.919817][T26431] Option 'Í'M•O§±' to dns_resolver key: bad/missing value
[  452.962199][T26433] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  452.968763][T26433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  452.976452][T26433] vhci_hcd vhci_hcd.0: Device attached
[  452.985942][T26437] vhci_hcd: connection closed
[  452.986112][T10121] vhci_hcd: stop threads
[  452.995175][T10121] vhci_hcd: release socket
[  452.999664][T10121] vhci_hcd: disconnect device
[  453.585580][T26463] lo speed is unknown, defaulting to 1000
[  453.677411][T26463] lo speed is unknown, defaulting to 1000
[  453.731478][T26469] loop6: detected capacity change from 0 to 8192
[  453.822606][T26473] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  454.341533][T26486] loop2: detected capacity change from 0 to 128
[  454.368389][T26486] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.406543][T26489] lo speed is unknown, defaulting to 1000
[  454.534954][T26489] lo speed is unknown, defaulting to 1000
[  454.548254][T26493] netlink: 'syz.5.7821': attribute type 3 has an invalid length.
[  454.631187][T26493] vlan0: entered allmulticast mode
[  454.672212][T26503] netlink: 'syz.5.7821': attribute type 21 has an invalid length.
[  454.705928][T26509] FAULT_INJECTION: forcing a failure.
[  454.705928][T26509] name failslab, interval 1, probability 0, space 0, times 0
[  454.708216][T26507] lo speed is unknown, defaulting to 1000
[  454.718696][T26509] CPU: 1 UID: 0 PID: 26509 Comm: syz.6.7827 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  454.718768][T26509] Tainted: [W]=WARN
[  454.718776][T26509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  454.718828][T26509] Call Trace:
[  454.718836][T26509]  <TASK>
[  454.718845][T26509]  __dump_stack+0x1d/0x30
[  454.718873][T26509]  dump_stack_lvl+0xe8/0x140
[  454.718898][T26509]  dump_stack+0x15/0x1b
[  454.718918][T26509]  should_fail_ex+0x265/0x280
[  454.719014][T26509]  should_failslab+0x8c/0xb0
[  454.719042][T26509]  kmem_cache_alloc_node_noprof+0x57/0x320
[  454.719079][T26509]  ? __alloc_skb+0x101/0x320
[  454.719160][T26509]  __alloc_skb+0x101/0x320
[  454.719211][T26509]  ? audit_log_start+0x365/0x6c0
[  454.719316][T26509]  audit_log_start+0x380/0x6c0
[  454.719360][T26509]  audit_seccomp+0x48/0x100
[  454.719473][T26509]  ? __seccomp_filter+0x68c/0x10d0
[  454.719501][T26509]  __seccomp_filter+0x69d/0x10d0
[  454.719577][T26509]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  454.719620][T26509]  ? vfs_write+0x75e/0x8e0
[  454.719668][T26509]  __secure_computing+0x82/0x150
[  454.719697][T26509]  syscall_trace_enter+0xcf/0x1e0
[  454.719785][T26509]  do_syscall_64+0xac/0x200
[  454.719809][T26509]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  454.719922][T26509]  ? clear_bhb_loop+0x40/0x90
[  454.720033][T26509]  ? clear_bhb_loop+0x40/0x90
[  454.720122][T26509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.720150][T26509] RIP: 0033:0x7fc6be2ce929
[  454.720171][T26509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.720285][T26509] RSP: 002b:00007fc6bc937038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a
[  454.720309][T26509] RAX: ffffffffffffffda RBX: 00007fc6be4f5fa0 RCX: 00007fc6be2ce929
[  454.720325][T26509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  454.720341][T26509] RBP: 00007fc6bc937090 R08: 0000000000000000 R09: 0000000000000000
[  454.720367][T26509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.720422][T26509] R13: 0000000000000000 R14: 00007fc6be4f5fa0 R15: 00007ffc09a46c48
[  454.720446][T26509]  </TASK>
[  454.897293][T26517] loop6: detected capacity change from 0 to 512
[  454.969536][T26507] lo speed is unknown, defaulting to 1000
[  454.978869][T26519] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO
[  454.989698][T26517] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  455.027601][T26517] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6
[  455.131330][T26531] program syz.5.7835 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  455.164467][T26533] tc_dump_action: action bad kind
[  455.172282][T26533] loop5: detected capacity change from 0 to 512
[  455.191101][T26533] EXT4-fs (loop5): too many log groups per flexible block group
[  455.198932][T26533] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  455.211631][T26533] EXT4-fs (loop5): mount failed
[  455.224139][T26538] loop2: detected capacity change from 0 to 512
[  455.231966][T26543] loop7: detected capacity change from 0 to 128
[  455.233690][T26538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  455.272055][T26543] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  455.292673][T26538] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  455.304529][T26538] System zones: 1-12
[  455.310364][T26538] EXT4-fs (loop2): 1 truncate cleaned up
[  455.328342][T26553] netlink: 'syz.5.7843': attribute type 3 has an invalid length.
[  455.420890][T26553] vlan0: entered allmulticast mode
[  455.469440][T26562] netlink: 'syz.5.7843': attribute type 21 has an invalid length.
[  455.485794][T26565] loop6: detected capacity change from 0 to 256
[  455.502828][T26568] ==================================================================
[  455.503162][T26565] FAT-fs (loop6): bogus sectors per cluster 30
[  455.510926][T26568] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry
[  455.517134][T26565] FAT-fs (loop6): Can't find a valid FAT filesystem
[  455.524625][T26568] 
[  455.524633][T26568] write to 0xffff88810eb01760 of 8 bytes by task 26564 on cpu 0:
[  455.524654][T26568]  mas_wr_store_entry+0x1581/0x2b50
[  455.546512][T26568]  mas_store_prealloc+0x74d/0x9e0
[  455.551566][T26568]  commit_merge+0x6a5/0x730
[  455.556079][T26568]  vma_expand+0x1d0/0x370
[  455.560411][T26568]  vma_merge_new_range+0x296/0x310
[  455.565529][T26568]  mmap_region+0x9fa/0x1580
[  455.570043][T26568]  do_mmap+0x9b3/0xbe0
[  455.574127][T26568]  vm_mmap_pgoff+0x17a/0x2e0
[  455.578730][T26568]  ksys_mmap_pgoff+0xc2/0x310
[  455.583437][T26568]  x64_sys_call+0x1602/0x2fb0
[  455.588129][T26568]  do_syscall_64+0xd2/0x200
[  455.592650][T26568]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.598550][T26568] 
[  455.600875][T26568] read to 0xffff88810eb01760 of 8 bytes by task 26568 on cpu 1:
[  455.608510][T26568]  mas_state_walk+0x2f5/0x650
[  455.613203][T26568]  mas_walk+0x30/0x120
[  455.617292][T26568]  lock_vma_under_rcu+0xa2/0x2f0
[  455.622254][T26568]  do_user_addr_fault+0x233/0x1090
[  455.627392][T26568]  exc_page_fault+0x62/0xa0
[  455.631909][T26568]  asm_exc_page_fault+0x26/0x30
[  455.636765][T26568] 
[  455.639085][T26568] value changed: 0x00007fc6bc8d4fff -> 0x00007fc6bc8b3fff
[  455.646193][T26568] 
[  455.648515][T26568] Reported by Kernel Concurrency Sanitizer on:
[  455.654666][T26568] CPU: 1 UID: 0 PID: 26568 Comm: syz.6.7847 Tainted: G        W           6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) 
[  455.668746][T26568] Tainted: [W]=WARN
[  455.672546][T26568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  455.682605][T26568] ==================================================================