last executing test programs:

9m46.003492842s ago: executing program 32 (id=240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafb0c7d1b1403bb91be0e49e2c1ccb67d26a10058074d", 0x24}, {&(0x7f0000000000)="61a5", 0x2}, {&(0x7f0000000300)="daef6f77ede515b50d08546c7451cf948c71211136", 0x15}], 0x3)

9m36.817794213s ago: executing program 33 (id=398):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x80000001, 0x5}]}}}}}}}, 0x0)

4m54.122748803s ago: executing program 34 (id=4267):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
inotify_init()

4m52.501716192s ago: executing program 35 (id=4284):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

4m52.169135857s ago: executing program 36 (id=4419):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0)

4m26.047031718s ago: executing program 9 (id=4846):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10)
fcntl$notify(r3, 0x402, 0x4)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)

4m25.99963278s ago: executing program 9 (id=4848):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})

4m25.968264791s ago: executing program 9 (id=4849):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
acct(&(0x7f0000000040)='./file0\x00')

4m25.948741712s ago: executing program 9 (id=4850):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
getuid()
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$notify(r3, 0x402, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
inotify_init1(0x0)

4m25.897556204s ago: executing program 9 (id=4851):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10)
io_setup(0x8, &(0x7f0000002740))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

4m25.52362008s ago: executing program 9 (id=4856):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8810, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4m10.412280263s ago: executing program 37 (id=4856):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8810, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2m46.626262559s ago: executing program 5 (id=6622):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18)
getuid()
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$notify(r2, 0x402, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
inotify_init1(0x0)

2m46.586415131s ago: executing program 5 (id=6625):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

2m46.274545254s ago: executing program 5 (id=6633):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000000), 0x6, 0x507, &(0x7f0000000680)="$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")
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
fsmount(0xffffffffffffffff, 0x0, 0x6ae9689119d2e1da)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xd, @loopback, 0x8}, r1}}, 0x30)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
open(&(0x7f0000000280)='./file2\x00', 0x4201, 0x8)

2m46.112224171s ago: executing program 5 (id=6638):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10)
io_setup(0x8, &(0x7f0000002740))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c000280"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

2m45.618377442s ago: executing program 5 (id=6650):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
sync_file_range(r2, 0x6, 0x9fd, 0x3)

2m44.195984302s ago: executing program 5 (id=6661):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) (fail_nth: 3)

2m44.195730012s ago: executing program 38 (id=6661):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) (fail_nth: 3)

2m38.647791889s ago: executing program 8 (id=6743):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4", 0x27}], 0x1}, 0x0)

2m38.569465102s ago: executing program 8 (id=6745):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0xffff}, 0x18)
getuid()
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c8, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$notify(r3, 0x402, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
inotify_init1(0x0)

2m38.365333971s ago: executing program 8 (id=6747):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x50, &(0x7f00000002c0), 0x64, 0x505, &(0x7f0000000940)="$eJzs3cFrHF8dAPDvbHZr06a/5Kce9Af+rLaSFu1u0tg2eKgVRE8Ftd5rTDYhZJMN2U3bhKIp/gGCiAqe9OJF8A8QpEePIhT0rKggoq0ePGjnx+5O0jTdTbbtNptmPx+YzHtvZvb73oaZnTfzmAlgYJ2NiBsR8TRN04sRMZqV57IptlpTY70nj+/PNqYk0vTWP5NIsrLtz0qy+elss5MR8Y2vRnw7eTFubWNzaaZSKa9l+VJ9ebVU29i8tLg8s1BeKK9MTU1enb42fWV6oiftPBMR17/8tx99/xdfuf6bz9398+2/X/hOo1oj2fLd7XhJ+f0WtppeaH4XuzdYe8VgR1G+2cLMcLs1hl4oefCG6wQAQHuNc/wPR8SnI+JijMbQ/qezAAAAwFso/eJI/C+JSNs70aEcAAAAeIvkmmNgk1wxGwswErlcsdgaw/vROJWrVGv1z85X11fmWmNlx6KQm1+slCeyscJjUUga+clm+ln+8p78VES8GxE/HB1u5ouz1cpcvy9+AAAAwIA4vaf//5/RVv8fAAAAOGbG+l0BAAAA4I3T/wcAAIDjT/8fAAAAjrWv3bzZmNLt91/P3dlYX6reuTRXri0Vl9dni7PVtdXiQrW60Hxm3/JBn1epVlc/Hyvr90r1cq1eqm1s3l6urq/Uby8+9wpsAAAA4BC9+8mHf0wiYusLw82p4UR3m3a5GnBU5XdSSTZvs1v/6Z3W/K+HVCngUAz1uwJA3+T7XQGgbwr9rgDQd8kByzsO3vldNv9Ub+sDAAD03vjHO9//z+275db+i4Ejz04Mg8v9fxhczfv/3Y7kdbIAx0rBGQAMvNe+/3+gNH2pCgEAAD030pySXDG7vDcSuVyxGHGm+VqAQjK/WClPRMQ7EfGH0cKHGvnJ5pbJgX0GAAAAAAAAAAAAAAAAAAAAAAAAAKAlTZNIAQAAgGMtIrfzGP/x0fMje68PnEj+OxrZK0Lv/vTWj+/N1Otrk43yf+2U13+SlV8+5IsXAAAAMDhe6gX+2/307X48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTSk8f3Z7enw4z7jy9FxFi7+Pk42ZyfjEJEnPp3Evld2yURMdSD+MONPx9rFz9pVGsnZLv4wz2Iv/Vg3/gxln0L7eKf7kF8GGQPG8efG+32v1ycbc7b73/5iOfyr6rz8S92jn9DHfb/M13GeO/Rr0od4z+IeC/f/vizHT/pEP9cl/G/9c3NzU7L0p9FjLf9/Umei1WqL6+WahublxaXZxbKC+WVqanJq9PXpq9MT5TmFyvl7G/bGD/4xK+f7tf+Ux3ijx3Q/vNdtv//j+49/kgrWWgX/8K5NvF/+/NsjRfj57Lfvs9k6cby8e30Viu92/u//P37+7V/rkP7D/r/X+iy/Re//r2/dLkqAHAIahubSzOVSnnt2CYavfQjUA2JI5j4bk8/ME3TtLFPvcbnJHEUvpZmot9HJgAAoNeenfT3uyYAAAAAAAAAAAAAAAAAAAAwuA7jcWJ7Y27tpJJePEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAnPggAAP//FZnXpg==")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB="0000000000000000b7040000010000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000440))
inotify_init()
read(r0, &(0x7f0000001600)=""/238, 0xee)
r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x47, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x4}, 0x700, 0x4005, 0xb, 0x3, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x2, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000001811", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x0, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS    \x00'}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r6 = socket$inet_udp(0x2d, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000d00000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0xab15, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x24fd, 0x7)
mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m38.198405648s ago: executing program 8 (id=6753):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10)
io_setup(0x8, &(0x7f0000002740))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c0001"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

2m37.886246961s ago: executing program 8 (id=6762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setown(r0, 0x8, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004c80))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0)
r3 = openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
socket$phonet(0x23, 0x2, 0x1)
fcntl$setlease(r2, 0x400, 0x1)
lsetxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f0000000180)='system_u:object_r:systemd_systemctl_exec_t:s0\x00', 0x2e, 0x0)
pipe(&(0x7f0000000040))
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}])
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000080)=@filename='./bus\x00', 0x0, &(0x7f0000000240))

2m37.546480895s ago: executing program 8 (id=6767):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xb, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb81000b000800451b00400068000007069078e0000002ffffffff00000000000000eeb009d9000000000100004e2400004e220009000000000000000000020000000300000004"], 0x52)

2m37.546200175s ago: executing program 39 (id=6767):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xb, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb81000b000800451b00400068000007069078e0000002ffffffff00000000000000eeb009d9000000000100004e2400004e220009000000000000000000020000000300000004"], 0x52)

2m11.58371559s ago: executing program 0 (id=7165):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

2m11.333079031s ago: executing program 0 (id=7171):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00302c5b4b287fd3107a000200000000000017a550cf85cf38cf5fd0d0a276efcee5783b377aaf0880b7a151707e0d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00'])

2m11.275157834s ago: executing program 0 (id=7174):
socket$isdn_base(0x22, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$evdev(0x0, 0x2058c414, 0x200000)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = eventfd2(0x0, 0x0)
read$eventfd(r3, &(0x7f0000000040), 0x8)

2m10.388185681s ago: executing program 0 (id=7205):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000002c0))
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="168d048404bf8cc11945d7430008", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6d}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r5=>r3, {0x2}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r8, 0x540b, 0x2)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10)
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f00000001c0))
close(r0)

2m10.279760595s ago: executing program 0 (id=7208):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10)
io_setup(0x8, &(0x7f0000002740))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c000280050001000000000024000380140001800800010000000000"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = dup(0xffffffffffffffff)
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

2m9.975489948s ago: executing program 0 (id=7215):
symlink(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x34)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1m54.238282938s ago: executing program 40 (id=7215):
symlink(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00')
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x34)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1m32.495155144s ago: executing program 2 (id=7746):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
sync_file_range(r2, 0x6, 0x9fd, 0x3)

1m32.467147505s ago: executing program 2 (id=7748):
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x170, 0x0, 0x170, 0xffffffff, 0xffffffff, 0x208, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0xff, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0xb0, 0xd8, 0x0, {0x100000000000000}, [@common=@set={{0x40}, {{0x1, [0x6, 0x5, 0x5, 0x2, 0x0, 0x2], 0x9, 0x5}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@multicast1, @loopback, 0xff000000, 0x0, 'batadv_slave_0\x00', 'wg1\x00', {}, {}, 0x6c}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
close_range(r0, 0xffffffffffffffff, 0x0)

1m32.429980266s ago: executing program 2 (id=7749):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f00000000c0)="6000000011007f059e", 0xc}, {&(0x7f0000000200)="78cabf2dfb73fc020700000000000602258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e72572c9f9b06f96137c8af12b66cb08fc63b", 0x57}], 0x2}, 0x0) (fail_nth: 5)

1m32.191520616s ago: executing program 2 (id=7752):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}}, 0x0)

1m32.160279438s ago: executing program 2 (id=7753):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x8000000000, 0x20, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe10)
io_setup(0x8, &(0x7f0000002740))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x1, @private2, 0x1f7}}}, 0x32)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c000180"], 0x88}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
renameat2(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', r6, &(0x7f00000003c0)='./file0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)

1m31.785769514s ago: executing program 2 (id=7760):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

1m16.643493598s ago: executing program 41 (id=7760):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

2.205390226s ago: executing program 1 (id=9291):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r2, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)

1.984753335s ago: executing program 4 (id=9297):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
getuid()
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x1c0, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$notify(r3, 0x402, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
inotify_init1(0x0)

1.845646611s ago: executing program 4 (id=9302):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000000240)=@access={'system_u:object_r:hald_var_lib_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0xb243}, 0x67)

1.783860194s ago: executing program 4 (id=9303):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0)
mount$9p_rdma(&(0x7f0000000000), 0x0, 0x0, 0x10, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x200884c, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c71756965742c666d61736b3d303030303030303030303029a53030303030303132353233302c636865636b3d7374726963742c6e6f646f74732c666c7573682c646f74732c646f74732c646f74732c636865636b3d726500007865642c646f74732c646f74732c6e6f646f7473"], 0xfd, 0x23d, &(0x7f0000000040)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x90, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x8}}, './bus\x00'})
set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0)

1.345361722s ago: executing program 1 (id=9310):
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
mkdir(&(0x7f0000000000)='./file0\x00', 0xe6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)

1.178506199s ago: executing program 1 (id=9312):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x4859bd0f8653de88, 0x2}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xa3, &(0x7f0000000180)={&(0x7f0000001940)=@delchain={0x24, 0x65, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x5}, {0x0, 0xe}, {0xb, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
creat(&(0x7f00000002c0)='./file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000000c0)='9p_client_res\x00'}, 0x18)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x63, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

1.045077035s ago: executing program 6 (id=9314):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18)
write$binfmt_aout(r0, 0x0, 0xff2e)

999.496837ms ago: executing program 7 (id=9316):
ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
r0 = getpgrp(0xffffffffffffffff)
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x0)
getitimer(0x2, &(0x7f0000000000))
capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000280)={0x0, 0x3, 0xffffeffe, 0x4, 0x1, 0xcd})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\b\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', <r7=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4, 0x8, 0x1, 0x3, 0x0, 0x900007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc44, 0x4, @perf_config_ext={0x5, 0xd43c}, 0x212, 0x11, 0x7ffffefc, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x400000000001, 0xffffffffffffffff, 0x3)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xd4f8}}, 0x120)
socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4)
socket(0x10, 0x3, 0x9)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x1, 0x8, 0x77, 0x4, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @local, @loopback, {[@noop]}}}}})
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

977.186838ms ago: executing program 4 (id=9317):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a5, 0x1c0c0, 0xb, 0xc1})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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")

976.375878ms ago: executing program 1 (id=9318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10)
syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)

935.04263ms ago: executing program 6 (id=9319):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="66feffffff0000006111740000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=<r1=>0x0, &(0x7f00000003c0)=0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, r1}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @local}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r3 = socket$packet(0x11, 0xa, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX")
bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="651cfcc6bec5a3a8f31b01be85babc2d837ffcbd6124faeddf8d8448932ba0b0aab375d1a87be9c5751b2048f906a6afc1e9e372a50dfd6770dceb38f94225c4cfa0b7f9ee94c48a33db0eb4bb926f438cf037268d271e0bbd7b4324d372710683504fa18be1b896a08c3abc9a5b57bf630872a494d7adb4fd9429df3ffcb612c0f9bbcf032fb9e4ea23ac12f8f4db4749a6d4403c3ea6c400114a19a95436f15611c90c2f1ff382e28e01ef2082ac8a942d5890b878033098eb12c479376b043313848d821e269ce8b7e761bb5ee1c8a8b3d6bfa6", @ANYBLOB="808867", @ANYBLOB="ebe771525048719f26a7248196ca5b40497784826c01460eb1b71c8fefb373e408c7d136b1483e921371c95726262fb774128db91e75480a945ba6a111", @ANYBLOB="e37cf4feff9884e345204b0d914a3e1ba5beeaff0b1a14f697637ddf6f963ca63c7e92d3c30e4f38219ce905bc23b07b9a334af6ceab00"/69, @ANYRES16=r3], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xa4}}, 0x0)

933.90492ms ago: executing program 3 (id=9320):
r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r1, &(0x7f0000000c80)="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", 0x3b6, 0xbcff, 0x0, 0x0)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

875.512072ms ago: executing program 1 (id=9321):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rseq(&(0x7f0000000680), 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
getuid()
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)={0x184, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x814}, 0x4004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
fcntl$notify(r3, 0x402, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)
inotify_init1(0x0)

763.836137ms ago: executing program 3 (id=9322):
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
mkdir(&(0x7f0000000000)='./file0\x00', 0xe6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)

687.00303ms ago: executing program 1 (id=9323):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}, 0x1, 0x0, 0x0, 0x200c0}, 0x40)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x7fff}, 0x18)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")

660.333272ms ago: executing program 4 (id=9324):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$ptmx(0xffffff9c, 0x0, 0x400, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="0000000000000050dae25b1685c636396e52a39ddc4b00"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3)

517.210188ms ago: executing program 7 (id=9325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

475.53706ms ago: executing program 3 (id=9326):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$selinux_create(r1, &(0x7f0000000240)=@access={'system_u:object_r:hald_var_lib_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0xb243}, 0x67)

442.446661ms ago: executing program 7 (id=9327):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
r0 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x18)
readahead(0xffffffffffffffff, 0x2, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r4 = gettid()
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
read(r5, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000300)={0x8009, 0x100000d, 0x1, 'queue0\x00', 0x16})
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @loopback, 0xffffd728}, 0x1c)
tkill(r4, 0x7)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32, @ANYBLOB="240003"], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800337223bab71cb893db0ad001c8646c2a0000100005070000000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r7, @ANYBLOB="020025bd7000fddbdf250a0000003c000180140002006e6574706369300000000000000000000800030001000000140002006e65747063693000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

442.199031ms ago: executing program 3 (id=9328):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
getrusage(0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18)
socket(0x10, 0x3, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18)
lsm_get_self_attr(0x68, 0x0, &(0x7f0000000200), 0x0)

385.997723ms ago: executing program 3 (id=9329):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="66feffffff0000006111740000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=<r1=>0x0, &(0x7f00000003c0)=0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, r1}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @local}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r3 = socket$packet(0x11, 0xa, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x4f2, &(0x7f0000000b00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="651cfcc6bec5a3a8f31b01be85babc2d837ffcbd6124faeddf8d8448932ba0b0aab375d1a87be9c5751b2048f906a6afc1e9e372a50dfd6770dceb38f94225c4cfa0b7f9ee94c48a33db0eb4bb926f438cf037268d271e0bbd7b4324d372710683504fa18be1b896a08c3abc9a5b57bf630872a494d7adb4fd9429df3ffcb612c0f9bbcf032fb9e4ea23ac12f8f4db4749a6d4403c3ea6c400114a19a95436f15611c90c2f1ff382e28e01ef2082ac8a942d5890b878033098eb12c479376b043313848d821e269ce8b7e761bb5ee1c8a8b3d6bfa6", @ANYBLOB="808867", @ANYBLOB="ebe771525048719f26a7248196ca5b40497784826c01460eb1b71c8fefb373e408c7d136b1483e921371c95726262fb774128db91e75480a945ba6a111", @ANYBLOB="e37cf4feff9884e345204b0d914a3e1ba5beeaff0b1a14f697637ddf6f963ca63c7e92d3c30e4f38219ce905bc23b07b9a334af6ceab00"/69, @ANYRES16=r3], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@in6={0xa, 0x4e20, 0x4, @private2, 0x8001}, {&(0x7f00000000c0)=""/200, 0xc8}, &(0x7f00000001c0), 0x40}, 0xa0)

382.360893ms ago: executing program 6 (id=9330):
waitid(0x0, 0x0, 0x0, 0xe, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffff}, 0x18)
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file2', [{0x20, '}'}]}, 0xd)

236.091589ms ago: executing program 7 (id=9331):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@errors_remount}, {@oldalloc}, {@nomblk_io_submit}, {@nodioread_nolock}, {@user_xattr}]}, 0x1, 0x524, &(0x7f0000001200)="$eJzs3c+PG1cdAPDvOLHXSbbdtPQACNrQFgKK4s06bVT1AOWEEKqE6BGkdNl1ViF2vIq9pbtEYntG4oREJU5w5A/g3BMSRy4IbgipHJD4sQJ1kTgMmvF4693YiZPdtbfrz0eazHvzZv19z9a8N36O/QKYWZciYjsiKhHxdkQsFMeTYos3elt23kc791d2d+6vJJGmb/0zycuzYzHwN5kLxWNWI+I734j4fvJg3M7m1p3lZrNxr8gvdlvri53Nrau3W8trjbXG3Xr9xtKNa69df7V+ZG19oVUpUp//8PfbX/lRVq354shgO45Sr+nlvTiZsxHxreMINgVnivZUpl0RnkgpIp6NiBfz638hzuSvJgBwmqXpQqQLg/k9yf4sAHBalPI5sKRUK+YC5qNUqtV6c3jPxflSs93pXrnV3ri72psruxjl0q3bzca1Yq7wYpSTLL+Upz/O1w/kr0fEMxHxs7lzeb620m6uTvPGBwBm2IUD4/9/5nrjPwBwylWnXQEAYOKM/wAwe4z/ADB7jP8AMHt64/+5aVcDAJgg7/8BYPYY/wFgpnz7zTezLd0tfv969Z3NjTvtd66uNjp3aq2NldpK+956ba3dXst/s6f1qMdrttvrS6/ExrsXv7re6S52Nrduttobd7s389/1vtko52dtT6BlAMAoz7zwwZ+SbER+/Vy+xcBaDuWp1gw4bqVpVwCYmjOP/yduC+CUsNoXzK5DDObliJ+6F4BPtN/l/w5Zonef6rAvCKVpmh5XtYBjd/kz5v9hVg3M//tfwDBjnmD+HzglzP/D7ErTZNxF/mPcEwGAk80cPzDi8/9ni/2viw8HvrdaHEjT9Md54v0JVA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOqP76v7ViLfD5KJVqtYinIuJilJNbt5uNaxHxdET8ca48l+WXplxnAOCwSn9LivW/Li+8PL+v6PkLe8lKRPzwF2/9/N3lbvfeHyIqyb/m+se77xfH648VuHJULQAAHq4/Tuf7gTfyH+3cX+lvk6zP378eEdVe/N2dSuzuxT8bZ/N9NcoRcf7fSZHvSQbmLg5j+72I+PSw9icxn8+B9FY+PRg/i/3UROOX9sUv5WW9ffZcfOoI6gKz5oOs/3lj2PVXikv5fvj1X817qMMr+r/soVZ28z7w4/j9/u/MiP7v0rgxXvntN3upcw+WvRfx2bMR/di7A/1PP34yIv7LY8b/8+eef3FUWfrLiMsxPP5grMVua32xs7l19XZrea2x1rhbr99YunHtteuv1hfzOerF0aPBP16/8vSosqz950fErz6i/V8cs/2/+t/b3/3CQ+J/+aVh8Uvx3EPiZ2Pil8aMv3z+N9VRZVn81RHtf9Trf2XM+B/+dWt1zFMBgAnobG7dWW42G/ckZinxlx+ciGocTCTFTf/Ic7LCk1HVBxNfm1Ssyojn5ycv9Z69A0X9e//HjDWqxziKWTfgJNi76CPiv9OuDAAAAAAAAAAAAAAAMNQkvrE07TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwev0/AAD//3PUyGE=")
openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)

99.936106ms ago: executing program 6 (id=9332):
r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x28c})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendto$inet6(r1, &(0x7f0000000c80)="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", 0x3b6, 0xbcff, 0x0, 0x0)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

96.547956ms ago: executing program 7 (id=9333):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

84.320056ms ago: executing program 4 (id=9334):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (fail_nth: 5)

58.804367ms ago: executing program 3 (id=9335):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="66feffffff0000006111740000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=<r1=>0x0, &(0x7f00000003c0)=0x4)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, r1}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @local}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
r3 = socket$packet(0x11, 0xa, 0x300)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x4f2, &(0x7f0000000b00)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="651cfcc6bec5a3a8f31b01be85babc2d837ffcbd6124faeddf8d8448932ba0b0aab375d1a87be9c5751b2048f906a6afc1e9e372a50dfd6770dceb38f94225c4cfa0b7f9ee94c48a33db0eb4bb926f438cf037268d271e0bbd7b4324d372710683504fa18be1b896a08c3abc9a5b57bf630872a494d7adb4fd9429df3ffcb612c0f9bbcf032fb9e4ea23ac12f8f4db4749a6d4403c3ea6c400114a19a95436f15611c90c2f1ff382e28e01ef2082ac8a942d5890b878033098eb12c479376b043313848d821e269ce8b7e761bb5ee1c8a8b3d6bfa6", @ANYBLOB="808867", @ANYBLOB="ebe771525048719f26a7248196ca5b40497784826c01460eb1b71c8fefb373e408c7d136b1483e921371c95726262fb774128db91e75480a945ba6a111", @ANYBLOB="e37cf4feff9884e345204b0d914a3e1ba5beeaff0b1a14f697637ddf6f963ca63c7e92d3c30e4f38219ce905bc23b07b9a334af6ceab00"/69, @ANYRES16=r3], 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xa4}}, 0x0)

28.588258ms ago: executing program 7 (id=9336):
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
mkdir(&(0x7f0000000000)='./file0\x00', 0xe6)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0)

397.699µs ago: executing program 6 (id=9337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x4c}}, 0x0)

0s ago: executing program 6 (id=9338):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@errors_remount}, {@oldalloc}, {@nomblk_io_submit}, {@nodioread_nolock}, {@user_xattr}]}, 0x1, 0x524, &(0x7f0000001200)="$eJzs3c+PG1cdAPDvOLHXSbbdtPQACNrQFgKK4s06bVT1AOWEEKqE6BGkdNl1ViF2vIq9pbtEYntG4oREJU5w5A/g3BMSRy4IbgipHJD4sQJ1kTgMmvF4693YiZPdtbfrz0eazHvzZv19z9a8N36O/QKYWZciYjsiKhHxdkQsFMeTYos3elt23kc791d2d+6vJJGmb/0zycuzYzHwN5kLxWNWI+I734j4fvJg3M7m1p3lZrNxr8gvdlvri53Nrau3W8trjbXG3Xr9xtKNa69df7V+ZG19oVUpUp//8PfbX/lRVq354shgO45Sr+nlvTiZsxHxreMINgVnivZUpl0RnkgpIp6NiBfz638hzuSvJgBwmqXpQqQLg/k9yf4sAHBalPI5sKRUK+YC5qNUqtV6c3jPxflSs93pXrnV3ri72psruxjl0q3bzca1Yq7wYpSTLL+Upz/O1w/kr0fEMxHxs7lzeb620m6uTvPGBwBm2IUD4/9/5nrjPwBwylWnXQEAYOKM/wAwe4z/ADB7jP8AMHt64/+5aVcDAJgg7/8BYPYY/wFgpnz7zTezLd0tfv969Z3NjTvtd66uNjp3aq2NldpK+956ba3dXst/s6f1qMdrttvrS6/ExrsXv7re6S52Nrduttobd7s389/1vtko52dtT6BlAMAoz7zwwZ+SbER+/Vy+xcBaDuWp1gw4bqVpVwCYmjOP/yduC+CUsNoXzK5DDObliJ+6F4BPtN/l/w5Zonef6rAvCKVpmh5XtYBjd/kz5v9hVg3M//tfwDBjnmD+HzglzP/D7ErTZNxF/mPcEwGAk80cPzDi8/9ni/2viw8HvrdaHEjT9Md54v0JVA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOqP76v7ViLfD5KJVqtYinIuJilJNbt5uNaxHxdET8ca48l+WXplxnAOCwSn9LivW/Li+8PL+v6PkLe8lKRPzwF2/9/N3lbvfeHyIqyb/m+se77xfH648VuHJULQAAHq4/Tuf7gTfyH+3cX+lvk6zP378eEdVe/N2dSuzuxT8bZ/N9NcoRcf7fSZHvSQbmLg5j+72I+PSw9icxn8+B9FY+PRg/i/3UROOX9sUv5WW9ffZcfOoI6gKz5oOs/3lj2PVXikv5fvj1X817qMMr+r/soVZ28z7w4/j9/u/MiP7v0rgxXvntN3upcw+WvRfx2bMR/di7A/1PP34yIv7LY8b/8+eef3FUWfrLiMsxPP5grMVua32xs7l19XZrea2x1rhbr99YunHtteuv1hfzOerF0aPBP16/8vSosqz950fErz6i/V8cs/2/+t/b3/3CQ+J/+aVh8Uvx3EPiZ2Pil8aMv3z+N9VRZVn81RHtf9Trf2XM+B/+dWt1zFMBgAnobG7dWW42G/ckZinxlx+ciGocTCTFTf/Ic7LCk1HVBxNfm1Ssyojn5ycv9Z69A0X9e//HjDWqxziKWTfgJNi76CPiv9OuDAAAAAAAAAAAAAAAMNQkvrE07TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwev0/AAD//3PUyGE=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)

kernel console output (not intermixed with test programs):

09555][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  622.920128][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  622.930994][  T147] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  622.941660][T29877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  622.963615][T22228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.059712][T29889] loop4: detected capacity change from 0 to 128
[  623.109903][T29891] loop1: detected capacity change from 0 to 512
[  623.118047][T29891] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  623.126738][T29891] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.8810: invalid block
[  623.138891][T29891] EXT4-fs (loop1): Remounting filesystem read-only
[  623.145600][T29891] EXT4-fs (loop1): 1 truncate cleaned up
[  623.152315][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.152526][T29891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.233829][T29898] syzkaller0: entered promiscuous mode
[  623.239457][T29898] syzkaller0: entered allmulticast mode
[  623.248869][T24262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.330944][T29904] loop7: detected capacity change from 0 to 512
[  623.345756][T29906] loop4: detected capacity change from 0 to 512
[  623.394595][T29910] loop3: detected capacity change from 0 to 512
[  623.401565][T29910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  623.413156][T29906] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  623.421355][T29906] EXT4-fs (loop4): orphan cleanup on readonly fs
[  623.429458][T29906] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.8815: corrupted inode contents
[  623.441869][T29906] EXT4-fs (loop4): Remounting filesystem read-only
[  623.448719][T29906] EXT4-fs (loop4): 1 truncate cleaned up
[  623.456736][T29904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  623.470152][T29910] EXT4-fs (loop3): 1 truncate cleaned up
[  623.478714][T29910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  623.526488][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  623.537092][  T147] __quota_error: 1419 callbacks suppressed
[  623.537111][  T147] Quota error (device loop4): write_blk: dquota write failed
[  623.550745][  T147] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  623.560789][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  623.571419][  T147] Quota error (device loop4): write_blk: dquota write failed
[  623.579007][  T147] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  623.589428][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  623.599640][  T147] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  623.608507][  T147] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  623.619330][T29906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  623.619301][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.654119][T27323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  623.685795][T29920] __nla_validate_parse: 6 callbacks suppressed
[  623.685893][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8819'.
[  623.701953][T29920] autofs4:pid:29920:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[  623.941743][T23294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.036961][T24262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  624.071894][T29923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8820'.
[  624.083073][   T29] audit: type=1400 audit(1763943089.584:61754): avc:  denied  { create } for  pid=29932 comm="syz.1.8825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  624.134531][T29925] loop3: detected capacity change from 0 to 2048
[  624.141382][   T29] audit: type=1326 audit(1763943089.624:61755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29932 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe43ef749 code=0x7ffc0000
[  624.165156][   T29] audit: type=1326 audit(1763943089.634:61756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29932 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbfe43ef749 code=0x7ffc0000
[  624.188912][   T29] audit: type=1326 audit(1763943089.634:61757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29932 comm="syz.1.8825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe43ef749 code=0x7ffc0000
[  624.287311][T29925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.294117][T29944] syzkaller0: entered promiscuous mode
[  624.304939][T29944] syzkaller0: entered allmulticast mode
[  624.506124][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8821'.
[  624.594930][T29927] loop6: detected capacity change from 0 to 2048
[  624.608119][T29959] loop7: detected capacity change from 0 to 512
[  624.668166][T29959] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8832: bg 0: block 248: padding at end of block bitmap is not set
[  624.702432][T29927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  624.706166][T29959] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8832: Failed to acquire dquot type 1
[  624.748135][T29959] EXT4-fs (loop7): 1 truncate cleaned up
[  624.845791][T29959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.913098][T29959] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  624.986650][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.032817][T29959] netlink: 'syz.7.8832': attribute type 1 has an invalid length.
[  625.040721][T29959] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8832'.
[  625.153855][T29967] loop3: detected capacity change from 0 to 512
[  625.168236][T29967] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  625.176270][T29967] EXT4-fs (loop3): orphan cleanup on readonly fs
[  625.185322][T22228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.195016][T29967] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  625.206627][T29967] EXT4-fs (loop3): Remounting filesystem read-only
[  625.213356][T29967] EXT4-fs (loop3): 1 truncate cleaned up
[  625.219285][   T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.229863][   T31] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.240706][   T31] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  625.251313][T29967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  625.264789][T29967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.275133][T24262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.336310][T29979] loop3: detected capacity change from 0 to 512
[  625.347476][T29979] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  625.355540][T29979] EXT4-fs (loop3): orphan cleanup on readonly fs
[  625.356913][T29985] loop1: detected capacity change from 0 to 512
[  625.363518][T29979] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.8838: corrupted inode contents
[  625.381231][T29979] EXT4-fs (loop3): Remounting filesystem read-only
[  625.388075][T29979] EXT4-fs (loop3): 1 truncate cleaned up
[  625.393998][   T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.404696][   T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.469485][   T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  625.469861][T29985] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  625.480177][T29979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  625.487907][T29985] EXT4-fs (loop1): orphan cleanup on readonly fs
[  625.509527][T29985] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.8839: corrupted inode contents
[  625.533248][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.543135][T29985] EXT4-fs (loop1): Remounting filesystem read-only
[  625.550174][T29985] EXT4-fs (loop1): 1 truncate cleaned up
[  625.556092][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.567240][   T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.586573][   T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  625.597391][T29985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  625.623224][T29992] syzkaller0: entered promiscuous mode
[  625.628803][T29992] syzkaller0: entered allmulticast mode
[  625.657740][T23294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.710591][T30003] loop4: detected capacity change from 0 to 512
[  625.739760][T30003] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8845: bg 0: block 248: padding at end of block bitmap is not set
[  625.805898][T30010] loop3: detected capacity change from 0 to 512
[  625.820214][T30010] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  625.828260][T30010] EXT4-fs (loop3): orphan cleanup on readonly fs
[  625.835960][T30010] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  625.847521][T30010] EXT4-fs (loop3): Remounting filesystem read-only
[  625.854201][T30010] EXT4-fs (loop3): 1 truncate cleaned up
[  625.859990][ T7354] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.870777][ T7354] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  625.881926][ T7354] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  625.882044][T30003] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8845: Failed to acquire dquot type 1
[  625.892797][T30010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  625.916385][T30010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.926560][T30015] loop1: detected capacity change from 0 to 512
[  625.938220][T30003] EXT4-fs (loop4): 1 truncate cleaned up
[  625.939330][T30015] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  625.954372][T30003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  625.967247][T30003] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  625.978681][T30015] EXT4-fs (loop1): 1 truncate cleaned up
[  625.984958][T30015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.009479][T23294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.024362][T30003] netlink: 'syz.4.8845': attribute type 1 has an invalid length.
[  626.032255][T30003] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8845'.
[  626.149789][T30039] loop1: detected capacity change from 0 to 512
[  626.158391][T27323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.158400][T30039] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  626.158741][T30039] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.8853: invalid block
[  626.187156][T30039] EXT4-fs (loop1): Remounting filesystem read-only
[  626.193782][T30039] EXT4-fs (loop1): 1 truncate cleaned up
[  626.200073][T30039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.251529][T30047] loop4: detected capacity change from 0 to 512
[  626.268103][T30047] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8858: bg 0: block 248: padding at end of block bitmap is not set
[  626.283015][T30047] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8858: Failed to acquire dquot type 1
[  626.295187][T30047] EXT4-fs (loop4): 1 truncate cleaned up
[  626.301444][T30047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.314441][T30047] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.339853][T27323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.364058][T30054] loop4: detected capacity change from 0 to 512
[  626.374689][T30045] loop6: detected capacity change from 0 to 2048
[  626.387616][T30054] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  626.388075][T30045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.395830][T30054] EXT4-fs (loop4): orphan cleanup on readonly fs
[  626.415604][T30054] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  626.427451][T30054] EXT4-fs (loop4): Remounting filesystem read-only
[  626.434155][T30054] EXT4-fs (loop4): 1 truncate cleaned up
[  626.440075][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.450747][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.461351][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  626.520729][T30062] loop4: detected capacity change from 0 to 512
[  626.527883][T30062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  626.539360][T30062] EXT4-fs (loop4): 1 truncate cleaned up
[  626.589177][T30071] loop4: detected capacity change from 0 to 512
[  626.607442][T30071] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  626.615434][T30071] EXT4-fs (loop4): orphan cleanup on readonly fs
[  626.623339][T30071] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.8864: corrupted inode contents
[  626.635480][T30071] EXT4-fs (loop4): Remounting filesystem read-only
[  626.642173][T30071] EXT4-fs (loop4): 1 truncate cleaned up
[  626.649347][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.660002][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.670800][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  626.739156][T30080] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8868'.
[  626.768266][T30084] loop6: detected capacity change from 0 to 512
[  626.775029][T30084] EXT4-fs: Ignoring removed oldalloc option
[  626.781009][T30084] EXT4-fs: Ignoring removed nomblk_io_submit option
[  626.791874][T30086] loop4: detected capacity change from 0 to 512
[  626.807218][T30086] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  626.808409][T30084] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  626.815676][T30086] EXT4-fs (loop4): orphan cleanup on readonly fs
[  626.833906][T30086] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  626.837202][T30084] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8870: bg 0: block 217: padding at end of block bitmap is not set
[  626.845492][T30086] EXT4-fs (loop4): Remounting filesystem read-only
[  626.859892][T30084] EXT4-fs (loop6): Remounting filesystem read-only
[  626.866092][T30086] EXT4-fs (loop4): 1 truncate cleaned up
[  626.878532][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.889311][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  626.900121][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  626.941195][T30094] loop4: detected capacity change from 0 to 512
[  626.951524][T30094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  626.963712][T30092] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8872'.
[  627.018239][T30094] EXT4-fs (loop4): 1 truncate cleaned up
[  627.044966][T30114] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8880'.
[  627.108020][T30118] loop3: detected capacity change from 0 to 512
[  627.114700][T30118] EXT4-fs: Ignoring removed oldalloc option
[  627.120787][T30118] EXT4-fs: Ignoring removed nomblk_io_submit option
[  627.151411][T30118] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  627.163402][T30118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8882: bg 0: block 217: padding at end of block bitmap is not set
[  627.185621][T30103] loop1: detected capacity change from 0 to 2048
[  627.197775][T30118] EXT4-fs (loop3): Remounting filesystem read-only
[  627.429932][T30146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8892'.
[  627.445440][T30146] pimreg: entered allmulticast mode
[  627.453516][T30146] pimreg: left allmulticast mode
[  627.464428][T30121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8883'.
[  627.474120][T30150] loop4: detected capacity change from 0 to 512
[  627.496680][T30121] loop6: detected capacity change from 0 to 2048
[  627.505926][T30150] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8890: bg 0: block 248: padding at end of block bitmap is not set
[  627.521443][T30150] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8890: Failed to acquire dquot type 1
[  627.533753][T30150] EXT4-fs (loop4): 1 truncate cleaned up
[  627.540429][T30150] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  627.561567][T30157] loop1: detected capacity change from 0 to 128
[  627.769076][T30174] loop6: detected capacity change from 0 to 512
[  627.798316][T30174] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8900: bg 0: block 248: padding at end of block bitmap is not set
[  627.835934][T30182] syzkaller0: entered promiscuous mode
[  627.836687][T30174] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8900: Failed to acquire dquot type 1
[  627.841882][T30182] syzkaller0: entered allmulticast mode
[  627.854101][T30174] EXT4-fs (loop6): 1 truncate cleaned up
[  627.867026][T30174] ext4 filesystem being mounted at /500/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  627.894084][T30174] netlink: 'syz.6.8900': attribute type 1 has an invalid length.
[  628.283015][T30196] loop6: detected capacity change from 0 to 128
[  628.435605][T30208] loop4: detected capacity change from 0 to 512
[  628.449255][T30208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8914: bg 0: block 248: padding at end of block bitmap is not set
[  628.476626][T30208] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8914: Failed to acquire dquot type 1
[  628.521779][T30208] EXT4-fs (loop4): 1 truncate cleaned up
[  628.544243][T30208] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  628.603919][   T29] kauditd_printk_skb: 1054 callbacks suppressed
[  628.603984][   T29] audit: type=1400 audit(1763943094.104:62754): avc:  denied  { write } for  pid=30216 comm="syz.4.8917" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  628.652981][T30220] loop4: detected capacity change from 0 to 128
[  628.695740][   T29] audit: type=1326 audit(1763943094.194:62755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.719550][   T29] audit: type=1326 audit(1763943094.194:62756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.743456][   T29] audit: type=1326 audit(1763943094.194:62757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.767047][   T29] audit: type=1326 audit(1763943094.194:62758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.770665][T30213] __nla_validate_parse: 3 callbacks suppressed
[  628.770682][T30213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8915'.
[  628.790706][   T29] audit: type=1326 audit(1763943094.194:62759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.829337][   T29] audit: type=1326 audit(1763943094.194:62760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.853162][   T29] audit: type=1326 audit(1763943094.194:62761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.877109][   T29] audit: type=1326 audit(1763943094.194:62762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.883281][T30224] loop3: detected capacity change from 0 to 2048
[  628.900857][   T29] audit: type=1326 audit(1763943094.194:62763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30219 comm="syz.4.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30aa4df749 code=0x7ffc0000
[  628.911739][T30231] loop6: detected capacity change from 0 to 512
[  628.981746][T30231] EXT4-fs: Ignoring removed oldalloc option
[  628.987807][T30231] EXT4-fs: Ignoring removed nomblk_io_submit option
[  629.008568][T30231] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.028250][T30226] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8920: bg 0: block 217: padding at end of block bitmap is not set
[  629.076119][T30226] EXT4-fs (loop6): Remounting filesystem read-only
[  629.166608][T30242] loop6: detected capacity change from 0 to 512
[  629.173424][T30242] EXT4-fs: Ignoring removed oldalloc option
[  629.179562][T30242] EXT4-fs: Ignoring removed nomblk_io_submit option
[  629.209214][T30242] ext4 filesystem being mounted at /509/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.229511][T30242] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8924: bg 0: block 217: padding at end of block bitmap is not set
[  629.244479][T30242] EXT4-fs (loop6): Remounting filesystem read-only
[  629.288212][T30255] loop6: detected capacity change from 0 to 512
[  629.319664][T30255] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8928: bg 0: block 248: padding at end of block bitmap is not set
[  629.334515][T30255] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.8928: Failed to acquire dquot type 1
[  629.346846][T30255] EXT4-fs (loop6): 1 truncate cleaned up
[  629.353067][T30255] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  629.383526][T30265] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8932'.
[  629.449638][T30273] loop6: detected capacity change from 0 to 512
[  629.457422][T30273] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  629.471436][T30273] EXT4-fs (loop6): 1 truncate cleaned up
[  629.524549][T30282] loop6: detected capacity change from 0 to 512
[  629.548375][T30282] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  629.566548][T30282] EXT4-fs (loop6): orphan cleanup on readonly fs
[  629.574216][T30282] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.8940: corrupted inode contents
[  629.587560][T30282] EXT4-fs (loop6): Remounting filesystem read-only
[  629.594197][T30282] EXT4-fs (loop6): 1 truncate cleaned up
[  629.600109][   T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  629.610693][   T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  629.621364][   T12] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  629.651906][T30292] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8943'.
[  629.709445][T30279] loop1: detected capacity change from 0 to 2048
[  629.943808][T30305] loop7: detected capacity change from 0 to 512
[  630.002156][T30305] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  630.010364][T30305] EXT4-fs (loop7): orphan cleanup on readonly fs
[  630.018113][T30305] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8945: corrupted inode contents
[  630.030229][T30305] EXT4-fs (loop7): Remounting filesystem read-only
[  630.037129][T30305] EXT4-fs (loop7): 1 truncate cleaned up
[  630.043173][   T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  630.053794][   T12] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  630.099719][   T12] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  630.110949][T30312] loop3: detected capacity change from 0 to 512
[  630.137163][T30312] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  630.145405][T30312] EXT4-fs (loop3): orphan cleanup on readonly fs
[  630.156889][T30312] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.8949: corrupted inode contents
[  630.181532][T30312] EXT4-fs (loop3): Remounting filesystem read-only
[  630.193496][T30312] EXT4-fs (loop3): 1 truncate cleaned up
[  630.199639][  T147] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  630.210216][  T147] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  630.236488][  T147] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  630.634210][T30329] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8955'.
[  630.799592][T30326] loop4: detected capacity change from 0 to 2048
[  630.837249][T30339] loop7: detected capacity change from 0 to 512
[  630.863861][T30339] EXT4-fs: Ignoring removed oldalloc option
[  630.870217][T30339] EXT4-fs: Ignoring removed nomblk_io_submit option
[  630.920913][T30339] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  630.948675][T30339] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8958: bg 0: block 217: padding at end of block bitmap is not set
[  630.976625][T30339] EXT4-fs (loop7): Remounting filesystem read-only
[  631.081658][T30350] loop7: detected capacity change from 0 to 512
[  631.132805][T30350] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8961: bg 0: block 248: padding at end of block bitmap is not set
[  631.157351][T30350] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8961: Failed to acquire dquot type 1
[  631.187065][T30350] EXT4-fs (loop7): 1 truncate cleaned up
[  631.211454][T30350] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  631.307269][T30364] loop7: detected capacity change from 0 to 512
[  631.314134][T30364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  631.340108][T30364] EXT4-fs (loop7): 1 truncate cleaned up
[  631.351744][T30368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8967'.
[  631.447265][T30374] syzkaller0: entered promiscuous mode
[  631.452867][T30374] syzkaller0: entered allmulticast mode
[  631.482618][T30380] FAULT_INJECTION: forcing a failure.
[  631.482618][T30380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  631.495902][T30380] CPU: 0 UID: 0 PID: 30380 Comm: syz.1.8973 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  631.495932][T30380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  631.495980][T30380] Call Trace:
[  631.495987][T30380]  <TASK>
[  631.495995][T30380]  __dump_stack+0x1d/0x30
[  631.496065][T30380]  dump_stack_lvl+0xe8/0x140
[  631.496119][T30380]  dump_stack+0x15/0x1b
[  631.496137][T30380]  should_fail_ex+0x265/0x280
[  631.496168][T30380]  should_fail+0xb/0x20
[  631.496239][T30380]  should_fail_usercopy+0x1a/0x20
[  631.496308][T30380]  _copy_from_user+0x1c/0xb0
[  631.496339][T30380]  ___sys_sendmsg+0xc1/0x1d0
[  631.496373][T30380]  __x64_sys_sendmsg+0xd4/0x160
[  631.496399][T30380]  x64_sys_call+0x191e/0x3000
[  631.496446][T30380]  do_syscall_64+0xd2/0x200
[  631.496472][T30380]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  631.496535][T30380]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  631.496570][T30380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.496662][T30380] RIP: 0033:0x7fbfe43ef749
[  631.496681][T30380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  631.496718][T30380] RSP: 002b:00007fbfe2e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  631.496741][T30380] RAX: ffffffffffffffda RBX: 00007fbfe4645fa0 RCX: 00007fbfe43ef749
[  631.496754][T30380] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003
[  631.496767][T30380] RBP: 00007fbfe2e57090 R08: 0000000000000000 R09: 0000000000000000
[  631.496779][T30380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.496792][T30380] R13: 00007fbfe4646038 R14: 00007fbfe4645fa0 R15: 00007ffd39332f78
[  631.496874][T30380]  </TASK>
[  631.748367][T30385] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8975'.
[  631.796032][T30391] loop1: detected capacity change from 0 to 512
[  631.803428][T30391] EXT4-fs: Ignoring removed oldalloc option
[  631.809469][T30391] EXT4-fs: Ignoring removed nomblk_io_submit option
[  631.841142][T30391] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  631.853751][T30391] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8978: bg 0: block 217: padding at end of block bitmap is not set
[  631.871901][T30391] EXT4-fs (loop1): Remounting filesystem read-only
[  631.913085][T30397] netlink: 108 bytes leftover after parsing attributes in process `syz.7.8979'.
[  631.940238][T30399] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8980'.
[  632.018184][T30403] loop7: detected capacity change from 0 to 512
[  632.060699][T30405] loop4: detected capacity change from 0 to 512
[  632.088182][T30405] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8984: bg 0: block 248: padding at end of block bitmap is not set
[  632.113153][T30405] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8984: Failed to acquire dquot type 1
[  632.129565][T30405] EXT4-fs (loop4): 1 truncate cleaned up
[  632.137568][T30403] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  632.142142][T30405] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  632.156000][T30403] EXT4-fs (loop7): orphan cleanup on readonly fs
[  632.176481][T30403] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8983: corrupted inode contents
[  632.239029][T30403] EXT4-fs (loop7): Remounting filesystem read-only
[  632.248009][T30403] EXT4-fs (loop7): 1 truncate cleaned up
[  632.254304][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  632.264898][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  632.284563][ T1706] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  632.413629][T30419] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.423846][T30419] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.434473][T30421] usb usb8: usbfs: process 30421 (syz.7.8987) did not claim interface 0 before use
[  632.452909][T30386] syz.3.8976 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  632.464026][T30386] CPU: 1 UID: 0 PID: 30386 Comm: syz.3.8976 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  632.464056][T30386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  632.464070][T30386] Call Trace:
[  632.464078][T30386]  <TASK>
[  632.464088][T30386]  __dump_stack+0x1d/0x30
[  632.464183][T30386]  dump_stack_lvl+0xe8/0x140
[  632.464207][T30386]  dump_stack+0x15/0x1b
[  632.464224][T30386]  dump_header+0x81/0x220
[  632.464241][T30386]  oom_kill_process+0x342/0x400
[  632.464293][T30386]  out_of_memory+0x979/0xb80
[  632.464329][T30386]  try_charge_memcg+0x610/0xa10
[  632.464381][T30386]  charge_memcg+0x51/0xc0
[  632.464407][T30386]  mem_cgroup_swapin_charge_folio+0xcc/0x150
[  632.464431][T30386]  __read_swap_cache_async+0x17b/0x2d0
[  632.464491][T30386]  swap_cluster_readahead+0x362/0x3c0
[  632.464521][T30386]  swapin_readahead+0xde/0x800
[  632.464546][T30386]  ? mod_memcg_lruvec_state+0x1fc/0x2c0
[  632.464646][T30386]  ? __rcu_read_unlock+0x34/0x70
[  632.464671][T30386]  ? __rcu_read_unlock+0x4f/0x70
[  632.464699][T30386]  ? swap_cache_get_folio+0x277/0x280
[  632.464724][T30386]  do_swap_page+0x2ae/0x2370
[  632.464813][T30386]  ? css_rstat_updated+0xb7/0x240
[  632.464964][T30386]  ? __pfx_default_wake_function+0x10/0x10
[  632.465051][T30386]  handle_mm_fault+0x9a5/0x2be0
[  632.465081][T30386]  ? vma_start_read+0x141/0x1f0
[  632.465121][T30386]  do_user_addr_fault+0x630/0x1080
[  632.465149][T30386]  exc_page_fault+0x62/0xa0
[  632.465236][T30386]  asm_exc_page_fault+0x26/0x30
[  632.465255][T30386] RIP: 0033:0x7fd86e2e59c8
[  632.465273][T30386] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00
[  632.465341][T30386] RSP: 002b:00007fff3cef7990 EFLAGS: 00010212
[  632.465361][T30386] RAX: 000000000009a64b RBX: 00007fd86e667da0 RCX: 000000000009a4c0
[  632.465374][T30386] RDX: 000000000000018b RSI: 00007fff3cef7970 RDI: 0000000000000001
[  632.465386][T30386] RBP: 00007fd86e667da0 R08: 0000000017939f20 R09: 7fffffffffffffff
[  632.465510][T30386] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000009a6e8
[  632.465537][T30386] R13: 00007fff3cef7a80 R14: ffffffffffffffff R15: 00007fff3cef7aa0
[  632.465555][T30386]  </TASK>
[  632.465562][T30386] memory: usage 307200kB, limit 307200kB, failcnt 303
[  632.569491][T30425] loop7: detected capacity change from 0 to 512
[  632.570754][T30386] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0
[  632.590023][T30425] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8989: bg 0: block 248: padding at end of block bitmap is not set
[  632.591107][T30386] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[  632.596447][T30425] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8989: Failed to acquire dquot type 1
[  632.601186][T30386] Memory cgroup stats for 
[  632.606612][T30425] EXT4-fs (loop7): 1 truncate cleaned up
[  632.610565][T30386] /syz3
[  632.615519][T30425] ext4 filesystem being mounted at /462/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  632.634828][T30386] :
[  632.635122][T30386] cache 0
[  632.766686][T30386] rss 0
[  632.769208][T30429] netlink: 'syz.7.8989': attribute type 1 has an invalid length.
[  632.769554][T30386] shmem 0
[  632.769565][T30386] mapped_file 0
[  632.769574][T30386] dirty 0
[  632.769649][T30386] writeback 0
[  632.769659][T30386] workingset_refault_anon 89
[  632.777447][T30429] netlink: 224 bytes leftover after parsing attributes in process `syz.7.8989'.
[  632.780334][T30386] workingset_refault_file 259
[  632.808598][T30386] swap 196608
[  632.811892][T30386] swapcached 0
[  632.815276][T30386] pgpgin 596570
[  632.818807][T30386] pgpgout 596570
[  632.822381][T30386] pgfault 693457
[  632.825937][T30386] pgmajfault 62
[  632.829433][T30386] inactive_anon 0
[  632.833145][T30386] active_anon 0
[  632.836616][T30386] inactive_file 0
[  632.840238][T30386] active_file 0
[  632.843772][T30386] unevictable 0
[  632.847254][T30386] hierarchical_memory_limit 314572800
[  632.852680][T30386] hierarchical_memsw_limit 9223372036854771712
[  632.858829][T30386] total_cache 0
[  632.862280][T30386] total_rss 0
[  632.865549][T30386] total_shmem 0
[  632.869074][T30386] total_mapped_file 0
[  632.873056][T30386] total_dirty 0
[  632.876520][T30386] total_writeback 0
[  632.880328][T30386] total_workingset_refault_anon 89
[  632.885501][T30386] total_workingset_refault_file 259
[  632.890796][T30386] total_swap 196608
[  632.894607][T30386] total_swapcached 0
[  632.898592][T30386] total_pgpgin 596570
[  632.902577][T30386] total_pgpgout 596570
[  632.906657][T30386] total_pgfault 693457
[  632.910738][T30386] total_pgmajfault 62
[  632.914717][T30386] total_inactive_anon 0
[  632.918961][T30386] total_active_anon 0
[  632.922954][T30386] total_inactive_file 0
[  632.927238][T30386] total_active_file 0
[  632.931296][T30386] total_unevictable 0
[  632.935324][T30386] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8976,pid=30386,uid=0
[  632.950196][T30386] Memory cgroup out of memory: Killed process 30386 (syz.3.8976) total-vm:93968kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  633.143978][T30433] FAULT_INJECTION: forcing a failure.
[  633.143978][T30433] name failslab, interval 1, probability 0, space 0, times 0
[  633.156822][T30433] CPU: 0 UID: 0 PID: 30433 Comm: syz.6.8991 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  633.156852][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  633.156865][T30433] Call Trace:
[  633.156872][T30433]  <TASK>
[  633.156922][T30433]  __dump_stack+0x1d/0x30
[  633.156949][T30433]  dump_stack_lvl+0xe8/0x140
[  633.156973][T30433]  dump_stack+0x15/0x1b
[  633.156994][T30433]  should_fail_ex+0x265/0x280
[  633.157054][T30433]  should_failslab+0x8c/0xb0
[  633.157093][T30433]  kmem_cache_alloc_noprof+0x50/0x480
[  633.157178][T30433]  ? audit_log_start+0x342/0x720
[  633.157203][T30433]  audit_log_start+0x342/0x720
[  633.157228][T30433]  ? kstrtouint+0x76/0xc0
[  633.157331][T30433]  audit_seccomp+0x48/0x100
[  633.157365][T30433]  ? __seccomp_filter+0x82d/0x1250
[  633.157459][T30433]  __seccomp_filter+0x83e/0x1250
[  633.157490][T30433]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  633.157585][T30433]  ? vfs_write+0x7e8/0x960
[  633.157624][T30433]  __secure_computing+0x82/0x150
[  633.157652][T30433]  syscall_trace_enter+0xcf/0x1e0
[  633.157724][T30433]  do_syscall_64+0xac/0x200
[  633.157819][T30433]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  633.157845][T30433]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  633.157944][T30433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.157966][T30433] RIP: 0033:0x7fa25b5cf749
[  633.157984][T30433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  633.158005][T30433] RSP: 002b:00007fa25a02f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071
[  633.158029][T30433] RAX: ffffffffffffffda RBX: 00007fa25b825fa0 RCX: 00007fa25b5cf749
[  633.158110][T30433] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000000000000ee01
[  633.158125][T30433] RBP: 00007fa25a02f090 R08: 0000000000000000 R09: 0000000000000000
[  633.158137][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.158149][T30433] R13: 00007fa25b826038 R14: 00007fa25b825fa0 R15: 00007ffd4c2638d8
[  633.158170][T30433]  </TASK>
[  633.378319][T30438] loop7: detected capacity change from 0 to 512
[  633.384925][T30446] loop4: detected capacity change from 0 to 512
[  633.386405][T30438] EXT4-fs: Ignoring removed oldalloc option
[  633.397230][T30438] EXT4-fs: Ignoring removed nomblk_io_submit option
[  633.407095][T30446] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  633.415262][T30446] EXT4-fs (loop4): orphan cleanup on readonly fs
[  633.418608][T30438] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  633.423180][T30446] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  633.440821][T30438] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8992: bg 0: block 217: padding at end of block bitmap is not set
[  633.445761][T30446] EXT4-fs (loop4): Remounting filesystem read-only
[  633.459456][T30438] EXT4-fs (loop7): Remounting filesystem read-only
[  633.465569][T30446] EXT4-fs (loop4): 1 truncate cleaned up
[  633.484740][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  633.484792][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  633.484873][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  633.564959][T30458] netlink: 'syz.6.9001': attribute type 21 has an invalid length.
[  633.572930][T30458] netlink: 128 bytes leftover after parsing attributes in process `syz.6.9001'.
[  633.582352][T30458] netlink: 'syz.6.9001': attribute type 4 has an invalid length.
[  633.590196][T30458] netlink: 'syz.6.9001': attribute type 5 has an invalid length.
[  633.616656][   T29] kauditd_printk_skb: 991 callbacks suppressed
[  633.616708][   T29] audit: type=1400 audit(1763943099.104:63705): avc:  denied  { write } for  pid=30455 comm="syz.4.9000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  633.684142][T30463] loop6: detected capacity change from 0 to 512
[  633.696545][T30463] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  633.709382][T30463] EXT4-fs (loop6): 1 truncate cleaned up
[  633.722779][   T29] audit: type=1400 audit(1763943099.224:63706): avc:  denied  { read write open } for  pid=30462 comm="syz.6.9002" path="/524/bus/file2" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  633.751343][T30454] loop7: detected capacity change from 0 to 2048
[  634.060607][T30469] loop6: detected capacity change from 0 to 512
[  634.097811][T30469] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9003: bg 0: block 248: padding at end of block bitmap is not set
[  634.123099][T30469] Quota error (device loop6): write_blk: dquota write failed
[  634.130564][T30469] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  634.140507][T30469] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.9003: Failed to acquire dquot type 1
[  634.173320][T30469] EXT4-fs (loop6): 1 truncate cleaned up
[  634.185013][T30469] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  634.205137][T30469] netlink: 'syz.6.9003': attribute type 1 has an invalid length.
[  634.213201][T30469] __nla_validate_parse: 1 callbacks suppressed
[  634.213219][T30469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9003'.
[  634.230765][   T29] audit: type=1326 audit(1763943099.734:63707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.268039][   T29] audit: type=1326 audit(1763943099.754:63708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.291906][   T29] audit: type=1326 audit(1763943099.754:63709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.315847][   T29] audit: type=1326 audit(1763943099.754:63710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.339709][   T29] audit: type=1326 audit(1763943099.754:63711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.363684][   T29] audit: type=1326 audit(1763943099.754:63712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30479 comm="syz.7.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781701f749 code=0x7ffc0000
[  634.421579][T30488] loop7: detected capacity change from 0 to 512
[  634.428388][T30488] EXT4-fs: Ignoring removed oldalloc option
[  634.434325][T30488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  634.451630][T30488] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  634.465514][T30488] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9010: bg 0: block 217: padding at end of block bitmap is not set
[  634.481382][T30488] EXT4-fs (loop7): Remounting filesystem read-only
[  634.541643][T30494] loop6: detected capacity change from 0 to 512
[  634.551375][T30494] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  634.597947][T30494] EXT4-fs (loop6): 1 truncate cleaned up
[  634.688405][T30499] syzkaller0: entered promiscuous mode
[  634.693967][T30499] syzkaller0: entered allmulticast mode
[  634.732729][T30500] FAULT_INJECTION: forcing a failure.
[  634.732729][T30500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  634.746090][T30500] CPU: 0 UID: 0 PID: 30500 Comm: syz.6.9012 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  634.746170][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  634.746184][T30500] Call Trace:
[  634.746191][T30500]  <TASK>
[  634.746199][T30500]  __dump_stack+0x1d/0x30
[  634.746224][T30500]  dump_stack_lvl+0xe8/0x140
[  634.746308][T30500]  dump_stack+0x15/0x1b
[  634.746335][T30500]  should_fail_ex+0x265/0x280
[  634.746372][T30500]  should_fail+0xb/0x20
[  634.746392][T30500]  should_fail_usercopy+0x1a/0x20
[  634.746416][T30500]  _copy_to_user+0x20/0xa0
[  634.746456][T30500]  simple_read_from_buffer+0xb5/0x130
[  634.746484][T30500]  proc_fail_nth_read+0x10e/0x150
[  634.746579][T30500]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  634.746614][T30500]  vfs_read+0x1a8/0x770
[  634.746640][T30500]  ? __rcu_read_unlock+0x4f/0x70
[  634.746743][T30500]  ? __fget_files+0x184/0x1c0
[  634.746816][T30500]  ksys_read+0xda/0x1a0
[  634.746897][T30500]  __x64_sys_read+0x40/0x50
[  634.746922][T30500]  x64_sys_call+0x27c0/0x3000
[  634.746947][T30500]  do_syscall_64+0xd2/0x200
[  634.746972][T30500]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  634.747006][T30500]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  634.747050][T30500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.747081][T30500] RIP: 0033:0x7fa25b5ce15c
[  634.747100][T30500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  634.747202][T30500] RSP: 002b:00007fa25a00e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  634.747226][T30500] RAX: ffffffffffffffda RBX: 00007fa25b826090 RCX: 00007fa25b5ce15c
[  634.747242][T30500] RDX: 000000000000000f RSI: 00007fa25a00e0a0 RDI: 0000000000000007
[  634.747319][T30500] RBP: 00007fa25a00e090 R08: 0000000000000000 R09: 0000000000000000
[  634.747334][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.747348][T30500] R13: 00007fa25b826128 R14: 00007fa25b826090 R15: 00007ffd4c2638d8
[  634.747368][T30500]  </TASK>
[  634.946715][T30496] loop7: detected capacity change from 0 to 2048
[  635.036942][T30510] loop6: detected capacity change from 0 to 512
[  635.063797][T30512] loop3: detected capacity change from 0 to 512
[  635.088417][T30510] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  635.107277][T30510] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.9015: invalid block
[  635.109211][T30517] syzkaller0: entered promiscuous mode
[  635.119313][T30512] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  635.124461][T30517] syzkaller0: entered allmulticast mode
[  635.138490][T30512] EXT4-fs (loop3): orphan cleanup on readonly fs
[  635.159318][T30510] EXT4-fs (loop6): Remounting filesystem read-only
[  635.161427][T30512] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9017: corrupted inode contents
[  635.166132][T30510] EXT4-fs (loop6): 1 truncate cleaned up
[  635.187377][T30521] loop1: detected capacity change from 0 to 128
[  635.194530][T30512] EXT4-fs (loop3): Remounting filesystem read-only
[  635.203344][T30512] EXT4-fs (loop3): 1 truncate cleaned up
[  635.209612][ T1706] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  635.220373][ T1706] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  635.234130][T30523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9023'.
[  635.243249][ T1706] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  635.380333][T30537] syzkaller0: entered promiscuous mode
[  635.385928][T30537] syzkaller0: entered allmulticast mode
[  635.497121][T30533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9026'.
[  635.510922][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9030'.
[  635.520310][T30533] loop3: detected capacity change from 0 to 2048
[  635.533302][T30542] pimreg: entered allmulticast mode
[  635.542960][T30541] pimreg: left allmulticast mode
[  635.777357][T30553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9034'.
[  635.786892][T30554] loop3: detected capacity change from 0 to 512
[  635.793588][T30554] EXT4-fs: Ignoring removed oldalloc option
[  635.799706][T30554] EXT4-fs: Ignoring removed nomblk_io_submit option
[  635.831542][T30554] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  635.847922][T30554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9035: bg 0: block 217: padding at end of block bitmap is not set
[  635.863052][T30554] EXT4-fs (loop3): Remounting filesystem read-only
[  635.901904][T30564] loop3: detected capacity change from 0 to 512
[  635.936948][T30564] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  635.946616][T30564] EXT4-fs (loop3): orphan cleanup on readonly fs
[  635.954697][T30564] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9039: corrupted inode contents
[  635.983158][T30564] EXT4-fs (loop3): Remounting filesystem read-only
[  635.999872][T30564] EXT4-fs (loop3): 1 truncate cleaned up
[  636.006056][ T3882] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  636.016759][ T3882] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  636.023071][T30571] loop6: detected capacity change from 0 to 512
[  636.034512][T30571] EXT4-fs: Ignoring removed oldalloc option
[  636.040720][T30571] EXT4-fs: Ignoring removed nomblk_io_submit option
[  636.048321][ T3882] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  636.079305][T30571] ext4 filesystem being mounted at /531/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  636.105602][T30571] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9041: bg 0: block 217: padding at end of block bitmap is not set
[  636.128072][T30577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9043'.
[  636.137145][T30556] loop4: detected capacity change from 0 to 2048
[  636.153818][T30571] EXT4-fs (loop6): Remounting filesystem read-only
[  636.170715][T30577] pimreg: entered allmulticast mode
[  636.178691][T30577] pimreg: left allmulticast mode
[  636.189587][T30579] loop7: detected capacity change from 0 to 512
[  636.217673][T30579] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9044: bg 0: block 248: padding at end of block bitmap is not set
[  636.243342][T30587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9046'.
[  636.247303][T30579] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9044: Failed to acquire dquot type 1
[  636.256777][T30587] autofs4:pid:30587:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[  636.284684][T30579] EXT4-fs (loop7): 1 truncate cleaned up
[  636.295271][T30579] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.329297][T30591] loop1: detected capacity change from 0 to 512
[  636.368358][T30591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9047: bg 0: block 248: padding at end of block bitmap is not set
[  636.422902][T30591] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.9047: Failed to acquire dquot type 1
[  636.436260][T30595] uprobe: syz.3.9049:30595 failed to unregister, leaking uprobe
[  636.444057][T30595] uprobe: syz.3.9049:30595 failed to unregister, leaking uprobe
[  636.447129][T30591] EXT4-fs (loop1): 1 truncate cleaned up
[  636.458882][T30591] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  636.531074][T30591] netlink: 'syz.1.9047': attribute type 1 has an invalid length.
[  636.539120][T30591] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9047'.
[  636.747143][T30598] loop3: detected capacity change from 0 to 2048
[  636.805934][T30601] loop7: detected capacity change from 0 to 2048
[  636.829685][T30611] loop4: detected capacity change from 0 to 512
[  636.878052][T30611] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  636.887332][T30611] EXT4-fs (loop4): orphan cleanup on readonly fs
[  636.925998][T30611] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  636.986559][T30611] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  637.000019][T30611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9053: bg 0: block 40: padding at end of block bitmap is not set
[  637.016631][T30611] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  637.036546][T30611] EXT4-fs (loop4): 1 truncate cleaned up
[  637.100080][T30629] loop7: detected capacity change from 0 to 512
[  637.119141][T30629] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9059: bg 0: block 248: padding at end of block bitmap is not set
[  637.135987][T30629] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9059: Failed to acquire dquot type 1
[  637.148278][T30629] EXT4-fs (loop7): 1 truncate cleaned up
[  637.154342][T30629] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.157957][T30635] loop6: detected capacity change from 0 to 128
[  637.188364][T30637] loop4: detected capacity change from 0 to 512
[  637.191249][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9062'.
[  637.212734][T30639] syzkaller0: entered promiscuous mode
[  637.213251][T30637] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  637.218360][T30639] syzkaller0: entered allmulticast mode
[  637.231216][T30643] loop7: detected capacity change from 0 to 512
[  637.232176][T30637] EXT4-fs (loop4): orphan cleanup on readonly fs
[  637.247669][T30637] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  637.259346][T30637] EXT4-fs (loop4): Remounting filesystem read-only
[  637.265932][T30637] EXT4-fs (loop4): 1 truncate cleaned up
[  637.271992][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.282881][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.293581][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  637.309714][T30643] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9065: bg 0: block 248: padding at end of block bitmap is not set
[  637.324621][T30643] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9065: Failed to acquire dquot type 1
[  637.336796][T30643] EXT4-fs (loop7): 1 truncate cleaned up
[  637.343173][T30643] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  637.363465][T30643] netlink: 'syz.7.9065': attribute type 1 has an invalid length.
[  637.372272][T30643] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9065'.
[  637.481398][T30653] loop4: detected capacity change from 0 to 512
[  637.509040][T30653] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  637.518326][T30653] EXT4-fs (loop4): orphan cleanup on readonly fs
[  637.526294][T30653] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9068: corrupted inode contents
[  637.538855][T30658] loop7: detected capacity change from 0 to 512
[  637.539238][T30653] EXT4-fs (loop4): Remounting filesystem read-only
[  637.552185][T30653] EXT4-fs (loop4): 1 truncate cleaned up
[  637.558281][ T3882] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.569104][ T3882] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.580052][ T3882] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  637.591167][T30658] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  637.599219][T30658] EXT4-fs (loop7): orphan cleanup on readonly fs
[  637.608041][T30658] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.9070: corrupted inode contents
[  637.620146][T30658] EXT4-fs (loop7): Remounting filesystem read-only
[  637.626947][T30658] EXT4-fs (loop7): 1 truncate cleaned up
[  637.633439][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.644015][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  637.655172][ T3882] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  637.701572][T30671] loop4: detected capacity change from 0 to 128
[  637.710570][T30673] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  637.722649][T30673] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  637.779051][T30685] loop7: detected capacity change from 0 to 512
[  637.788627][T30687] FAULT_INJECTION: forcing a failure.
[  637.788627][T30687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.801873][T30687] CPU: 1 UID: 0 PID: 30687 Comm: syz.1.9081 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  637.801931][T30687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  637.801945][T30687] Call Trace:
[  637.801953][T30687]  <TASK>
[  637.801964][T30687]  __dump_stack+0x1d/0x30
[  637.801989][T30687]  dump_stack_lvl+0xe8/0x140
[  637.802068][T30687]  dump_stack+0x15/0x1b
[  637.802085][T30687]  should_fail_ex+0x265/0x280
[  637.802175][T30687]  should_fail+0xb/0x20
[  637.802194][T30687]  should_fail_usercopy+0x1a/0x20
[  637.802218][T30687]  _copy_from_user+0x1c/0xb0
[  637.802266][T30687]  ___sys_sendmsg+0xc1/0x1d0
[  637.802340][T30687]  __x64_sys_sendmsg+0xd4/0x160
[  637.802367][T30687]  x64_sys_call+0x191e/0x3000
[  637.802392][T30687]  do_syscall_64+0xd2/0x200
[  637.802412][T30687]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  637.802520][T30687]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  637.802616][T30687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.802642][T30687] RIP: 0033:0x7fbfe43ef749
[  637.802661][T30687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  637.802724][T30687] RSP: 002b:00007fbfe2e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  637.802820][T30687] RAX: ffffffffffffffda RBX: 00007fbfe4645fa0 RCX: 00007fbfe43ef749
[  637.802837][T30687] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  637.802851][T30687] RBP: 00007fbfe2e57090 R08: 0000000000000000 R09: 0000000000000000
[  637.802864][T30687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  637.802876][T30687] R13: 00007fbfe4646038 R14: 00007fbfe4645fa0 R15: 00007ffd39332f78
[  637.802969][T30687]  </TASK>
[  637.803629][T30685] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9080: bg 0: block 248: padding at end of block bitmap is not set
[  637.992506][T30685] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9080: Failed to acquire dquot type 1
[  638.004530][T30685] EXT4-fs (loop7): 1 truncate cleaned up
[  638.010694][T30685] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  638.039129][T30685] netlink: 'syz.7.9080': attribute type 1 has an invalid length.
[  638.051631][T30703] loop3: detected capacity change from 0 to 512
[  638.058617][T30703] EXT4-fs: Ignoring removed oldalloc option
[  638.062210][T30702] syzkaller0: entered promiscuous mode
[  638.064595][T30703] EXT4-fs: Ignoring removed nomblk_io_submit option
[  638.077099][T30702] syzkaller0: entered allmulticast mode
[  638.087032][T30705] loop6: detected capacity change from 0 to 512
[  638.100716][T30705] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  638.109584][T30705] EXT4-fs (loop6): orphan cleanup on readonly fs
[  638.110586][T30703] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  638.123214][T30705] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.9086: corrupted inode contents
[  638.138415][T30705] EXT4-fs (loop6): Remounting filesystem read-only
[  638.138963][T30703] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9087: bg 0: block 217: padding at end of block bitmap is not set
[  638.145135][T30705] EXT4-fs (loop6): 1 truncate cleaned up
[  638.159880][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  638.175665][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  638.175941][T30703] EXT4-fs (loop3): Remounting filesystem read-only
[  638.193433][ T3882] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  638.258908][T30722] FAULT_INJECTION: forcing a failure.
[  638.258908][T30722] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  638.272568][T30722] CPU: 1 UID: 0 PID: 30722 Comm: syz.4.9092 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  638.272599][T30722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  638.272692][T30722] Call Trace:
[  638.272701][T30722]  <TASK>
[  638.272709][T30722]  __dump_stack+0x1d/0x30
[  638.272795][T30722]  dump_stack_lvl+0xe8/0x140
[  638.272829][T30722]  dump_stack+0x15/0x1b
[  638.272900][T30722]  should_fail_ex+0x265/0x280
[  638.272932][T30722]  should_fail+0xb/0x20
[  638.272947][T30722]  should_fail_usercopy+0x1a/0x20
[  638.272967][T30722]  _copy_from_user+0x1c/0xb0
[  638.273044][T30722]  ___sys_sendmsg+0xc1/0x1d0
[  638.273124][T30722]  __x64_sys_sendmsg+0xd4/0x160
[  638.273144][T30722]  x64_sys_call+0x191e/0x3000
[  638.273164][T30722]  do_syscall_64+0xd2/0x200
[  638.273184][T30722]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  638.273244][T30722]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  638.273273][T30722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.273325][T30722] RIP: 0033:0x7f30aa4df749
[  638.273340][T30722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  638.273357][T30722] RSP: 002b:00007f30a8f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.273422][T30722] RAX: ffffffffffffffda RBX: 00007f30aa735fa0 RCX: 00007f30aa4df749
[  638.273434][T30722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  638.273458][T30722] RBP: 00007f30a8f3f090 R08: 0000000000000000 R09: 0000000000000000
[  638.273469][T30722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.273481][T30722] R13: 00007f30aa736038 R14: 00007f30aa735fa0 R15: 00007ffcdbb4d308
[  638.273496][T30722]  </TASK>
[  638.403870][T30726] loop3: detected capacity change from 0 to 2048
[  638.447298][T30732] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  638.464027][T30732] SELinux: failed to load policy
[  638.561144][T30741] loop4: detected capacity change from 0 to 512
[  638.569268][T30741] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  638.577454][T30741] EXT4-fs (loop4): orphan cleanup on readonly fs
[  638.585293][T30741] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9100: corrupted inode contents
[  638.598162][T30741] EXT4-fs (loop4): Remounting filesystem read-only
[  638.604960][T30741] EXT4-fs (loop4): 1 truncate cleaned up
[  638.611168][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  638.621864][   T12] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  638.627021][   T29] kauditd_printk_skb: 1676 callbacks suppressed
[  638.627036][   T29] audit: type=1400 audit(1763943104.134:65332): avc:  denied  { bind } for  pid=30740 comm="syz.1.9099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  638.632493][   T12] Quota error (device loop4): write_blk: dquota write failed
[  638.662294][   T29] audit: type=1400 audit(1763943104.164:65333): avc:  denied  { setopt } for  pid=30740 comm="syz.1.9099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  638.666695][   T12] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  638.698227][   T12] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  638.708395][   T12] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  638.708371][T30747] netlink: 'syz.1.9099': attribute type 10 has an invalid length.
[  638.717508][   T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  638.729884][T30747] team0: Port device dummy0 added
[  638.766671][T30749] loop3: detected capacity change from 0 to 512
[  638.781600][T30749] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9101: bg 0: block 248: padding at end of block bitmap is not set
[  638.792224][T30754] syzkaller0: entered promiscuous mode
[  638.801559][T30754] syzkaller0: entered allmulticast mode
[  638.803807][T30749] Quota error (device loop3): write_blk: dquota write failed
[  638.814902][T30749] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  638.815156][T30758] loop6: detected capacity change from 0 to 512
[  638.825187][T30749] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.9101: Failed to acquire dquot type 1
[  638.843743][T30749] EXT4-fs (loop3): 1 truncate cleaned up
[  638.847931][T30758] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9104: bg 0: block 248: padding at end of block bitmap is not set
[  638.854543][T30749] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  638.864446][T30758] Quota error (device loop6): write_blk: dquota write failed
[  638.888530][T30758] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  638.898552][T30758] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.9104: Failed to acquire dquot type 1
[  638.912088][T30758] EXT4-fs (loop6): 1 truncate cleaned up
[  638.918561][T30758] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  638.952290][T30758] netlink: 'syz.6.9104': attribute type 1 has an invalid length.
[  638.966876][T30763] loop3: detected capacity change from 0 to 512
[  638.976021][T30763] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  638.984387][T30763] EXT4-fs (loop3): orphan cleanup on readonly fs
[  638.992316][T30763] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9105: corrupted inode contents
[  639.004583][T30763] EXT4-fs (loop3): Remounting filesystem read-only
[  639.011454][T30767] syzkaller0: entered promiscuous mode
[  639.011511][T30763] EXT4-fs (loop3): 1 truncate cleaned up
[  639.017134][T30767] syzkaller0: entered allmulticast mode
[  639.022807][ T3882] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  639.038949][ T3882] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  639.049694][ T3882] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  639.287940][T30784] loop7: detected capacity change from 0 to 512
[  639.297139][T30784] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  639.305291][T30784] EXT4-fs (loop7): orphan cleanup on readonly fs
[  639.312948][T30784] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  639.325031][T30784] EXT4-fs (loop7): Remounting filesystem read-only
[  639.332264][T30784] EXT4-fs (loop7): 1 truncate cleaned up
[  639.338265][   T31] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  639.348848][   T31] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  639.359471][   T31] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  639.372918][T30790] __nla_validate_parse: 2 callbacks suppressed
[  639.372949][T30790] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9114'.
[  639.388580][T30791] FAULT_INJECTION: forcing a failure.
[  639.388580][T30791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.401720][T30791] CPU: 1 UID: 0 PID: 30791 Comm: syz.4.9110 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  639.401754][T30791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  639.401812][T30791] Call Trace:
[  639.401839][T30791]  <TASK>
[  639.401849][T30791]  __dump_stack+0x1d/0x30
[  639.401875][T30791]  dump_stack_lvl+0xe8/0x140
[  639.401897][T30791]  dump_stack+0x15/0x1b
[  639.401916][T30791]  should_fail_ex+0x265/0x280
[  639.401997][T30791]  should_fail+0xb/0x20
[  639.402017][T30791]  should_fail_usercopy+0x1a/0x20
[  639.402042][T30791]  _copy_from_user+0x1c/0xb0
[  639.402072][T30791]  __x64_sys_epoll_ctl+0x92/0x100
[  639.402210][T30791]  x64_sys_call+0x706/0x3000
[  639.402236][T30791]  do_syscall_64+0xd2/0x200
[  639.402303][T30791]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  639.402332][T30791]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  639.402482][T30791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.402506][T30791] RIP: 0033:0x7f30aa4df749
[  639.402523][T30791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  639.402542][T30791] RSP: 002b:00007f30a8efd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  639.402564][T30791] RAX: ffffffffffffffda RBX: 00007f30aa736180 RCX: 00007f30aa4df749
[  639.402578][T30791] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000005
[  639.402591][T30791] RBP: 00007f30a8efd090 R08: 0000000000000000 R09: 0000000000000000
[  639.402673][T30791] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.402688][T30791] R13: 00007f30aa736218 R14: 00007f30aa736180 R15: 00007ffcdbb4d308
[  639.402707][T30791]  </TASK>
[  639.693983][T30795] syzkaller0: entered promiscuous mode
[  639.700069][T30795] syzkaller0: entered allmulticast mode
[  639.785831][T30800] loop6: detected capacity change from 0 to 512
[  639.915853][T30805] loop7: detected capacity change from 0 to 512
[  640.043459][T30808] loop1: detected capacity change from 0 to 512
[  640.051199][T30800] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  640.059278][T30800] EXT4-fs (loop6): orphan cleanup on readonly fs
[  640.067221][T30800] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.9115: corrupted inode contents
[  640.075143][T30805] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  640.089656][T30800] EXT4-fs (loop6): Remounting filesystem read-only
[  640.096536][T30800] EXT4-fs (loop6): 1 truncate cleaned up
[  640.102416][   T31] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.112969][   T31] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.123780][T30805] EXT4-fs (loop7): orphan cleanup on readonly fs
[  640.130265][   T31] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  640.159555][T30808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9119: bg 0: block 248: padding at end of block bitmap is not set
[  640.175243][T30805] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  640.187076][T30808] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.9119: Failed to acquire dquot type 1
[  640.198784][T30805] EXT4-fs (loop7): Remounting filesystem read-only
[  640.199112][T30808] EXT4-fs (loop1): 1 truncate cleaned up
[  640.205651][T30805] EXT4-fs (loop7): 1 truncate cleaned up
[  640.212039][T30808] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  640.226699][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.237897][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.280567][ T3882] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  640.330552][T30808] netlink: 'syz.1.9119': attribute type 1 has an invalid length.
[  640.338458][T30808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9119'.
[  640.413571][T30828] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9125'.
[  640.548418][T30834] syzkaller0: entered promiscuous mode
[  640.554056][T30834] syzkaller0: entered allmulticast mode
[  640.554134][T30840] loop4: detected capacity change from 0 to 512
[  640.577801][T30841] loop7: detected capacity change from 0 to 512
[  640.586245][T30841] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  640.611410][T30841] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.9130: invalid block
[  640.624098][T30840] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9131: bg 0: block 248: padding at end of block bitmap is not set
[  640.647448][T30841] EXT4-fs (loop7): Remounting filesystem read-only
[  640.656656][T30841] EXT4-fs (loop7): 1 truncate cleaned up
[  640.676249][T30840] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9131: Failed to acquire dquot type 1
[  640.702241][T30840] EXT4-fs (loop4): 1 truncate cleaned up
[  640.719553][T30840] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  640.724626][T30847] loop6: detected capacity change from 0 to 512
[  640.741686][T30836] loop1: detected capacity change from 0 to 2048
[  640.750251][T30847] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  640.759289][T30847] EXT4-fs (loop6): orphan cleanup on readonly fs
[  640.769929][T30847] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  640.793578][T30818] loop3: detected capacity change from 0 to 2048
[  640.831531][T30847] EXT4-fs (loop6): Remounting filesystem read-only
[  640.843744][T30847] EXT4-fs (loop6): 1 truncate cleaned up
[  640.850054][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.860853][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  640.875194][ T3882] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  641.121606][T30873] loop4: detected capacity change from 0 to 2048
[  641.182761][T30875] loop6: detected capacity change from 0 to 512
[  641.209662][T30875] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  641.217745][T30875] EXT4-fs (loop6): orphan cleanup on readonly fs
[  641.225968][T30875] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.9138: corrupted inode contents
[  641.238039][T30875] EXT4-fs (loop6): Remounting filesystem read-only
[  641.244623][T30875] EXT4-fs (loop6): 1 truncate cleaned up
[  641.292756][T30881] syzkaller0: entered promiscuous mode
[  641.298301][T30881] syzkaller0: entered allmulticast mode
[  641.663442][ T1706] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  641.674046][ T1706] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  641.684608][ T1706] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  641.705010][T30883] netlink: 108 bytes leftover after parsing attributes in process `syz.7.9143'.
[  641.750830][T30887] loop1: detected capacity change from 0 to 512
[  641.768174][T30887] EXT4-fs (loop1): too many log groups per flexible block group
[  641.777391][T30887] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  641.784336][T30887] EXT4-fs (loop1): mount failed
[  641.876817][T30906] loop1: detected capacity change from 0 to 2048
[  641.878963][T30909] loop3: detected capacity change from 0 to 512
[  641.895111][T30902] loop7: detected capacity change from 0 to 512
[  641.902972][T30909] EXT4-fs: Ignoring removed oldalloc option
[  641.909214][T30909] EXT4-fs: Ignoring removed nomblk_io_submit option
[  641.920373][T30913] loop4: detected capacity change from 0 to 1024
[  641.927133][T30902] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  641.929840][T30905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9150'.
[  641.935123][T30902] EXT4-fs (loop7): orphan cleanup on readonly fs
[  641.950913][T30913] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  641.962086][T30913] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  641.973984][T30913] JBD2: no valid journal superblock found
[  641.974550][T30902] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  641.979849][T30913] EXT4-fs (loop4): Could not load journal inode
[  641.983461][T30909] ext4 filesystem being mounted at /523/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  641.992490][T30902] EXT4-fs (loop7): Remounting filesystem read-only
[  642.023833][T30902] EXT4-fs (loop7): 1 truncate cleaned up
[  642.029959][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  642.040584][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  642.040950][T30909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9153: bg 0: block 217: padding at end of block bitmap is not set
[  642.065767][T30909] EXT4-fs (loop3): Remounting filesystem read-only
[  642.077059][T30920] loop4: detected capacity change from 0 to 512
[  642.084276][ T3882] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  642.119720][T30920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9156: bg 0: block 248: padding at end of block bitmap is not set
[  642.197082][T30929] syzkaller0: entered promiscuous mode
[  642.202788][T30929] syzkaller0: entered allmulticast mode
[  642.216051][T30920] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9156: Failed to acquire dquot type 1
[  642.376108][T30920] EXT4-fs (loop4): 1 truncate cleaned up
[  642.382430][T30920] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  642.402375][T30920] netlink: 'syz.4.9156': attribute type 1 has an invalid length.
[  642.410203][T30920] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9156'.
[  642.427852][T30940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9162'.
[  642.480832][T30941] loop7: detected capacity change from 0 to 512
[  642.775169][T30941] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  642.783439][T30941] EXT4-fs (loop7): orphan cleanup on readonly fs
[  642.791779][T30941] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.9160: corrupted inode contents
[  642.803878][T30941] EXT4-fs (loop7): Remounting filesystem read-only
[  642.810618][T30941] EXT4-fs (loop7): 1 truncate cleaned up
[  642.818148][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  642.828950][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  642.839731][ T1706] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  642.867472][T30951] FAULT_INJECTION: forcing a failure.
[  642.867472][T30951] name failslab, interval 1, probability 0, space 0, times 0
[  642.880437][T30951] CPU: 1 UID: 0 PID: 30951 Comm: syz.6.9164 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  642.880469][T30951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  642.880481][T30951] Call Trace:
[  642.880568][T30951]  <TASK>
[  642.880576][T30951]  __dump_stack+0x1d/0x30
[  642.880598][T30951]  dump_stack_lvl+0xe8/0x140
[  642.880686][T30951]  dump_stack+0x15/0x1b
[  642.880702][T30951]  should_fail_ex+0x265/0x280
[  642.880733][T30951]  should_failslab+0x8c/0xb0
[  642.880820][T30951]  kmem_cache_alloc_noprof+0x50/0x480
[  642.880879][T30951]  ? audit_log_start+0x342/0x720
[  642.880899][T30951]  audit_log_start+0x342/0x720
[  642.880938][T30951]  ? kstrtouint+0x76/0xc0
[  642.880965][T30951]  audit_seccomp+0x48/0x100
[  642.881053][T30951]  ? __seccomp_filter+0x82d/0x1250
[  642.881077][T30951]  __seccomp_filter+0x83e/0x1250
[  642.881102][T30951]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  642.881139][T30951]  ? vfs_write+0x7e8/0x960
[  642.881160][T30951]  ? __rcu_read_unlock+0x4f/0x70
[  642.881285][T30951]  ? __fget_files+0x184/0x1c0
[  642.881312][T30951]  __secure_computing+0x82/0x150
[  642.881395][T30951]  syscall_trace_enter+0xcf/0x1e0
[  642.881420][T30951]  do_syscall_64+0xac/0x200
[  642.881439][T30951]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  642.881466][T30951]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  642.881496][T30951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.881555][T30951] RIP: 0033:0x7fa25b5cf749
[  642.881570][T30951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  642.881587][T30951] RSP: 002b:00007fa25a02f038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e
[  642.881606][T30951] RAX: ffffffffffffffda RBX: 00007fa25b825fa0 RCX: 00007fa25b5cf749
[  642.881619][T30951] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000001022
[  642.881631][T30951] RBP: 00007fa25a02f090 R08: 0000000000000000 R09: 0000000000000000
[  642.881642][T30951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.881653][T30951] R13: 00007fa25b826038 R14: 00007fa25b825fa0 R15: 00007ffd4c2638d8
[  642.881748][T30951]  </TASK>
[  643.183638][T30960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9169'.
[  643.207390][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9166'.
[  643.233397][T30953] autofs4:pid:30953:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[  643.255801][T30966] SELinux: failed to load policy
[  643.318546][T30968] syzkaller0: entered promiscuous mode
[  643.324214][T30968] syzkaller0: entered allmulticast mode
[  643.345031][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9172'.
[  643.355528][T30972] autofs4:pid:30972:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[  643.683082][T30980] loop7: detected capacity change from 0 to 512
[  643.690181][   T29] kauditd_printk_skb: 577 callbacks suppressed
[  643.690211][   T29] audit: type=1400 audit(1763943109.184:65853): avc:  denied  { allowed } for  pid=30978 comm="syz.7.9177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  643.716401][   T29] audit: type=1400 audit(1763943109.184:65854): avc:  denied  { create } for  pid=30978 comm="syz.7.9177" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  643.737906][   T29] audit: type=1400 audit(1763943109.194:65855): avc:  denied  { mounton } for  pid=30978 comm="syz.7.9177" path="/501/file0" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  643.862451][T30980] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9177: bg 0: block 248: padding at end of block bitmap is not set
[  643.880434][T30980] Quota error (device loop7): write_blk: dquota write failed
[  643.887944][T30980] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  643.897989][T30980] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9177: Failed to acquire dquot type 1
[  643.911875][T30980] EXT4-fs (loop7): 1 truncate cleaned up
[  643.919593][T30980] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  643.919627][   T29] audit: type=1400 audit(1763943109.424:65856): avc:  denied  { mount } for  pid=30978 comm="syz.7.9177" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  643.922715][   T29] audit: type=1400 audit(1763943109.424:65857): avc:  denied  { create } for  pid=30988 comm="syz.4.9180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  643.986125][   T29] audit: type=1400 audit(1763943109.484:65858): avc:  denied  { unmount } for  pid=24262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  644.006092][   T29] audit: type=1400 audit(1763943109.484:65859): avc:  denied  { bind } for  pid=30988 comm="syz.4.9180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  644.025850][   T29] audit: type=1400 audit(1763943109.484:65860): avc:  denied  { name_bind } for  pid=30988 comm="syz.4.9180" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  644.048189][T30987] loop1: detected capacity change from 0 to 2048
[  644.222904][T31005] loop3: detected capacity change from 0 to 512
[  644.231775][T31005] EXT4-fs: Ignoring removed oldalloc option
[  644.237919][T31005] EXT4-fs: Ignoring removed nomblk_io_submit option
[  644.248809][T31005] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  644.284052][T31009] loop7: detected capacity change from 0 to 512
[  644.308330][T31009] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  644.316483][T31009] EXT4-fs (loop7): orphan cleanup on readonly fs
[  644.325734][T31009] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.9181: corrupted inode contents
[  644.339068][T31009] EXT4-fs (loop7): Remounting filesystem read-only
[  644.345731][T31009] EXT4-fs (loop7): 1 truncate cleaned up
[  644.377308][T31005] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9185: bg 0: block 217: padding at end of block bitmap is not set
[  644.393446][T31013] SELinux:  policydb string length -881393662 does not match expected length 8
[  644.420568][T31005] EXT4-fs (loop3): Remounting filesystem read-only
[  644.431548][T31013] SELinux: failed to load policy
[  644.457454][T31015] syzkaller0: entered promiscuous mode
[  644.463016][T31015] syzkaller0: entered allmulticast mode
[  644.671892][T31017] loop6: detected capacity change from 0 to 512
[  644.687278][T31017] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  644.695587][T31017] EXT4-fs (loop6): orphan cleanup on readonly fs
[  644.704108][T31017] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.9189: corrupted inode contents
[  644.717816][T31017] EXT4-fs (loop6): Remounting filesystem read-only
[  644.724509][T31017] EXT4-fs (loop6): 1 truncate cleaned up
[  644.830103][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  644.841164][ T3882] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  644.851807][ T3882] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  644.862285][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  644.873184][ T3882] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  644.883889][ T3882] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  644.911210][T31021] loop3: detected capacity change from 0 to 512
[  644.930558][T31021] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9188: bg 0: block 248: padding at end of block bitmap is not set
[  644.945497][T31029] __nla_validate_parse: 1 callbacks suppressed
[  644.945516][T31029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9187'.
[  644.949068][T31021] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.9188: Failed to acquire dquot type 1
[  644.974618][T31021] EXT4-fs (loop3): 1 truncate cleaned up
[  644.979149][T31031] netlink: 'syz.1.9192': attribute type 1 has an invalid length.
[  644.981056][T31021] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  644.995913][T31031] 8021q: adding VLAN 0 to HW filter on device bond1
[  645.012054][T31031] bond1: entered allmulticast mode
[  645.025160][T31031] bond1: (slave ip6gretap1): making interface the new active one
[  645.033190][T31031] ip6gretap1: entered allmulticast mode
[  645.055518][T31031] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  645.073377][T31035] loop4: detected capacity change from 0 to 512
[  645.116072][T31038] loop1: detected capacity change from 0 to 512
[  645.126521][T31035] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  645.134580][T31035] EXT4-fs (loop4): orphan cleanup on readonly fs
[  645.144256][T31044] loop7: detected capacity change from 0 to 128
[  645.163418][T31035] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  645.175450][T31035] EXT4-fs (loop4): Remounting filesystem read-only
[  645.182291][T31035] EXT4-fs (loop4): 1 truncate cleaned up
[  645.188317][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.198975][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.212651][T31038] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9195: bg 0: block 248: padding at end of block bitmap is not set
[  645.228819][   T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  645.245807][T31038] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.9195: Failed to acquire dquot type 1
[  645.282514][T31051] loop3: detected capacity change from 0 to 512
[  645.304678][T31051] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  645.316761][T31051] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.9197: invalid block
[  645.339295][T31051] EXT4-fs (loop3): Remounting filesystem read-only
[  645.346139][T31051] EXT4-fs (loop3): 1 truncate cleaned up
[  645.353696][T31038] EXT4-fs (loop1): 1 truncate cleaned up
[  645.359968][T31038] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  645.407263][T31057] loop7: detected capacity change from 0 to 128
[  645.426587][T31038] netlink: 'syz.1.9195': attribute type 1 has an invalid length.
[  645.434416][T31038] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9195'.
[  645.458897][T31053] loop4: detected capacity change from 0 to 2048
[  645.639535][T31064] loop1: detected capacity change from 0 to 512
[  645.658318][T31064] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  645.666634][T31064] EXT4-fs (loop1): orphan cleanup on readonly fs
[  645.675625][T31064] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  645.687240][T31064] EXT4-fs (loop1): Remounting filesystem read-only
[  645.694017][T31064] EXT4-fs (loop1): 1 truncate cleaned up
[  645.700276][  T147] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.710827][T31068] loop4: detected capacity change from 0 to 512
[  645.711049][  T147] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.728067][  T147] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  645.746051][T31068] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  645.764490][T31068] EXT4-fs (loop4): orphan cleanup on readonly fs
[  645.780400][T31072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9202'.
[  645.790082][T31068] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9201: corrupted inode contents
[  645.802638][T31068] EXT4-fs (loop4): Remounting filesystem read-only
[  645.809514][T31068] EXT4-fs (loop4): 1 truncate cleaned up
[  645.815542][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.826258][  T147] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  645.852624][  T147] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  645.921858][T31077] syzkaller0: entered promiscuous mode
[  645.927540][T31077] syzkaller0: entered allmulticast mode
[  646.200413][T31085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9207'.
[  646.219650][T31083] loop3: detected capacity change from 0 to 512
[  646.226411][T31083] /dev/loop3: Can't open blockdev
[  646.301727][T31089] loop7: detected capacity change from 0 to 128
[  646.329524][T31093] loop1: detected capacity change from 0 to 512
[  646.347502][T31093] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  646.361949][T31093] EXT4-fs (loop1): orphan cleanup on readonly fs
[  646.371770][T31093] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.9211: corrupted inode contents
[  646.383590][T31087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9208'.
[  646.394430][T31093] EXT4-fs (loop1): Remounting filesystem read-only
[  646.401363][T31093] EXT4-fs (loop1): 1 truncate cleaned up
[  646.407320][  T147] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  646.418022][  T147] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  646.428888][T31087] loop6: detected capacity change from 0 to 2048
[  646.435740][  T147] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  646.478885][T31105] loop1: detected capacity change from 0 to 512
[  646.491819][T31105] EXT4-fs: Ignoring removed oldalloc option
[  646.497854][T31105] EXT4-fs: Ignoring removed nomblk_io_submit option
[  646.528530][T31105] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  646.555255][T31105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9212: bg 0: block 217: padding at end of block bitmap is not set
[  646.575152][T31111] loop6: detected capacity change from 0 to 512
[  646.582236][T31105] EXT4-fs (loop1): Remounting filesystem read-only
[  646.595656][T31091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9210'.
[  646.606380][T31111] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  646.614422][T31111] EXT4-fs (loop6): orphan cleanup on readonly fs
[  646.621353][T31091] loop4: detected capacity change from 0 to 2048
[  646.628995][T31111] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  646.641850][T31111] EXT4-fs (loop6): Remounting filesystem read-only
[  646.648582][T31111] EXT4-fs (loop6): 1 truncate cleaned up
[  646.651344][T31119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9215'.
[  646.654530][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  646.673828][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  646.684453][  T147] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  646.736289][T31124] loop7: detected capacity change from 0 to 512
[  646.760283][T31124] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9217: bg 0: block 248: padding at end of block bitmap is not set
[  646.802552][T31124] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.9217: Failed to acquire dquot type 1
[  646.814714][T31124] EXT4-fs (loop7): 1 truncate cleaned up
[  646.821360][T31124] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  646.871412][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9220'.
[  647.001482][T31143] loop4: detected capacity change from 0 to 512
[  647.018716][T31143] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9225: bg 0: block 248: padding at end of block bitmap is not set
[  647.033860][T31143] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9225: Failed to acquire dquot type 1
[  647.045902][T31143] EXT4-fs (loop4): 1 truncate cleaned up
[  647.052467][T31143] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  647.086149][T31143] netlink: 'syz.4.9225': attribute type 1 has an invalid length.
[  647.094046][T31143] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9225'.
[  647.103977][T31141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9224'.
[  647.122034][T31152] loop1: detected capacity change from 0 to 512
[  647.147138][T31152] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  647.155310][T31152] EXT4-fs (loop1): orphan cleanup on readonly fs
[  647.163545][T31152] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.9227: corrupted inode contents
[  647.175660][T31148] loop7: detected capacity change from 0 to 2048
[  647.175760][T31152] EXT4-fs (loop1): Remounting filesystem read-only
[  647.189039][T31152] EXT4-fs (loop1): 1 truncate cleaned up
[  647.196450][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  647.207153][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  647.217869][   T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  647.283485][T31160] loop1: detected capacity change from 0 to 512
[  647.305718][T31160] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9228: bg 0: block 248: padding at end of block bitmap is not set
[  647.322444][T31160] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.9228: Failed to acquire dquot type 1
[  647.334725][T31160] EXT4-fs (loop1): 1 truncate cleaned up
[  647.341032][T31160] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  647.517162][T31180] loop7: detected capacity change from 0 to 512
[  647.523766][T31180] EXT4-fs: Ignoring removed oldalloc option
[  647.529889][T31180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  647.539756][T31175] loop4: detected capacity change from 0 to 512
[  647.557520][T31175] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  647.565589][T31175] EXT4-fs (loop4): orphan cleanup on readonly fs
[  647.573560][T31180] ext4 filesystem being mounted at /512/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  647.585285][T31175] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9232: corrupted inode contents
[  647.597417][T31175] EXT4-fs (loop4): Remounting filesystem read-only
[  647.599084][T31180] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9237: bg 0: block 217: padding at end of block bitmap is not set
[  647.604041][T31175] EXT4-fs (loop4): 1 truncate cleaned up
[  647.619012][ T3882] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  647.624697][T31189] loop6: detected capacity change from 0 to 128
[  647.635026][ T3882] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  647.635314][ T3882] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  647.643153][T31180] EXT4-fs (loop7): Remounting filesystem read-only
[  647.693331][T31191] loop1: detected capacity change from 0 to 512
[  647.708286][T31191] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9240: bg 0: block 248: padding at end of block bitmap is not set
[  647.722822][T31191] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.9240: Failed to acquire dquot type 1
[  647.735119][T31191] EXT4-fs (loop1): 1 truncate cleaned up
[  647.741481][T31191] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  647.927336][T31215] loop1: detected capacity change from 0 to 512
[  647.945011][T31219] autofs4:pid:31219:validate_dev_ioctl: path string terminator missing for cmd(0xc018937a)
[  647.954367][T31215] EXT4-fs: Ignoring removed oldalloc option
[  647.961134][T31215] EXT4-fs: Ignoring removed nomblk_io_submit option
[  648.008448][T31215] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  648.024807][T31228] loop6: detected capacity change from 0 to 512
[  648.041645][T31228] EXT4-fs: Ignoring removed oldalloc option
[  648.047688][T31228] EXT4-fs: Ignoring removed nomblk_io_submit option
[  648.105648][T31215] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9249: bg 0: block 217: padding at end of block bitmap is not set
[  648.161362][T31215] EXT4-fs (loop1): Remounting filesystem read-only
[  648.173003][T31228] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  648.201128][T31228] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9254: bg 0: block 217: padding at end of block bitmap is not set
[  648.216712][T31228] EXT4-fs (loop6): Remounting filesystem read-only
[  648.340212][T31252] loop4: detected capacity change from 0 to 128
[  648.465152][T31267] loop6: detected capacity change from 0 to 512
[  648.488295][T31267] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9268: bg 0: block 248: padding at end of block bitmap is not set
[  648.503103][T31267] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.9268: Failed to acquire dquot type 1
[  648.515284][T31267] EXT4-fs (loop6): 1 truncate cleaned up
[  648.524866][T31267] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  648.591456][T31278] loop6: detected capacity change from 0 to 512
[  648.599170][T31278] EXT4-fs: Ignoring removed oldalloc option
[  648.605163][T31278] EXT4-fs: Ignoring removed nomblk_io_submit option
[  648.619407][T31278] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  648.643775][T31278] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9270: bg 0: block 217: padding at end of block bitmap is not set
[  648.681810][T31278] EXT4-fs (loop6): Remounting filesystem read-only
[  648.697777][   T29] kauditd_printk_skb: 1608 callbacks suppressed
[  648.697797][   T29] audit: type=1400 audit(1763943114.204:67391): avc:  denied  { create } for  pid=31286 comm="syz.3.9274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  648.701223][T31289] FAULT_INJECTION: forcing a failure.
[  648.701223][T31289] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.704503][   T29] audit: type=1400 audit(1763943114.204:67392): avc:  denied  { setopt } for  pid=31286 comm="syz.3.9274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  648.723762][T31289] CPU: 1 UID: 0 PID: 31289 Comm: syz.4.9275 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  648.723884][T31289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  648.723897][T31289] Call Trace:
[  648.723905][T31289]  <TASK>
[  648.723913][T31289]  __dump_stack+0x1d/0x30
[  648.723944][T31289]  dump_stack_lvl+0xe8/0x140
[  648.723984][T31289]  dump_stack+0x15/0x1b
[  648.724051][T31289]  should_fail_ex+0x265/0x280
[  648.724147][T31289]  should_fail+0xb/0x20
[  648.724165][T31289]  should_fail_usercopy+0x1a/0x20
[  648.724254][T31289]  strncpy_from_user+0x25/0x230
[  648.724281][T31289]  ? kmem_cache_alloc_noprof+0x242/0x480
[  648.724310][T31289]  ? getname_flags+0x80/0x3b0
[  648.724415][T31289]  getname_flags+0xae/0x3b0
[  648.724445][T31289]  do_sys_openat2+0x60/0x110
[  648.724467][T31289]  __x64_sys_openat+0xf2/0x120
[  648.724545][T31289]  x64_sys_call+0x2eab/0x3000
[  648.724568][T31289]  do_syscall_64+0xd2/0x200
[  648.724590][T31289]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  648.724689][T31289]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  648.724722][T31289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.724744][T31289] RIP: 0033:0x7f30aa4ddf90
[  648.724798][T31289] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  648.724817][T31289] RSP: 002b:00007f30a8f3ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  648.724838][T31289] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f30aa4ddf90
[  648.724852][T31289] RDX: 0000000000000002 RSI: 00007f30a8f3efa0 RDI: 00000000ffffff9c
[  648.724866][T31289] RBP: 00007f30a8f3efa0 R08: 0000000000000000 R09: 0000000000000000
[  648.724879][T31289] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  648.724892][T31289] R13: 00007f30aa736038 R14: 00007f30aa735fa0 R15: 00007ffcdbb4d308
[  648.724913][T31289]  </TASK>
[  648.943250][   T29] audit: type=1400 audit(1763943114.234:67393): avc:  denied  { unmount } for  pid=22228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  648.943725][   T31] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  648.963680][   T29] audit: type=1400 audit(1763943114.264:67394): avc:  denied  { bind } for  pid=31290 comm="syz.4.9277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  648.975789][   T31] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  648.995040][   T29] audit: type=1400 audit(1763943114.264:67395): avc:  denied  { name_bind } for  pid=31290 comm="syz.4.9277" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  649.029333][   T29] audit: type=1400 audit(1763943114.264:67396): avc:  denied  { node_bind } for  pid=31290 comm="syz.4.9277" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  649.050581][   T29] audit: type=1400 audit(1763943114.264:67397): avc:  denied  { write } for  pid=31290 comm="syz.4.9277" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  649.071485][   T29] audit: type=1400 audit(1763943114.264:67398): avc:  denied  { connect } for  pid=31290 comm="syz.4.9277" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  649.181975][T31298] loop4: detected capacity change from 0 to 512
[  649.193682][T31301] hub 5-0:1.0: USB hub found
[  649.198622][T31301] hub 5-0:1.0: 8 ports detected
[  649.218107][T31298] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  649.226273][T31298] EXT4-fs (loop4): orphan cleanup on readonly fs
[  649.244579][T31298] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9280: corrupted inode contents
[  649.263694][T31307] syzkaller0: entered promiscuous mode
[  649.269321][T31307] syzkaller0: entered allmulticast mode
[  649.275434][T31298] EXT4-fs (loop4): Remounting filesystem read-only
[  649.309920][T31298] EXT4-fs (loop4): 1 truncate cleaned up
[  649.315712][ T1706] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.326305][ T1706] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.337068][ T1706] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  649.352240][T31311] loop1: detected capacity change from 0 to 128
[  649.417147][T31315] loop4: detected capacity change from 0 to 512
[  649.438695][T31315] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  649.456489][T31315] EXT4-fs (loop4): orphan cleanup on readonly fs
[  649.467214][T31315] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.9284: corrupted inode contents
[  649.479684][T31315] EXT4-fs (loop4): Remounting filesystem read-only
[  649.487624][T31315] EXT4-fs (loop4): 1 truncate cleaned up
[  649.496875][T31325] loop7: detected capacity change from 0 to 512
[  649.503284][T31322] loop6: detected capacity change from 0 to 2048
[  649.504574][ T1706] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.520319][ T1706] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.531999][ T1706] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  649.560136][T31333] loop6: detected capacity change from 0 to 128
[  649.566967][T31325] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  649.575148][T31325] EXT4-fs (loop7): orphan cleanup on readonly fs
[  649.584068][T31325] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.9288: corrupted inode contents
[  649.597560][T31325] EXT4-fs (loop7): Remounting filesystem read-only
[  649.604173][T31325] EXT4-fs (loop7): 1 truncate cleaned up
[  649.610499][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.621121][ T1706] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.632766][ T1706] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  649.682178][T31346] loop4: detected capacity change from 0 to 512
[  649.698659][T31346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9294: bg 0: block 248: padding at end of block bitmap is not set
[  649.713462][T31346] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9294: Failed to acquire dquot type 1
[  649.725867][T31346] EXT4-fs (loop4): 1 truncate cleaned up
[  649.732477][T31346] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  649.763260][T31353] loop4: detected capacity change from 0 to 512
[  649.781324][T31353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9295: bg 0: block 248: padding at end of block bitmap is not set
[  649.796062][T31353] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9295: Failed to acquire dquot type 1
[  649.808292][T31353] EXT4-fs (loop4): 1 truncate cleaned up
[  649.814356][T31353] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  649.815027][T31358] syzkaller0: entered promiscuous mode
[  649.830684][T31358] syzkaller0: entered allmulticast mode
[  649.867083][T31361] loop6: detected capacity change from 0 to 512
[  649.877997][T31361] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  649.886238][T31361] EXT4-fs (loop6): orphan cleanup on readonly fs
[  649.894471][T31361] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  649.906388][T31361] EXT4-fs (loop6): Remounting filesystem read-only
[  649.913128][T31361] EXT4-fs (loop6): 1 truncate cleaned up
[  649.919000][ T1706] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.929827][ T1706] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  649.940694][ T1706] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  649.992305][T31371] netlink: 'wÞ£ÿ': attribute type 2 has an invalid length.
[  650.029047][T31376] loop4: detected capacity change from 0 to 512
[  650.035799][T31376] msdos: Bad value for 'fmask'
[  650.081550][T31381] loop3: detected capacity change from 0 to 512
[  650.153053][T31385] loop6: detected capacity change from 0 to 512
[  650.179858][T31385] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9306: bg 0: block 248: padding at end of block bitmap is not set
[  650.223182][T31385] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.9306: Failed to acquire dquot type 1
[  650.235087][T31385] EXT4-fs (loop6): 1 truncate cleaned up
[  650.241327][T31385] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.290327][T31381] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  650.311380][T31381] EXT4-fs (loop3): orphan cleanup on readonly fs
[  650.323417][T31381] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9305: corrupted inode contents
[  650.338191][T31381] EXT4-fs (loop3): Remounting filesystem read-only
[  650.344925][T31381] EXT4-fs (loop3): 1 truncate cleaned up
[  650.350935][  T147] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.361491][  T147] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.372208][  T147] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  650.409613][T31394] loop3: detected capacity change from 0 to 128
[  650.516142][T31399] syzkaller0: entered promiscuous mode
[  650.521837][T31399] syzkaller0: entered allmulticast mode
[  650.564878][T31402] loop6: detected capacity change from 0 to 512
[  650.577151][T31402] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  650.585433][T31402] EXT4-fs (loop6): orphan cleanup on readonly fs
[  650.595418][T31402] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.9311: corrupted inode contents
[  650.623181][T31402] EXT4-fs (loop6): Remounting filesystem read-only
[  650.629935][T31402] EXT4-fs (loop6): 1 truncate cleaned up
[  650.636782][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.647345][  T147] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.671756][T31407] loop1: detected capacity change from 0 to 512
[  650.676360][  T147] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  650.694079][T31402] EXT4-fs mount: 234 callbacks suppressed
[  650.694122][T31402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  650.700927][T31407] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  650.720753][T31407] EXT4-fs (loop1): orphan cleanup on readonly fs
[  650.746579][T31407] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents
[  650.758186][T31407] EXT4-fs (loop1): Remounting filesystem read-only
[  650.764924][T31407] EXT4-fs (loop1): 1 truncate cleaned up
[  650.770770][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.781454][   T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  650.792380][   T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  650.792659][T22228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.802963][T31407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  650.824364][T31407] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.865262][T31417] loop4: detected capacity change from 0 to 512
[  650.903040][T31417] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9317: bg 0: block 248: padding at end of block bitmap is not set
[  650.946531][T31417] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.9317: Failed to acquire dquot type 1
[  650.976014][T31428] loop6: detected capacity change from 0 to 512
[  651.035601][T31417] EXT4-fs (loop4): 1 truncate cleaned up
[  651.037153][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.048751][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.051319][T31428] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  651.056167][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.071605][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.076877][T31417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.079119][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.097948][T31435] syzkaller0: entered promiscuous mode
[  651.098981][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.104476][T31435] syzkaller0: entered allmulticast mode
[  651.111981][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.112010][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.112035][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.112059][ T3377] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  651.118055][T31417] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  651.118296][T31428] EXT4-fs (loop6): orphan cleanup on readonly fs
[  651.173373][T31428] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  651.176948][ T3377] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  651.188781][T31428] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  651.205259][T31428] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9319: bg 0: block 40: padding at end of block bitmap is not set
[  651.206548][T27323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.220036][T31428] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  651.238801][T31428] EXT4-fs (loop6): 1 truncate cleaned up
[  651.246860][T31428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  651.260507][T31440] loop1: detected capacity change from 0 to 512
[  651.268811][T31440] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  651.277698][T31440] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.9323: invalid block
[  651.289640][T31440] EXT4-fs (loop1): Remounting filesystem read-only
[  651.322089][T31440] EXT4-fs (loop1): 1 truncate cleaned up
[  651.347038][T31440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.398163][T31450] loop7: detected capacity change from 0 to 128
[  651.447786][T31443] __nla_validate_parse: 6 callbacks suppressed
[  651.447815][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9324'.
[  651.464587][T22228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.483645][T31443] loop4: detected capacity change from 0 to 2048
[  651.494842][T31458] loop3: detected capacity change from 0 to 512
[  651.504740][T31461] loop6: detected capacity change from 0 to 128
[  651.512395][T31443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  651.513919][T31459] syz.6.9330: attempt to access beyond end of device
[  651.513919][T31459] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128
[  651.539765][T31458] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  651.552033][T31458] EXT4-fs (loop3): orphan cleanup on readonly fs
[  651.559013][T31458] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  651.573885][T31458] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  651.606654][T31458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9329: bg 0: block 40: padding at end of block bitmap is not set
[  651.625522][T31468] loop7: detected capacity change from 0 to 512
[  651.632323][T31468] EXT4-fs: Ignoring removed oldalloc option
[  651.638349][T31468] EXT4-fs: Ignoring removed nomblk_io_submit option
[  651.641891][T31458] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  651.654637][T31458] EXT4-fs (loop3): 1 truncate cleaned up
[  651.664230][T31458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  651.679637][T31468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.694857][T31468] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  651.742142][T24262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.758032][T27323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.768215][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.770557][T31475] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9333'.
[  651.851489][T31481] syzkaller0: entered promiscuous mode
[  651.857062][T31481] syzkaller0: entered allmulticast mode
[  651.867197][T31479] FAULT_INJECTION: forcing a failure.
[  651.867197][T31479] name failslab, interval 1, probability 0, space 0, times 0
[  651.879968][T31479] CPU: 1 UID: 0 PID: 31479 Comm: syz.4.9334 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  651.879999][T31479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  651.880013][T31479] Call Trace:
[  651.880021][T31479]  <TASK>
[  651.880031][T31479]  __dump_stack+0x1d/0x30
[  651.880135][T31479]  dump_stack_lvl+0xe8/0x140
[  651.880204][T31486] loop3: detected capacity change from 0 to 512
[  651.880278][T31479] ==================================================================
[  651.880301][T31479] BUG: KCSAN: data-race in _prb_read_valid / data_alloc
[  651.880324][T31479] 
[  651.880330][T31479] write to 0xffffffff86883968 of 8 bytes by task 31486 on cpu 0:
[  651.880348][T31479]  data_alloc+0x274/0x2e0
[  651.880366][T31479]  prb_reserve+0x807/0xaf0
[  651.880383][T31479]  vprintk_store+0x56d/0x860
[  651.880404][T31479]  vprintk_emit+0x10d/0x580
[  651.880424][T31479]  vprintk_default+0x26/0x30
[  651.880445][T31479]  vprintk+0x1d/0x30
[  651.880471][T31479]  _printk+0x79/0xa0
[  651.880497][T31479]  set_capacity_and_notify+0x14c/0x1f0
[  651.880518][T31479]  loop_set_size+0x2e/0x70
[  651.880546][T31479]  loop_configure+0x828/0x9c0
[  651.880573][T31479]  lo_ioctl+0x1e1/0x12b0
[  651.880596][T31479]  blkdev_ioctl+0x356/0x440
[  651.880614][T31479]  __se_sys_ioctl+0xce/0x140
[  651.880633][T31479]  __x64_sys_ioctl+0x43/0x50
[  651.880651][T31479]  x64_sys_call+0x1816/0x3000
[  651.880673][T31479]  do_syscall_64+0xd2/0x200
[  651.880701][T31479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.880722][T31479] 
[  651.880728][T31479] read to 0xffffffff86883968 of 16 bytes by task 31479 on cpu 1:
[  651.880744][T31479]  _prb_read_valid+0x1bc/0x920
[  651.880763][T31479]  prb_final_commit+0x136/0x1e0
[  651.880782][T31479]  vprintk_store+0x741/0x860
[  651.880801][T31479]  vprintk_emit+0x10d/0x580
[  651.880821][T31479]  vprintk_default+0x26/0x30
[  651.880842][T31479]  vprintk+0x1d/0x30
[  651.880867][T31479]  _printk+0x79/0xa0
[  651.880893][T31479]  show_trace_log_lvl+0x4e3/0x560
[  651.880916][T31479]  __dump_stack+0x1d/0x30
[  651.880933][T31479]  dump_stack_lvl+0xe8/0x140
[  651.880952][T31479]  dump_stack+0x15/0x1b
[  651.880969][T31479]  should_fail_ex+0x265/0x280
[  651.880999][T31479]  should_failslab+0x8c/0xb0
[  651.881025][T31479]  kmem_cache_alloc_noprof+0x50/0x480
[  651.881052][T31479]  skb_clone+0x151/0x1f0
[  651.881070][T31479]  __netlink_deliver_tap+0x2c9/0x500
[  651.881089][T31479]  netlink_unicast+0x66b/0x690
[  651.881116][T31479]  netlink_sendmsg+0x58b/0x6b0
[  651.881134][T31479]  __sock_sendmsg+0x145/0x180
[  651.881156][T31479]  ____sys_sendmsg+0x31e/0x4e0
[  651.881173][T31479]  ___sys_sendmsg+0x17b/0x1d0
[  651.881189][T31479]  __x64_sys_sendmsg+0xd4/0x160
[  651.881207][T31479]  x64_sys_call+0x191e/0x3000
[  651.881228][T31479]  do_syscall_64+0xd2/0x200
[  651.881247][T31479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.881267][T31479] 
[  651.881271][T31479] Reported by Kernel Concurrency Sanitizer on:
[  651.881282][T31479] CPU: 1 UID: 0 PID: 31479 Comm: syz.4.9334 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  651.881306][T31479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  651.881318][T31479] ==================================================================
[  651.881329][T31479]  dump_stack+0x15/0x1b
[  651.881349][T31479]  should_fail_ex+0x265/0x280
[  651.881386][T31479]  should_failslab+0x8c/0xb0
[  651.881413][T31479]  kmem_cache_alloc_noprof+0x50/0x480
[  651.881516][T31479]  ? skb_clone+0x151/0x1f0
[  651.881536][T31479]  skb_clone+0x151/0x1f0
[  651.881555][T31479]  __netlink_deliver_tap+0x2c9/0x500
[  651.881578][T31479]  netlink_unicast+0x66b/0x690
[  651.881610][T31479]  netlink_sendmsg+0x58b/0x6b0
[  651.881639][T31479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  651.881722][T31479]  __sock_sendmsg+0x145/0x180
[  651.881814][T31479]  ____sys_sendmsg+0x31e/0x4e0
[  651.881836][T31479]  ___sys_sendmsg+0x17b/0x1d0
[  651.881866][T31479]  __x64_sys_sendmsg+0xd4/0x160
[  651.881889][T31479]  x64_sys_call+0x191e/0x3000
[  651.881985][T31479]  do_syscall_64+0xd2/0x200
[  651.882037][T31479]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  651.882065][T31479]  ? irqentry_exit_to_user_mode+0x7b/0xa0
[  651.882168][T31479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.882190][T31479] RIP: 0033:0x7f30aa4df749
[  651.882266][T31479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  651.882285][T31479] RSP: 002b:00007f30a8f3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  651.882306][T31479] RAX: ffffffffffffffda RBX: 00007f30aa735fa0 RCX: 00007f30aa4df749
[  651.882337][T31479] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  651.882350][T31479] RBP: 00007f30a8f3f090 R08: 0000000000000000 R09: 0000000000000000
[  651.882363][T31479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  651.882376][T31479] R13: 00007f30aa736038 R14: 00007f30aa735fa0 R15: 00007ffcdbb4d308
[  651.882395][T31479]  </TASK>
[  651.893385][T31488] loop6: detected capacity change from 0 to 512
[  651.947015][T31486] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  651.947545][T31488] EXT4-fs: Ignoring removed oldalloc option
[  651.953264][T31486] EXT4-fs (loop3): orphan cleanup on readonly fs
[  651.955925][T31488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  651.976679][T31488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.982323][T31486] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  651.983488][T31488] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  651.988367][T31486] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  651.998837][T31488] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.9338: bg 0: block 217: padding at end of block bitmap is not set
[  652.030181][T31486] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9335: bg 0: block 40: padding at end of block bitmap is not set
[  652.036550][T31488] EXT4-fs (loop6): Remounting filesystem read-only
[  652.041490][T31486] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  652.482847][T23294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.482942][T31486] EXT4-fs (loop3): 1 truncate cleaned up
[  652.492419][T22228] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.497921][T31486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  652.576560][T23783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.