last executing test programs:

24.317352872s ago: executing program 2 (id=372):
r0 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x2}, 0x100202, 0x0, 0xfffffffb, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000000c0)=r0}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048ce)
write$binfmt_elf32(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fc"], 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3, 0x0, 0x3}, 0x18)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

24.189312455s ago: executing program 2 (id=375):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x1}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x20000400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
flistxattr(r1, 0x0, 0x0)

24.168822685s ago: executing program 2 (id=376):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000", @ANYRESDEC=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

24.071427297s ago: executing program 2 (id=378):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@sysvgroups}]}, 0x1, 0x796, &(0x7f0000000800)="$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")
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x8, 0x4, 0x0, 'queue0\x00', 0x4}) (async)
recvmsg$unix(r0, &(0x7f0000001280)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000fc0)=""/94, 0x5e}, {&(0x7f00000007c0)=""/47, 0x2f}, {&(0x7f0000001040)=""/171, 0xab}, {&(0x7f0000001100)=""/7, 0x7}], 0x4, &(0x7f0000001180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8}, 0x40002162) (async)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.time\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2) (async)
ptrace$setregs(0x15, r2, 0x200000c, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000500), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000006c0)={@dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00', @mcast1, 0x5, 0x9579, 0x3, 0x0, 0x1, 0x0, r3})

23.9299146s ago: executing program 2 (id=379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfb", 0xb1}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20)
mlockall(0x7)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000976500000000000000000000000000001d000000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x8000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

23.666606625s ago: executing program 2 (id=380):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x5, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x50, 0x10000, 0x7fffffff, 0x1, 0xb, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880cc00088034000780080005007c"], 0xf8}}, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x169a82, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYBLOB='/\x00\x00\x004'], 0x20)
flock(r3, 0x1)
flock(r2, 0x5)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r10=>0x0}, &(0x7f0000000080)=0xc)
fcntl$setown(r6, 0x8, r10)

23.591055006s ago: executing program 32 (id=380):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x5, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x50, 0x10000, 0x7fffffff, 0x1, 0xb, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040004800800020001000000080001000000000004000880cc00088034000780080005007c"], 0xf8}}, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/kexec_crash_size', 0x169a82, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYBLOB='/\x00\x00\x004'], 0x20)
flock(r3, 0x1)
flock(r2, 0x5)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
r7 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r9=>0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r10=>0x0}, &(0x7f0000000080)=0xc)
fcntl$setown(r6, 0x8, r10)

2.600997409s ago: executing program 0 (id=652):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

2.580758449s ago: executing program 0 (id=653):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x65, 0x0, 0x0, 0x0, 0x51}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', r1}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x48000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000001400), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0)

1.889963483s ago: executing program 0 (id=659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x480, 0x2)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r10 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev(r10, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365)
r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0xe4})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x124, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xf8, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0x1, 0xc5, 0xe, 0x5, 0x401, 0x3, 0x9, 0x5, [{0x6c86, 0xfffffff7, 0xfffffffa, 0xc9}, {0x2, 0xffffff00, 0x1, 0xe5b}, {0xf5, 0xdb, 0xfffffffb, 0x1}, {0x14, 0x9, 0x3, 0x3ff}, {0x9, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x9, 0xfffffff8}, {0xfffffffa, 0x6, 0x10, 0x6}, {0x2, 0xffff, 0x0, 0x1}, {0x8, 0x0, 0xf33, 0x6}, {0x6, 0x3, 0x4, 0x10}, {0x888, 0x9, 0x12a, 0x6066}, {0xfffffff1, 0x8, 0x0, 0x4}, {0x8001, 0x3, 0x3, 0xa}, {0x0, 0x4, 0xa, 0x8}]}}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r12}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(&(0x7f0000000640)={0x0, 0x6}, 0x18)

1.347424983s ago: executing program 4 (id=666):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
acct(0xfffffffffffffffe)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)

1.317026424s ago: executing program 5 (id=667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x3c, 0x26, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x9}, {0xffff, 0xfcacb606a5e126d}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40448d4}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x2000000)

1.295154815s ago: executing program 0 (id=668):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000680)=""/68}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

1.294668774s ago: executing program 4 (id=669):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

1.256532415s ago: executing program 3 (id=671):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r1, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c)
shutdown(r1, 0x1)

1.172972657s ago: executing program 5 (id=672):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

1.172646147s ago: executing program 3 (id=673):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
close(r0)

1.146306297s ago: executing program 4 (id=674):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
flistxattr(r0, 0x0, 0x0)

1.133887888s ago: executing program 3 (id=675):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000680)=""/68}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

1.116228668s ago: executing program 5 (id=676):
r0 = geteuid()
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r0, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
dup2(0xffffffffffffffff, r1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r1)

1.098329558s ago: executing program 4 (id=677):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x65, 0x0, 0x0, 0x0, 0x51}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', <r1=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', r1}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x48000)
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r4, 0x0, 0xbf5, 0x2000402)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000}, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000001400), 0x208e24b)
syz_open_dev$tty20(0xc, 0x4, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.02637174s ago: executing program 5 (id=679):
r0 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[], 0xf4, 0xa2c, &(0x7f0000001f80)="$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")
openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x70)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x204, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r2 = socket(0x1e, 0x80004, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6, 0x2, 0x40000000}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (fail_nth: 4)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r7}, 0x10)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef)

607.370358ms ago: executing program 0 (id=681):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095", @ANYRES8=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
read(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000180)={[{@quota}]}, 0x1, 0x44b, &(0x7f0000000240)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrigaEyhFV4sYBcUTiL+AEFwSckLjCHVWqUC4tnIzW3k0cx84LJw7485E2mdmdaObrnbFnduIA+tZQ9iOJ2BsRv0bEYCO7tMBQ49fd+WsTf85fm0iiVnvjj6Re7s78tYmiaPF3e4pMOSL9OInDbeqduXL1wni1OnU5z4/MXnx3ZObK1WfOXxw/N3Vu6tLY6dMnT4w+d2rs2a7EmcV159AH00cOvvLWzdcmztx8+8evkyL+lji6ZGili4/Xal2urrf2NaWTcg8bwrqUGsM0BurjfzBKsXjzBuPlj3raOGBT1Wq12n2dL8/VgP+wJHrdAqA3ig/6bP1bHFs09dgWbr/QWABlcd/Nj8aVcqR5mYGW9W03DUXEmbm/vsiO2JznEAAAS3ybzX+ebjf/S6P5udD/8z2USkTcExH7I+JURByIiHsj6mXvj4gH1ll/6ybJ8vlPemtDga1RNv97Pt/bWjr/K2Z/USnluX31+AeSs+erU8fz1+RYDOzM8qMr1PHdS7982ula8/wvO7L6i7lg3o5b5Z1dCraN2x9GHCq3iz9Z2AlIIuJgRBzaYB3nn/zqSKdrq8e/gi7sM9W+jHiicf/noiX+QtJhf/J6Y39y5H9RnTo+UvSK5X76+cbrnepfU/zJP4+zk+z+746Ioostj39fJWner51Zfx03fvuk45pmI/1/cnx2fEfy5pJz74/Pzl4ejdiRvFrPV5rPj7WUG1ssn8V/7Gj78b8/Fl+JwxGRdeIHI+KhiHg4b/sjEfFoRBxdIf4fXnzsnY3Hv7my+Cfbvv8tdLqW+7+Y2BGtZ9onShe+/2ZJpZX1xJ/d/5P11LH8THb/V4trLe3aWG8GAACAf580IvZGkg4vpNN0eLjxP/wHYndanZ6Zfers9HuXJhvfEajEQFo86Rpseh46mi/ri/xQS/5E/tz4s9Kuen54Yro62evgoc/t6TD+M7+Xet06YNP5vhb0L+Mf+pfxD/3L+If+1Wb87+pFO4Ct1+7z/3oP2gFsvZbxb9sP+oj1P/SvsvU+9C2f/9CXZnbF6l+Sl5BYloh0WzRjOyc+3x7NaJ9II2KlMr1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOvwMAAP//AsPedg==")
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000740)={0x6, 0xd4, 0x6})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00fcffffff0300000dcf00000000000005"])

606.907458ms ago: executing program 1 (id=682):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

606.073868ms ago: executing program 3 (id=683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async)
rename(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6, 0x0, 0x800000000}, 0x18) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r7}, 0x10)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) (async)
perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

563.756809ms ago: executing program 1 (id=684):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

528.12322ms ago: executing program 1 (id=685):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
close(r0)

527.71916ms ago: executing program 1 (id=686):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x3a) (fail_nth: 6)

219.488146ms ago: executing program 1 (id=687):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/68}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r1, 0x3000)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

200.432666ms ago: executing program 3 (id=688):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141)
pwrite64(r1, &(0x7f00000001c0)="f6e9dbd498c26167db0c8a8a0fa4fa54d6ce913cfadfe965970ac7cb7cd0003b68a1a3f24cb377ac3fe04a6de5f460b3648ab66e845a614de5b1ced2fa84c86b62de67457a20a983e61ae74084fa412447e609e1a03774e3d55d67028abac3538ff6366a663c0c", 0x67, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

158.239007ms ago: executing program 4 (id=689):
r0 = geteuid()
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r0, &(0x7f0000000200))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
dup2(0xffffffffffffffff, r1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)
close(r1)

133.804287ms ago: executing program 5 (id=690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000680)=""/68}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14927e, 0x20)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r2, 0x3000)
fallocate(r2, 0x0, 0x0, 0x1000f4)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

105.221778ms ago: executing program 0 (id=691):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x65, 0x0, 0x0, 0x0, 0x51}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', r2}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x48000)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
fallocate(r5, 0x0, 0xbf5, 0x2000402)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000075b0"], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x1000, <r8=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="7a440305b9f2b56f9585921800000005000000000000ff000000f25d28ae000100"/42, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70200080000eaffb6030000000000008500000083000000bf090000000000145509010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000f10000850000008600000018110000", @ANYRES8=r6, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000001400), 0x208e24b)
syz_open_dev$tty20(0xc, 0x4, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

73.567458ms ago: executing program 5 (id=692):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x76d2d576, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180), 0xff, 0x23f, &(0x7f0000000540)="$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")
syz_open_pts(0xffffffffffffffff, 0x2800)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9c5, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x105048, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x7}, 0x2400c811)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='rxrpc_rx_icmp\x00', r0}, 0xffffffffffffffb0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000001f00)='./file1\x00', 0x109042, 0x80)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x0, 0x0)

13.57167ms ago: executing program 4 (id=693):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000900)={[{@delalloc}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@abort}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3)

999.02µs ago: executing program 1 (id=694):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "3b7dbf31be58ed94", "8f3b9fa866cc237411c44727ee07d93e", "8b779a6c", "90199d5db368af2d"}, 0x28)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x7, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0xc808}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)

0s ago: executing program 3 (id=695):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

kernel console output (not intermixed with test programs):

Dž
[   53.793182][ T4714] loop4: detected capacity change from 0 to 2048
[   53.802649][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   53.802739][   T29] audit: type=1326 audit(1758946901.822:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.834611][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   53.846434][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.848355][ T4717] __nla_validate_parse: 3 callbacks suppressed
[   53.848434][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[   53.870620][   T29] audit: type=1326 audit(1758946901.852:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.873487][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.893953][   T29] audit: type=1326 audit(1758946901.852:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.893989][   T29] audit: type=1326 audit(1758946901.852:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.952442][   T29] audit: type=1326 audit(1758946901.852:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.975694][   T29] audit: type=1326 audit(1758946901.852:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   53.999013][   T29] audit: type=1326 audit(1758946901.852:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   54.022303][   T29] audit: type=1326 audit(1758946901.852:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   54.045560][   T29] audit: type=1326 audit(1758946901.852:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   54.069295][   T29] audit: type=1326 audit(1758946901.852:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   54.200246][ T4728] program syz.1.196 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.229487][ T4717] bond0: (slave dummy0): Releasing backup interface
[   54.247734][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.295305][ T4734] loop1: detected capacity change from 0 to 128
[   54.346349][ T4737] 9pnet: Could not find request transport: Dž
[   54.363718][ T4737] loop0: detected capacity change from 0 to 2048
[   54.373653][ T4734] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   54.386794][ T4734] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   54.438176][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.470769][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   54.482015][ T4742] FAULT_INJECTION: forcing a failure.
[   54.482015][ T4742] name failslab, interval 1, probability 0, space 0, times 0
[   54.494874][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.4.195 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   54.494956][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   54.494968][ T4742] Call Trace:
[   54.494974][ T4742]  <TASK>
[   54.494982][ T4742]  __dump_stack+0x1d/0x30
[   54.495002][ T4742]  dump_stack_lvl+0xe8/0x140
[   54.495026][ T4742]  dump_stack+0x15/0x1b
[   54.495047][ T4742]  should_fail_ex+0x265/0x280
[   54.495160][ T4742]  should_failslab+0x8c/0xb0
[   54.495192][ T4742]  __kvmalloc_node_noprof+0x123/0x4e0
[   54.495223][ T4742]  ? newary+0xe8/0x620
[   54.495296][ T4742]  newary+0xe8/0x620
[   54.495327][ T4742]  ipcget+0x3af/0x4f0
[   54.495371][ T4742]  __x64_sys_semget+0xfb/0x130
[   54.495396][ T4742]  x64_sys_call+0x6bf/0x2ff0
[   54.495446][ T4742]  do_syscall_64+0xd2/0x200
[   54.495556][ T4742]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   54.495636][ T4742]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   54.495663][ T4742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.495689][ T4742] RIP: 0033:0x7fd2ead3eec9
[   54.495706][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.495751][ T4742] RSP: 002b:00007fd2e979f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040
[   54.495775][ T4742] RAX: ffffffffffffffda RBX: 00007fd2eaf95fa0 RCX: 00007fd2ead3eec9
[   54.495789][ T4742] RDX: 000000000000039c RSI: 0000000000000004 RDI: 00000000798e2644
[   54.495800][ T4742] RBP: 00007fd2e979f090 R08: 0000000000000000 R09: 0000000000000000
[   54.495811][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.495824][ T4742] R13: 00007fd2eaf96038 R14: 00007fd2eaf95fa0 R15: 00007fff7b540778
[   54.495845][ T4742]  </TASK>
[   54.701625][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.721210][ T4747] loop1: detected capacity change from 0 to 1024
[   54.740180][ T4747] EXT4-fs: Ignoring removed orlov option
[   54.747141][ T4747] EXT4-fs: Ignoring removed nobh option
[   54.752799][ T4747] EXT4-fs: Ignoring removed bh option
[   54.765678][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.781276][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'.
[   54.934158][ T4752] lo speed is unknown, defaulting to 1000
[   55.061499][ T4751] geneve2: entered allmulticast mode
[   55.080808][ T4747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.118863][ T4747] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.200: Allocating blocks 481-513 which overlap fs metadata
[   55.404671][ T4761] loop0: detected capacity change from 0 to 164
[   55.421695][ T4747] EXT4-fs (loop1): pa ffff8881072821c0: logic 352, phys. 465, len 3
[   55.429773][ T4747] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   55.476389][ T4763] loop4: detected capacity change from 0 to 2048
[   55.506030][ T4763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   55.544470][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.561384][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.626505][ T4776] loop3: detected capacity change from 0 to 1024
[   55.661243][ T4776] EXT4-fs: Ignoring removed orlov option
[   55.667379][ T4776] EXT4-fs: Ignoring removed nobh option
[   55.673047][ T4776] EXT4-fs: Ignoring removed bh option
[   55.681941][ T4781] program syz.1.209 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.831351][ T4787] lo speed is unknown, defaulting to 1000
[   56.547310][ T4793] lo speed is unknown, defaulting to 1000
[   56.651819][ T4776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.777529][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.038157][ T4805] loop3: detected capacity change from 0 to 8192
[   57.124766][ T4808] lo speed is unknown, defaulting to 1000
[   57.216889][ T4806] loop0: detected capacity change from 0 to 164
[   57.245790][ T4814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=4814 comm=syz.4.220
[   57.383977][ T4817] Unsupported ieee802154 address type: 0
[   57.419383][ T4819] FAULT_INJECTION: forcing a failure.
[   57.419383][ T4819] name failslab, interval 1, probability 0, space 0, times 0
[   57.432100][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: syz.1.222 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.432128][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.432197][ T4819] Call Trace:
[   57.432203][ T4819]  <TASK>
[   57.432211][ T4819]  __dump_stack+0x1d/0x30
[   57.432231][ T4819]  dump_stack_lvl+0xe8/0x140
[   57.432256][ T4819]  dump_stack+0x15/0x1b
[   57.432277][ T4819]  should_fail_ex+0x265/0x280
[   57.432308][ T4819]  should_failslab+0x8c/0xb0
[   57.432332][ T4819]  kmem_cache_alloc_noprof+0x50/0x310
[   57.432445][ T4819]  ? getname_flags+0x80/0x3b0
[   57.432483][ T4819]  getname_flags+0x80/0x3b0
[   57.432515][ T4819]  user_path_at+0x28/0x130
[   57.432584][ T4819]  __se_sys_inotify_add_watch+0x102/0x7b0
[   57.432615][ T4819]  ? fput+0x8f/0xc0
[   57.432653][ T4819]  ? ksys_write+0x192/0x1a0
[   57.432679][ T4819]  __x64_sys_inotify_add_watch+0x43/0x50
[   57.432733][ T4819]  x64_sys_call+0xfc7/0x2ff0
[   57.432753][ T4819]  do_syscall_64+0xd2/0x200
[   57.432781][ T4819]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.432808][ T4819]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   57.432880][ T4819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.432900][ T4819] RIP: 0033:0x7fd039c3eec9
[   57.432916][ T4819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.432939][ T4819] RSP: 002b:00007fd0386a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[   57.433019][ T4819] RAX: ffffffffffffffda RBX: 00007fd039e95fa0 RCX: 00007fd039c3eec9
[   57.433036][ T4819] RDX: 00000000a4000960 RSI: 0000200000000180 RDI: 0000000000000003
[   57.433052][ T4819] RBP: 00007fd0386a7090 R08: 0000000000000000 R09: 0000000000000000
[   57.433068][ T4819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.433083][ T4819] R13: 00007fd039e96038 R14: 00007fd039e95fa0 R15: 00007ffdc4517138
[   57.433126][ T4819]  </TASK>
[   57.629077][ T4816] loop3: detected capacity change from 0 to 2048
[   57.672353][ T4816]  loop3: p2 p3 p7
[   57.686910][ T4814] siw: device registration error -23
[   57.718733][ T4826] FAULT_INJECTION: forcing a failure.
[   57.718733][ T4826] name failslab, interval 1, probability 0, space 0, times 0
[   57.731496][ T4826] CPU: 1 UID: 0 PID: 4826 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   57.731594][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   57.731607][ T4826] Call Trace:
[   57.731613][ T4826]  <TASK>
[   57.731620][ T4826]  __dump_stack+0x1d/0x30
[   57.731641][ T4826]  dump_stack_lvl+0xe8/0x140
[   57.731673][ T4826]  dump_stack+0x15/0x1b
[   57.731690][ T4826]  should_fail_ex+0x265/0x280
[   57.731714][ T4826]  ? fsnotify_alloc_group+0x5a/0x170
[   57.731735][ T4826]  should_failslab+0x8c/0xb0
[   57.731760][ T4826]  __kmalloc_cache_noprof+0x4c/0x320
[   57.731828][ T4826]  fsnotify_alloc_group+0x5a/0x170
[   57.731849][ T4826]  do_inotify_init+0x59/0x270
[   57.731874][ T4826]  __ia32_sys_inotify_init+0x10/0x20
[   57.731906][ T4826]  x64_sys_call+0x2e70/0x2ff0
[   57.731952][ T4826]  do_syscall_64+0xd2/0x200
[   57.731983][ T4826]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   57.732007][ T4826]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   57.732083][ T4826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.732105][ T4826] RIP: 0033:0x7f3475b7eec9
[   57.732120][ T4826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.732139][ T4826] RSP: 002b:00007f34745df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd
[   57.732159][ T4826] RAX: ffffffffffffffda RBX: 00007f3475dd5fa0 RCX: 00007f3475b7eec9
[   57.732224][ T4826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   57.732236][ T4826] RBP: 00007f34745df090 R08: 0000000000000000 R09: 0000000000000000
[   57.732248][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.732260][ T4826] R13: 00007f3475dd6038 R14: 00007f3475dd5fa0 R15: 00007ffc4d356b98
[   57.732280][ T4826]  </TASK>
[   57.933063][ T4833] loop2: detected capacity change from 0 to 1024
[   57.957952][ T4833] EXT4-fs: Ignoring removed orlov option
[   57.963894][ T4833] EXT4-fs: Ignoring removed nobh option
[   57.969579][ T4833] EXT4-fs: Ignoring removed bh option
[   57.976895][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'.
[   58.000368][ T4833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.016961][ T4844] loop1: detected capacity change from 0 to 128
[   58.032824][ T4844] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   58.069929][ T4844] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   58.098741][ T4857] netlink: 'syz.0.232': attribute type 30 has an invalid length.
[   58.217775][ T4866] loop0: detected capacity change from 0 to 1024
[   58.218023][ T4866] EXT4-fs: Ignoring removed orlov option
[   58.224831][ T4866] EXT4-fs: Ignoring removed nobh option
[   58.224852][ T4866] EXT4-fs: Ignoring removed bh option
[   58.298454][ T4866] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.234: Allocating blocks 481-513 which overlap fs metadata
[   58.560172][ T4866] EXT4-fs (loop0): pa ffff8881071d7930: logic 352, phys. 465, len 3
[   58.560205][ T4866] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   58.956019][   T29] kauditd_printk_skb: 186 callbacks suppressed
[   58.956046][   T29] audit: type=1400 audit(1758946906.972:640): avc:  denied  { read write } for  pid=4880 comm="syz.2.236" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   58.956074][   T29] audit: type=1400 audit(1758946906.972:641): avc:  denied  { open } for  pid=4880 comm="syz.2.236" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   59.073528][ T4901] loop0: detected capacity change from 0 to 1024
[   59.081842][ T4901] EXT4-fs: Ignoring removed orlov option
[   59.082564][ T3383] hid_parser_main: 33 callbacks suppressed
[   59.082588][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.087751][ T4901] EXT4-fs: Ignoring removed nobh option
[   59.093379][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.093408][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.100833][ T4901] EXT4-fs: Ignoring removed bh option
[   59.106406][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.133949][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.141431][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.144663][ T4901] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.239: Allocating blocks 481-513 which overlap fs metadata
[   59.148919][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.148950][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.148971][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.149000][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   59.212058][ T4901] EXT4-fs (loop0): pa ffff8881071d78c0: logic 352, phys. 465, len 3
[   59.220243][ T4901] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   59.253262][ T3383] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[   59.301899][ T4915] loop0: detected capacity change from 0 to 2048
[   59.345361][   T29] audit: type=1326 audit(1758946907.362:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.370394][   T29] audit: type=1326 audit(1758946907.392:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.394019][   T29] audit: type=1326 audit(1758946907.392:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.417579][   T29] audit: type=1326 audit(1758946907.392:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.443288][   T29] audit: type=1326 audit(1758946907.462:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.466623][   T29] audit: type=1326 audit(1758946907.462:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.489919][   T29] audit: type=1326 audit(1758946907.462:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.513247][   T29] audit: type=1326 audit(1758946907.462:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153360eec9 code=0x7ffc0000
[   59.736629][ T4976] netlink: 148 bytes leftover after parsing attributes in process `syz.0.242'.
[   59.754591][ T4976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.242'.
[   59.956522][ T5016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.001403][ T5016] FAULT_INJECTION: forcing a failure.
[   60.001403][ T5016] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   60.014605][ T5016] CPU: 1 UID: 0 PID: 5016 Comm: syz.2.245 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   60.014640][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   60.014653][ T5016] Call Trace:
[   60.014659][ T5016]  <TASK>
[   60.014665][ T5016]  __dump_stack+0x1d/0x30
[   60.014688][ T5016]  dump_stack_lvl+0xe8/0x140
[   60.014707][ T5016]  dump_stack+0x15/0x1b
[   60.014751][ T5016]  should_fail_ex+0x265/0x280
[   60.014780][ T5016]  should_fail+0xb/0x20
[   60.014806][ T5016]  should_fail_usercopy+0x1a/0x20
[   60.014839][ T5016]  _copy_from_user+0x1c/0xb0
[   60.014948][ T5016]  ___sys_sendmsg+0xc1/0x1d0
[   60.015010][ T5016]  __x64_sys_sendmsg+0xd4/0x160
[   60.015111][ T5016]  x64_sys_call+0x191e/0x2ff0
[   60.015133][ T5016]  do_syscall_64+0xd2/0x200
[   60.015262][ T5016]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   60.015331][ T5016]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   60.015358][ T5016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.015378][ T5016] RIP: 0033:0x7f3475b7eec9
[   60.015437][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   60.015460][ T5016] RSP: 002b:00007f34745df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.015480][ T5016] RAX: ffffffffffffffda RBX: 00007f3475dd5fa0 RCX: 00007f3475b7eec9
[   60.015492][ T5016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[   60.015506][ T5016] RBP: 00007f34745df090 R08: 0000000000000000 R09: 0000000000000000
[   60.015518][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.015533][ T5016] R13: 00007f3475dd6038 R14: 00007f3475dd5fa0 R15: 00007ffc4d356b98
[   60.015550][ T5016]  </TASK>
[   60.283560][ T5031] loop3: detected capacity change from 0 to 2048
[   60.291634][ T5033] loop1: detected capacity change from 0 to 1024
[   60.292091][ T5033] EXT4-fs: Ignoring removed orlov option
[   60.292334][ T5033] EXT4-fs: Ignoring removed nobh option
[   60.292358][ T5033] EXT4-fs: Ignoring removed bh option
[   60.322689][ T5033] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.252: Allocating blocks 481-513 which overlap fs metadata
[   60.375916][ T5033] EXT4-fs (loop1): pa ffff8881072821c0: logic 352, phys. 465, len 3
[   60.375957][ T5033] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   60.377893][ T5040] loop3: detected capacity change from 0 to 512
[   60.386627][ T5040] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   60.399529][ T5040] EXT4-fs (loop3): 1 truncate cleaned up
[   60.690996][ T5056] loop4: detected capacity change from 0 to 2048
[   61.127422][ T5062] lo speed is unknown, defaulting to 1000
[   61.373176][ T5065] loop4: detected capacity change from 0 to 1024
[   61.440345][ T5065] EXT4-fs: Ignoring removed orlov option
[   61.440463][ T5065] EXT4-fs: Ignoring removed nobh option
[   61.440488][ T5065] EXT4-fs: Ignoring removed bh option
[   61.445049][ T5067] loop0: detected capacity change from 0 to 2048
[   61.462023][ T5065] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.261: Allocating blocks 481-513 which overlap fs metadata
[   61.522461][ T5073] loop3: detected capacity change from 0 to 1024
[   61.535338][ T5065] EXT4-fs (loop4): pa ffff8881071d7930: logic 352, phys. 465, len 3
[   61.543454][ T5065] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   61.558015][ T5067]  loop0: p2 p3 p7
[   61.564864][ T5075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[   61.565442][ T5073] EXT4-fs: Ignoring removed orlov option
[   61.584411][ T5073] EXT4-fs: Ignoring removed nobh option
[   61.590138][ T5073] EXT4-fs: Ignoring removed bh option
[   61.624314][ T5073] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.260: Allocating blocks 481-513 which overlap fs metadata
[   61.643365][ T5080] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=5080 comm=syz.0.266
[   61.663785][ T5080] Unsupported ieee802154 address type: 0
[   61.683365][ T5084] loop2: detected capacity change from 0 to 512
[   61.688473][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.704607][ T5073] EXT4-fs (loop3): pa ffff8881072821c0: logic 352, phys. 465, len 3
[   61.709246][ T5084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.712660][ T5073] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   61.733491][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.742410][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.751657][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.764961][ T5084] EXT4-fs (loop2): 1 truncate cleaned up
[   61.789064][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.797993][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.812547][ T5082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   61.916721][ T5093] loop4: detected capacity change from 0 to 512
[   61.933726][ T5093] EXT4-fs: Ignoring removed mblk_io_submit option
[   61.966176][ T5093] EXT4-fs: Ignoring removed nomblk_io_submit option
[   61.995247][ T5093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.003833][ T5093] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   62.021259][ T5104] loop0: detected capacity change from 0 to 1024
[   62.030363][ T5104] EXT4-fs: Ignoring removed orlov option
[   62.036544][ T5104] EXT4-fs: Ignoring removed nobh option
[   62.042271][ T5104] EXT4-fs: Ignoring removed bh option
[   62.052603][ T5093] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.267: Allocating blocks 41-42 which overlap fs metadata
[   62.066934][ T5093] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.267: Allocating blocks 41-42 which overlap fs metadata
[   62.082384][ T5093] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.267: Failed to acquire dquot type 1
[   62.093896][ T5093] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   62.109756][ T5093] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.267: corrupted inode contents
[   62.149839][ T5093] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.267: mark_inode_dirty error
[   62.161424][ T5109] loop1: detected capacity change from 0 to 2048
[   62.196550][ T5104] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.273: Allocating blocks 481-513 which overlap fs metadata
[   62.216375][ T5093] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.267: corrupted inode contents
[   62.216565][ T5093] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.267: mark_inode_dirty error
[   62.216682][ T5093] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.267: corrupted inode contents
[   62.216863][ T5093] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   62.217304][ T5093] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.267: corrupted inode contents
[   62.217489][ T5093] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.267: mark_inode_dirty error
[   62.217691][ T5093] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   62.217901][ T5093] EXT4-fs (loop4): 1 truncate cleaned up
[   62.242517][ T5104] EXT4-fs (loop0): pa ffff888107282380: logic 352, phys. 465, len 3
[   62.242610][ T5104] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   62.245447][ T5093] ext4: Unknown parameter ''
[   62.284917][ T5116] dummy0: entered promiscuous mode
[   62.285694][ T5116] dummy0: left promiscuous mode
[   62.421136][ T5123] loop1: detected capacity change from 0 to 1024
[   62.421437][ T5123] EXT4-fs: Ignoring removed orlov option
[   62.421670][ T5123] EXT4-fs: Ignoring removed nobh option
[   62.439182][ T5123] EXT4-fs: Ignoring removed bh option
[   62.445690][ T5125] loop0: detected capacity change from 0 to 1024
[   62.446046][ T5125] EXT4-fs: Ignoring removed orlov option
[   62.446263][ T5125] EXT4-fs: Ignoring removed nobh option
[   62.446283][ T5125] EXT4-fs: Ignoring removed bh option
[   62.472956][ T5125] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.278: Allocating blocks 481-513 which overlap fs metadata
[   62.488886][ T5123] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.277: Allocating blocks 481-513 which overlap fs metadata
[   62.490295][ T5123] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.277: Allocating blocks 465-513 which overlap fs metadata
[   62.503870][ T5125] EXT4-fs (loop0): pa ffff8881071d7930: logic 352, phys. 465, len 3
[   62.524966][ T5125] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   62.610186][ T5133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=5133 comm=syz.4.279
[   62.610296][ T5133] Unsupported ieee802154 address type: 0
[   62.665068][ T5138] loop2: detected capacity change from 0 to 1024
[   62.667690][ T5133] siw: device registration error -23
[   62.683645][ T5138] EXT4-fs: Ignoring removed orlov option
[   62.683868][ T5138] EXT4-fs: Ignoring removed nobh option
[   62.683903][ T5138] EXT4-fs: Ignoring removed bh option
[   62.704038][ T5138] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.282: Allocating blocks 481-513 which overlap fs metadata
[   62.730011][ T5138] EXT4-fs (loop2): pa ffff8881071d7a10: logic 352, phys. 465, len 3
[   62.754465][ T5138] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   62.787477][ T5145] loop4: detected capacity change from 0 to 512
[   62.788134][ T5145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   62.854724][ T5145] EXT4-fs (loop4): 1 truncate cleaned up
[   63.173735][ T5168] loop3: detected capacity change from 0 to 512
[   63.185229][ T5168] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.191819][ T5168] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.210289][ T5168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   63.219384][ T5168] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.240354][ T5172] loop1: detected capacity change from 0 to 2048
[   63.281601][ T5172]  loop1: p2 p3 p7
[   63.341308][ T5168] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.287: Allocating blocks 41-42 which overlap fs metadata
[   63.361855][ T5181] loop1: detected capacity change from 0 to 1024
[   63.374897][ T5168] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.287: Allocating blocks 41-42 which overlap fs metadata
[   63.385918][ T5181] EXT4-fs: Ignoring removed orlov option
[   63.393772][ T5168] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.287: Failed to acquire dquot type 1
[   63.394752][ T5181] EXT4-fs: Ignoring removed nobh option
[   63.407303][ T5168] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   63.411080][ T5181] EXT4-fs: Ignoring removed bh option
[   63.464546][ T5187] lo speed is unknown, defaulting to 1000
[   63.561946][ T5168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.287: corrupted inode contents
[   63.575779][ T5168] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.287: mark_inode_dirty error
[   63.588925][ T5168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.287: corrupted inode contents
[   63.601327][ T5168] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.287: mark_inode_dirty error
[   63.614106][ T5168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.287: corrupted inode contents
[   63.629938][ T5168] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   63.639347][ T5168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.287: corrupted inode contents
[   63.684323][ T5181] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.291: Allocating blocks 481-513 which overlap fs metadata
[   63.746992][ T5168] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.287: mark_inode_dirty error
[   63.768579][ T5181] EXT4-fs (loop1): pa ffff888107282310: logic 352, phys. 465, len 3
[   63.776744][ T5181] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   63.792943][ T5168] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   63.802146][ T5168] EXT4-fs (loop3): 1 truncate cleaned up
[   63.818454][ T5161] ext4: Unknown parameter ''
[   63.950253][ T5197] loop1: detected capacity change from 0 to 8192
[   63.964849][ T5208] loop4: detected capacity change from 0 to 1024
[   63.993781][ T5208] EXT4-fs: Ignoring removed orlov option
[   64.018445][ T5208] EXT4-fs: Ignoring removed nobh option
[   64.024083][ T5208] EXT4-fs: Ignoring removed bh option
[   64.042507][ T5223] loop1: detected capacity change from 0 to 164
[   64.052667][ T5208] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.295: Allocating blocks 481-513 which overlap fs metadata
[   64.068793][ T5208] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.295: Allocating blocks 465-513 which overlap fs metadata
[   64.150667][ T5243] loop1: detected capacity change from 0 to 1024
[   64.163386][ T5243] EXT4-fs: Ignoring removed orlov option
[   64.163527][ T5243] EXT4-fs: Ignoring removed nobh option
[   64.163629][ T5243] EXT4-fs: Ignoring removed bh option
[   64.189819][ T5243] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.299: Allocating blocks 481-513 which overlap fs metadata
[   64.249369][ T5243] EXT4-fs (loop1): pa ffff888107282380: logic 352, phys. 465, len 3
[   64.249462][ T5243] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   64.345520][   T29] kauditd_printk_skb: 252 callbacks suppressed
[   64.345538][   T29] audit: type=1400 audit(1758946912.362:894): avc:  denied  { setopt } for  pid=5264 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.357541][   T29] audit: type=1400 audit(1758946912.372:895): avc:  denied  { ioctl } for  pid=5264 comm="syz.1.301" path="socket:[7866]" dev="sockfs" ino=7866 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   64.611649][ T5292] loop1: detected capacity change from 0 to 1024
[   64.611948][ T5292] EXT4-fs: Ignoring removed orlov option
[   64.612087][ T5292] EXT4-fs: Ignoring removed nobh option
[   64.612107][ T5292] EXT4-fs: Ignoring removed bh option
[   64.645396][ T5292] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.304: Allocating blocks 465-513 which overlap fs metadata
[   64.646231][ T5292] EXT4-fs (loop1): pa ffff888107282380: logic 256, phys. 369, len 9
[   64.667950][ T5292] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   64.675189][ T5292] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   64.763908][   T29] audit: type=1400 audit(1758946912.782:896): avc:  denied  { create } for  pid=5310 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.795042][ T5311] __nla_validate_parse: 14 callbacks suppressed
[   64.795058][ T5311] netlink: 72 bytes leftover after parsing attributes in process `syz.2.306'.
[   64.795925][ T5311] process 'syz.2.306' launched './file0' with NULL argv: empty string added
[   64.796502][   T29] audit: type=1400 audit(1758946912.812:897): avc:  denied  { write } for  pid=5310 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.796534][   T29] audit: type=1400 audit(1758946912.812:898): avc:  denied  { nlmsg_write } for  pid=5310 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   64.796613][   T29] audit: type=1400 audit(1758946912.812:899): avc:  denied  { execute } for  pid=5310 comm="syz.2.306" name="file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   64.796658][   T29] audit: type=1400 audit(1758946912.812:900): avc:  denied  { execute_no_trans } for  pid=5310 comm="syz.2.306" path="/49/file0" dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   64.823573][ T5317] loop1: detected capacity change from 0 to 1024
[   64.924541][ T5317] EXT4-fs: Ignoring removed orlov option
[   64.924624][ T5317] EXT4-fs: Ignoring removed nobh option
[   64.924649][ T5317] EXT4-fs: Ignoring removed bh option
[   64.949032][ T5317] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.307: Allocating blocks 481-513 which overlap fs metadata
[   64.964008][ T5317] EXT4-fs (loop1): pa ffff888107282380: logic 352, phys. 465, len 3
[   64.964043][ T5317] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   65.053512][ T5346] loop2: detected capacity change from 0 to 512
[   65.073683][ T5346] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   65.087737][ T5346] EXT4-fs (loop2): 1 truncate cleaned up
[   65.207923][   T29] audit: type=1326 audit(1758946913.232:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   65.246320][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'.
[   65.278963][ T5363] bond0: (slave dummy0): Releasing backup interface
[   65.297031][   T29] audit: type=1326 audit(1758946913.252:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   65.320379][   T29] audit: type=1326 audit(1758946913.252:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   65.359282][ T5365] lo speed is unknown, defaulting to 1000
[   65.652226][ T5370] smc: net device bond0 applied user defined pnetid SYZ0
[   65.659767][ T5370] smc: net device bond0 erased user defined pnetid SYZ0
[   65.683700][ T5372] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=5372 comm=syz.3.316
[   65.698290][ T5372] Unsupported ieee802154 address type: 0
[   65.730144][ T5372] siw: device registration error -23
[   65.773840][ T5377] loop3: detected capacity change from 0 to 512
[   65.794214][ T5377] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   65.805687][ T5377] EXT4-fs (loop3): 1 truncate cleaned up
[   65.817783][ T5382] loop2: detected capacity change from 0 to 1024
[   65.836146][ T5382] EXT4-fs: Ignoring removed orlov option
[   65.853382][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'.
[   65.862413][ T5382] EXT4-fs: Ignoring removed nobh option
[   65.868058][ T5382] EXT4-fs: Ignoring removed bh option
[   65.922202][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.322'.
[   65.955316][ T5388] loop0: detected capacity change from 0 to 164
[   66.023961][ T5388] Unable to read rock-ridge attributes
[   66.100152][ T5401] loop0: detected capacity change from 0 to 512
[   66.107333][ T5401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   66.119979][ T5401] EXT4-fs (loop0): 1 truncate cleaned up
[   66.526463][ T5415] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=5415 comm=syz.1.329
[   66.526600][ T5415] Unsupported ieee802154 address type: 0
[   66.551088][ T5415] siw: device registration error -23
[   66.960474][ T5435] lo speed is unknown, defaulting to 1000
[   67.657745][ T5439] lo speed is unknown, defaulting to 1000
[   67.781187][ T5442] loop1: detected capacity change from 0 to 512
[   67.806798][ T5442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   67.825606][ T5442] EXT4-fs (loop1): 1 truncate cleaned up
[   67.850594][ T5448] loop0: detected capacity change from 0 to 512
[   68.194888][ T5467] loop0: detected capacity change from 0 to 512
[   68.209739][ T5467] EXT4-fs: Ignoring removed mblk_io_submit option
[   68.220866][ T5467] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.238593][ T5467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.247127][ T5467] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   68.371234][ T5467] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.338: Allocating blocks 41-42 which overlap fs metadata
[   68.402223][ T5467] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.338: Allocating blocks 41-42 which overlap fs metadata
[   68.433191][ T5467] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.338: Failed to acquire dquot type 1
[   68.436495][ T5490] loop4: detected capacity change from 0 to 1024
[   68.452638][ T5467] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   68.455645][ T5490] EXT4-fs: Ignoring removed orlov option
[   68.467214][ T5467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.338: corrupted inode contents
[   68.475059][ T5490] EXT4-fs: Ignoring removed nobh option
[   68.490358][ T5490] EXT4-fs: Ignoring removed bh option
[   68.506329][ T5467] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #12: comm syz.0.338: mark_inode_dirty error
[   68.528794][ T5467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.338: corrupted inode contents
[   68.541941][ T5467] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.338: mark_inode_dirty error
[   68.558173][ T5467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.338: corrupted inode contents
[   68.589390][ T5467] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   68.599182][ T5467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #12: comm syz.0.338: corrupted inode contents
[   68.625821][ T5467] EXT4-fs error (device loop0): ext4_truncate:4666: inode #12: comm syz.0.338: mark_inode_dirty error
[   68.640475][ T5506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=5506 comm=syz.4.341
[   68.657894][ T5467] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   68.668440][ T5506] Unsupported ieee802154 address type: 0
[   68.674247][ T5467] EXT4-fs (loop0): 1 truncate cleaned up
[   68.711850][ T5464] ext4: Unknown parameter ''
[   68.718661][ T5515] loop1: detected capacity change from 0 to 2048
[   68.723376][ T5506] siw: device registration error -23
[   68.785563][ T5515]  loop1: p2 p3 p7
[   68.901562][ T3297] EXT4-fs unmount: 61 callbacks suppressed
[   68.901579][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.990606][ T5548] lo speed is unknown, defaulting to 1000
[   69.294169][ T5552] lo speed is unknown, defaulting to 1000
[   69.508220][ T5554] loop0: detected capacity change from 0 to 8192
[   69.768496][ T5594] loop3: detected capacity change from 0 to 2048
[   69.815045][ T5594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.882418][ T5605] loop0: detected capacity change from 0 to 1024
[   69.882725][ T5605] EXT4-fs: Ignoring removed orlov option
[   69.882940][ T5605] EXT4-fs: Ignoring removed nobh option
[   69.882960][ T5605] EXT4-fs: Ignoring removed bh option
[   69.891485][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.907916][ T5605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.913621][ T5605] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.352: Allocating blocks 481-513 which overlap fs metadata
[   69.914994][ T5605] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.352: Allocating blocks 465-513 which overlap fs metadata
[   69.935581][ T5610] loop3: detected capacity change from 0 to 2048
[   69.947506][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.974952][ T5615] loop0: detected capacity change from 0 to 2048
[   70.001140][ T5612] loop2: detected capacity change from 0 to 512
[   70.044010][ T5612] EXT4-fs: Ignoring removed mblk_io_submit option
[   70.044147][ T5612] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.044607][ T5612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   70.044626][ T5612] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   70.052327][ T5610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.066125][ T5612] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.354: Allocating blocks 41-42 which overlap fs metadata
[   70.116335][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.117086][ T5612] __quota_error: 186 callbacks suppressed
[   70.117103][ T5612] Quota error (device loop2): write_blk: dquota write failed
[   70.138533][ T5612] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[   70.138848][ T5612] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.354: Allocating blocks 41-42 which overlap fs metadata
[   70.149138][ T5612] Quota error (device loop2): write_blk: dquota write failed
[   70.149316][ T5612] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   70.149346][ T5612] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.354: Failed to acquire dquot type 1
[   70.157775][   T29] audit: type=1326 audit(1758946918.182:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.159918][   T29] audit: type=1326 audit(1758946918.182:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.160013][   T29] audit: type=1326 audit(1758946918.182:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.160118][   T29] audit: type=1326 audit(1758946918.182:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.160150][   T29] audit: type=1326 audit(1758946918.182:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.160212][   T29] audit: type=1326 audit(1758946918.182:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5621 comm="syz.3.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   70.160856][ T5612] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   70.160947][ T5612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.354: corrupted inode contents
[   70.162116][ T5615]  loop0: p2 p3 p7
[   70.380454][ T5612] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.354: mark_inode_dirty error
[   70.381942][ T5612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.354: corrupted inode contents
[   70.404308][ T5612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.354: mark_inode_dirty error
[   70.437307][ T5612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.354: corrupted inode contents
[   70.450881][ T5612] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   70.457174][ T5612] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.354: corrupted inode contents
[   70.518576][ T5630] loop1: detected capacity change from 0 to 8192
[   70.535590][ T5612] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.354: mark_inode_dirty error
[   70.535807][ T5612] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   70.536092][ T5612] EXT4-fs (loop2): 1 truncate cleaned up
[   70.536589][ T5612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.549216][ T5612] ext4: Unknown parameter ''
[   70.632628][ T5641] loop1: detected capacity change from 0 to 512
[   70.754467][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.365'.
[   70.760424][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.808311][ T5657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   70.834208][ T5675] loop2: detected capacity change from 0 to 1024
[   70.843368][ T5675] EXT4-fs: Ignoring removed orlov option
[   70.859490][ T5675] EXT4-fs: Ignoring removed nobh option
[   70.865096][ T5675] EXT4-fs: Ignoring removed bh option
[   70.882696][ T5675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.903668][ T5675] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.368: Allocating blocks 481-513 which overlap fs metadata
[   70.920442][ T5675] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.368: Allocating blocks 465-513 which overlap fs metadata
[   70.954828][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.973879][ T5686] loop3: detected capacity change from 0 to 8192
[   70.977100][ T5693] loop1: detected capacity change from 0 to 1024
[   70.989625][ T5693] EXT4-fs: Ignoring removed orlov option
[   70.995741][ T5693] EXT4-fs: Ignoring removed nobh option
[   71.001361][ T5693] EXT4-fs: Ignoring removed bh option
[   71.021894][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.039393][ T5693] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.373: Allocating blocks 481-513 which overlap fs metadata
[   71.115211][ T5693] EXT4-fs (loop1): pa ffff888107282380: logic 352, phys. 465, len 3
[   71.115244][ T5693] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   71.198564][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.216220][ T5716] loop2: detected capacity change from 0 to 2048
[   71.233434][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.253467][ T5722] loop1: detected capacity change from 0 to 512
[   71.256957][ T5722] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   71.332627][ T5722] EXT4-fs (loop1): 1 truncate cleaned up
[   71.333010][ T5722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.479585][ T5725] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.760596][ T3427] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   71.761060][ T3427] bond0 (unregistering): Released all slaves
[   71.801912][ T3427] hsr_slave_0: left promiscuous mode
[   71.802252][ T3427] hsr_slave_1: left promiscuous mode
[   71.802640][ T3427] batman_adv: batadv0: Removing interface: veth1_vlan
[   71.943808][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.984772][ T5765] loop3: detected capacity change from 0 to 1024
[   71.996770][ T5765] EXT4-fs: Ignoring removed orlov option
[   72.005029][ T5765] EXT4-fs: Ignoring removed nobh option
[   72.009077][ T5740] lo speed is unknown, defaulting to 1000
[   72.010664][ T5765] EXT4-fs: Ignoring removed bh option
[   72.054631][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.079431][ T5768] loop1: detected capacity change from 0 to 8192
[   72.092667][ T5765] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.383: Allocating blocks 481-513 which overlap fs metadata
[   72.140418][ T5765] EXT4-fs (loop3): pa ffff8881071d7c40: logic 352, phys. 465, len 3
[   72.148534][ T5765] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   72.186100][ T5740] chnl_net:caif_netlink_parms(): no params data found
[   72.198166][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.234975][ T5791] loop1: detected capacity change from 0 to 1024
[   72.243039][ T5791] EXT4-fs: Ignoring removed orlov option
[   72.248947][ T5791] EXT4-fs: Ignoring removed nobh option
[   72.254532][ T5791] EXT4-fs: Ignoring removed bh option
[   72.283439][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.290656][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.290923][ T5791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.310388][ T5740] bridge_slave_0: entered allmulticast mode
[   72.322282][ T5791] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.388: Allocating blocks 481-513 which overlap fs metadata
[   72.330476][ T5740] bridge_slave_0: entered promiscuous mode
[   72.348743][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.350558][ T5791] EXT4-fs (loop1): pa ffff8881071d7b60: logic 352, phys. 465, len 3
[   72.355951][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.363945][ T5791] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   72.383523][ T5740] bridge_slave_1: entered allmulticast mode
[   72.390611][ T5740] bridge_slave_1: entered promiscuous mode
[   72.410892][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.422313][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.424162][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.449213][ T5740] team0: Port device team_slave_0 added
[   72.466039][ T5740] team0: Port device team_slave_1 added
[   72.480694][ T5815] loop1: detected capacity change from 0 to 2048
[   72.501204][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.508232][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.534286][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.545741][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.552773][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.553016][ T5815]  loop1: p2 p3 p7
[   72.578753][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.639942][ T5740] hsr_slave_0: entered promiscuous mode
[   72.652548][ T5740] hsr_slave_1: entered promiscuous mode
[   72.662657][ T5740] debugfs: 'hsr0' already exists in 'hsr'
[   72.668565][ T5740] Cannot create hsr debugfs directory
[   72.674259][ T5824] loop3: detected capacity change from 0 to 512
[   72.681132][ T5824] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.696865][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option
[   72.704042][ T5824] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   72.712676][ T5824] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   72.744500][ T5824] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.391: Allocating blocks 41-42 which overlap fs metadata
[   72.759693][ T5824] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.391: Allocating blocks 41-42 which overlap fs metadata
[   72.773792][ T5824] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.391: Failed to acquire dquot type 1
[   72.786512][ T5824] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   72.802548][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.391: corrupted inode contents
[   72.814553][ T5824] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.391: mark_inode_dirty error
[   72.828516][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.391: corrupted inode contents
[   72.840578][ T5824] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.391: mark_inode_dirty error
[   72.851961][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.391: corrupted inode contents
[   72.863924][ T5824] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   72.873004][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.391: corrupted inode contents
[   72.885077][ T5824] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.391: mark_inode_dirty error
[   72.915974][ T5824] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   72.926340][ T5859] loop1: detected capacity change from 0 to 512
[   72.932347][ T5740] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   72.934411][ T5859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.952276][ T5824] EXT4-fs (loop3): 1 truncate cleaned up
[   72.952569][ T5859] EXT4-fs (loop1): 1 truncate cleaned up
[   72.962298][ T5740] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   72.968390][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.973135][ T5824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.018243][ T5740] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.032847][ T5740] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.053964][ T5824] ext4: Unknown parameter ''
[   73.104218][ T5865] loop4: detected capacity change from 0 to 8192
[   73.145588][ T5873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.395'.
[   73.210536][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.243098][ T5740] 8021q: adding VLAN 0 to HW filter on device team0
[   73.265001][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.272131][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.283420][ T5877] loop4: detected capacity change from 0 to 1024
[   73.299033][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.306207][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.314730][ T5877] EXT4-fs: Ignoring removed orlov option
[   73.320625][ T5877] EXT4-fs: Ignoring removed nobh option
[   73.326325][ T5877] EXT4-fs: Ignoring removed bh option
[   73.341075][ T5740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.351573][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.391435][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.444393][ T5877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.474557][ T5877] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.397: Allocating blocks 465-513 which overlap fs metadata
[   73.480200][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.505315][ T5877] EXT4-fs (loop4): pa ffff8881071d7b60: logic 256, phys. 369, len 9
[   73.513408][ T5877] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   73.523745][ T5877] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   73.562735][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.574068][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.624514][ T5903] netlink: 'syz.1.402': attribute type 30 has an invalid length.
[   73.677897][ T5740] veth0_vlan: entered promiscuous mode
[   73.701046][ T5740] veth1_vlan: entered promiscuous mode
[   73.778927][ T5914] loop1: detected capacity change from 0 to 8192
[   73.820037][ T5917] loop1: detected capacity change from 0 to 128
[   73.829055][ T5917] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   73.841411][ T5917] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   73.869259][ T5912] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   73.924101][ T3405] syz1: Port: 1 Link DOWN
[   73.929027][   T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.945813][ T5740] veth0_macvtap: entered promiscuous mode
[   73.955927][   T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.966764][ T5740] veth1_macvtap: entered promiscuous mode
[   73.978236][   T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.991035][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.000057][   T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.010757][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.021183][   T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.096518][ T3427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.126790][ T3427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.150207][ T3427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.439380][ T5944] lo speed is unknown, defaulting to 1000
[   74.525894][ T5943] loop0: detected capacity change from 0 to 512
[   74.554874][ T5943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   74.584676][ T5943] EXT4-fs (loop0): 1 truncate cleaned up
[   74.591934][ T5943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.206987][   T29] kauditd_printk_skb: 173 callbacks suppressed
[   75.213351][   T29] audit: type=1326 audit(1758946923.222:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.246676][   T29] audit: type=1326 audit(1758946923.262:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.270115][   T29] audit: type=1326 audit(1758946923.262:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.293577][   T29] audit: type=1326 audit(1758946923.262:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.318679][   T29] audit: type=1326 audit(1758946923.262:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.342384][   T29] audit: type=1326 audit(1758946923.262:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.365763][   T29] audit: type=1326 audit(1758946923.262:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.375085][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.389222][   T29] audit: type=1326 audit(1758946923.262:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.421480][   T29] audit: type=1326 audit(1758946923.262:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.444871][   T29] audit: type=1326 audit(1758946923.262:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ead3eec9 code=0x7ffc0000
[   75.635025][ T6016] loop0: detected capacity change from 0 to 8192
[   75.914083][ T6028] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   76.003226][   T10] lo speed is unknown, defaulting to 1000
[   76.009079][   T10] syz0: Port: 1 Link DOWN
[   76.027563][ T6039] lo speed is unknown, defaulting to 1000
[   76.135767][ T1700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.148789][ T1700] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.166770][ T1700] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.176308][ T1700] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.225142][ T6053] loop0: detected capacity change from 0 to 2048
[   76.239688][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.268857][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.497709][ T6094] loop4: detected capacity change from 0 to 1024
[   76.504598][ T6094] EXT4-fs: Ignoring removed orlov option
[   76.510971][ T6094] EXT4-fs: Ignoring removed nobh option
[   76.516570][ T6094] EXT4-fs: Ignoring removed bh option
[   76.533301][ T6094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.550713][ T6097] loop0: detected capacity change from 0 to 2048
[   76.562796][ T6094] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.420: Allocating blocks 481-513 which overlap fs metadata
[   76.580706][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.594134][ T6094] EXT4-fs (loop4): pa ffff8881071d7cb0: logic 352, phys. 465, len 3
[   76.594560][ T6097]  loop0: p2 p3 p7
[   76.602243][ T6094] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   76.653902][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.662697][ T6104] loop1: detected capacity change from 0 to 1024
[   76.669865][ T6104] EXT4-fs: Ignoring removed orlov option
[   76.675629][ T6104] EXT4-fs: Ignoring removed nobh option
[   76.681285][ T6104] EXT4-fs: Ignoring removed bh option
[   76.688699][ T6106] loop4: detected capacity change from 0 to 1024
[   76.695242][ T6106] EXT4-fs: Ignoring removed orlov option
[   76.699096][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.701894][ T6106] EXT4-fs: Ignoring removed nobh option
[   76.719038][ T6106] EXT4-fs: Ignoring removed bh option
[   76.729331][ T6104] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.424: Allocating blocks 465-513 which overlap fs metadata
[   76.741242][ T6106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.744702][ T6104] EXT4-fs (loop1): pa ffff8881071d7cb0: logic 256, phys. 369, len 9
[   76.763916][ T6104] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   76.774226][ T6104] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   76.780557][ T6106] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.425: Allocating blocks 465-513 which overlap fs metadata
[   76.804244][ T6106] EXT4-fs (loop4): pa ffff888107282620: logic 256, phys. 369, len 9
[   76.812318][ T6106] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   76.822583][ T6106] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   76.824701][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.868300][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.910889][ T6119] loop5: detected capacity change from 0 to 512
[   76.929180][ T6117] loop4: detected capacity change from 0 to 8192
[   76.944700][ T6121] loop5: detected capacity change from 0 to 1024
[   76.951984][ T6121] EXT4-fs: Ignoring removed orlov option
[   76.958357][ T6121] EXT4-fs: Ignoring removed nobh option
[   76.963992][ T6121] EXT4-fs: Ignoring removed bh option
[   76.981091][ T6121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.999064][ T6121] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.429: Allocating blocks 465-513 which overlap fs metadata
[   77.013692][ T6121] EXT4-fs (loop5): pa ffff888107282620: logic 256, phys. 369, len 9
[   77.021853][ T6121] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   77.022403][ T6128] netlink: 'syz.4.431': attribute type 30 has an invalid length.
[   77.046285][ T6121] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   77.096364][ T5740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.101922][ T6132] syzkaller1: entered promiscuous mode
[   77.110979][ T6132] syzkaller1: entered allmulticast mode
[   77.155629][ T6136] loop3: detected capacity change from 0 to 2048
[   77.172728][ T6138] loop4: detected capacity change from 0 to 1024
[   77.183398][ T6138] EXT4-fs: Ignoring removed orlov option
[   77.202754][ T6138] EXT4-fs: Ignoring removed nobh option
[   77.208440][ T6138] EXT4-fs: Ignoring removed bh option
[   77.216782][ T6136]  loop3: p2 p3 p7
[   77.236287][ T6140] loop5: detected capacity change from 0 to 1024
[   77.243173][ T6140] EXT4-fs: Ignoring removed orlov option
[   77.249352][ T6140] EXT4-fs: Ignoring removed nobh option
[   77.254951][ T6140] EXT4-fs: Ignoring removed bh option
[   77.270743][ T6140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.284780][ T6138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.306402][ T6138] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.436: Allocating blocks 481-513 which overlap fs metadata
[   77.323337][ T6140] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.437: Allocating blocks 465-513 which overlap fs metadata
[   77.342995][ T6138] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.436: Allocating blocks 465-513 which overlap fs metadata
[   77.383110][ T6140] EXT4-fs (loop5): pa ffff8881071d7d90: logic 256, phys. 369, len 9
[   77.391299][ T6140] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   77.405243][ T6140] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   77.464423][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.555253][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'.
[   77.588625][ T5740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.334620][ T6187] loop5: detected capacity change from 0 to 8192
[   78.430896][ T6191] loop4: detected capacity change from 0 to 8192
[   78.514249][ T6206] lo speed is unknown, defaulting to 1000
[   78.659858][ T6191]  loop4: p1 p2 p3 p4
[   78.675018][ T6191] loop4: p3 start 331777 is beyond EOD, truncated
[   78.681652][ T6191] loop4: p4 size 262144 extends beyond EOD, truncated
[   79.053692][ T6248] loop4: detected capacity change from 0 to 512
[   79.070549][ T6248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.083303][ T6248] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.096522][ T6248] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.457: bg 0: block 328: padding at end of block bitmap is not set
[   79.132854][ T6248] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[   79.139632][ T6248] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   79.147401][ T6248] vhci_hcd vhci_hcd.0: Device attached
[   79.159999][ T6248] random: crng reseeded on system resumption
[   79.173338][ T6258] vhci_hcd: connection closed
[   79.173755][  T140] vhci_hcd: stop threads
[   79.177771][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'.
[   79.178529][  T140] vhci_hcd: release socket
[   79.196034][  T140] vhci_hcd: disconnect device
[   79.234574][ T6271] loop3: detected capacity change from 0 to 128
[   79.243505][ T6271] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.274584][ T6271] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.293656][ T6279] loop1: detected capacity change from 0 to 1764
[   79.305661][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'.
[   79.470414][ T6302] loop1: detected capacity change from 0 to 8192
[   79.773443][ T6339] lo speed is unknown, defaulting to 1000
[   79.952078][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.153611][ T6347] loop4: detected capacity change from 0 to 1024
[   80.161647][ T6347] EXT4-fs: Ignoring removed orlov option
[   80.167601][ T6347] EXT4-fs: Ignoring removed nobh option
[   80.173277][ T6347] EXT4-fs: Ignoring removed bh option
[   80.220801][ T6347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.242625][ T6347] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.465: Allocating blocks 481-513 which overlap fs metadata
[   80.283008][ T6347] EXT4-fs (loop4): pa ffff8881071d7cb0: logic 352, phys. 465, len 3
[   80.291169][ T6347] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   80.313525][   T29] kauditd_printk_skb: 217 callbacks suppressed
[   80.313543][   T29] audit: type=1326 audit(1758946928.332:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343374][   T29] audit: type=1326 audit(1758946928.332:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343508][   T29] audit: type=1326 audit(1758946928.332:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343558][   T29] audit: type=1326 audit(1758946928.332:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343584][   T29] audit: type=1326 audit(1758946928.332:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343609][   T29] audit: type=1326 audit(1758946928.332:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343651][   T29] audit: type=1326 audit(1758946928.332:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343774][   T29] audit: type=1326 audit(1758946928.332:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343811][   T29] audit: type=1326 audit(1758946928.332:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.343844][   T29] audit: type=1326 audit(1758946928.332:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6356 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   80.522193][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.690652][ T6366] lo speed is unknown, defaulting to 1000
[   80.791389][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.974732][ T6372] loop4: detected capacity change from 0 to 512
[   80.975510][ T6372] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   81.001381][ T6372] EXT4-fs (loop4): 1 truncate cleaned up
[   81.001945][ T6372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.074770][ T6380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.470'.
[   81.096864][ T6382] loop3: detected capacity change from 0 to 164
[   81.195224][ T6386] loop3: detected capacity change from 0 to 2048
[   81.201839][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.217139][ T6388] loop5: detected capacity change from 0 to 2048
[   81.222551][ T6390] loop0: detected capacity change from 0 to 512
[   81.230900][ T6390] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   81.230853][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.244170][ T6390] EXT4-fs (loop0): 1 truncate cleaned up
[   81.259118][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.307959][ T6388]  loop5: p2 p3 p7
[   81.336782][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.369323][ T6397] netlink: 'syz.4.482': attribute type 30 has an invalid length.
[   81.511272][ T6409] loop3: detected capacity change from 0 to 128
[   81.571841][ T6409] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   81.585230][ T6409] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   81.834465][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.866136][ T6433] loop0: detected capacity change from 0 to 164
[   81.976406][ T6443] lo speed is unknown, defaulting to 1000
[   82.088514][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'.
[   82.542198][ T6466] loop5: detected capacity change from 0 to 2048
[   82.565107][ T6471] loop0: detected capacity change from 0 to 1024
[   82.575763][ T6471] EXT4-fs: Ignoring removed orlov option
[   82.582756][ T6466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.594868][ T6471] EXT4-fs: Ignoring removed nobh option
[   82.594896][ T6471] EXT4-fs: Ignoring removed bh option
[   82.609988][ T6471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.634222][ T6471] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.493: Allocating blocks 481-513 which overlap fs metadata
[   82.671832][ T5740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.718649][ T6471] EXT4-fs (loop0): pa ffff888107282620: logic 352, phys. 465, len 3
[   82.726715][ T6471] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   82.850005][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.888500][ T6508] loop0: detected capacity change from 0 to 1024
[   82.922897][ T6511] loop5: detected capacity change from 0 to 2048
[   82.927604][ T6508] EXT4-fs: Ignoring removed orlov option
[   82.935006][ T6508] EXT4-fs: Ignoring removed nobh option
[   82.940645][ T6508] EXT4-fs: Ignoring removed bh option
[   82.948869][ T6508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.962105][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.984536][ T6508] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.497: Allocating blocks 465-513 which overlap fs metadata
[   82.999986][ T6508] EXT4-fs (loop0): pa ffff888107282620: logic 256, phys. 369, len 9
[   83.008133][ T6508] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   83.018775][ T6508] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   83.127757][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.135121][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.188325][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.200325][ T6528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.237079][ T1700] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.249408][ T1700] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.266219][ T1700] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.279874][ T1700] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.464600][ T6585] loop4: detected capacity change from 0 to 1024
[   83.472853][ T6587] netlink: 32 bytes leftover after parsing attributes in process `syz.0.504'.
[   83.477456][ T6585] EXT4-fs: Ignoring removed orlov option
[   83.498265][ T6585] EXT4-fs: Ignoring removed nobh option
[   83.503891][ T6585] EXT4-fs: Ignoring removed bh option
[   83.531618][ T6585] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.503: Allocating blocks 481-513 which overlap fs metadata
[   83.579459][ T6585] EXT4-fs (loop4): pa ffff888107282770: logic 352, phys. 465, len 3
[   83.587623][ T6585] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   83.641629][ T6603] loop4: detected capacity change from 0 to 1024
[   83.648302][ T6603] EXT4-fs: Ignoring removed orlov option
[   83.654074][ T6603] EXT4-fs: Ignoring removed nobh option
[   83.659760][ T6603] EXT4-fs: Ignoring removed bh option
[   83.687920][ T6603] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.511: Allocating blocks 481-513 which overlap fs metadata
[   83.723882][ T6607] loop3: detected capacity change from 0 to 512
[   83.729819][ T6603] EXT4-fs (loop4): pa ffff8881072827e0: logic 352, phys. 465, len 3
[   83.731297][ T6607] EXT4-fs: Ignoring removed mblk_io_submit option
[   83.738254][ T6603] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   83.746012][ T6607] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.763905][ T6607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   83.772480][ T6607] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   83.819994][ T6607] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.510: Allocating blocks 41-42 which overlap fs metadata
[   83.835186][ T6607] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.510: Allocating blocks 41-42 which overlap fs metadata
[   83.850434][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.517'.
[   83.874787][ T6607] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.510: Failed to acquire dquot type 1
[   83.901465][ T6607] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   83.923019][ T6607] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.510: corrupted inode contents
[   83.935422][ T6607] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.510: mark_inode_dirty error
[   83.949133][ T6607] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.510: corrupted inode contents
[   83.961260][ T6607] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.510: mark_inode_dirty error
[   83.972855][ T6607] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.510: corrupted inode contents
[   83.984829][ T6607] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   83.993693][ T6607] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.510: corrupted inode contents
[   84.005718][ T6607] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.510: mark_inode_dirty error
[   84.017059][ T6607] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   84.026254][ T6607] EXT4-fs (loop3): 1 truncate cleaned up
[   84.054969][ T6607] ext4: Unknown parameter ''
[   84.082264][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'.
[   84.097588][ T6646] loop1: detected capacity change from 0 to 164
[   84.146460][ T6650] netlink: 32 bytes leftover after parsing attributes in process `syz.4.530'.
[   84.180951][ T6654] loop4: detected capacity change from 0 to 1024
[   84.188382][ T6654] EXT4-fs: Ignoring removed orlov option
[   84.194276][ T6654] EXT4-fs: Ignoring removed nobh option
[   84.199920][ T6654] EXT4-fs: Ignoring removed bh option
[   84.228339][ T6654] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.532: Allocating blocks 481-513 which overlap fs metadata
[   84.290641][ T6654] EXT4-fs (loop4): pa ffff8881071d7ee0: logic 352, phys. 465, len 3
[   84.298737][ T6654] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   84.391528][ T6692] loop5: detected capacity change from 0 to 164
[   84.435975][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.541'.
[   84.472933][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz.5.542'.
[   84.487766][ T6697] loop4: detected capacity change from 0 to 512
[   84.496060][ T6697] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.517174][ T6697] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.518487][ T6709] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[   84.537159][ T6697] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.545716][ T6697] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[   84.556384][ T6712] loop5: detected capacity change from 0 to 2048
[   84.569732][ T6697] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.537: Allocating blocks 41-42 which overlap fs metadata
[   84.586438][ T6697] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.537: Failed to acquire dquot type 1
[   84.602877][ T6697] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   84.617755][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.537: corrupted inode contents
[   84.638220][ T6697] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.537: mark_inode_dirty error
[   84.656555][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.537: corrupted inode contents
[   84.677313][ T6697] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.537: mark_inode_dirty error
[   84.705826][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.537: corrupted inode contents
[   84.718178][ T6697] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   84.733189][ T6736] loop3: detected capacity change from 0 to 1024
[   84.740063][ T6697] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.537: corrupted inode contents
[   84.753631][ T6736] EXT4-fs: Ignoring removed orlov option
[   84.773539][ T6697] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.537: mark_inode_dirty error
[   84.790759][ T6745] loop5: detected capacity change from 0 to 1024
[   84.797563][ T6745] EXT4-fs: Ignoring removed orlov option
[   84.803361][ T6736] EXT4-fs: Ignoring removed nobh option
[   84.809113][ T6736] EXT4-fs: Ignoring removed bh option
[   84.815664][ T6697] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   84.824849][ T6745] EXT4-fs: Ignoring removed nobh option
[   84.830507][ T6745] EXT4-fs: Ignoring removed bh option
[   84.837898][ T6697] EXT4-fs (loop4): 1 truncate cleaned up
[   84.845494][ T6697] ext4: Unknown parameter ''
[   84.855091][ T6745] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.549: Allocating blocks 481-513 which overlap fs metadata
[   84.875914][ T6736] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.548: Allocating blocks 481-513 which overlap fs metadata
[   84.900359][ T6745] EXT4-fs (loop5): pa ffff8881072827e0: logic 352, phys. 465, len 3
[   84.908477][ T6745] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   84.924570][ T6736] EXT4-fs (loop3): pa ffff8881071d7f50: logic 352, phys. 465, len 3
[   84.932809][ T6736] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   84.998284][ T6771] loop3: detected capacity change from 0 to 1024
[   85.005169][ T6771] EXT4-fs: Ignoring removed orlov option
[   85.010623][ T6773] loop5: detected capacity change from 0 to 164
[   85.014562][ T6771] EXT4-fs: Ignoring removed nobh option
[   85.022679][ T6771] EXT4-fs: Ignoring removed bh option
[   85.039339][ T6771] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.551: Allocating blocks 465-513 which overlap fs metadata
[   85.064860][ T6771] EXT4-fs (loop3): pa ffff8881071d7f50: logic 256, phys. 369, len 9
[   85.073065][ T6771] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   85.084334][ T6771] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   85.146840][ T6786] loop5: detected capacity change from 0 to 8192
[   85.259361][ T6809] loop5: detected capacity change from 0 to 2048
[   85.279734][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'.
[   85.293184][ T6809]  loop5: p2 p3 p7
[   85.347893][   T29] kauditd_printk_skb: 88 callbacks suppressed
[   85.347906][   T29] audit: type=1400 audit(1758946933.372:1579): avc:  denied  { unmount } for  pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   85.405760][ T6832] loop0: detected capacity change from 0 to 164
[   85.408805][   T29] audit: type=1326 audit(1758946933.372:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.435451][   T29] audit: type=1326 audit(1758946933.372:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.459071][   T29] audit: type=1326 audit(1758946933.372:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.482637][   T29] audit: type=1326 audit(1758946933.372:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.506047][   T29] audit: type=1326 audit(1758946933.372:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.529540][   T29] audit: type=1326 audit(1758946933.372:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.529555][ T6832] RI
[   85.529638][   T29] audit: type=1326 audit(1758946933.372:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.552860][ T6832] P
[   85.555392][   T29] audit: type=1326 audit(1758946933.372:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.578717][ T6832] _
[   85.581078][   T29] audit: type=1326 audit(1758946933.372:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6821 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630395eec9 code=0x7ffc0000
[   85.604311][ T6832] 1991A
[   85.738579][ T6853] loop5: detected capacity change from 0 to 512
[   85.805422][ T6860] netlink: 32 bytes leftover after parsing attributes in process `syz.5.565'.
[   85.852125][ T6828] batman_adv: batadv0: Interface deactivated: veth1_vlan
[   85.896466][ T1700] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.912353][ T1700] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.944196][ T1700] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.975061][ T1700] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.997197][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   86.006091][ T6877] netlink: 'syz.0.566': attribute type 30 has an invalid length.
[   86.036080][   T31] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.045148][   T31] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.058448][ T6882] capability: warning: `syz.4.567' uses 32-bit capabilities (legacy support in use)
[   86.069234][   T31] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.078886][   T31] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.115066][ T6886] loop0: detected capacity change from 0 to 128
[   86.123858][ T6886] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.248968][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[   86.415539][ T6904] loop3: detected capacity change from 0 to 512
[   86.424798][ T6904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   86.438998][ T6904] EXT4-fs (loop3): 1 truncate cleaned up
[   86.845683][ T6911] lo speed is unknown, defaulting to 1000
[   87.106716][ T6924] loop3: detected capacity change from 0 to 1024
[   87.107324][ T6924] EXT4-fs: Ignoring removed orlov option
[   87.144584][ T6924] EXT4-fs: Ignoring removed nobh option
[   87.144620][ T6924] EXT4-fs: Ignoring removed bh option
[   87.152693][ T6928] loop0: detected capacity change from 0 to 1024
[   87.163947][ T6928] EXT4-fs: Ignoring removed orlov option
[   87.164024][ T6928] EXT4-fs: Ignoring removed nobh option
[   87.164067][ T6928] EXT4-fs: Ignoring removed bh option
[   87.172274][ T6924] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.581: Allocating blocks 481-513 which overlap fs metadata
[   87.217490][ T6928] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.584: Allocating blocks 481-513 which overlap fs metadata
[   87.242184][ T6928] EXT4-fs (loop0): pa ffff888107282850: logic 352, phys. 465, len 3
[   87.242212][ T6928] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   87.263024][ T6924] EXT4-fs (loop3): pa ffff8881072828c0: logic 352, phys. 465, len 3
[   87.263139][ T6924] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   87.302272][ T6935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=6935 comm=syz.5.585
[   87.302371][ T6935] Unsupported ieee802154 address type: 0
[   87.353799][ T6935] siw: device registration error -23
[   87.476766][ T6947] loop3: detected capacity change from 0 to 1024
[   87.491917][ T6947] EXT4-fs: Ignoring removed orlov option
[   87.505383][ T6947] EXT4-fs: Ignoring removed nobh option
[   87.505456][ T6947] EXT4-fs: Ignoring removed bh option
[   87.597537][ T6951] loop1: detected capacity change from 0 to 1024
[   87.598086][ T6951] EXT4-fs: Ignoring removed orlov option
[   87.598382][ T6951] EXT4-fs: Ignoring removed nobh option
[   87.598409][ T6951] EXT4-fs: Ignoring removed bh option
[   87.645868][ T6956] lo speed is unknown, defaulting to 1000
[   87.724592][ T6947] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.590: Allocating blocks 481-513 which overlap fs metadata
[   87.773685][ T6947] EXT4-fs (loop3): pa ffff888107282850: logic 352, phys. 465, len 3
[   87.773712][ T6947] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   88.103140][ T6951] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.591: Allocating blocks 481-513 which overlap fs metadata
[   88.131180][ T6976] loop4: detected capacity change from 0 to 1024
[   88.139109][ T6976] EXT4-fs: Ignoring removed orlov option
[   88.145139][ T6976] EXT4-fs: Ignoring removed nobh option
[   88.150888][ T6976] EXT4-fs: Ignoring removed bh option
[   88.174859][ T6951] EXT4-fs (loop1): pa ffff8881072828c0: logic 352, phys. 465, len 3
[   88.183109][ T6951] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   88.213396][ T6976] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.593: Allocating blocks 481-513 which overlap fs metadata
[   88.294695][ T6976] EXT4-fs (loop4): pa ffff888107282850: logic 352, phys. 465, len 3
[   88.302840][ T6976] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   88.352887][ T7004] loop1: detected capacity change from 0 to 512
[   88.470601][ T7025] loop4: detected capacity change from 0 to 164
[   88.513582][ T7027] loop3: detected capacity change from 0 to 512
[   88.520541][ T7027] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.527114][ T7027] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.534852][ T7027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.543518][ T7027] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   88.570262][ T7027] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.600: Allocating blocks 41-42 which overlap fs metadata
[   88.601869][ T7027] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.600: Allocating blocks 41-42 which overlap fs metadata
[   88.623810][ T7027] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.600: Failed to acquire dquot type 1
[   88.635313][ T7027] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   88.651630][ T7027] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.600: corrupted inode contents
[   88.664855][ T7027] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.600: mark_inode_dirty error
[   88.685506][ T7027] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.600: corrupted inode contents
[   88.697744][ T7027] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.600: mark_inode_dirty error
[   88.716689][ T7027] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.600: corrupted inode contents
[   88.736815][ T7027] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[   88.747942][ T7027] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.600: corrupted inode contents
[   88.760081][ T7027] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.600: mark_inode_dirty error
[   88.772237][ T7027] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[   88.781870][ T7027] EXT4-fs (loop3): 1 truncate cleaned up
[   88.789453][ T7027] ext4: Unknown parameter ''
[   88.833932][ T7073] FAULT_INJECTION: forcing a failure.
[   88.833932][ T7073] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   88.847073][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.4.607 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   88.847159][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   88.847175][ T7073] Call Trace:
[   88.847183][ T7073]  <TASK>
[   88.847193][ T7073]  __dump_stack+0x1d/0x30
[   88.847220][ T7073]  dump_stack_lvl+0xe8/0x140
[   88.847245][ T7073]  dump_stack+0x15/0x1b
[   88.847324][ T7073]  should_fail_ex+0x265/0x280
[   88.847349][ T7073]  should_fail+0xb/0x20
[   88.847375][ T7073]  should_fail_usercopy+0x1a/0x20
[   88.847457][ T7073]  _copy_to_user+0x20/0xa0
[   88.847488][ T7073]  simple_read_from_buffer+0xb5/0x130
[   88.847569][ T7073]  proc_fail_nth_read+0x10e/0x150
[   88.847601][ T7073]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   88.847626][ T7073]  vfs_read+0x1a5/0x770
[   88.847646][ T7073]  ? __rcu_read_unlock+0x4f/0x70
[   88.847712][ T7073]  ? __fget_files+0x184/0x1c0
[   88.847765][ T7073]  ksys_read+0xda/0x1a0
[   88.847794][ T7073]  __x64_sys_read+0x40/0x50
[   88.847830][ T7073]  x64_sys_call+0x27bc/0x2ff0
[   88.847855][ T7073]  do_syscall_64+0xd2/0x200
[   88.847948][ T7073]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   88.847973][ T7073]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   88.847999][ T7073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.848020][ T7073] RIP: 0033:0x7fd2ead3d8dc
[   88.848099][ T7073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   88.848141][ T7073] RSP: 002b:00007fd2e979f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   88.848165][ T7073] RAX: ffffffffffffffda RBX: 00007fd2eaf95fa0 RCX: 00007fd2ead3d8dc
[   88.848182][ T7073] RDX: 000000000000000f RSI: 00007fd2e979f0a0 RDI: 0000000000000003
[   88.848274][ T7073] RBP: 00007fd2e979f090 R08: 0000000000000000 R09: 0000000000000000
[   88.848323][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   88.848340][ T7073] R13: 00007fd2eaf96038 R14: 00007fd2eaf95fa0 R15: 00007fff7b540778
[   88.848361][ T7073]  </TASK>
[   89.067666][ T7077] loop4: detected capacity change from 0 to 128
[   89.075910][ T7077] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   89.270256][ T7108] loop3: detected capacity change from 0 to 512
[   89.535659][ T7123] FAULT_INJECTION: forcing a failure.
[   89.535659][ T7123] name failslab, interval 1, probability 0, space 0, times 0
[   89.548387][ T7123] CPU: 0 UID: 0 PID: 7123 Comm: syz.3.614 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   89.548422][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   89.548474][ T7123] Call Trace:
[   89.548482][ T7123]  <TASK>
[   89.548489][ T7123]  __dump_stack+0x1d/0x30
[   89.548532][ T7123]  dump_stack_lvl+0xe8/0x140
[   89.548557][ T7123]  dump_stack+0x15/0x1b
[   89.548624][ T7123]  should_fail_ex+0x265/0x280
[   89.548647][ T7123]  ? __se_sys_mount+0xef/0x2e0
[   89.548676][ T7123]  should_failslab+0x8c/0xb0
[   89.548700][ T7123]  __kmalloc_cache_noprof+0x4c/0x320
[   89.548796][ T7123]  ? memdup_user+0x99/0xd0
[   89.548831][ T7123]  __se_sys_mount+0xef/0x2e0
[   89.548935][ T7123]  ? __schedule+0x6b9/0xb30
[   89.549039][ T7123]  __x64_sys_mount+0x67/0x80
[   89.549070][ T7123]  x64_sys_call+0x2b4d/0x2ff0
[   89.549093][ T7123]  do_syscall_64+0xd2/0x200
[   89.549121][ T7123]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   89.549153][ T7123]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   89.549189][ T7123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.549210][ T7123] RIP: 0033:0x7f630395eec9
[   89.549224][ T7123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.549245][ T7123] RSP: 002b:00007f63023bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   89.549320][ T7123] RAX: ffffffffffffffda RBX: 00007f6303bb5fa0 RCX: 00007f630395eec9
[   89.549332][ T7123] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000
[   89.549346][ T7123] RBP: 00007f63023bf090 R08: 0000200000000240 R09: 0000000000000000
[   89.549363][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.549379][ T7123] R13: 00007f6303bb6038 R14: 00007f6303bb5fa0 R15: 00007ffe4d4ef178
[   89.549407][ T7123]  </TASK>
[   89.775287][ T7131] loop1: detected capacity change from 0 to 1024
[   89.789342][ T7131] EXT4-fs: Ignoring removed orlov option
[   89.798819][ T7134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=7134 comm=syz.3.617
[   89.801597][ T7131] EXT4-fs: Ignoring removed nobh option
[   89.812959][ T7134] Unsupported ieee802154 address type: 0
[   89.817398][ T7131] EXT4-fs: Ignoring removed bh option
[   89.845255][ T7131] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.616: Allocating blocks 465-513 which overlap fs metadata
[   89.861099][ T7131] EXT4-fs (loop1): pa ffff888107282930: logic 256, phys. 369, len 9
[   89.869184][ T7131] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   89.880631][ T7131] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   89.887262][ T7134] siw: device registration error -23
[   89.939046][ T7148] loop3: detected capacity change from 0 to 1024
[   89.946528][ T7148] EXT4-fs: Ignoring removed orlov option
[   89.953348][ T7148] EXT4-fs: Ignoring removed nobh option
[   89.959011][ T7148] EXT4-fs: Ignoring removed bh option
[   89.985163][ T7148] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.618: Allocating blocks 481-513 which overlap fs metadata
[   90.051440][ T7159] loop5: detected capacity change from 0 to 1024
[   90.059131][ T7159] EXT4-fs: Ignoring removed orlov option
[   90.065106][ T7159] EXT4-fs: Ignoring removed nobh option
[   90.070770][ T7159] EXT4-fs: Ignoring removed bh option
[   90.089883][ T7148] EXT4-fs (loop3): pa ffff8881071d7ee0: logic 352, phys. 465, len 3
[   90.098059][ T7148] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   90.122298][ T7159] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.623: Allocating blocks 481-513 which overlap fs metadata
[   90.162107][ T7159] EXT4-fs (loop5): pa ffff888107282930: logic 352, phys. 465, len 3
[   90.170211][ T7159] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   90.241383][ T7166] loop1: detected capacity change from 0 to 2048
[   90.380507][ T7168] __nla_validate_parse: 1 callbacks suppressed
[   90.380523][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'.
[   90.488604][ T7174] loop4: detected capacity change from 0 to 2048
[   90.534390][ T7174]  loop4: p2 p3 p7
[   90.543826][ T7176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32788 sclass=netlink_tcpdiag_socket pid=7176 comm=syz.0.629
[   90.559469][ T7176] Unsupported ieee802154 address type: 0
[   90.607627][   T29] kauditd_printk_skb: 205 callbacks suppressed
[   90.607644][   T29] audit: type=1400 audit(1758946938.632:1790): avc:  denied  { create } for  pid=7156 comm="syz.1.621" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.635932][ T7161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.621: bg 0: block 120: padding at end of block bitmap is not set
[   90.651176][   T29] audit: type=1400 audit(1758946938.652:1791): avc:  denied  { add_name } for  pid=7156 comm="syz.1.621" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.692661][   T29] audit: type=1400 audit(1758946938.672:1792): avc:  denied  { rmdir } for  pid=7156 comm="syz.1.621" name="control" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   90.722539][   T29] audit: type=1326 audit(1758946938.682:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.746133][   T29] audit: type=1326 audit(1758946938.682:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.769658][   T29] audit: type=1326 audit(1758946938.732:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.793079][   T29] audit: type=1326 audit(1758946938.732:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.816476][   T29] audit: type=1326 audit(1758946938.732:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.839866][   T29] audit: type=1326 audit(1758946938.732:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7179 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fae43a0eec9 code=0x7ffc0000
[   90.863220][   T29] audit: type=1400 audit(1758946938.732:1798): avc:  denied  { setattr } for  pid=7156 comm="syz.1.621" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   90.894562][ T7189] loop0: detected capacity change from 0 to 512
[   90.935719][ T7189] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.001619][ T7189] EXT4-fs (loop0): 1 truncate cleaned up
[   91.025757][ T7200] loop4: detected capacity change from 0 to 1024
[   91.036717][ T7200] EXT4-fs: Ignoring removed orlov option
[   91.042964][ T7200] EXT4-fs: Ignoring removed nobh option
[   91.048564][ T7200] EXT4-fs: Ignoring removed bh option
[   91.109649][ T7200] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.638: Allocating blocks 465-513 which overlap fs metadata
[   91.145232][ T7200] EXT4-fs (loop4): pa ffff888107282a10: logic 256, phys. 369, len 9
[   91.153368][ T7200] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   91.217290][ T7200] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   91.343933][ T7221] loop3: detected capacity change from 0 to 2048
[   91.376740][ T7224] loop4: detected capacity change from 0 to 2048
[   91.456234][ T7234] lo speed is unknown, defaulting to 1000
[   91.525941][ T7224]  loop4: p2 p3 p7
[   92.066710][ T7246] lo speed is unknown, defaulting to 1000
[   92.269233][ T7251] loop5: detected capacity change from 0 to 2048
[   92.341930][ T7251]  loop5: p2 p3 p7
[   92.509509][ T7271] loop0: detected capacity change from 0 to 1024
[   92.516265][ T7271] EXT4-fs: Ignoring removed orlov option
[   92.522626][ T7271] EXT4-fs: Ignoring removed nobh option
[   92.528311][ T7271] EXT4-fs: Ignoring removed bh option
[   92.545030][ T7271] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.650: Allocating blocks 481-513 which overlap fs metadata
[   92.574527][ T7271] EXT4-fs (loop0): pa ffff8881071d7f50: logic 352, phys. 465, len 3
[   92.582681][ T7271] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   92.695097][ T7302] loop0: detected capacity change from 0 to 512
[   92.703214][ T7302] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   92.714555][ T7302] EXT4-fs (loop0): 1 truncate cleaned up
[   93.212639][ T7374] loop4: detected capacity change from 0 to 512
[   93.231718][ T7374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   93.276523][ T7380] loop5: detected capacity change from 0 to 512
[   93.286418][ T7380] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   93.294139][ T7374] EXT4-fs (loop4): 1 truncate cleaned up
[   93.307298][ T7380] EXT4-fs (loop5): 1 truncate cleaned up
[   93.307845][ T7374] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.654: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   93.357209][ T7388] loop4: detected capacity change from 0 to 2048
[   93.391436][ T7388]  loop4: p2 p3 p7
[   93.488620][ T7394] loop4: detected capacity change from 0 to 1024
[   93.505558][ T7394] EXT4-fs: Ignoring removed orlov option
[   93.511806][ T7394] EXT4-fs: Ignoring removed nobh option
[   93.517462][ T7394] EXT4-fs: Ignoring removed bh option
[   93.524480][ T7395] loop3: detected capacity change from 0 to 2048
[   93.560777][ T7394] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.661: Allocating blocks 481-513 which overlap fs metadata
[   93.589036][ T7394] EXT4-fs (loop4): pa ffff888107282a10: logic 352, phys. 465, len 3
[   93.597216][ T7394] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   93.804183][ T7401] loop1: detected capacity change from 0 to 512
[   93.818278][ T7401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   93.851144][ T7401] EXT4-fs (loop1): 1 truncate cleaned up
[   93.902948][ T7401] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.664: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   93.986602][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'.
[   93.992298][ T7421] loop0: detected capacity change from 0 to 1024
[   93.995520][ T7418] netlink: 'syz.5.667': attribute type 30 has an invalid length.
[   94.015049][   T51] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.021294][ T7421] EXT4-fs: Ignoring removed orlov option
[   94.024418][   T51] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.031230][ T7421] EXT4-fs: Ignoring removed nobh option
[   94.039073][   T51] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.043910][ T7421] EXT4-fs: Ignoring removed bh option
[   94.054931][   T51] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.108341][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[   94.136033][ T7421] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.668: Allocating blocks 481-513 which overlap fs metadata
[   94.171188][ T7437] loop3: detected capacity change from 0 to 1024
[   94.179378][ T7441] loop4: detected capacity change from 0 to 512
[   94.186587][ T7437] EXT4-fs: Ignoring removed orlov option
[   94.192458][ T7437] EXT4-fs: Ignoring removed nobh option
[   94.192495][ T7441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.208131][ T7437] EXT4-fs: Ignoring removed bh option
[   94.225264][ T7421] EXT4-fs (loop0): pa ffff888107282a80: logic 352, phys. 465, len 3
[   94.226679][ T7441] EXT4-fs (loop4): 1 truncate cleaned up
[   94.233449][ T7421] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   94.259891][ T7447] loop5: detected capacity change from 0 to 1764
[   94.268558][ T7447] FAULT_INJECTION: forcing a failure.
[   94.268558][ T7447] name failslab, interval 1, probability 0, space 0, times 0
[   94.281273][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.5.679 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.281315][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.281331][ T7447] Call Trace:
[   94.281402][ T7447]  <TASK>
[   94.281411][ T7447]  __dump_stack+0x1d/0x30
[   94.281467][ T7447]  dump_stack_lvl+0xe8/0x140
[   94.281491][ T7447]  dump_stack+0x15/0x1b
[   94.281512][ T7447]  should_fail_ex+0x265/0x280
[   94.281542][ T7447]  should_failslab+0x8c/0xb0
[   94.281574][ T7447]  kmem_cache_alloc_node_noprof+0x57/0x320
[   94.281654][ T7447]  ? __alloc_skb+0x101/0x320
[   94.281702][ T7447]  __alloc_skb+0x101/0x320
[   94.281725][ T7447]  tipc_buf_acquire+0x2c/0xb0
[   94.281749][ T7447]  tipc_msg_build+0x3d0/0x840
[   94.281771][ T7447]  ? schedule+0x5f/0xd0
[   94.281794][ T7447]  tipc_send_group_bcast+0x5a4/0x6c0
[   94.281821][ T7447]  ? __pfx_woken_wake_function+0x10/0x10
[   94.281850][ T7447]  __tipc_sendmsg+0x186/0x1b00
[   94.281873][ T7447]  ? avc_has_perm+0xf7/0x180
[   94.281905][ T7447]  ? selinux_socket_sendmsg+0x175/0x1b0
[   94.281942][ T7447]  ? _raw_spin_unlock_bh+0x36/0x40
[   94.282019][ T7447]  ? lock_sock_nested+0x112/0x140
[   94.282102][ T7447]  tipc_sendmsg+0x3e/0x60
[   94.282124][ T7447]  ? __pfx_tipc_sendmsg+0x10/0x10
[   94.282211][ T7447]  __sock_sendmsg+0x145/0x180
[   94.282249][ T7447]  ____sys_sendmsg+0x345/0x4e0
[   94.282279][ T7447]  ___sys_sendmsg+0x17b/0x1d0
[   94.282367][ T7447]  __sys_sendmmsg+0x178/0x300
[   94.282477][ T7447]  __x64_sys_sendmmsg+0x57/0x70
[   94.282501][ T7447]  x64_sys_call+0x1c4a/0x2ff0
[   94.282522][ T7447]  do_syscall_64+0xd2/0x200
[   94.282599][ T7447]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[   94.282632][ T7447]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.282691][ T7447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.282715][ T7447] RIP: 0033:0x7fae43a0eec9
[   94.282732][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.282755][ T7447] RSP: 002b:00007fae42477038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   94.282849][ T7447] RAX: ffffffffffffffda RBX: 00007fae43c65fa0 RCX: 00007fae43a0eec9
[   94.282864][ T7447] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000006
[   94.282880][ T7447] RBP: 00007fae42477090 R08: 0000000000000000 R09: 0000000000000000
[   94.282895][ T7447] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.282910][ T7447] R13: 00007fae43c66038 R14: 00007fae43c65fa0 R15: 00007ffd83c19408
[   94.282932][ T7447]  </TASK>
[   94.580099][ T7437] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.675: Allocating blocks 257-513 which overlap fs metadata
[   94.749060][ T7461] FAULT_INJECTION: forcing a failure.
[   94.749060][ T7461] name failslab, interval 1, probability 0, space 0, times 0
[   94.761916][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.1.686 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   94.761944][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   94.761959][ T7461] Call Trace:
[   94.761967][ T7461]  <TASK>
[   94.761977][ T7461]  __dump_stack+0x1d/0x30
[   94.762013][ T7461]  dump_stack_lvl+0xe8/0x140
[   94.762032][ T7461]  dump_stack+0x15/0x1b
[   94.762047][ T7461]  should_fail_ex+0x265/0x280
[   94.762082][ T7461]  should_failslab+0x8c/0xb0
[   94.762108][ T7461]  __kvmalloc_node_noprof+0x123/0x4e0
[   94.762169][ T7461]  ? cgroup_pidlist_start+0x1cc/0x820
[   94.762204][ T7461]  cgroup_pidlist_start+0x1cc/0x820
[   94.762275][ T7461]  cgroup_seqfile_start+0x58/0x70
[   94.762306][ T7461]  kernfs_seq_start+0xb4/0x170
[   94.762349][ T7461]  seq_read_iter+0x27c/0x940
[   94.762397][ T7461]  kernfs_fop_read_iter+0xc1/0x330
[   94.762428][ T7461]  ? iov_iter_bvec+0xa4/0xd0
[   94.762595][ T7461]  copy_splice_read+0x43f/0x660
[   94.762688][ T7461]  ? __pfx_copy_splice_read+0x10/0x10
[   94.762712][ T7461]  splice_direct_to_actor+0x26c/0x680
[   94.762735][ T7461]  ? __pfx_direct_splice_actor+0x10/0x10
[   94.762823][ T7461]  do_splice_direct+0xda/0x150
[   94.762847][ T7461]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   94.762880][ T7461]  do_sendfile+0x380/0x650
[   94.762920][ T7461]  __x64_sys_sendfile64+0x105/0x150
[   94.763007][ T7461]  x64_sys_call+0x2bb0/0x2ff0
[   94.763034][ T7461]  do_syscall_64+0xd2/0x200
[   94.763131][ T7461]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   94.763164][ T7461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.763224][ T7461] RIP: 0033:0x7fd039c3eec9
[   94.763247][ T7461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.763269][ T7461] RSP: 002b:00007fd0386a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   94.763360][ T7461] RAX: ffffffffffffffda RBX: 00007fd039e95fa0 RCX: 00007fd039c3eec9
[   94.763376][ T7461] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[   94.763392][ T7461] RBP: 00007fd0386a7090 R08: 0000000000000000 R09: 0000000000000000
[   94.763407][ T7461] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001
[   94.763484][ T7461] R13: 00007fd039e96038 R14: 00007fd039e95fa0 R15: 00007ffdc4517138
[   94.763509][ T7461]  </TASK>
[   95.020773][ T7463] loop1: detected capacity change from 0 to 1024
[   95.027603][ T7463] EXT4-fs: Ignoring removed orlov option
[   95.033353][ T7463] EXT4-fs: Ignoring removed nobh option
[   95.039127][ T7463] EXT4-fs: Ignoring removed bh option
[   95.072357][ T7470] loop0: detected capacity change from 0 to 512
[   95.079376][ T7470] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.093791][ T7470] EXT4-fs (loop0): 1 truncate cleaned up
[   95.110180][ T7470] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #15: comm syz.0.681: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[   95.112422][ T7476] loop3: detected capacity change from 0 to 128
[   95.137611][ T7463] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.687: Allocating blocks 481-513 which overlap fs metadata
[   95.169870][ T7476] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.201840][ T7483] loop0: detected capacity change from 0 to 512
[   95.203608][ T7463] EXT4-fs (loop1): pa ffff888107282a10: logic 352, phys. 465, len 3
[   95.216283][ T7463] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   95.216431][ T7485] loop5: detected capacity change from 0 to 128
[   95.230813][ T7483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.267591][ T7483] EXT4-fs (loop0): 1 truncate cleaned up
[   95.272584][ T7489] loop4: detected capacity change from 0 to 1024
[   95.280344][ T7489] EXT4-fs: Ignoring removed orlov option
[   95.282362][ T7485] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.287101][ T7489] EXT4-fs: Ignoring removed nobh option
[   95.301840][ T7489] EXT4-fs: Ignoring removed bh option
[   95.307757][ T3299] ==================================================================
[   95.315859][ T3299] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[   95.323600][ T3299] 
[   95.325933][ T3299] read-write to 0xffff888237c26f58 of 8 bytes by task 12 on cpu 0:
[   95.333835][ T3299]  find_get_block_common+0x50e/0x960
[   95.339139][ T3299]  bdev_getblk+0x30d/0x3b0
[   95.343575][ T3299]  ext4_ext_insert_extent+0xa3d/0x29b0
[   95.349046][ T3299]  ext4_split_extent_at+0x623/0x990
[   95.354260][ T3299]  ext4_split_extent+0x1af/0x3b0
[   95.359294][ T3299]  ext4_ext_map_blocks+0xb58/0x38a0
[   95.364509][ T3299]  ext4_map_blocks+0x5ee/0xd00
[   95.369290][ T3299]  ext4_do_writepages+0x15e1/0x2750
[   95.374505][ T3299]  ext4_writepages+0x176/0x300
[   95.379274][ T3299]  do_writepages+0x1c3/0x310
[   95.383878][ T3299]  __writeback_single_inode+0x80/0x7c0
[   95.389355][ T3299]  writeback_sb_inodes+0x48f/0xa30
[   95.394480][ T3299]  wb_writeback+0x252/0x5c0
[   95.398999][ T3299]  wb_workfn+0x194/0x910
[   95.403257][ T3299]  process_scheduled_works+0x4cb/0x9d0
[   95.408732][ T3299]  worker_thread+0x582/0x770
[   95.413361][ T3299]  kthread+0x489/0x510
[   95.417438][ T3299]  ret_from_fork+0x11f/0x1b0
[   95.422038][ T3299]  ret_from_fork_asm+0x1a/0x30
[   95.426808][ T3299] 
[   95.429130][ T3299] read to 0xffff888237c26f58 of 8 bytes by task 3299 on cpu 1:
[   95.436683][ T3299]  has_bh_in_lru+0x54/0x1f0
[   95.441201][ T3299]  __lru_add_drain_all+0x234/0x3f0
[   95.446319][ T3299]  lru_add_drain_all+0x10/0x20
[   95.451087][ T3299]  invalidate_bdev+0x47/0x70
[   95.455693][ T3299]  ext4_put_super+0x624/0x7d0
[   95.460378][ T3299]  generic_shutdown_super+0xe3/0x210
[   95.465686][ T3299]  kill_block_super+0x2a/0x70
[   95.470381][ T3299]  ext4_kill_sb+0x42/0x80
[   95.474730][ T3299]  deactivate_locked_super+0x75/0x1c0
[   95.480124][ T3299]  deactivate_super+0x97/0xa0
[   95.484826][ T3299]  cleanup_mnt+0x269/0x2e0
[   95.489254][ T3299]  __cleanup_mnt+0x19/0x20
[   95.493685][ T3299]  task_work_run+0x12e/0x1a0
[   95.498294][ T3299]  exit_to_user_mode_loop+0xe4/0x100
[   95.503598][ T3299]  do_syscall_64+0x1d6/0x200
[   95.508215][ T3299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.514114][ T3299] 
[   95.516438][ T3299] value changed: 0x0000000000000000 -> 0xffff8881073196e8
[   95.523544][ T3299] 
[   95.525870][ T3299] Reported by Kernel Concurrency Sanitizer on:
[   95.532020][ T3299] CPU: 1 UID: 0 PID: 3299 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) 
[   95.541917][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[   95.551978][ T3299] ==================================================================
[   95.689298][ T7489] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.693: Allocating blocks 465-513 which overlap fs metadata
[   95.710138][ T7489] EXT4-fs (loop4): pa ffff8881072829a0: logic 256, phys. 369, len 9
[   95.718339][ T7489] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 3
[   95.730064][ T7489] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt.
[   96.541620][ T7502] lo speed is unknown, defaulting to 1000