last executing test programs:

6m27.227055878s ago: executing program 4 (id=78):
r0 = socket(0x2, 0x80805, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
fcntl$setlease(r1, 0x400, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
fcntl$setlease(r1, 0x400, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010429bd7000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000300010000"], 0x40}}, 0x20000000)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000000))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x2}, 0x18)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0)

6m27.1027734s ago: executing program 4 (id=79):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xf}, {}, {0x5, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

6m26.790968455s ago: executing program 4 (id=83):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021)
close(r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r6, 0x25, 0x4}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

6m26.588758479s ago: executing program 4 (id=85):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
rt_sigtimedwait(&(0x7f0000000040)={[0xf7ffffffffff7ffc]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3UFvG1kdAPD/OHZp2nSTBQ6wEsvCLkorqJ1s2DbiUIqE4FQJKPcSEieK4sRR7LRNVEEqPgASQoDECS5ckPgASKgSF44IqRKcQYBACFo4cIDOyvY4TVM7cVs3TuPfT5rMmzfz/H/P0YznzTzNBDC03oqIqxHxKE3TCxExnuXnsil2WlNju4cP7sw3piTS9Po/k0iyvPZnJdn8bFbsdER87csR30yejlvb2l6Zq1TKG9lyqb66XqptbV9cXp1bKi+V12Zmpi/NXp59b3aqL+08FxFXvvjXH3z3Z1+68qvP3PrTjb+f/1ajWmPZ+r3teEb5g1a2ml5ofhd7C2w8Z7DjKN9sYWa00xYjT+Xcfcl1AgCgs8Y5/gcj4pMRcSHGY+Tg01kAAADgFZR+fiz+l0SknZ3qkg8AAAC8QnLNMbBJrpiNBRiLXK5YbI3h/XCcyVWqtfqnF6ubawutsbITUcgtLlfKU9lY4YkoJI3l6Wb68fK7+5ZnIuL1iPj++GhzuThfrSwM+uIHAAAADImz+/r//xlv9f8BAACAE2Zi0BUAAAAAXjr9fwAAADj59P8BAADgRPvKtWuNKW2//3rh5tbmSvXmxYVybaW4ujlfnK9urBeXqtWl5jP7Vg/7vEq1uv7ZWNu8XaqXa/VSbWv7xmp1c61+Y/mJV2ADAAAAR+j1j9/7QxIRO58bbU4Np3or2uNmwHGV300l2bzDbv3H11rzvxxRpYAjMTLoCgADkx90BYCBKQy6AsDAJYes7zp457fZ/BP9rQ8AANB/kx/tfv8/d2DJnYNXA8eenRiGl/v/MLya9/97HcnrZAFOlIIzABh6L3z//1Bp+kwVAgAA+m6sOSW5YnZ5byxyuWIx4lzztQCFZHG5Up6KiNci4vfjhQ80lqebJZND+wwAAAAAAAAAAAAAAAAAAAAAAAAAQEuaJpECAAAAJ1pE7m/Jr1vP8p8cf2ds//WBU8l/xyN7ReitH1//4e25en1jupH/r938+o+y/HcHcQUDAAAAhsIzvcC/3U9v9+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJ8ePrgz356OMu4/vhARE53i5+N0c346ChFx5t9J5PeUy0XESB/ijzb+fKRT/KRRrd2Q++Mn7bIvaOfugfFjIvsWOsU/24f4MMzuNY4/Vzvtf7l4qznvvP/lI55Yfl7dj3+xe/wb6bL/n+sxxhv3f1HqGv9uxBv5zsefdvykS/y3e4z/ja9vb3dbl/4kYrLj70/yRKxSfXW9VNvavri8OrdUXiqvzcxMX5q9PPve7FRpcblSzv52jPG9j/3y0UHtP9Ml/sQh7X+nx/b///7tBx9qJQud4p9/u0P83/w02+Lp+O3fvk9l6cb6yXZ6p5Xe682f/+7Ng9q/0KX9h/3/z/fY/gtf/c6fe9wUADgCta3tlblKpbxxYhONXvoxqIbEMUx8u68fmKZp2tinXuBzkjgOX0szMegjEwAA0G+PT/oHXRMAAAAAAAAAAAAAAAAAAAAYXkfxOLH9MXd2U0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wcAAP//ZWfZVg==")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)

6m26.147243676s ago: executing program 4 (id=87):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116d000000000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3})
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9bX\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
fallocate(r2, 0x0, 0x0, 0x509a)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x5, 0x2, 0xf, 0xfe74, 0x8, "2c277bd72c6157ca4381fbdd4a7c9d6a6f0da7", 0xffffffff, 0x91})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
close(r4)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
semop(0x0, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1)
semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x2}, {0x1, 0xfb7b, 0x1000}], 0x2, &(0x7f0000000040))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)

6m24.392648355s ago: executing program 4 (id=91):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xb, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)

6m24.392498525s ago: executing program 32 (id=91):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xb, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)

5m13.050319775s ago: executing program 0 (id=628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00}, 0x2de0d2a06d7aeea8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x4008004)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="48000000a2fbcd4efb249de57238a5f922dc5214d24bc293b34e40a24dbc44bc64efa83f52665c328d908c036e00e482d6283483d05c281bb3f639328fb7ee3a5c261f880cae458063849894b3b7abd1497d09140380636a2de60b3a3e2cd064b943a625a61669d53515ed902fc4", @ANYRES16=r5, @ANYBLOB="020025bd7000ffdbdf250600050017000200030300000000020000d034fe6e9265ccdfd9080017000000000000000000020000000000000005b8b789b4071b7f00000094de4df35f2eb432e29fe33a2138f63e31fb84ea3ae34ea615432d72a50d9be025b545742b0e98018bd90cb39899fe3881b880f72eb7850837a883bf31ce0fa97f2ee9ac4418d1335260a9ba68784f62f9b7ea82a111620dcba4aa0b182e461c73fa050c43be36bcc0dc639a4168419256d5baeb5605d8e5122914777ed920ffe831aa4c461508ba64d7443e86681e058e2495e058adbf960a032a4db449b921f3514a8fa090612348ed80986cc04dd5f336406dcd5e16e23ae07b0bd000"/277, @ANYRES32, @ANYBLOB="08000a00040000000500050000000000"], 0x48}, 0x1, 0x0, 0x0, 0x48040}, 0x40408d4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x81, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000001700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev, {[@cipso={0x86, 0x6}]}}}}}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)

5m11.648642168s ago: executing program 0 (id=637):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [0x0]}, @timestamp={0x44, 0x4, 0x56}, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val={'init_itable', 0x3d, 0xe20}}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}]}, 0x3, 0x42f, &(0x7f0000000d80)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, {0x0, 0x2}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0a"], 0x208}, 0x0)
open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108)
getdents(r0, &(0x7f0000000280)=""/34, 0x22)
getdents(r0, 0x0, 0xbb)

5m11.575923069s ago: executing program 0 (id=639):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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")
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003000128008000100736974002400028008000c00d773000008000100", @ANYRES32=r5, @ANYBLOB="06000e007c3111dc236d77ee22244a5abe46bc0808000006006e007e000000"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="9818130000", @ANYRESDEC=r4, @ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS    \x00'}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="000000000000000084d70000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r8}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xc, 0x32, 0x0, 0xffffd000)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000400)=0x10000)

5m11.263761344s ago: executing program 0 (id=644):
gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$evdev(0x0, 0x2, 0x903d01)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
r2 = socket$inet(0x2, 0x2, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f)
write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef)
setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020040000000860000009500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0x1, 0x2000c855, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
close_range(r1, 0xffffffffffffffff, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b002c000000080001000000000008004f00000000000800150004000000080003"], 0x38}}, 0x80)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x0, &(0x7f0000000180)})

5m11.102525397s ago: executing program 0 (id=645):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x2100, 0x10000, 0xfffffffe, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioprio_set$pid(0x2, 0x0, 0xe008)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
io_setup(0x20, &(0x7f0000001140))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r4 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x6}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5}, {0x5, 0xfffffffe}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x800}, {0x0, 0x0, 0x0, 0x8000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x40}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xd, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {0xffffffff}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffc, 0xfffefffd, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {0x5}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2000, 0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xd, 0x0, 0x0, 0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800, 0x9}], [{}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x8082, &(0x7f0000000880)=ANY=[@ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB="2c667363616368652c6673757569643d31666234395263332d66610f072d366465082d663163302d61633338366330332c66736e616d653d282a7d2c2c2c", @ANYRESDEC=0xee00, @ANYBLOB=',obj_type=vcan0\x00,\x00'])
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x20008040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

5m10.575579485s ago: executing program 0 (id=646):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8044)
r1 = epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x3260, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x21e}, &(0x7f00000003c0)=<r2=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e725f626c6f636b733d332c6ebe05000000000000191b2fef20213d6d2c001398d0bda43addf80d30bb7af7de8a0dd861e73f9e68ea8cf388fddf4c3b32714bad33d01129117317b0649d8fb52d552a5cbe1cd308e4c17f9d7765ea7f92db7f0c0744de690bbf2bdecc6f3d74a65a280ed72547e0d47a8612a741067cef1f46b7ecc8b7586010da7320d4da52a4bbec213ee76c896a5cd6b7102b5eccc746717b3559e2"])
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20, 0xc, 0x2, 0x241, 0x0, 0x10003, 0x0})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040814}, 0x2c011)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4m55.414010094s ago: executing program 33 (id=646):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8044)
r1 = epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x3260, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x21e}, &(0x7f00000003c0)=<r2=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x2a00a9, &(0x7f0000000c00)=ANY=[@ANYBLOB="6e725f626c6f636b733d332c6ebe05000000000000191b2fef20213d6d2c001398d0bda43addf80d30bb7af7de8a0dd861e73f9e68ea8cf388fddf4c3b32714bad33d01129117317b0649d8fb52d552a5cbe1cd308e4c17f9d7765ea7f92db7f0c0744de690bbf2bdecc6f3d74a65a280ed72547e0d47a8612a741067cef1f46b7ecc8b7586010da7320d4da52a4bbec213ee76c896a5cd6b7102b5eccc746717b3559e2"])
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x20, 0xc, 0x2, 0x241, 0x0, 0x10003, 0x0})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040814}, 0x2c011)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='kfree\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4m53.974889827s ago: executing program 5 (id=733):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4c6, &(0x7f0000000ec0)="$eJzs3c9PXFsdAPDvvUChPN6Dpy/xR9RXn0+raToD05Y0jYu60ZimibFx5aJFmBLCDEOYoRbsgv4PJm3iSv8EFyYuTLpy7053burCpGqjKSYuxtw7A6XAULR0bsN8PsnJvWfuMN/vYbjn3DnAPQEMrHMRsRURZyLiTkRMdh9PuiWud0r2vBfPH8xvP38wn0S7fevvSX48eyz2fE3mve5rjkXED78X8ZPkYNzmxubyXK1WXevWy636arm5sXlxqT63WF2srlQqszOz01cvXamcWFs/rv/62XeXbvzod7/98tM/bH3rZ1laE91je9txkjpNH9mNkxmOiBtvI1gBhrrtOVN0Ivxf0oj4TER8kp3/7aKzAQD6od2ejPbk3joAcNql+RxYkpa6cwETkaalUmcO76MYT2uNZuvC3cb6ykJnrmwqRtK7S7XqdHeucCpGkqw+k++/rFf21S9FxIcR8fPRs3m9NN+oLRR54QMAA+y9feP/v0Y74z8AcMqNFZ0AANB3xn8AGDzGfwAYPMZ/ABg8xn8AGDzGfwAYPMZ/ABgoP7h5Myvt7e79rxfubawvN+5dXKg2l0v19fnSfGNttbTYaCzm9+ypv+71ao3G6szlWL9fblWbrXJzY/N2vbG+0rqd39f7dnWkL60CAI7y4cdP/pRExNa1s3mJPWs5GKvhdEuLTgAozFDRCQCFGS46AaAwPuMDhyzR+4qefyL0+ORzAfrj/BfM/8OgMv8Pg8v8Pwyu/fP/EwXlAfRfu51Y8x8ABow5fsDv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/N5GXJC111wKfiDQtlSLej4ipGEnuLtWq0xHxQUT8cXRkNKvPFJ00APCG0r8m3fW/zk9+emD57zPJv0fzbUT89Be3Ht3fWTAw+cfu463Htx7dn2u11ir9zh0AOI6dcTrf7vkg/+L5g/md0s98nn2ns7hoFne7WzpHhmM4345Fdskx/s+kW+/IrleGTiD+1sOI+Pxh7U/yuZGp7sqn++Nnsd/va/z0lfhpfqyzzb4Xnz2BXGDQPMn6n+uHnX9pnMu3h5//Y3kP9eZ2+r/tA/1futv/DfXo/84dN8bl33+/57GHEV8cPix+shs/6RH/02PG//OXvvJJr2PtX0acj8Pj741VbtVXy82NzYtL9bnF6mJ1pVKZnZmdvnrpSqWcz1GXd2aqD/rbtQsfHNX+8R7xx17T/q8fs/2/+s+dH3/1iPjf/Nrh7/9HR8TPxsRvHDP+3Phvei7fncVf6NH+173/F44Z/+lfNheO+VQAoA+aG5vLc7Vada0/O98+279Y7+xOdu32DqRhp7Cd7CfgJF7nc28x1aJ7JuBte3nSF50JAAAAAAAAAAAAAADQSz/+4anoNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB6/TcAAP//nsXUQA==")
syz_io_uring_setup(0x2cd5, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x323}, 0x0, 0x0)
epoll_create1(0x80000)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket(0x28, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20)

4m53.893422209s ago: executing program 5 (id=734):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket(0x1e, 0x1, 0x0)
sendto$packet(r3, 0x0, 0xffffffffffffff3a, 0x883484ba1b18ec6d, &(0x7f0000000440)={0x11, 0x1, 0x0, 0x1, 0xf3, 0x6, @random}, 0x14)
bind$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1, 0x84, 0x3, {0x0, 0x2710}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "a286a4ce4b24faf4"}}, 0x48}, 0x1, 0x0, 0x0, 0x404c001}, 0x81)
socket(0x10, 0x3, 0x0)
r4 = socket(0x22, 0x2, 0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14)
sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x1, 0x0, 0xfffffffe, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x2, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "a38187bbe5621b5d"}}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811000021fb77497cb277b66065247d314567c866731054cd7fd1f3acbb6ad439f48c3ada45b97fa44db4f37d7c01a3a154bcc8539dd0cfd06ba0c50b345e5dccaf82ebec86cc22270650b43ed03dbbed0cc6897fc6cde41d56792de50aef37b9008cee", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYBLOB="3c9f4bf38b7babff1ab11a853fe3317318fbf6289a0fd5d0f12a724b85ff5e5a915f5cc51c1075e12a631525a5153407ce"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910900000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000001180)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x2}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x53}], 0x1, 0x120, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0)
pwritev(r6, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0x20)

4m53.441118756s ago: executing program 5 (id=737):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4a842, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000001c0))
listen(0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESHEX=r1], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, 0xffffffffffffffff, 0x0, 0x46)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x4079}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000530464"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0), 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0000000206030000000000000000000a0000000900020073797a32000000000d000300686173683a6d616300000000050001000700000005000400000000000500010007000000640007801800018014000240fe8800000000000000000000000a0001080006400f6b948d08100a4000000007050003005a00000008000a40000000de08001340328491f605001400080000000800124000000000080012400000000408000b4000000000fb6e4b71d4d749796a2a7a3ac09d21b7b51be2d1891d3a37c00dfef5b7cbed08bd456e630fc0"], 0xac}, 0x1, 0x0, 0x0, 0x20004044}, 0x4000800)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x8ba, 0x696d, 0x20, 0x0, 0x0)

4m53.108106081s ago: executing program 5 (id=741):
modify_ldt$read(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18)
r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
openat(r5, 0x0, 0x640, 0x2)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0)
write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

4m52.754989807s ago: executing program 5 (id=742):
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[], &(0x7f0000000540)=""/145, 0xe4, 0x91, 0x1}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r4 = dup2(r2, r3)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2ea)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$P9_RGETLOCK(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="6466800a377aa555cf7a7ce8e4db1029d7a109a9ffc1b15c6d486ab262074baaa0fcc4a7b17398d09d3d3d40f63c55a4884717abfef946e378d826af613d6003a78ede92fda7afb411a54085dc0a9267929ab4806f31da756eaf0fccd3c7a504035298914a9e5da49748dc84e77609944ae746873f003f3ee8e8b225956dcd76e0191a1d2ad66b0b17145e03ed7da116f14fe38043a5046b0abbd6804bc48515e759eb81ec9e9a952433b8e58bf00a"], 0x2c)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m52.534465961s ago: executing program 5 (id=743):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
unshare(0x2040400)
r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x1, 0x6)
r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0xf)
sendfile(r6, r6, 0x0, 0x2)

4m52.533804081s ago: executing program 34 (id=743):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
unshare(0x2040400)
r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x1, 0x6)
r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0xf)
sendfile(r6, r6, 0x0, 0x2)

13.00323078s ago: executing program 2 (id=3762):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x400)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x98, &(0x7f0000000040)={0xff80000000000000, 0x9, 0x9}})

12.889746022s ago: executing program 2 (id=3765):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x5}]}}, &(0x7f0000000340)=""/249, 0x26, 0xf9, 0x9}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r6, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
readv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840)
socket$netlink(0x10, 0x3, 0xc)
socket$unix(0x1, 0x5, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000240)={'ipvlan1\x00', 0x7fffffffffffffff, 0xfffffffe})
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000)="4f1f470a8be12f89c3f73137b831d0043e1d5ce112b574aec307beb165def87545a3b889207fa7e5c2656f696efd8ed452299d00990a00da43883f513ad61785e1528f4e0e7171037eb7cf415851865cdd9c300996ce4aa1729cb802e57711633cdfbd2981623da4b5add8ea58d6f32de5d194f9f298fbd5470b", &(0x7f0000000280)=""/154, &(0x7f00000001c0)="b86ffc90dee998b95d8a1368ca611482b5dc3795e623c3207bc46fd0bb0d39d0ffa8a208f21f9fa60d450269c0e59931deb993b181b07b166fadc71bc8ce0dfe41b51f2d9cfc3227b80f8ca82e6008134fe95bd6c8a74adb43905de3d09a", &(0x7f0000000340)="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", 0x9, r0}, 0x38)

12.007645156s ago: executing program 2 (id=3800):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000300)=@other={'trylock', ' ', 'io'}, 0xb)

11.993581376s ago: executing program 2 (id=3802):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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")
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='ext4\x00', 0x40, 0x0)

11.905266008s ago: executing program 2 (id=3804):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC], 0x190}}], 0x1, 0x0)

11.417554395s ago: executing program 2 (id=3816):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f00000000c0)={[{@check_relaxed}, {@map_acorn}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode}, {@map_normal}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0)

11.376842866s ago: executing program 35 (id=3816):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x120c018, &(0x7f00000000c0)={[{@check_relaxed}, {@map_acorn}, {@nojoliet}, {@overriderock}, {@uid}, {@dmode}, {@map_normal}, {@map_normal}]}, 0xff, 0x539, &(0x7f0000001540)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0)

2.041285887s ago: executing program 6 (id=4073):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c)

1.932485798s ago: executing program 6 (id=4077):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006800010028bd70000000000002000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r1], 0x38}}, 0x44010)

1.550712015s ago: executing program 6 (id=4084):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x3, 0x0, 0x0, 0xf, 0x0, 0x5}]}}, &(0x7f0000000340)=""/249, 0x26, 0xf9, 0x9}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r6, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
readv(r6, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840)
socket$netlink(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000240)={'ipvlan1\x00', 0x7fffffffffffffff, 0xfffffffe})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f0000000000)="4f1f470a8be12f89c3f73137b831d0043e1d5ce112b574aec307beb165def87545a3b889207fa7e5c2656f696efd8ed452299d00990a00da43883f513ad61785e1528f4e0e7171037eb7cf415851865cdd9c300996ce4aa1729cb802e57711633cdfbd2981623da4b5add8ea58d6f32de5d194f9f298fbd5470b", &(0x7f0000000280)=""/154, &(0x7f00000001c0)="b86ffc90dee998b95d8a1368ca611482b5dc3795e623c3207bc46fd0bb0d39d0ffa8a208f21f9fa60d450269c0e59931deb993b181b07b166fadc71bc8ce0dfe41b51f2d9cfc3227b80f8ca82e6008134fe95bd6c8a74adb43905de3d09a", &(0x7f0000000340)="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", 0x9, r0}, 0x38)

1.315635088s ago: executing program 1 (id=4093):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90)

1.171959081s ago: executing program 3 (id=4099):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)

1.171359581s ago: executing program 3 (id=4100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3d}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x74}}, 0x0)

1.123605281s ago: executing program 3 (id=4103):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, 'ip_vti0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e)

1.110454411s ago: executing program 8 (id=4104):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)

1.046769983s ago: executing program 3 (id=4105):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_bt_hci(r4, 0x800448d4, &(0x7f0000000300)="93a35c6c3f0ceec2279109e1631d109aa49dae8d76424016a8abf94affb990a64b43e0c04098fc2cc8e9aa1428a57d7e056aff9e4785ec69d4d62a1faa1916f83a410c72b859204073cd4e2db8c3f2aebe667f52c100e91b0cb94ccaa9cb223254c73097551d3ecd8026a65caceac1b6cb9e5889f7068f11e83292416eb75f67b00f731b00a2bd89b337ba8454c716e55dd2716c91396aa22d1d168506aa30d73c5f512cbf1d2072")
connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80)

1.046438373s ago: executing program 8 (id=4106):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

990.292283ms ago: executing program 7 (id=4108):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+WpAALbWEZllQIIurCbgHb6EIFiq5q1CiKAk02gZdZGXAW8SbQLlkFWWURIPF/EBhZKQGCCebOUOJjZihSFKnIn89gNPfxO+f87tw792iGM/eEP2b1er28b3P+0vd3M1kePecnv/78i08b93+/lb7sy+vFD5OBJNWk5/flsdI7MbkwP7tJRTeTK0luJ0WS/jQfO9i/Zu5Kiv/Ok/fmb6f4bg63KTawxY1jU3W+1fb6+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfSxOTo6FiRmem5S29XOyuHAO+yfqW6r8pRv4uvVjfR16bZIika9wwMrAz1ffjQvdXPNv45nueac881R/4eyCdPPHvwjWd6KivluyS0Kz78+JOb7y4vX/vg3qLeTQv1P9yctqVve8Uu1OamF+enZ89dqFWnF+erZ0+fHj15cWqxOjWd2uLlxaXabHVioXZuaX6hOjTxSnXs7NlT1drI5flLcxcmR2ZqKwvP/MX46Ojp6lsjf1M7t7A4P3fyrZHFiYvTMzPTcxfKmMbqRsyZxoH419NL1aXaudlq9fqN5WunNkuyETTWdk1R3ZdVQeOb1TQ+Oj4+NjY+Pnb69bOvnxkd7dmwYHSdbIjY+4OWvfODh3IOh22qtPr/zGQ6c7mUt1Nte5vIZBYyn9kO61tW+v8TJ2td213d/6/08ofvrT6Ssv9/oTn3Qqf+v0Mum9/q9WbN2y2/cvswH+eT3My7Wc5yruWDB66xP+sy++2D1ti6VR98azfeLqSWuUxnMfOZzmzOlUuqrSXVnM3pnM5o3snFTGUx1UxlOjOpZTGXs5il1MojaiILqeVcljKfhVQzlIm8kmrGcjZncyrV1DKSy5nPpczlQiZzrqzlem6Uz/upLjneDRq7n6DxLkE73P/XH8X/CfKw7ej5Gx5EvdX/t3uP3gyor0wNTexaVgAAAMBO+vOf5MChp3/8y6Q3z5efy09Nz9RG9zotAAAAYAeVX9d7rvHQ25h6PoX3/wAAAPC4Kcrf2BVJBnO0OdX8JdS++BAAAAAAHhPl3/9faDwMNqaOprh7JZQre50bAAAAsDPuXmM/na6xu+lV+Ivhlcv/Vq82H6+2IlrX+R2cmp6pjUzMz7wxlpfKqwyUvzTYUNu+pOgtf37wao41o44NNh8H19Y40IgaG3ljLK/meGtDhl5sPLw41CZyvBn5cjPy5S6RpxqRAPC4O96lP77f/v/VDDcjho/09CXpOdKmZx3VswLAo2LzMXY2jSj+8t77/95WtWv6/6dz/WjzKwUjeS/vZzlXM1z+2qD8xsGaWv/+s9ZnBne/hjCa4U0+DViJ/dmZSoY7fB7Ql/X1jmd4k08EmrH5h+TUw98RALCLjnfoh7fS/w+vev+fje//7w4tdM1PCgHgkXB3BPuHOLHX2wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23o1f7H9hm8V+1xvV7uMMQbJjY33oOtl/P/yTZvZyLRlv9O1dhZQfqqSfZrf21exM5mGz7WW17GPcl2fvt2srEXp6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2C1Fsq/d8krSn2Q0ycndz2r7isYWdXFr1zLZbT/92w4r/mr1THEnd/JRDuxOTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3x6t6/9X0nx8orkoPZXkRJIrSf5ur3PcSXf2OoEdsn+b5VZd/7+xz1Mv0tPc7Sl6JyYX5mfL8RP6G+u//vyLTxv3VcX777edMrCybnCJVgvrY7/35MrUU2WpwclrH978l/f/uTp5PpX05fzS1Mzk7IWFN+8Vebb4MqmmeV+xku+/nfjRZ222/MvGlra3vt2p8smZ3Njun7Ur3b3dbm4sXxtvtLRUe3vpX//pxkerVj2dY8mLQ8nQ2pb+sXHv0NKx9HZrrfim+M/iQP4vV8r933g2inrR2EV/Um7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflFczM/zH6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/7/+8q+7TA1bNV/rXnxVlad/1v7aofOR/Wi6/loVYtbe12sa3HdUdHldVH2SIfWlWidfTqVaeV5qBnVIc8/zWtJz5FuZ8UNvfVrm53SVsq/2X71dl//3ymG8pvcMv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6CuSfe2WV5ITSQ6uzFeT+haq7e+0ojJYbDXFHXXr7j+PhcpWCxR3cicf5cDDSQcAAAAAAACA3XZ+8uvPv/i0cS//Hr/vTr3e+vt+NelJcrD43/2ZXJif3aSi3uRKktuN6YFOQb+rN61d2iiXJ+/N327MHW5bwcH73S4AoLM/BAAA///r9m7p")

930.874615ms ago: executing program 8 (id=4109):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)={0xd4, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xac, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804)

930.121364ms ago: executing program 8 (id=4110):
r0 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x800000009)

814.228466ms ago: executing program 7 (id=4111):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

723.191118ms ago: executing program 7 (id=4112):
r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x1)

585.0612ms ago: executing program 6 (id=4113):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="756e695f786c6174653d302c756e695f786c6174653d302c71756965742c726f6469722c757466383d312c0092b4de6424c919c3ca6119e08864851a3922c2ce69380bfda340245d693ef71e22afaa9ed06891f0546fd64a863cbfc9183aa6d0674f64f3ba15590d2607e35ca779eac417c6e07cafd525c87c92fffb482318e5c383ac9b0dbba965e02be928a565ac425cf74ffcf42f544575d6f68f509801467680a1c5"], 0x11, 0x316, &(0x7f0000000980)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

535.868311ms ago: executing program 6 (id=4114):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000100)={[{@block_validity}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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")
stat(&(0x7f0000000040)='./file2\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x1000)

534.888241ms ago: executing program 7 (id=4115):
r0 = socket$inet6(0xa, 0x80003, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @loopback, 0x6}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0)

506.168942ms ago: executing program 1 (id=4116):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

482.543482ms ago: executing program 7 (id=4117):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x2, 0x0, 0x0)

440.776912ms ago: executing program 1 (id=4118):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

382.738033ms ago: executing program 7 (id=4119):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004)
recvmmsg(r8, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000c00)=""/225, 0xe1}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x3}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000740)=""/209, 0xd1}, {&(0x7f0000000840)=""/179, 0xb3}], 0x5, &(0x7f0000000d00)=""/202, 0xca}, 0x77f5}], 0x2, 0x2, 0x0)

379.347773ms ago: executing program 8 (id=4120):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = eventfd(0x1)
read$eventfd(r0, &(0x7f0000000140), 0x8)

357.666844ms ago: executing program 1 (id=4121):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x0, 0x0, @loopback, @empty}}}})

218.157196ms ago: executing program 3 (id=4122):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4002, 0x8000, @loopback}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)

184.247996ms ago: executing program 1 (id=4123):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000000c0)={0x6996, 0x9669, 0x2000, 0x4, 0x20000000, 0xa, 0x2401})

141.653107ms ago: executing program 3 (id=4124):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x47d, &(0x7f0000000ec0)="$eJzs3M9vFOUbAPBnpt0CX+DbiviDH2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tbXe7yH4+ycD77szs+zw78+6+M+9uA+hbo9k/ScSOiPg9Ioar1foNRqv/3Vi6OH1z6eJ0EuXym38lle2uL12cLjYt9tueV8bSiPTTJPY1aXfh/IXTU3Nzs+fy+sTimfcnFs5feObUmamTsydnzx4+duzokcnnnzv8bPPAh9aWZxbT9b0fze/f89o7X75+/PO6/Bvy6JDRdiufKJc73Fxv7awpJ4M9DIQ1GYiI7HCVKv1/OAZi5eANx6uf9DQ4oKvK5XJ5e+vVl8rAXSyJ+rouD/2i+KDPrn+LpXEQ8GL3hh89d+2l6gVQlveNfKmuGYw036bUcH3bSaMR8falv7/OlujOfQgAgDrfZ+Ofp5uN/9K4v2a7/+dzQyMRcU9E7IqIeyNid0TcF1HZ9oGIeLCyZyyPnVbTOEly6/gnvbqhBFeRjf9eyOe26sd/yxmMDOS1nZX8S8mJU3Ozh/LXZCxKW7L6ZJs2fnjlty9arasd/2VL1n4xFszjuDq4pX6fmanFqY3kXOva5Yi9g0WutfknyzMBSUTsiYi962zj1MFv97dat3r+bXRgnqn8TcST1eN/KZbq8y8k7ecnJ7bG3OyhieKsuNXPv155o1X7lfwPrjP/DsiO//+anv/L+Y8ktfO1C2tv48ofn7W8plnv+T+UvFUpF9PAH04tLp6bjBhKjleDrn388Mq+Rb3YPst/7EDz/r8rVl6JfRGRncQPRcTDEfFIHvujEfFYRBxok/9PLz/+XtMV6QbP/w7I8p9Z0/FfKQxF4yPNCwOnf/yurtGRlWKe/832x/9opTSWP3I773+3E9f6zmYAAAD470kjYkck6fhyOU3Hx6vfl98dkc7NLyw+dWL+g7Mz1d8IjEQpLe50DdfcD53ML+ur9csRUf1qQbH+SH7f+KuBbZX6+PT83Eyvk4c+t71F/8/8OdDr6ICu83st6F/6P/SvZv1/aw/iADafz3/oX036/7ZexAFsvmaf/x+33+WfbsUCbK6G/m/aD/rI2q//f3m3K4EAm65l/7+b//IPUOH+P/SlhW2x+o/k2xaKZ1rn7ndKIYmIjj5hlO6IvDZeKCdND26kWaF0J0So0IVCb9+XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuXfAAAA//+zott5")
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

112.636508ms ago: executing program 6 (id=4125):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x72)

613.36µs ago: executing program 8 (id=4126):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='ext4_es_remove_extent\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000180)={[{@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x446, &(0x7f0000000b80)="$eJzs281vG0UbAPBn7Tj9bvJWfYF+AIGCiPhImrSUHriAQOIAEhIcyjEkaRXqNqgJEq0iCAiVI6rEHXFE4o+AG3CKxBXuCFGhXFo4Ga29m9iOkyauEwf8+0nbzuyONfN4d7wzO9kAetZQ+k8ScTAifomIgVq2scBQ7b+7ywuTfy0vTCZRqbz1Z1Itd2d5YTIvmn/uQJ7piyh8lsSJFvXOXb9xeaJcnr6W5Ufnr7w/Onf9xnMzVyYuTV+avjp+/vzZM2MvnBt/vp2wkr6mHWlcd45/NHvy2Gvv3Hpj8sKtd3/8Nsnjb4qjQ4Y2OvhkpdLh6rrrUF16zZfPrlWsddMoVfv/QBRj9eQNxKufdrVxwLaqVCqVB9Y/vFgB/sOS6HYLgO7Ib/Tp/DffdmjosSvcfqk2AUrjvptttSN9UcjKlJrmt500FBEXFv/+Kt1ie55DAAA0+C4d/zzbavxXiPrnQoezNZTBiPhfRByJiHMRcTQi/h9RLftgRDy0xfqbF0nWjn8OtxXXZqXjvxezta3G8V8++ovBYpY7VI2/lFycKU+fzlo2HKU9aX5sgzq+f+XnL1oeyKrIx3/pltafjwWzQr/37Wn82NTE/MT9xFzv9icRx/taxZ+srAQkEXEsIo63WcfM09+cXO/Y0D3j30AH1pkqX0c8VTv/i9EUfy7ZeH1ydG+Up0+P5lfFWj8t3XxzvfrvK/4OSM///pbX/0r8g0n9eu3c1uu4+evn685p7h1/6+u/P3m7Yd+HE/Pz18Yi+pPXa42u3z/eUG5vjK+WT+MfPtW6/x+J1W/iRESkF/HDEfFIRDyatf2xiHg8Ik6tDW2pP0v88PIT71UTpXbi315p/FNbOv+rif5o3tM6UbxcaTyDg1uJPz3/Z6up4WzPZn7/NtOu9q5mAAAA+PcpRMTBSAojK+lCYWSk9jf8R2N/oTw7N//MxdkPrk7V3hEYjFIhf9I1UPc8dCyb1uf58ab8mYiltL4vi/uq+ZHJ2fJUt4OHHndgnf6f+q3Y7dYB2877WtC79H/oXfo/9C79H3pXi/6/rxvtAHZeq/v/x11oB7Dzmvq/ZT/oIeb/0Lva7v9J0tmGADvO/R960ty+2PAl+T82+yK9RI8lorArmiGxTYlu/zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xj8BAAD///D15qI=")

0s ago: executing program 1 (id=4127):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0x404043000, 0x400000000101, 0x1, 0x101, 0x49249249249255c})

kernel console output (not intermixed with test programs):

l. Quota mode: writeback.
[  380.703121][T15075] EXT4-fs: Ignoring removed orlov option
[  380.708977][T15075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  380.709159][T15078] loop6: detected capacity change from 0 to 2048
[  380.740873][T15075] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  380.750430][T15081] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  380.765750][T13842] Alternate GPT is invalid, using primary GPT.
[  380.772154][T13842]  loop6: p1 p2 p3
[  380.778078][T15075] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.3150: Abort forced by user
[  380.790959][T15075] EXT4-fs (loop1): Remounting filesystem read-only
[  380.793056][T14200] udevd[14200]: symlink '../../loop7' '/dev/disk/by-diskseq/936.tmp-b7:7' failed: Read-only file system
[  380.797494][T15075] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  380.818998][ T3313] block device autoloading is deprecated and will be removed.
[  380.830470][T13843] udevd[13843]: setting mode of /dev/loop2 to 060660 failed: Read-only file system
[  380.855540][T13843] udevd[13843]: setting owner of /dev/loop2 to uid=0, gid=6 failed: Read-only file system
[  380.869258][T15088] loop2: detected capacity change from 0 to 2048
[  380.876366][T15078] Alternate GPT is invalid, using primary GPT.
[  380.882698][T15078]  loop6: p1 p2 p3
[  380.904435][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/962.tmp-b7:6' failed: Read-only file system
[  380.932258][T14200] Alternate GPT is invalid, using primary GPT.
[  380.938616][T14200]  loop2: p1 p2 p3
[  380.950658][T15075] siw: device registration error -23
[  380.950859][T15088] Alternate GPT is invalid, using primary GPT.
[  380.962398][T15088]  loop2: p1 p2 p3
[  380.964484][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/962.tmp-b7:6' failed: Read-only file system
[  380.984415][T14203] udevd[14203]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  381.002576][T13842] udevd[13842]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  381.021118][T14200] udevd[14200]: symlink '../../loop2' '/dev/disk/by-diskseq/964.tmp-b7:2' failed: Read-only file system
[  381.043639][T15078] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  381.066336][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/964.tmp-b7:2' failed: Read-only file system
[  381.225268][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.285503][T14203] udevd[14203]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  381.336937][T15094] loop6: detected capacity change from 0 to 512
[  381.349540][T15092] netlink: 'syz.3.3156': attribute type 4 has an invalid length.
[  381.396493][T15094] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  381.408957][T15088] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  381.419687][T15094] EXT4-fs (loop6): orphan cleanup on readonly fs
[  381.427632][T15094] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  381.445156][T15094] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  381.452413][T15094] EXT4-fs error (device loop6): __ext4_iget:5379: inode #16: block 127754: comm syz.6.3158: invalid block
[  381.467063][T15094] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3158: couldn't read orphan inode 16 (err -117)
[  381.483626][T15100] loop1: detected capacity change from 0 to 2048
[  381.552063][T15100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.558169][T15094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  381.631429][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  381.631445][   T29] audit: type=1400 audit(3146118.272:49879): avc:  denied  { append } for  pid=15110 comm="syz.7.3161" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  381.897657][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.145835][T15121] loop6: detected capacity change from 0 to 1024
[  382.152616][   T29] audit: type=1326 audit(3146118.819:49880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.175991][   T29] audit: type=1326 audit(3146118.819:49881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.199371][   T29] audit: type=1326 audit(3146118.819:49882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.222864][   T29] audit: type=1326 audit(3146118.819:49883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.246366][   T29] audit: type=1326 audit(3146118.819:49884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.246461][   T29] audit: type=1326 audit(3146118.819:49885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.293046][   T29] audit: type=1326 audit(3146118.819:49886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.309150][T15121] EXT4-fs: Invalid want_extra_isize 0
[  382.316360][   T29] audit: type=1326 audit(3146118.819:49887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.345222][   T29] audit: type=1326 audit(3146118.819:49888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15120 comm="syz.6.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d1095e9a9 code=0x7ffc0000
[  382.538397][T15132] loop7: detected capacity change from 0 to 1024
[  382.582332][T15132] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  382.659541][T15135] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3162'.
[  382.668720][T15135] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3162'.
[  382.788781][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.308720][T15152] loop2: detected capacity change from 0 to 512
[  383.318495][T15150] loop3: detected capacity change from 0 to 1024
[  383.320185][T15152] EXT4-fs: Ignoring removed orlov option
[  383.334095][T15150] EXT4-fs: Ignoring removed orlov option
[  383.358121][T15152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.369446][T15150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.385162][T15152] EXT4-fs (loop2): orphan cleanup on readonly fs
[  383.393007][T15152] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3168: bg 0: block 248: padding at end of block bitmap is not set
[  383.415866][T15152] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3168: Failed to acquire dquot type 1
[  383.459063][T15152] EXT4-fs (loop2): 1 truncate cleaned up
[  383.476704][T15152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  383.503113][T15152] EXT4-fs: Ignoring removed orlov option
[  383.508924][T15152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  383.517630][T15152] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  383.529452][T15152] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3168: Abort forced by user
[  383.541803][T15152] EXT4-fs (loop2): Remounting filesystem read-only
[  383.548386][T15152] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  383.903447][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.933127][T15170] loop6: detected capacity change from 0 to 1024
[  383.940784][T15170] EXT4-fs: Ignoring removed orlov option
[  384.186146][T15178] xt_TPROXY: Can be used only with -p tcp or -p udp
[  384.251555][T15182] loop6: detected capacity change from 0 to 2048
[  385.241236][T15199] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3179'.
[  385.366111][T15207] loop7: detected capacity change from 0 to 512
[  385.388513][T15207] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.3181: iget: bad i_size value: 2533274857506816
[  385.545239][ T8543] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  385.558192][ T8543] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  385.574951][T15213] fido_id[15213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  385.601314][T13842] udevd[13842]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system
[  385.604430][T15215] loop7: detected capacity change from 0 to 512
[  385.614994][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/983.tmp-b7:7' failed: Read-only file system
[  385.619851][T15215] EXT4-fs: Ignoring removed orlov option
[  385.639067][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/983.tmp-b7:7' failed: Read-only file system
[  385.652632][ T3312] block device autoloading is deprecated and will be removed.
[  385.654860][T14200] udevd[14200]: setting mode of /dev/loop1 to 060660 failed: Read-only file system
[  385.669644][T15215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  385.671772][T14200] udevd[14200]: setting owner of /dev/loop1 to uid=0, gid=6 failed: Read-only file system
[  385.694587][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/984.tmp-b7:7' failed: Read-only file system
[  385.706272][T15215] EXT4-fs (loop7): orphan cleanup on readonly fs
[  385.713354][T15215] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3183: bg 0: block 248: padding at end of block bitmap is not set
[  385.722927][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/985.tmp-b7:7' failed: Read-only file system
[  385.740128][T15215] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3183: Failed to acquire dquot type 1
[  385.752834][T15215] EXT4-fs (loop7): 1 truncate cleaned up
[  385.753395][T15219] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  385.799751][T15215] EXT4-fs: Ignoring removed orlov option
[  385.805623][T15215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  385.820238][T15215] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  385.838435][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/982.tmp-b7:6' failed: Read-only file system
[  385.860176][T15221] loop6: detected capacity change from 0 to 1024
[  385.870861][T15215] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.3183: Abort forced by user
[  385.882692][T15215] EXT4-fs (loop7): Remounting filesystem read-only
[  385.885458][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/982.tmp-b7:6' failed: Read-only file system
[  385.889220][T15215] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  385.920295][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  385.953670][T15215] siw: device registration error -23
[  386.048430][T15230] loop6: detected capacity change from 0 to 1024
[  386.134404][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3188'.
[  386.298057][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  386.298071][   T29] audit: type=1326 audit(3146123.261:50065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31848a5967 code=0x7ffc0000
[  386.328160][   T29] audit: type=1326 audit(3146123.261:50066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f318484ab89 code=0x7ffc0000
[  386.351462][   T29] audit: type=1326 audit(3146123.261:50067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.447322][T15241] netlink: 'syz.1.3190': attribute type 1 has an invalid length.
[  386.455106][T15241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3190'.
[  386.530510][T15239] loop2: detected capacity change from 0 to 8192
[  386.549513][   T29] audit: type=1326 audit(3146123.368:50068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31848a5967 code=0x7ffc0000
[  386.572935][   T29] audit: type=1326 audit(3146123.368:50069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f318484ab89 code=0x7ffc0000
[  386.596255][   T29] audit: type=1326 audit(3146123.368:50070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.619613][   T29] audit: type=1326 audit(3146123.368:50071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.624574][ T3411] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  386.643124][   T29] audit: type=1326 audit(3146123.368:50072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.673858][   T29] audit: type=1326 audit(3146123.368:50073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.684666][ T3411] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  386.697217][   T29] audit: type=1326 audit(3146123.368:50074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15234 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  386.882290][T15244] loop1: detected capacity change from 0 to 512
[  386.922101][T15252] loop6: detected capacity change from 0 to 512
[  386.968929][T15252] ext4: Unknown parameter 'noacl'
[  387.188139][T15259] loop7: detected capacity change from 0 to 8192
[  387.280815][T15244] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  387.298924][T15259] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  387.335611][T15252] loop6: detected capacity change from 0 to 1024
[  387.351170][T15244] EXT4-fs (loop1): orphan cleanup on readonly fs
[  387.373061][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3195'.
[  387.381426][T15261] loop3: detected capacity change from 0 to 512
[  387.388367][T15252] ext4: Unknown parameter 'fowner<00000000000000000000'
[  387.418929][T15244] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents
[  387.510511][T15267] loop2: detected capacity change from 0 to 1024
[  387.518085][T15261] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3196: iget: bad i_size value: 2533274857506816
[  387.537287][T15244] EXT4-fs (loop1): Remounting filesystem read-only
[  387.657029][T15268] loop7: detected capacity change from 0 to 512
[  387.687820][T15244] EXT4-fs (loop1): 1 truncate cleaned up
[  387.721009][ T7750] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  387.731725][ T7750] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  387.870760][ T7750] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  387.918114][T15268] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3198: corrupted inode contents
[  387.974960][T15268] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.3198: mark_inode_dirty error
[  388.076776][T15268] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.3198: corrupted inode contents
[  388.196927][ T3411] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  388.216298][ T3411] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  388.229143][T15287] lo speed is unknown, defaulting to 1000
[  388.275379][T15290] SELinux:  Context system_u:object_r:usr_t:s0 is not valid (left unmapped).
[  388.293202][T15292] netlink: 'syz.1.3201': attribute type 13 has an invalid length.
[  388.321758][T15290] loop7: detected capacity change from 0 to 1024
[  388.333635][T15290] EXT4-fs: dax option not supported
[  388.371558][T15290] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8)
[  388.378224][T15290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  388.385771][T15290] vhci_hcd vhci_hcd.0: Device attached
[  388.415524][T15290] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10)
[  388.422222][T15290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  388.429837][T15290] vhci_hcd vhci_hcd.0: Device attached
[  388.441270][T15290] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12)
[  388.447933][T15290] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  388.455579][T15290] vhci_hcd vhci_hcd.0: Device attached
[  388.468307][T15301] loop3: detected capacity change from 0 to 512
[  388.478291][T15290] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(14)
[  388.484899][T15290] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  388.492341][T15290] vhci_hcd vhci_hcd.0: Device attached
[  388.493175][T15301] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  388.517687][T15290] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(16)
[  388.524325][T15290] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  388.529036][T15301] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3203: invalid indirect mapped block 2683928664 (level 1)
[  388.531958][T15290] vhci_hcd vhci_hcd.0: Device attached
[  388.593283][ T3411] vhci_hcd: vhci_device speed not set
[  388.607116][T15301] EXT4-fs (loop3): Remounting filesystem read-only
[  388.619674][T15301] EXT4-fs (loop3): 1 truncate cleaned up
[  388.652979][T15287] lo speed is unknown, defaulting to 1000
[  388.658952][ T3411] usb 15-1: new high-speed USB device number 3 using vhci_hcd
[  388.726365][T15290] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  388.735437][T15305] vhci_hcd: connection closed
[  388.735723][T15298] vhci_hcd: connection reset by peer
[  388.736711][T15302] vhci_hcd: connection closed
[  388.748258][T15308] vhci_hcd: connection closed
[  388.750968][T15311] vhci_hcd: connection closed
[  388.769831][ T7750] vhci_hcd: stop threads
[  388.778835][ T7750] vhci_hcd: release socket
[  388.783251][ T7750] vhci_hcd: disconnect device
[  389.085728][ T7750] vhci_hcd: stop threads
[  389.090020][ T7750] vhci_hcd: release socket
[  389.094527][ T7750] vhci_hcd: disconnect device
[  389.110978][ T7750] vhci_hcd: stop threads
[  389.115299][ T7750] vhci_hcd: release socket
[  389.119746][ T7750] vhci_hcd: disconnect device
[  389.145401][ T7750] vhci_hcd: stop threads
[  389.149748][ T7750] vhci_hcd: release socket
[  389.154172][ T7750] vhci_hcd: disconnect device
[  389.170427][ T7750] vhci_hcd: stop threads
[  389.174704][ T7750] vhci_hcd: release socket
[  389.179247][ T7750] vhci_hcd: disconnect device
[  389.270226][T15320] SELinux:  Context ›Y7»ôj
[  389.270226][T15320] u/$2SÙŸ»2'´ƒk€s2-Â	vj×džÃ	û#ž»œ,ÙN<
[  389.270226][T15320] �:æºE]Yù´\?˜ͼ•=ê¯Ù‹�1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢Ï
pįÚ¥›ÙN»w
Ÿ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹�÷jm	&8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJ�sÏHU&Ÿ“�ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§�k¤I|íþ€�w íOç£x&KCH;ÁÝx-�ÍK³²oå4˜i!ÿÿOi�%Ú‚2úë´F"2‹E,P] èôkÇ? is not valid (left unmapped).
[  389.325737][T15323] loop2: detected capacity change from 0 to 128
[  389.362468][T15323] bio_check_eod: 104 callbacks suppressed
[  389.362548][T15323] syz.2.3207: attempt to access beyond end of device
[  389.362548][T15323] loop2: rw=0, sector=121, nr_sectors = 120 limit=128
[  389.429844][T15320] SELinux:  Context *mþkX�I·Æ$h·x4Û«½K•M¤ is not valid (left unmapped).
[  389.465658][T15321] siw: device registration error -23
[  389.472747][T15320] SELinux:  Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9�Åõ��IqÒj¦Ç¼=7)o
M{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉�³åž³ç4ÌÚTW
²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J�™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ<B€3
[  389.472747][T15320] \À,:ÿÞgÕ€^!�(DÃ.ú0 is not valid (left unmapped).
[  389.504914][T15320] SELinux:  Context 5¶}“¨M3ëpÿX:��¦Ü]žQ?×ðÖ§á¡p©ýáè«{ãÕO)BÓ°Rÿ¹�D»ºP_NÃ[½£`æ´3©?"ê¦Mp$‰=J™9[ÕƒÈCZ<R is not valid (left unmapped).
[  389.533304][ T7752] kworker/u8:45: attempt to access beyond end of device
[  389.533304][ T7752] loop2: rw=1, sector=241, nr_sectors = 800 limit=128
[  389.553416][T15320] SELinux:  Context 77Q§™Ž°©.´y¹¬H.jÝào‚§í@–âòM¹ÝÀ�É­+™ÂŠñÀ~ƒ¯ÏoÜù)¾Æ¡§sš#ÿž{Ÿ2tŒ±…–±‡f»žÅЛÎý€®ï7ÙZDtøÇ©)™Xþ is not valid (left unmapped).
[  389.592314][T15320] SELinux:  Context AÇÂ)ëát·'ðÃñÐ*'属õÿkµªì¨¶Ø´œL¨&ñÒzª
[  389.592314][T15320] :_t° ¤0±ÌH^Œ�ýþBöñ>&†åœZw8	lX&ôD;tæd‹Bå°IøÝ›~ø¬©L
[  389.592314][T15320] uSÄ‹ÊkxIŒ�R¾¤I$4"©l«ÑXö
7f9áÙ¬ÜÊb–«�BÑÄ|72Ÿ*©
—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped).
[  389.728264][T15320] SELinux:  Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq	:Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZð�eoÄìáþQ[aSêáI> is not valid (left unmapped).
[  389.803259][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3210'.
[  389.865066][T15334] smc: net device bond0 applied user defined pnetid SYZ0
[  389.923265][T15336] loop2: detected capacity change from 0 to 512
[  390.001961][T15343] smc: net device bond0 erased user defined pnetid SYZ0
[  390.016995][T15336] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  390.093973][T15336] EXT4-fs (loop2): orphan cleanup on readonly fs
[  390.112080][T15338] loop3: detected capacity change from 0 to 512
[  390.119001][T15338] EXT4-fs: Ignoring removed mblk_io_submit option
[  390.129089][T15338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  390.278728][T15338] EXT4-fs (loop3): 1 truncate cleaned up
[  390.301010][T15336] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents
[  390.372130][T15336] EXT4-fs (loop2): Remounting filesystem read-only
[  390.410420][T15336] EXT4-fs (loop2): 1 truncate cleaned up
[  390.424238][ T7737] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  390.434851][ T7737] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  390.461133][T14203] udevd[14203]: symlink '../../loop7' '/dev/disk/by-diskseq/1010.tmp-b7:7' failed: Read-only file system
[  390.522382][T15345] syzkaller0: entered promiscuous mode
[  390.528007][T15345] syzkaller0: entered allmulticast mode
[  390.561053][T13843] udevd[13843]: symlink '../../loop3' '/dev/disk/by-diskseq/1017.tmp-b7:3' failed: Read-only file system
[  390.603355][ T7737] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  390.615877][T13843] udevd[13843]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.648805][T15336] EXT4-fs mount: 22 callbacks suppressed
[  390.648822][T15336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  390.675439][T15356] loop7: detected capacity change from 0 to 164
[  390.682142][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.688142][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1010.tmp-b7:7' failed: Read-only file system
[  390.712666][T15336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.735108][T15356] ISOFS: unable to read i-node block
[  390.740427][T15356] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  390.754323][T14200] udevd[14200]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  390.754632][T13843] udevd[13843]: symlink '../../loop6' '/dev/disk/by-diskseq/1000.tmp-b7:6' failed: Read-only file system
[  390.835924][T13843] udevd[13843]: symlink '../../loop6' '/dev/disk/by-diskseq/1000.tmp-b7:6' failed: Read-only file system
[  390.857248][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1018.tmp-b7:7' failed: Read-only file system
[  390.874999][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1017.tmp-b7:3' failed: Read-only file system
[  390.897165][T14203] udevd[14203]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  390.948882][T15360] loop3: detected capacity change from 0 to 512
[  390.977034][T15364] lo speed is unknown, defaulting to 1000
[  391.022939][T15360] EXT4-fs (loop3): orphan cleanup on readonly fs
[  391.040665][T15360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3215: bg 0: block 248: padding at end of block bitmap is not set
[  391.087222][T15360] __quota_error: 386 callbacks suppressed
[  391.087239][T15360] Quota error (device loop3): write_blk: dquota write failed
[  391.100530][T15360] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  391.110530][T15360] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3215: Failed to acquire dquot type 1
[  391.170169][T15360] EXT4-fs (loop3): 1 truncate cleaned up
[  391.193490][T15375] loop1: detected capacity change from 0 to 128
[  391.200607][T15360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  391.348155][   T29] audit: type=1400 audit(3146128.690:50449): avc:  denied  { ioctl } for  pid=15359 comm="syz.3.3215" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  391.369593][T15364] lo speed is unknown, defaulting to 1000
[  391.378981][T15360] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.3215: deleted inode referenced: 12
[  391.399811][T15375] syz.1.3220: attempt to access beyond end of device
[  391.399811][T15375] loop1: rw=0, sector=121, nr_sectors = 120 limit=128
[  391.444246][ T7752] kworker/u8:45: attempt to access beyond end of device
[  391.444246][ T7752] loop1: rw=1, sector=241, nr_sectors = 800 limit=128
[  391.500805][T15384] loop1: detected capacity change from 0 to 512
[  391.526952][T15384] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  391.536890][T15384] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  391.558839][T15382] loop2: detected capacity change from 0 to 8192
[  391.565752][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.600559][T15382]  loop2: p1 p2 p4 < >
[  391.604752][T15382] loop2: partition table partially beyond EOD, truncated
[  391.614246][T15386] loop3: detected capacity change from 0 to 128
[  391.652689][T15382] loop2: p1 start 16777216 is beyond EOD, truncated
[  391.659426][T15382] loop2: p2 size 515840 extends beyond EOD, truncated
[  391.670248][T15392] loop1: detected capacity change from 0 to 1024
[  391.693692][T15391] loop3: detected capacity change from 0 to 512
[  391.707502][T15392] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  391.714229][T15382] loop2: p4 start 16777216 is beyond EOD, truncated
[  391.730970][T15392] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  391.783061][T15398] loop6: detected capacity change from 0 to 764
[  391.809659][T15391] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  391.813815][T15399] syzkaller0: entered promiscuous mode
[  391.823103][T15399] syzkaller0: entered allmulticast mode
[  391.827964][T15392] EXT4-fs (loop1): invalid journal inode
[  391.843867][T15391] EXT4-fs (loop3): orphan cleanup on readonly fs
[  391.850578][T15398] rock: directory entry would overflow storage
[  391.856827][T15398] rock: sig=0x4654, size=5, remaining=4
[  391.862440][T15392] EXT4-fs (loop1): can't get journal size
[  391.870252][T15391] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  391.901322][T15392] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.3228: blocks 48-48 from inode overlap system zone
[  391.923617][T15391] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  391.948701][T15398] random: crng reseeded on system resumption
[  391.956705][T15392] EXT4-fs (loop1): failed to initialize system zone (-117)
[  391.972657][T15392] EXT4-fs (loop1): mount failed
[  391.974755][T15398] Restarting kernel threads ...
[  391.995340][T15391] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  392.003960][T15398] Done restarting kernel threads.
[  392.006992][T15391] EXT4-fs error (device loop3): __ext4_iget:5379: inode #16: block 127754: comm syz.3.3227: invalid block
[  392.021489][T15391] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3227: couldn't read orphan inode 16 (err -117)
[  392.037050][T15391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  392.073915][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.101204][T15410] loop1: detected capacity change from 0 to 512
[  392.108377][T15408] loop2: detected capacity change from 0 to 1024
[  392.123847][T15408] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  392.142699][T15410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.163362][T15418] loop3: detected capacity change from 0 to 512
[  392.199974][T15410] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.3233: iget: bad i_size value: 2533274857506816
[  392.259341][T15418] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  392.273303][T15421] loop6: detected capacity change from 0 to 512
[  392.282774][T15418] EXT4-fs (loop3): orphan cleanup on readonly fs
[  392.311693][T15423] netlink: 'syz.7.3235': attribute type 1 has an invalid length.
[  392.319489][T15423] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3235'.
[  392.330019][T15418] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents
[  392.362908][T15421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.384521][T15418] EXT4-fs (loop3): Remounting filesystem read-only
[  392.391244][T15418] EXT4-fs (loop3): 1 truncate cleaned up
[  392.397201][ T7750] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  392.407821][ T7750] Quota error (device loop3): write_blk: dquota write failed
[  392.415231][ T7750] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries
[  392.425317][ T7750] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  392.436038][ T7750] Quota error (device loop3): write_blk: dquota write failed
[  392.443464][ T7750] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list
[  392.453463][ T7750] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started
[  392.463932][ T7750] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  392.472768][ T7750] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  392.479084][T15431] loop2: detected capacity change from 0 to 512
[  392.489399][T15418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  392.537316][T15421] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz.6.3236: iget: bad i_size value: 2533274857506816
[  392.560650][T15418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.584690][T15431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.647489][T15431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.948148][ T6463] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  392.962136][ T6463] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  392.973394][ T8543] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  393.005191][ T8543] hid-generic 0000:0000:0000.000C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  393.052398][T15439] fido_id[15439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  393.081728][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.093475][T15440] fido_id[15440]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  393.128085][T15444] loop3: detected capacity change from 0 to 1024
[  393.134881][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.177293][T15444] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  393.474019][ T3411] vhci_hcd: vhci_device speed not set
[  393.889948][T15456] loop7: detected capacity change from 0 to 128
[  393.905642][T15454] lo speed is unknown, defaulting to 1000
[  393.932216][T15456] FAT-fs (loop7): bogus number of reserved sectors
[  393.938831][T15456] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  393.948300][T15456] FAT-fs (loop7): Can't find a valid FAT filesystem
[  393.989814][T15461] loop6: detected capacity change from 0 to 764
[  393.999143][T15461] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  394.013281][T15464] loop1: detected capacity change from 0 to 128
[  394.063774][T15467] loop7: detected capacity change from 0 to 512
[  394.099006][T15467] EXT4-fs: Ignoring removed bh option
[  394.117787][T15467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  394.126303][T15467] EXT4-fs (loop7): fragment/cluster size (4096) != block size (2048)
[  394.147470][T15472] loop1: detected capacity change from 0 to 256
[  394.213727][T15472] FAT-fs (loop1): IO charset cp850 not found
[  394.448917][T15454] lo speed is unknown, defaulting to 1000
[  394.522410][T15490] loop1: detected capacity change from 0 to 1024
[  394.529610][T15490] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  394.628242][T15486] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3244'.
[  394.856635][T15494] loop7: detected capacity change from 0 to 2048
[  394.923239][T13842] Alternate GPT is invalid, using primary GPT.
[  394.929569][T13842]  loop7: p1 p2 p3
[  394.948951][T15494] Alternate GPT is invalid, using primary GPT.
[  394.955209][T15494]  loop7: p1 p2 p3
[  395.026799][T15494] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  395.043189][T15455] SELinux:  policydb version -2109188031 does not match my version range 15-34
[  395.067904][T15455] SELinux: failed to load policy
[  395.197411][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1062.tmp-b7:7' failed: Read-only file system
[  395.289274][T13842] udevd[13842]: symlink '../../loop1' '/dev/disk/by-diskseq/1060.tmp-b7:1' failed: Read-only file system
[  395.318163][T15504] loop1: detected capacity change from 0 to 512
[  395.382976][T15504] EXT4-fs: Ignoring removed i_version option
[  395.434228][T13842] udevd[13842]: symlink '../../loop1' '/dev/disk/by-diskseq/1063.tmp-b7:1' failed: Read-only file system
[  395.479225][T15504] EXT4-fs (loop1): 1 truncate cleaned up
[  395.501100][T13842] udevd[13842]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  395.527765][T15504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.581349][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1045.tmp-b7:2' failed: Read-only file system
[  395.611599][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.645799][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1049.tmp-b7:3' failed: Read-only file system
[  395.663073][T13842] udevd[13842]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  395.684031][T13843] udevd[13843]: symlink '../../loop2' '/dev/disk/by-diskseq/1045.tmp-b7:2' failed: Read-only file system
[  395.699025][T13842] udevd[13842]: symlink '../../loop1' '/dev/disk/by-diskseq/1063.tmp-b7:1' failed: Read-only file system
[  395.716302][T13842] udevd[13842]: symlink '../../loop1' '/dev/disk/by-diskseq/1063.tmp-b7:1' failed: Read-only file system
[  396.004726][T15525] loop7: detected capacity change from 0 to 2048
[  396.152360][T15522] loop2: detected capacity change from 0 to 512
[  396.363224][T15531] loop7: detected capacity change from 0 to 512
[  396.372776][T15522] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  396.439885][T15531] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  396.487519][T15531] EXT4-fs (loop7): orphan cleanup on readonly fs
[  396.527502][T15531] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents
[  396.569097][T15522] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3264: invalid indirect mapped block 2683928664 (level 1)
[  396.641888][T15531] EXT4-fs (loop7): Remounting filesystem read-only
[  396.664708][T15536] loop3: detected capacity change from 0 to 128
[  396.670237][T15531] EXT4-fs (loop7): 1 truncate cleaned up
[  396.677603][T15536] msdos: Bad value for 'tz'
[  396.678592][ T7740] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  396.692953][ T7740] __quota_error: 307 callbacks suppressed
[  396.692964][ T7740] Quota error (device loop7): write_blk: dquota write failed
[  396.706062][ T7740] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries
[  396.716064][ T7740] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  396.717713][T15522] EXT4-fs (loop2): Remounting filesystem read-only
[  396.726582][ T7740] Quota error (device loop7): write_blk: dquota write failed
[  396.740589][ T7740] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list
[  396.790455][T15522] EXT4-fs (loop2): 1 truncate cleaned up
[  396.825773][T15522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.838523][T15538] loop3: detected capacity change from 0 to 1024
[  396.894437][ T7740] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  396.904686][ T7740] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  396.923783][ T7740] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  396.939495][T15538] EXT4-fs (loop3): filesystem is read-only
[  396.949583][T15538] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  396.949770][T15531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  396.960468][T15538] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869)
[  397.047050][T15531] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.051892][T15538] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  397.088397][T15538] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: comm syz.3.3272: inode #1: comm syz.3.3272: iget: illegal inode #
[  397.139699][T15538] EXT4-fs (loop3): no journal found
[  397.144950][T15538] EXT4-fs (loop3): can't get journal size
[  397.171802][T15538] EXT4-fs error (device loop3): __ext4_fill_super:5500: inode #2: comm syz.3.3272: iget: bad extra_isize 65535 (inode size 1024)
[  397.223462][T15538] EXT4-fs (loop3): get root inode failed
[  397.229126][T15538] EXT4-fs (loop3): mount failed
[  397.629036][T15549] loop3: detected capacity change from 0 to 512
[  397.641296][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.669560][T15548] loop7: detected capacity change from 0 to 512
[  397.686868][T15549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.692097][T15548] EXT4-fs (loop7): orphan cleanup on readonly fs
[  397.735506][T15549] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3286: corrupted xattr block 19: overlapping e_value 
[  397.750036][T15548] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3276: bg 0: block 248: padding at end of block bitmap is not set
[  397.787182][T15549] EXT4-fs (loop3): Remounting filesystem read-only
[  397.793749][T15549] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  397.814729][T15548] Quota error (device loop7): write_blk: dquota write failed
[  397.822206][T15548] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  397.832210][T15548] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3276: Failed to acquire dquot type 1
[  397.864730][T15549] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  397.879014][T15548] EXT4-fs (loop7): 1 truncate cleaned up
[  397.887191][T15548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  397.908166][   T29] audit: type=1400 audit(3146648.731:50757): avc:  denied  { mounton } for  pid=15547 comm="syz.3.3286" path="/75/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  397.943569][T15559] loop2: detected capacity change from 0 to 2048
[  397.982818][T15548] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.3276: deleted inode referenced: 12
[  398.022675][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.053548][T15559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.122105][T15569] loop3: detected capacity change from 0 to 512
[  398.141382][T15569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.171043][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.201468][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.219746][T15573] loop7: detected capacity change from 0 to 512
[  398.233252][T15573] EXT4-fs: Ignoring removed nobh option
[  398.268192][T15573] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117
[  398.284134][T15573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3283: invalid indirect mapped block 256 (level 1)
[  398.308573][T15573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3283: invalid indirect mapped block 2683928664 (level 1)
[  398.351674][T15573] EXT4-fs (loop7): 1 truncate cleaned up
[  398.362076][T15578] loop3: detected capacity change from 0 to 512
[  398.376812][T15573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.404898][T15578] journal_path: Non-blockdev passed as './bus'
[  398.411227][T15578] EXT4-fs: error: could not find journal device path
[  398.431768][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.463400][T15580] loop7: detected capacity change from 0 to 256
[  398.474227][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.493258][T15580] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  398.505803][   T29] audit: type=1400 audit(3146649.374:50758): avc:  denied  { write } for  pid=15581 comm="syz.3.3288" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  398.549204][T15584] loop2: detected capacity change from 0 to 164
[  398.559599][T15586] loop3: detected capacity change from 0 to 128
[  398.605005][T15590] netlink: 'syz.7.3291': attribute type 13 has an invalid length.
[  398.694333][T15596] loop2: detected capacity change from 0 to 2048
[  398.751602][T15596] Alternate GPT is invalid, using primary GPT.
[  398.757986][T15596]  loop2: p1 p2 p3
[  398.776449][ T2995] Alternate GPT is invalid, using primary GPT.
[  398.782850][ T2995]  loop2: p1 p2 p3
[  398.827049][T15598] syzkaller0: entered promiscuous mode
[  398.832744][T15598] syzkaller0: entered allmulticast mode
[  398.875905][T15596] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  399.250315][T15613] loop2: detected capacity change from 0 to 512
[  399.257525][T15613] EXT4-fs: Ignoring removed mblk_io_submit option
[  399.477572][T15619] loop3: detected capacity change from 0 to 512
[  399.486815][T15618] loop6: detected capacity change from 0 to 1024
[  399.501531][T15618] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  399.535604][T15613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  399.546988][T15613] EXT4-fs (loop2): 1 truncate cleaned up
[  399.553150][T15613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.583270][T15619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  399.605300][T15619] EXT4-fs (loop3): orphan cleanup on readonly fs
[  399.613264][T15619] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3298: Failed to acquire dquot type 1
[  399.626261][T15619] EXT4-fs (loop3): 1 truncate cleaned up
[  399.634466][T15619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  399.710089][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.792059][T15637] loop3: detected capacity change from 0 to 128
[  399.891945][T15637] syz.3.3305: attempt to access beyond end of device
[  399.891945][T15637] loop3: rw=0, sector=121, nr_sectors = 120 limit=128
[  399.911577][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.984213][T13842] udevd[13842]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  400.022444][ T7762] kworker/u8:55: attempt to access beyond end of device
[  400.022444][ T7762] loop3: rw=1, sector=241, nr_sectors = 800 limit=128
[  400.063137][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system
[  400.154731][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1102.tmp-b7:3' failed: Read-only file system
[  400.171509][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1102.tmp-b7:3' failed: Read-only file system
[  400.171690][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1096.tmp-b7:2' failed: Read-only file system
[  400.198354][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1104.tmp-b7:3' failed: Read-only file system
[  400.198482][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1103.tmp-b7:2' failed: Read-only file system
[  400.231738][T13842] udevd[13842]: symlink '../../loop3' '/dev/disk/by-diskseq/1104.tmp-b7:3' failed: Read-only file system
[  400.263882][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/1100.tmp-b7:6' failed: Read-only file system
[  400.287359][T14200] udevd[14200]: symlink '../../loop2' '/dev/disk/by-diskseq/1103.tmp-b7:2' failed: Read-only file system
[  400.324534][T15651] loop6: detected capacity change from 0 to 2048
[  400.353076][T13842]  loop6: p4 < >
[  400.359524][T15651]  loop6: p4 < >
[  400.734429][T15661] loop6: detected capacity change from 0 to 512
[  400.743825][T15665] loop7: detected capacity change from 0 to 164
[  400.761232][T15661] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  400.769568][T15661] EXT4-fs (loop6): orphan cleanup on readonly fs
[  400.792982][T15669] loop2: detected capacity change from 0 to 512
[  400.802249][T15661] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm þ3Ù+_r00˜*ÓT: corrupted inode contents
[  400.857516][T15669] EXT4-fs: Ignoring removed mblk_io_submit option
[  400.866033][T15673] loop1: detected capacity change from 0 to 512
[  400.891266][T15661] EXT4-fs (loop6): Remounting filesystem read-only
[  400.898347][T15661] EXT4-fs (loop6): 1 truncate cleaned up
[  400.904367][ T7750] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  400.915150][ T7750] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  400.929746][T15669] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  400.947811][T15677] loop7: detected capacity change from 0 to 1024
[  400.955950][T15669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002]
[  400.972693][ T7750] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started
[  400.987809][T15673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.004752][T15661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  401.014109][T15677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.024887][T15661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.043454][T15669] System zones: 1-12
[  401.113704][T15669] EXT4-fs (loop2): 1 truncate cleaned up
[  401.123404][T15669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.154915][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.196385][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3325'.
[  401.205383][T15687] netlink: 660 bytes leftover after parsing attributes in process `syz.7.3325'.
[  401.226656][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.297792][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'.
[  401.328218][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.539223][T15702] syzkaller0: entered promiscuous mode
[  401.544766][T15702] syzkaller0: entered allmulticast mode
[  401.996130][   T29] kauditd_printk_skb: 329 callbacks suppressed
[  401.996145][   T29] audit: type=1326 audit(3147421.022:51080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.025945][   T29] audit: type=1326 audit(3147421.022:51081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.049313][   T29] audit: type=1326 audit(3147421.033:51082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.072627][   T29] audit: type=1326 audit(3147421.043:51083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.096211][   T29] audit: type=1326 audit(3147421.043:51084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.119678][   T29] audit: type=1326 audit(3147421.043:51085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.143036][   T29] audit: type=1400 audit(3147421.043:51086): avc:  denied  { getopt } for  pid=15727 comm="syz.6.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  402.153613][T15726] loop3: detected capacity change from 0 to 1024
[  402.162658][   T29] audit: type=1326 audit(3147421.043:51087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.192501][   T29] audit: type=1326 audit(3147421.043:51088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.216235][   T29] audit: type=1326 audit(3147421.043:51089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.3.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  402.247947][T15726] EXT4-fs: dax option not supported
[  402.272698][T15726] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  402.279289][T15726] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  402.286746][T15726] vhci_hcd vhci_hcd.0: Device attached
[  402.301695][T15726] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10)
[  402.308414][T15726] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  402.316042][T15726] vhci_hcd vhci_hcd.0: Device attached
[  402.323183][T15740] loop6: detected capacity change from 0 to 512
[  402.355987][T15741] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13)
[  402.362624][T15741] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  402.370233][T15741] vhci_hcd vhci_hcd.0: Device attached
[  402.401163][T15745] loop2: detected capacity change from 0 to 1024
[  402.409300][T15745] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  402.422756][T15740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  402.441984][T15726] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12)
[  402.445107][T15740] System zones: 
[  402.448599][T15726] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  402.448650][T15726] vhci_hcd vhci_hcd.0: Device attached
[  402.452252][T15740] 1-12
[  402.478953][ T8543] vhci_hcd: vhci_device speed not set
[  402.487926][T15726] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15)
[  402.494537][T15726] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  402.502217][T15726] vhci_hcd vhci_hcd.0: Device attached
[  402.508682][T15740] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.3346: error while reading EA inode 32 err=-116
[  402.512575][T15755] loop1: detected capacity change from 0 to 128
[  402.522050][T15741] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  402.535702][ T8543] usb 7-1: new full-speed USB device number 4 using vhci_hcd
[  402.552953][T15740] EXT4-fs (loop6): Remounting filesystem read-only
[  402.559602][T15740] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  402.573995][T15755] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  402.576934][T15742] vhci_hcd: connection closed
[  402.586454][T15740] EXT4-fs (loop6): 1 orphan inode deleted
[  402.586925][T15748] vhci_hcd: connection closed
[  402.592902][T15740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.597601][T15751] vhci_hcd: connection closed
[  402.615809][T15737] vhci_hcd: connection closed
[  402.620744][T15731] vhci_hcd: connection reset by peer
[  402.628509][ T7740] vhci_hcd: stop threads
[  402.634998][ T7740] vhci_hcd: release socket
[  402.639497][ T7740] vhci_hcd: disconnect device
[  402.654212][ T7740] vhci_hcd: stop threads
[  402.658606][ T7740] vhci_hcd: release socket
[  402.663034][ T7740] vhci_hcd: disconnect device
[  402.677305][ T7740] vhci_hcd: stop threads
[  402.681707][ T7740] vhci_hcd: release socket
[  402.686269][ T7740] vhci_hcd: disconnect device
[  402.692046][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  402.701704][ T7740] vhci_hcd: stop threads
[  402.706134][ T7740] vhci_hcd: release socket
[  402.710659][ T7740] vhci_hcd: disconnect device
[  402.716158][ T7740] vhci_hcd: stop threads
[  402.720544][ T7740] vhci_hcd: release socket
[  402.725006][ T7740] vhci_hcd: disconnect device
[  402.730178][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.750112][T15768] Cannot find del_set index 0 as target
[  402.922711][T15794] loop7: detected capacity change from 0 to 2048
[  402.949847][T15797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3369'.
[  402.971440][T15794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.018546][T15797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3369'.
[  403.084291][T15797] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3369'.
[  403.285855][T15830] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3379'.
[  403.312327][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3379'.
[  403.337405][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'.
[  403.346721][T15835] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3383'.
[  403.433672][T15845] loop1: detected capacity change from 0 to 1024
[  403.442914][T15845] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  403.473061][T15847] loop3: detected capacity change from 0 to 4096
[  403.481175][T15847] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  403.502334][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.541224][T15847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.604675][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.653315][T15872] netlink: 'syz.7.3401': attribute type 84 has an invalid length.
[  403.679369][T15878] loop2: detected capacity change from 0 to 512
[  403.691890][T15878] EXT4-fs: Ignoring removed bh option
[  403.702666][T15878] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  403.807851][T15878] EXT4-fs (loop2): Remounting filesystem read-only
[  403.816599][T15888] syzkaller0: entered promiscuous mode
[  403.822111][T15888] syzkaller0: entered allmulticast mode
[  403.838264][T15878] EXT4-fs (loop2): 1 truncate cleaned up
[  403.866174][T15878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.958141][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.013938][T15915] loop3: detected capacity change from 0 to 764
[  404.023269][T15915] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  404.227751][T15922] loop2: detected capacity change from 0 to 512
[  404.234950][T15922] EXT4-fs: Ignoring removed oldalloc option
[  404.520757][T15922] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.3421: Parent and EA inode have the same ino 15
[  404.616705][T15922] EXT4-fs (loop2): Remounting filesystem read-only
[  404.644167][T15929] loop6: detected capacity change from 0 to 2048
[  404.673069][T15922] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30)
[  404.717538][T15922] EXT4-fs (loop2): 1 orphan inode deleted
[  404.745126][T14200] udevd[14200]: symlink '../../loop1' '/dev/disk/by-diskseq/1128.tmp-b7:1' failed: Read-only file system
[  404.771135][T15922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.787447][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1135.tmp-b7:2' failed: Read-only file system
[  404.801659][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  404.816334][T15929]  loop6: p1 < > p4
[  404.834003][T15929] loop6: p4 size 8388608 extends beyond EOD, truncated
[  404.844052][T14200] udevd[14200]: symlink '../../loop6' '/dev/disk/by-diskseq/1136.tmp-b7:6' failed: Read-only file system
[  404.859988][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.862435][T13842] udevd[13842]: symlink '../../loop2' '/dev/disk/by-diskseq/1135.tmp-b7:2' failed: Read-only file system
[  404.871998][T14200] udevd[14200]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  404.894081][T14203] udevd[14203]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  404.905996][T14187] udevd[14187]: symlink '../../loop1' '/dev/disk/by-diskseq/1128.tmp-b7:1' failed: Read-only file system
[  404.918756][T13843] udevd[13843]: symlink '../../loop7' '/dev/disk/by-diskseq/1129.tmp-b7:7' failed: Read-only file system
[  404.943042][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1134.tmp-b7:3' failed: Read-only file system
[  405.042123][T15958] netlink: 'syz.3.3434': attribute type 1 has an invalid length.
[  405.078323][T15954] loop7: detected capacity change from 0 to 4096
[  405.097259][T15954] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  405.211289][T15977] loop1: detected capacity change from 0 to 1024
[  405.223053][T15977] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  405.224333][T15954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.264893][T15977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.642341][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.653260][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.781240][T16022] loop6: detected capacity change from 0 to 512
[  405.823906][T16022] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.869133][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.967325][T16050] __nla_validate_parse: 8 callbacks suppressed
[  405.967340][T16050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3475'.
[  405.993203][T16050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3475'.
[  406.048623][T16050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3475'.
[  406.060092][T16066] loop6: detected capacity change from 0 to 512
[  406.090529][T16066] EXT4-fs: Ignoring removed mblk_io_submit option
[  406.140397][T16066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  406.185137][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  406.720307][T16141] loop1: detected capacity change from 0 to 512
[  406.761481][T16144] netlink: 'syz.6.3512': attribute type 1 has an invalid length.
[  406.800577][T16141] EXT4-fs (loop1): too many log groups per flexible block group
[  406.808352][T16141] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  406.856311][T16141] EXT4-fs (loop1): mount failed
[  407.237817][T16187] loop2: detected capacity change from 0 to 764
[  407.310134][ T8543] usb 7-1: enqueue for inactive port 0
[  407.316238][T16187] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  407.327175][T16194] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16194 comm=syz.1.3534
[  407.346784][ T8543] usb 7-1: enqueue for inactive port 0
[  407.398893][T16196] loop2: detected capacity change from 0 to 128
[  407.433049][ T8543] vhci_hcd: vhci_device speed not set
[  407.557169][T16208] netlink: 'syz.1.3540': attribute type 11 has an invalid length.
[  407.588167][T16210] netlink: 'syz.3.3542': attribute type 1 has an invalid length.
[  407.595950][T16210] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3542'.
[  407.799689][   T29] kauditd_printk_skb: 261 callbacks suppressed
[  407.799702][   T29] audit: type=1400 audit(3147427.209:51351): avc:  denied  { ioctl } for  pid=16226 comm="syz.2.3550" path="socket:[49106]" dev="sockfs" ino=49106 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  407.847748][T16224] syzkaller0: entered promiscuous mode
[  407.853428][T16224] syzkaller0: entered allmulticast mode
[  408.112672][T16243] syzkaller0: entered promiscuous mode
[  408.118264][T16243] syzkaller0: entered allmulticast mode
[  408.461014][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'.
[  408.503804][T16248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3557'.
[  408.556432][T16260] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3562'.
[  408.763100][   T29] audit: type=1400 audit(3147428.234:51352): avc:  denied  { write } for  pid=16284 comm="syz.3.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  408.814429][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3577'.
[  408.850034][   T29] audit: type=1400 audit(3147428.319:51353): avc:  denied  { ioctl } for  pid=16294 comm="syz.6.3579" path="net:[4026532449]" dev="nsfs" ino=4026532449 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  408.943127][T16306] loop3: detected capacity change from 0 to 736
[  408.945578][T16314] netlink: 'syz.6.3590': attribute type 10 has an invalid length.
[  408.975304][T16314] ipvlan0: entered allmulticast mode
[  408.980637][T16314] veth0_vlan: entered allmulticast mode
[  409.006134][T16306] rock: directory entry would overflow storage
[  409.012327][T16306] rock: sig=0x3b10, size=4, remaining=3
[  409.030665][T16320] loop1: detected capacity change from 0 to 512
[  409.060963][T16320] EXT4-fs (loop1): 1 orphan inode deleted
[  409.073013][T16330] SELinux: syz.6.3595 (16330) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  409.082258][T16320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.095794][T16334] loop3: detected capacity change from 0 to 512
[  409.106314][ T7740] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  409.116136][ T7740] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:33: Failed to release dquot type 1
[  409.137152][T16334] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  409.164131][T16334] EXT4-fs (loop3): Remounting filesystem read-only
[  409.178120][T16334] EXT4-fs (loop3): 1 truncate cleaned up
[  409.200649][   T29] audit: type=1400 audit(3147428.689:51354): avc:  denied  { validate_trans } for  pid=16341 comm="syz.6.3601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  409.257067][T16349] xt_hashlimit: max too large, truncated to 1048576
[  409.266600][T16350] loop1: detected capacity change from 0 to 512
[  409.289230][T16350] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.3602: corrupted in-inode xattr: bad e_name length
[  409.316138][T16350] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3602: couldn't read orphan inode 15 (err -117)
[  409.378048][T16344] loop7: detected capacity change from 0 to 8192
[  409.406386][T16344] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  409.479958][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1161.tmp-b7:7' failed: Read-only file system
[  409.496760][T14200] udevd[14200]: symlink '../../loop1' '/dev/disk/by-diskseq/1160.tmp-b7:1' failed: Read-only file system
[  409.510578][T13843] udevd[13843]: symlink '../../loop6' '/dev/disk/by-diskseq/1146.tmp-b7:6' failed: Read-only file system
[  409.532023][   T29] audit: type=1400 audit(3147429.038:51355): avc:  denied  { bind } for  pid=16373 comm="syz.1.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  409.534184][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1162.tmp-b7:7' failed: Read-only file system
[  409.573430][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1158.tmp-b7:3' failed: Read-only file system
[  409.578547][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/1146.tmp-b7:6' failed: Read-only file system
[  409.591967][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-diskseq/1160.tmp-b7:1' failed: Read-only file system
[  409.620279][T16376] loop7: detected capacity change from 0 to 1764
[  409.639976][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1163.tmp-b7:7' failed: Read-only file system
[  409.641170][   T29] audit: type=1400 audit(3147429.143:51356): avc:  denied  { nlmsg_read } for  pid=16381 comm="syz.6.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  409.655103][T16384] loop1: detected capacity change from 0 to 512
[  409.686812][T14200] udevd[14200]: symlink '../../loop6' '/dev/disk/by-diskseq/1146.tmp-b7:6' failed: Read-only file system
[  409.706431][T16384] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  409.715253][T16384] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  409.720361][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-diskseq/1164.tmp-b7:1' failed: Read-only file system
[  409.770834][T16390] usb usb5: usbfs: process 16390 (syz.6.3624) did not claim interface 0 before use
[  409.798561][   T29] audit: type=1400 audit(3147429.334:51357): avc:  denied  { mounton } for  pid=16391 comm="syz.1.3625" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  409.827512][T16392] tmpfs: Bad value for 'mpol'
[  409.843023][T16397] netlink: 248 bytes leftover after parsing attributes in process `syz.7.3628'.
[  409.872143][   T29] audit: type=1400 audit(3147429.376:51358): avc:  denied  { nlmsg_read } for  pid=16393 comm="syz.7.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  409.978516][T16419] SELinux: syz.7.3639 (16419) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  410.034835][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'.
[  410.452175][T16447] loop1: detected capacity change from 0 to 136
[  410.752032][T16483] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20004
[  410.983578][T16491] loop6: detected capacity change from 0 to 128
[  411.132016][T16495] loop6: detected capacity change from 0 to 128
[  411.532957][T16530] usb usb9: usbfs: process 16530 (syz.7.3688) did not claim interface 0 before use
[  411.743790][T16533] loop1: detected capacity change from 0 to 1024
[  411.796290][   T29] audit: type=1400 audit(3147431.447:51359): avc:  denied  { write } for  pid=16543 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  411.846973][T16546] loop3: detected capacity change from 0 to 512
[  411.978993][T16572] loop7: detected capacity change from 0 to 128
[  412.011211][T16576] loop3: detected capacity change from 0 to 128
[  412.059664][T16576] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted
[  412.185942][T16592] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3715'.
[  412.203471][T16594] loop6: detected capacity change from 0 to 512
[  412.371940][T16594] msdos: Unexpected value for 'dots'
[  412.510036][T16608] loop3: detected capacity change from 0 to 1024
[  412.549463][T16601] syzkaller0: entered promiscuous mode
[  412.555024][T16601] syzkaller0: entered allmulticast mode
[  412.575510][T16608] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.586838][T16608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  413.103168][T16631] loop1: detected capacity change from 0 to 512
[  413.109912][T16631] EXT4-fs: Ignoring removed nobh option
[  413.140061][T16631] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3729: corrupted inode contents
[  413.174078][T16631] EXT4-fs (loop1): Remounting filesystem read-only
[  413.174530][T16641] loop3: detected capacity change from 0 to 512
[  413.182353][T16631] EXT4-fs (loop1): 1 truncate cleaned up
[  413.204549][ T7750] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  413.215159][ T7750] __quota_error: 1 callbacks suppressed
[  413.215174][ T7750] Quota error (device loop1): write_blk: dquota write failed
[  413.218456][   T29] audit: type=1400 audit(3147432.948:51361): avc:  denied  { bind } for  pid=16643 comm="syz.7.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  413.220721][ T7750] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[  413.228137][   T29] audit: type=1400 audit(3147432.948:51362): avc:  denied  { name_bind } for  pid=16643 comm="syz.7.3734" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  413.247437][ T7750] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  413.258002][   T29] audit: type=1400 audit(3147432.948:51363): avc:  denied  { node_bind } for  pid=16643 comm="syz.7.3734" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  413.279019][ T7750] Quota error (device loop1): write_blk: dquota write failed
[  413.319198][ T7750] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list
[  413.325168][T16641] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3733: corrupted xattr block 33: e_value out of bounds
[  413.347126][ T7750] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  413.357279][ T7750] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  413.366477][ T7750] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  413.373059][T16641] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  413.431294][T16641] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.3733: corrupted xattr block 33: e_value out of bounds
[  413.460247][T16641] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[  413.502815][T16658] netlink: 'syz.7.3741': attribute type 1 has an invalid length.
[  413.507211][T16659] loop6: detected capacity change from 0 to 1024
[  413.520827][   T29] audit: type=1400 audit(3147433.265:51364): avc:  denied  { read } for  pid=16640 comm="syz.3.3733" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  413.569431][T16659] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3740: Failed to acquire dquot type 0
[  413.580976][T16662] loop1: detected capacity change from 0 to 256
[  413.592687][T16659] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  413.612553][T16659] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.3740: corrupted inode contents
[  413.635696][T16662] FAT-fs (loop1): Directory bread(block 64) failed
[  413.643121][T16662] FAT-fs (loop1): Directory bread(block 65) failed
[  413.649754][T16662] FAT-fs (loop1): Directory bread(block 66) failed
[  413.651934][T16659] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #13: comm syz.6.3740: mark_inode_dirty error
[  413.656272][T16662] FAT-fs (loop1): Directory bread(block 67) failed
[  413.656350][T16662] FAT-fs (loop1): Directory bread(block 68) failed
[  413.682916][T16662] FAT-fs (loop1): Directory bread(block 69) failed
[  413.689710][T16662] FAT-fs (loop1): Directory bread(block 70) failed
[  413.696488][T16662] FAT-fs (loop1): Directory bread(block 71) failed
[  413.703074][T16662] FAT-fs (loop1): Directory bread(block 72) failed
[  413.709807][T16662] FAT-fs (loop1): Directory bread(block 73) failed
[  413.716129][T16659] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.3740: corrupted inode contents
[  413.770609][T16659] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.3740: mark_inode_dirty error
[  413.806067][T16659] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.3740: corrupted inode contents
[  413.850933][T16659] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  413.872046][T16659] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.3740: corrupted inode contents
[  413.907339][T16659] EXT4-fs error (device loop6): ext4_truncate:4597: inode #13: comm syz.6.3740: mark_inode_dirty error
[  413.920546][T16659] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  413.941966][T16659] EXT4-fs (loop6): 1 truncate cleaned up
[  413.978571][T16659] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3740: Failed to acquire dquot type 0
[  414.052892][T16708] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3761'.
[  414.062026][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3761'.
[  414.071029][T16708] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3761'.
[  414.080240][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3761'.
[  414.222187][T16718] nft_compat: unsupported protocol 1
[  414.375967][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3771'.
[  414.387170][T14200] udevd[14200]: symlink '../../loop7' '/dev/disk/by-diskseq/1179.tmp-b7:7' failed: Read-only file system
[  414.387343][T13842] udevd[13842]: symlink '../../loop3' '/dev/disk/by-diskseq/1190.tmp-b7:3' failed: Read-only file system
[  414.401407][T13843] udevd[13843]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  414.423016][T13843] udevd[13843]: symlink '../../loop6' '/dev/disk/by-diskseq/1188.tmp-b7:6' failed: Read-only file system
[  414.436345][T14200] udevd[14200]: symlink '../../loop7' '/dev/disk/by-diskseq/1179.tmp-b7:7' failed: Read-only file system
[  414.457928][T13842] udevd[13842]: symlink '../../loop3' '/dev/disk/by-diskseq/1190.tmp-b7:3' failed: Read-only file system
[  414.476784][T14200] udevd[14200]: symlink '../../loop6' '/dev/disk/by-diskseq/1188.tmp-b7:6' failed: Read-only file system
[  414.490881][T13843] udevd[13843]: symlink '../../loop7' '/dev/disk/by-diskseq/1179.tmp-b7:7' failed: Read-only file system
[  414.495854][T13842] udevd[13842]: symlink '../../loop3' '/dev/disk/by-diskseq/1190.tmp-b7:3' failed: Read-only file system
[  414.513231][T14200] udevd[14200]: symlink '../../loop6' '/dev/disk/by-diskseq/1192.tmp-b7:6' failed: Read-only file system
[  414.553244][T16740] loop7: detected capacity change from 0 to 512
[  414.566320][T16740] EXT4-fs: Ignoring removed oldalloc option
[  414.573876][T16740] EXT4-fs (loop7): 1 truncate cleaned up
[  414.582610][T16740] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3775: invalid indirect mapped block 234881024 (level 0)
[  414.596782][T16740] EXT4-fs (loop7): Remounting filesystem read-only
[  414.639010][T16746] loop6: detected capacity change from 0 to 256
[  414.803737][T16771] IPVS: length: 120 != 8
[  414.834712][T16774] tmpfs: Bad value for 'mpol'
[  414.899695][T16782] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3794'.
[  414.958606][T16787] syzkaller0: entered promiscuous mode
[  414.964116][T16787] syzkaller0: entered allmulticast mode
[  415.031868][T16801] loop2: detected capacity change from 0 to 512
[  415.038590][T16801] EXT4-fs: Ignoring removed nobh option
[  415.081024][T16802] syzkaller0: entered promiscuous mode
[  415.086604][T16802] syzkaller0: entered allmulticast mode
[  415.094142][ T3313] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874
[  415.149831][ T3313] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz-executor: iget: bad i_size value: 15393162788874
[  415.211566][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3807'.
[  415.299992][T16813] loop6: detected capacity change from 0 to 512
[  415.508853][T16821] random: crng reseeded on system resumption
[  415.610140][T16829] loop6: detected capacity change from 0 to 512
[  415.629021][T16829] EXT4-fs: Ignoring removed oldalloc option
[  415.649754][T16835] netlink: 'syz.3.3820': attribute type 1 has an invalid length.
[  415.657601][T16835] netlink: 'syz.3.3820': attribute type 3 has an invalid length.
[  415.665386][T16835] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3820'.
[  415.674507][T16835] NCSI netlink: No device for ifindex 2986344450
[  415.682005][T16829] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3817: Parent and EA inode have the same ino 15
[  415.700156][T16829] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.3817: Parent and EA inode have the same ino 15
[  415.719221][T16829] EXT4-fs (loop6): 1 orphan inode deleted
[  415.799890][T16853] loop6: detected capacity change from 0 to 512
[  415.821548][T16853] EXT4-fs: Ignoring removed i_version option
[  415.845326][T16853] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  415.864994][T16853] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  415.873484][T16853] System zones: 1-12
[  415.877801][T16853] EXT4-fs (loop6): orphan cleanup on readonly fs
[  415.884449][T16853] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3824: invalid indirect mapped block 12 (level 1)
[  415.886950][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3826'.
[  415.916353][T16853] EXT4-fs (loop6): Remounting filesystem read-only
[  415.927469][T16853] EXT4-fs (loop6): 1 truncate cleaned up
[  415.929380][ T7750] tipc: Disabling bearer <eth:gre0>
[  416.054676][T16877] loop1: detected capacity change from 0 to 1024
[  416.068553][ T7750] bond0 (unregistering): left promiscuous mode
[  416.074825][ T7750] bond_slave_0: left promiscuous mode
[  416.080396][ T7750] bond_slave_1: left promiscuous mode
[  416.086983][T16884] netlink: 'syz.3.3838': attribute type 66 has an invalid length.
[  416.104838][ T7750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  416.105872][T16877] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.3834: missing EA_INODE flag
[  416.126319][ T7750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  416.164061][ T7750] bond0 (unregistering): Released all slaves
[  416.172454][T16877] EXT4-fs (loop1): Remounting filesystem read-only
[  416.179508][ T7750] bond1 (unregistering): (slave veth3): Releasing active interface
[  416.189349][ T7750] bond1 (unregistering): (slave batadv1): Releasing active interface
[  416.199058][ T7750] bond1 (unregistering): Released all slaves
[  416.226420][ T7750] tipc: Disabling bearer <udp:s>
[  416.231416][ T7750] tipc: Left network mode
[  416.250938][T16838] lo speed is unknown, defaulting to 1000
[  416.521410][T16923] netlink: 'syz.6.3854': attribute type 10 has an invalid length.
[  416.679114][T16838] lo speed is unknown, defaulting to 1000
[  416.706533][ T7762] smc: removing ib device syz0
[  416.958599][T16939] __nla_validate_parse: 8 callbacks suppressed
[  416.958612][T16939] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3861'.
[  417.015938][T16838] chnl_net:caif_netlink_parms(): no params data found
[  417.032124][T16945] delete_channel: no stack
[  417.103376][T16957] netlink: 'syz.7.3869': attribute type 10 has an invalid length.
[  417.111330][T16957] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3869'.
[  417.205882][T16963] loop1: detected capacity change from 0 to 512
[  417.232651][T16838] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.239878][T16838] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.247754][T16838] bridge_slave_0: entered allmulticast mode
[  417.266382][T16838] bridge_slave_0: entered promiscuous mode
[  417.270747][T16969] loop7: detected capacity change from 0 to 1024
[  417.279174][T16838] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.286330][T16838] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.294074][T16969] EXT4-fs: Ignoring removed orlov option
[  417.306430][T16838] bridge_slave_1: entered allmulticast mode
[  417.312994][T16838] bridge_slave_1: entered promiscuous mode
[  417.320447][ T7750] IPVS: stop unused estimator thread 0...
[  417.344489][T16969] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3874: bg 0: block 427: padding at end of block bitmap is not set
[  417.389171][T16969] EXT4-fs (loop7): Remounting filesystem read-only
[  417.395917][T16969] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1597: inode #18: comm syz.7.3874: cleanup dec ref error -117
[  417.400163][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.490998][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.513176][T16838] team0: Port device team_slave_0 added
[  417.519912][T16838] team0: Port device team_slave_1 added
[  417.603786][T16838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.610804][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.636759][T16838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.723077][T16838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.730091][T16838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.756170][T16838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.847845][T17004] loop3: detected capacity change from 0 to 512
[  417.883603][T16838] hsr_slave_0: entered promiscuous mode
[  417.903067][T16838] hsr_slave_1: entered promiscuous mode
[  417.929226][T16838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.937145][T16838] Cannot create hsr debugfs directory
[  417.968956][T17004] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff05)
[  417.976922][T17004] FAT-fs (loop3): Filesystem has been set read-only
[  418.065856][   T29] kauditd_printk_skb: 13 callbacks suppressed
[  418.065869][   T29] audit: type=1326 audit(3147438.061:51374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.3.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  418.109966][T17020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17020 comm=syz.3.3895
[  418.122847][   T29] audit: type=1326 audit(3147438.071:51375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.3.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  418.141189][T16838] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  418.146240][   T29] audit: type=1326 audit(3147438.071:51376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.3.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  418.176399][   T29] audit: type=1326 audit(3147438.071:51377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17017 comm="syz.3.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31848ae9a9 code=0x7ffc0000
[  418.199974][   T29] audit: type=1400 audit(3147438.114:51378): avc:  denied  { nlmsg_write } for  pid=17019 comm="syz.3.3895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  418.209534][T17022] loop7: detected capacity change from 0 to 512
[  418.230007][T16838] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  418.240454][T16838] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  418.249243][T17022] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  418.268376][T16838] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  418.330055][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'.
[  418.394404][T17039] xt_hashlimit: max too large, truncated to 1048576
[  418.437922][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3904'.
[  418.455037][T17027] syzkaller0: entered promiscuous mode
[  418.460650][T17027] syzkaller0: entered allmulticast mode
[  418.485577][T16838] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.503871][T16838] 8021q: adding VLAN 0 to HW filter on device team0
[  418.512020][T17048] netlink: 'syz.7.3905': attribute type 9 has an invalid length.
[  418.520702][ T7750] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.527855][ T7750] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.537341][T17048] netlink: 'syz.7.3905': attribute type 9 has an invalid length.
[  418.549386][ T7750] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.556499][ T7750] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.588495][T17052] loop7: detected capacity change from 0 to 512
[  418.612125][T17052] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  418.620389][T17052] System zones: 0-7
[  418.646726][T16838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  418.657220][T16838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  418.703676][T17060] SELinux: syz.7.3909 (17060) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  418.733613][T16838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.894748][T17066] loop3: detected capacity change from 0 to 1024
[  418.964858][T17066] EXT4-fs mount: 35 callbacks suppressed
[  418.964944][T17066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.077430][T17078] loop6: detected capacity change from 0 to 512
[  419.088043][T17078] EXT4-fs: Ignoring removed oldalloc option
[  419.094177][T17078] EXT4-fs: inline encryption not supported
[  419.100086][T17078] EXT4-fs: Ignoring removed mblk_io_submit option
[  419.102652][T17080] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3910'.
[  419.118254][T17078] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  419.135338][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.148097][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/1217.tmp-b7:6' failed: Read-only file system
[  419.153653][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-diskseq/1216.tmp-b7:3' failed: Read-only file system
[  419.169499][T13843] udevd[13843]: symlink '../../loop7' '/dev/disk/by-diskseq/1215.tmp-b7:7' failed: Read-only file system
[  419.173197][T14200] udevd[14200]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  419.187096][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  419.193854][   T29] audit: type=1326 audit(3147439.244:51379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.7.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa458dce9a9 code=0x7ffc0000
[  419.228380][   T29] audit: type=1326 audit(3147439.244:51380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.7.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa458dce9a9 code=0x7ffc0000
[  419.251841][   T29] audit: type=1326 audit(3147439.244:51381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.7.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa458dce9a9 code=0x7ffc0000
[  419.254027][T17078] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3916: bg 0: block 64: padding at end of block bitmap is not set
[  419.275397][   T29] audit: type=1326 audit(3147439.244:51382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.7.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa458dce9a9 code=0x7ffc0000
[  419.313200][   T29] audit: type=1326 audit(3147439.244:51383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17084 comm="syz.7.3918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa458dce9a9 code=0x7ffc0000
[  419.319075][T13843] udevd[13843]: symlink '../../loop7' '/dev/disk/by-diskseq/1215.tmp-b7:7' failed: Read-only file system
[  419.344464][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/1217.tmp-b7:6' failed: Read-only file system
[  419.365768][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  419.379292][T17078] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3916: Failed to acquire dquot type 0
[  419.382143][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-diskseq/1217.tmp-b7:6' failed: Read-only file system
[  419.408453][T13842] udevd[13842]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  419.453281][T17078] EXT4-fs (loop6): 1 truncate cleaned up
[  419.469197][T17078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.497078][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3921'.
[  419.506316][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3921'.
[  419.506361][T17105] loop1: detected capacity change from 0 to 512
[  419.515369][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3921'.
[  419.535610][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.638683][T16838] veth0_vlan: entered promiscuous mode
[  419.671590][T16838] veth1_vlan: entered promiscuous mode
[  419.685991][T16838] veth0_macvtap: entered promiscuous mode
[  419.693843][T16838] veth1_macvtap: entered promiscuous mode
[  419.704314][T17120] netlink: 'syz.1.3926': attribute type 6 has an invalid length.
[  419.715463][T16838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.723077][T17123] loop6: detected capacity change from 0 to 256
[  419.732473][T16838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.770303][T16838] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  419.779133][T16838] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  419.787996][T16838] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  419.796711][T16838] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  419.813976][T17133] loop3: detected capacity change from 0 to 512
[  419.820757][T17133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  419.830633][T17133] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  419.830633][T17133] 
[  419.864744][T17134] loop6: detected capacity change from 0 to 512
[  419.885273][T17134] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3934: Failed to acquire dquot type 1
[  419.903333][T17134] EXT4-fs (loop6): 1 truncate cleaned up
[  419.922665][T17134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.968259][T17144] loop3: detected capacity change from 0 to 164
[  419.976633][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.980380][T17150] loop1: detected capacity change from 0 to 512
[  419.998737][T17144] rock: directory entry would overflow storage
[  420.004966][T17144] rock: sig=0x4543, size=28, remaining=18
[  420.014581][T17150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  420.025043][T17154] loop8: detected capacity change from 0 to 512
[  420.055052][T17156] loop6: detected capacity change from 0 to 512
[  420.109974][T17156] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  420.117984][T17156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  420.131412][T17150] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.3940: corrupted in-inode xattr: overlapping e_value 
[  420.144139][T17156] System zones: 0-1, 15-15, 18-18, 34-34
[  420.151024][T17156] EXT4-fs (loop6): orphan cleanup on readonly fs
[  420.157992][T17156] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  420.172571][T17156] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  420.194086][T17150] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.3940: couldn't read orphan inode 15 (err -117)
[  420.208752][T17176] loop8: detected capacity change from 0 to 128
[  420.215616][T17156] EXT4-fs (loop6): 1 truncate cleaned up
[  420.224456][T17156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  420.238400][T17150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.258072][T17176] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  420.299305][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.304225][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.320585][T17185] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3958'.
[  420.325416][T16838] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  420.339144][T17185] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3958'.
[  420.829040][T17221] syzkaller0: entered promiscuous mode
[  420.834569][T17221] syzkaller0: entered allmulticast mode
[  420.944162][T17233] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0
[  420.981393][T17235] loop7: detected capacity change from 0 to 1024
[  421.000938][T17235] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  421.012180][T17235] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  421.035934][T17235] JBD2: no valid journal superblock found
[  421.041716][T17235] EXT4-fs (loop7): Could not load journal inode
[  421.095069][T17246] loop8: detected capacity change from 0 to 512
[  421.125254][T17249] loop7: detected capacity change from 0 to 2048
[  421.138723][T17246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.143271][T17253] loop6: detected capacity change from 0 to 1764
[  421.173400][T17249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.187281][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.210159][T17249] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3983: bg 0: block 15: invalid block bitmap
[  421.294490][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.315010][T17264] loop1: detected capacity change from 0 to 1024
[  421.322408][T17264] EXT4-fs: Ignoring removed nomblk_io_submit option
[  421.341598][T17264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  421.375949][T17273] loop7: detected capacity change from 0 to 512
[  421.405280][T17273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.419675][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.445779][T17280] loop8: detected capacity change from 0 to 1024
[  421.468840][T17280] EXT4-fs: Ignoring removed bh option
[  421.469869][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.503346][T17284] loop1: detected capacity change from 0 to 512
[  421.504320][T17280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  421.531441][T17290] loop7: detected capacity change from 0 to 512
[  421.540448][T17290] EXT4-fs: Ignoring removed i_version option
[  421.549253][T17290] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  421.554149][T17280] EXT4-fs: Ignoring removed orlov option
[  421.574798][T17290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  421.582812][T17290] System zones: 1-12
[  421.586995][T17280] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.3994: Abort forced by user
[  421.597746][T17280] EXT4-fs (loop8): Remounting filesystem read-only
[  421.604375][T17280] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-001000000000.
[  421.615076][T17284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.629631][T17290] EXT4-fs (loop7): orphan cleanup on readonly fs
[  421.637658][T17290] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3996: invalid indirect mapped block 12 (level 1)
[  421.691633][T17290] EXT4-fs (loop7): Remounting filesystem read-only
[  421.699236][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.709990][T17290] EXT4-fs (loop7): 1 truncate cleaned up
[  421.716083][T17290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  421.728380][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  421.741634][T17294] syzkaller0: entered promiscuous mode
[  421.747203][T17294] syzkaller0: entered allmulticast mode
[  421.762148][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  421.801143][T17299] loop7: detected capacity change from 0 to 512
[  421.831644][T17299] EXT4-fs (loop7): orphan cleanup on readonly fs
[  421.842671][T17299] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4000: bg 0: block 248: padding at end of block bitmap is not set
[  421.860683][T17299] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4000: Failed to acquire dquot type 1
[  421.873093][T17299] EXT4-fs (loop7): 1 truncate cleaned up
[  421.880114][T17299] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  421.897485][T17299] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  421.910953][T17303] loop1: detected capacity change from 0 to 512
[  421.918310][T17299] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  422.011307][T17303] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  422.063965][T17303] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  422.118980][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.150514][T17310] loop3: detected capacity change from 0 to 128
[  422.162653][T17303] EXT4-fs (loop1): 1 truncate cleaned up
[  422.185538][T17303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.200396][T17312] loop6: detected capacity change from 0 to 256
[  422.280700][T17314] netlink: 'syz.7.4003': attribute type 10 has an invalid length.
[  422.292498][T17314] __nla_validate_parse: 1 callbacks suppressed
[  422.292512][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4003'.
[  422.304258][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.400150][T17320] loop1: detected capacity change from 0 to 8192
[  422.451248][T17333] loop6: detected capacity change from 0 to 1024
[  422.466312][T17333] EXT4-fs: Ignoring removed mblk_io_submit option
[  422.474859][T17335] loop7: detected capacity change from 0 to 1024
[  422.482118][T17335] EXT4-fs: Ignoring removed orlov option
[  422.492625][T17335] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  422.514313][T17333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.543570][T17335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.550393][T17336] syzkaller0: entered promiscuous mode
[  422.561629][T17336] syzkaller0: entered allmulticast mode
[  422.596844][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.622128][T17342] loop1: detected capacity change from 0 to 256
[  422.641428][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.660253][T17346] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4017'.
[  422.701874][T17348] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4018'.
[  422.802836][T17362] loop8: detected capacity change from 0 to 512
[  422.821111][T17362] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  422.845776][T17365] loop7: detected capacity change from 0 to 512
[  422.845761][T17367] loop1: detected capacity change from 0 to 512
[  422.854406][T17365] EXT4-fs: Ignoring removed nomblk_io_submit option
[  422.860281][T17367] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  422.872093][T17362] __quota_error: 14 callbacks suppressed
[  422.872110][T17362] Quota error (device loop8): v2_read_file_info: Free block number 58381 out of range (1, 6).
[  422.891861][T17362] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  422.914837][T17367] EXT4-fs (loop1): 1 truncate cleaned up
[  422.916362][T17365] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  422.928355][T17367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.928465][T17365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  422.948645][T17365] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  422.958212][T17365] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  422.976508][T17365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  422.989750][T16838] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  422.999542][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.009384][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.092503][T17379] IPVS: Error connecting to the multicast addr
[  423.120049][T17377] loop8: detected capacity change from 0 to 512
[  423.131653][T17377] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  423.152021][T17377] EXT4-fs (loop8): orphan cleanup on readonly fs
[  423.160010][T17377] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.4030: corrupted inode contents
[  423.225502][T17377] EXT4-fs (loop8): Remounting filesystem read-only
[  423.233704][T17377] EXT4-fs (loop8): 1 truncate cleaned up
[  423.288228][T17396] loop7: detected capacity change from 0 to 128
[  423.349329][T17396] syz.7.4037: attempt to access beyond end of device
[  423.349329][T17396] loop7: rw=2049, sector=140, nr_sectors = 8 limit=128
[  423.365279][T17396] syz.7.4037: attempt to access beyond end of device
[  423.365279][T17396] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128
[  423.378843][T17396] Buffer I/O error on dev loop7, logical block 156, lost async page write
[  423.390095][T17396] syz.7.4037: attempt to access beyond end of device
[  423.390095][T17396] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128
[  423.403599][T17396] Buffer I/O error on dev loop7, logical block 157, lost async page write
[  423.414616][T17396] syz.7.4037: attempt to access beyond end of device
[  423.414616][T17396] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128
[  423.428213][T17396] Buffer I/O error on dev loop7, logical block 158, lost async page write
[  423.439163][T17396] syz.7.4037: attempt to access beyond end of device
[  423.439163][T17396] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128
[  423.452664][T17396] Buffer I/O error on dev loop7, logical block 159, lost async page write
[  423.464764][T17396] syz.7.4037: attempt to access beyond end of device
[  423.464764][T17396] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128
[  423.478221][T17396] Buffer I/O error on dev loop7, logical block 160, lost async page write
[  423.490574][T17396] syz.7.4037: attempt to access beyond end of device
[  423.490574][T17396] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128
[  423.504094][T17396] Buffer I/O error on dev loop7, logical block 161, lost async page write
[  423.505036][ T7754] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  423.514449][T17396] syz.7.4037: attempt to access beyond end of device
[  423.514449][T17396] loop7: rw=2049, sector=132, nr_sectors = 1 limit=128
[  423.523366][ T7754] Quota error (device loop8): write_blk: dquota write failed
[  423.536859][T17396] Buffer I/O error on dev loop7, logical block 132, lost async page write
[  423.538677][T17396] syz.7.4037: attempt to access beyond end of device
[  423.538677][T17396] loop7: rw=2049, sector=133, nr_sectors = 1 limit=128
[  423.544326][ T7754] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  423.552844][T17396] Buffer I/O error on dev loop7, logical block 133, lost async page write
[  423.566221][ T7754] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  423.566243][ T7754] Quota error (device loop8): write_blk: dquota write failed
[  423.566255][ T7754] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list
[  423.579141][T17396] syz.7.4037: attempt to access beyond end of device
[  423.579141][T17396] loop7: rw=2049, sector=150, nr_sectors = 1 limit=128
[  423.590192][ T7754] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  423.595867][T17396] Buffer I/O error on dev loop7, logical block 150, lost async page write
[  423.634323][T17396] Buffer I/O error on dev loop7, logical block 151, lost async page write
[  423.636855][ T7754] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  423.664926][ T7754] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  423.677480][T17377] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  423.706725][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.803663][T17405] syzkaller0: entered promiscuous mode
[  423.809193][T17405] syzkaller0: entered allmulticast mode
[  423.896107][T17417] loop7: detected capacity change from 0 to 512
[  423.903224][T17416] loop8: detected capacity change from 0 to 512
[  423.921564][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1280.tmp-b7:7' failed: Read-only file system
[  423.944492][T17421] loop1: detected capacity change from 0 to 128
[  423.944671][T14200] udevd[14200]: symlink '../../loop8' '/dev/disk/by-diskseq/1281.tmp-b7:8' failed: Read-only file system
[  423.973969][T13842] udevd[13842]: symlink '../../loop7' '/dev/disk/by-diskseq/1282.tmp-b7:7' failed: Read-only file system
[  423.996231][T17424] loop3: detected capacity change from 0 to 1024
[  424.002214][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-diskseq/1275.tmp-b7:1' failed: Read-only file system
[  424.003580][T14200] udevd[14200]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system
[  424.019215][T17416] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  424.032118][T17417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.050076][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-diskseq/1284.tmp-b7:1' failed: Read-only file system
[  424.052305][T14200] udevd[14200]: symlink '../../loop8' '/dev/disk/by-diskseq/1283.tmp-b7:8' failed: Read-only file system
[  424.070233][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-label/SYZKALLER.tmp-b7:1' failed: Read-only file system
[  424.076517][T17416] EXT4-fs (loop8): orphan cleanup on readonly fs
[  424.086969][T13843] udevd[13843]: symlink '../../loop1' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:1' failed: Read-only file system
[  424.092168][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.114581][T13842] udevd[13842]: symlink '../../loop3' '/dev/disk/by-diskseq/1285.tmp-b7:3' failed: Read-only file system
[  424.129102][T17424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.148248][   T29] audit: type=1400 audit(3147444.480:51391): avc:  denied  { setopt } for  pid=17431 comm="syz.1.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  424.162911][T17434] loop1: detected capacity change from 0 to 128
[  424.188618][T17416] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.4046: corrupted inode contents
[  424.219288][T13877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.231841][T17436] loop7: detected capacity change from 0 to 512
[  424.239418][T17416] EXT4-fs (loop8): Remounting filesystem read-only
[  424.246413][T17416] EXT4-fs (loop8): 1 truncate cleaned up
[  424.252223][ T7743] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  424.256148][T17436] EXT4-fs: Ignoring removed bh option
[  424.262796][ T7743] Quota error (device loop8): write_blk: dquota write failed
[  424.275558][ T7743] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  424.285679][ T7743] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  424.287993][T17436] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  424.325823][ T7743] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  424.338393][T17416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  424.354070][T17436] EXT4-fs (loop7): 1 truncate cleaned up
[  424.360064][T17436] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.413797][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.445393][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.526476][T17454] loop7: detected capacity change from 0 to 512
[  424.573276][T17454] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  424.613884][T17454] EXT4-fs error (device loop7): ext4_orphan_get:1419: comm syz.7.4060: bad orphan inode 15
[  424.650788][T17454] ext4_test_bit(bit=14, block=18) = 1
[  424.656692][T17454] is_bad_inode(inode)=0
[  424.660940][T17454] NEXT_ORPHAN(inode)=1023
[  424.665360][T17454] max_ino=32
[  424.668705][T17454] i_nlink=0
[  424.702653][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4063'.
[  424.711796][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'.
[  424.720689][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4063'.
[  424.733380][T17454] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.4060: corrupted xattr block 19: invalid header
[  424.747797][T17454] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117)
[  424.760127][T17454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  424.835390][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  424.862408][T17471] xt_hashlimit: max too large, truncated to 1048576
[  424.869211][T17470] loop7: detected capacity change from 0 to 512
[  424.886428][T17470] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  424.904936][T17470] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  424.935852][T17470] EXT4-fs (loop7): 1 truncate cleaned up
[  424.947341][T17470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.989987][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.052328][T17489] loop7: detected capacity change from 0 to 1024
[  425.081835][T17489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.227267][T17502] loop8: detected capacity change from 0 to 1024
[  425.253447][T17502] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  425.296231][T17502] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4078: Invalid block bitmap block 0 in block_group 0
[  425.334467][T17509] loop1: detected capacity change from 0 to 512
[  425.343287][T17502] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4078: Failed to acquire dquot type 0
[  425.358471][T17509] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  425.373504][T17502] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.4078: Freeing blocks not in datazone - block = 0, count = 4096
[  425.415499][T17502] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.4078: Invalid inode bitmap blk 0 in block_group 0
[  425.452183][T17511] loop1: detected capacity change from 0 to 128
[  425.460595][T17502] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem
[  425.469887][ T7754] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0
[  425.484691][ T7146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.484846][T17502] EXT4-fs (loop8): 1 orphan inode deleted
[  425.516873][T17502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.579607][T17502] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  425.611637][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.621882][T17519] loop7: detected capacity change from 0 to 8192
[  425.657671][T14200]  loop7: p1 p2 p4
[  425.663005][T14200] loop7: p1 size 65536 extends beyond EOD, truncated
[  425.681530][T14200] loop7: p2 start 861536256 is beyond EOD, truncated
[  425.688336][T14200] loop7: p4 size 65536 extends beyond EOD, truncated
[  425.697880][T17519]  loop7: p1 p2 p4
[  425.701694][T17519] loop7: p1 size 65536 extends beyond EOD, truncated
[  425.711248][T17519] loop7: p2 start 861536256 is beyond EOD, truncated
[  425.718223][T17519] loop7: p4 size 65536 extends beyond EOD, truncated
[  425.954253][T17560] loop8: detected capacity change from 0 to 256
[  425.967420][T17560] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001)
[  425.975455][T17560] FAT-fs (loop8): Filesystem has been set read-only
[  426.034727][T17565] loop7: detected capacity change from 0 to 1764
[  426.442846][T17577] loop6: detected capacity change from 0 to 512
[  426.496198][T17579] loop6: detected capacity change from 0 to 512
[  426.517055][T17579] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  426.536794][T17579] EXT4-fs (loop6): orphan cleanup on readonly fs
[  426.555052][T17579] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4114: Failed to acquire dquot type 1
[  426.576931][T17579] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4114: bg 0: block 40: padding at end of block bitmap is not set
[  426.604761][T17579] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  426.614417][T17579] EXT4-fs (loop6): 1 truncate cleaned up
[  426.630153][T17579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  426.647279][T17579] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.4114: corrupted xattr block 31: invalid header
[  426.662176][T17579] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=16
[  426.671396][T17579] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.4114: corrupted xattr block 31: invalid header
[  426.701073][T17579] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=16
[  426.710766][T17597] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.4114: corrupted xattr block 31: invalid header
[  426.715244][T17592] syzkaller0: entered promiscuous mode
[  426.725447][T17579] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.4114: bad symlink.
[  426.729456][T17592] syzkaller0: entered allmulticast mode
[  426.792364][T17597] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop6 ino=16
[  426.839739][T17597] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.4114: bad symlink.
[  426.862292][T17602] loop1: detected capacity change from 0 to 128
[  426.875207][T17602] EXT4-fs: Ignoring removed nobh option
[  426.881448][T17604] loop3: detected capacity change from 0 to 512
[  426.899125][ T7041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.913211][T17602] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  426.928188][T17604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  426.968761][T17604] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4124: Invalid block bitmap block 0 in block_group 0
[  427.001320][T17604] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  427.011110][T17604] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.4124: attempt to clear invalid blocks 983261 len 1
[  427.025678][T17604] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.4124: Invalid inode table block 0 in block_group 0
[  427.025724][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  427.041270][T17604] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  427.047484][T17613] loop8: detected capacity change from 0 to 512
[  427.057953][T17604] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  427.076283][T17613] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  427.089070][T17604] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.4124: Invalid inode table block 0 in block_group 0
[  427.104514][ T3312] ==================================================================
[  427.104628][T17613] EXT4-fs (loop8): 1 truncate cleaned up
[  427.112612][ T3312] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  427.112657][ T3312] 
[  427.112663][ T3312] read-write to 0xffff888237c26f30 of 8 bytes by task 17613 on cpu 0:
[  427.112678][ T3312]  find_get_block_common+0x55c/0x960
[  427.141699][ T3312]  bdev_getblk+0x83/0x3d0
[  427.146041][ T3312]  ext4_read_inode_bitmap+0x15f/0xae0
[  427.151412][ T3312]  ext4_orphan_get+0xf1/0x430
[  427.156084][ T3312]  ext4_orphan_cleanup+0x5fa/0xa00
[  427.161205][ T3312]  ext4_fill_super+0x3171/0x34e0
[  427.166134][ T3312]  get_tree_bdev_flags+0x291/0x300
[  427.171248][ T3312]  get_tree_bdev+0x1f/0x30
[  427.175715][ T3312]  ext4_get_tree+0x1c/0x30
[  427.180125][ T3312]  vfs_get_tree+0x54/0x1d0
[  427.184544][ T3312]  do_new_mount+0x207/0x680
[  427.189045][ T3312]  path_mount+0x4a4/0xb20
[  427.193376][ T3312]  __se_sys_mount+0x28f/0x2e0
[  427.198057][ T3312]  __x64_sys_mount+0x67/0x80
[  427.202659][ T3312]  x64_sys_call+0xd36/0x2fb0
[  427.207242][ T3312]  do_syscall_64+0xd2/0x200
[  427.211745][ T3312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.217643][ T3312] 
[  427.219955][ T3312] read to 0xffff888237c26f30 of 8 bytes by task 3312 on cpu 1:
[  427.227510][ T3312]  has_bh_in_lru+0xa8/0x1f0
[  427.232108][ T3312]  __lru_add_drain_all+0x234/0x3f0
[  427.237228][ T3312]  lru_add_drain_all+0x10/0x20
[  427.242007][ T3312]  invalidate_bdev+0x47/0x70
[  427.246589][ T3312]  ext4_put_super+0x624/0x7d0
[  427.251349][ T3312]  generic_shutdown_super+0xe3/0x210
[  427.256636][ T3312]  kill_block_super+0x2a/0x70
[  427.261323][ T3312]  ext4_kill_sb+0x42/0x80
[  427.265642][ T3312]  deactivate_locked_super+0x72/0x1c0
[  427.271013][ T3312]  deactivate_super+0x97/0xa0
[  427.275690][ T3312]  cleanup_mnt+0x269/0x2e0
[  427.280099][ T3312]  __cleanup_mnt+0x19/0x20
[  427.284507][ T3312]  task_work_run+0x12e/0x1a0
[  427.289093][ T3312]  exit_to_user_mode_loop+0xe4/0x100
[  427.294373][ T3312]  do_syscall_64+0x1d6/0x200
[  427.298973][ T3312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.304873][ T3312] 
[  427.307188][ T3312] value changed: 0x0000000000000000 -> 0xffff88811b9b1208
[  427.314288][ T3312] 
[  427.316599][ T3312] Reported by Kernel Concurrency Sanitizer on:
[  427.322736][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) 
[  427.335315][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  427.345400][ T3312] ==================================================================
[  427.361849][T17613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.381952][T17604] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  427.402628][T17604] EXT4-fs error (device loop3): ext4_truncate:4597: inode #11: comm syz.3.4124: mark_inode_dirty error
[  427.413926][T17604] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  427.423426][T16838] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.424819][T17604] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.4124: Invalid inode table block 0 in block_group 0
[  427.446942][T17604] EXT4-fs (loop3): 1 truncate cleaned up
[  427.458803][T17604] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4124: Invalid inode bitmap blk 0 in block_group 0
[  427.491835][T17618] loop1: detected capacity change from 0 to 2048