last executing test programs:

3m39.775630054s ago: executing program 32 (id=23):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth0_macvtap\x00', 0x1})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x14, 0x30, 0x4, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x22, 0x0, &(0x7f0000001240)="3d6ee2e04b91ab10143d9abe86dddbff428e5ca7722ad4ff0d992a53c54273f61577", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="0000001000010429bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00900000a8000600280012800b00010062726964676500001800028005002a00010000000c0023000100008000000000"], 0x48}}, 0x24008040)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x2800000, &(0x7f00000003c0)={[{@sysvgroups}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000500)="$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")
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
bind$can_raw(r4, &(0x7f0000000140)={0x1d, r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='rpc_stats_latency\x00'}, 0x18)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x2000000)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, {0x3, @random="85017b041e90", 'wlan0\x00'}}, 0x1e)
connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
write(r8, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0)

3m9.003539441s ago: executing program 33 (id=439):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)
write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120)
write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'/22], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r3, 0x8982, 0x20000000)

3m5.151353641s ago: executing program 34 (id=473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x736f}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
semop(0x0, &(0x7f0000000580)=[{0x0, 0x20, 0x800}, {0x5, 0x4, 0x1800}, {0x2, 0x0, 0x800}, {0x2, 0x9}, {0x2, 0x63, 0x800}, {0x4, 0x3, 0x1c00}], 0x6)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4c23, 0x0, @loopback, 0x9}}}, 0x32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x65)
brk(0x80000000007)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1e, 0x20, 0x113})
set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4)
fsmount(0xffffffffffffffff, 0x0, 0x6)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)

3m0.136569617s ago: executing program 35 (id=543):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r1}, 0x18)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0xc3}, @timestamp={0x44, 0xc, 0x5, 0x0, 0x0, [0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

2m54.813647694s ago: executing program 36 (id=609):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x64)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m54.272971637s ago: executing program 37 (id=614):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

2m53.66889363s ago: executing program 38 (id=619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_io_uring_setup(0x55fb, &(0x7f0000000180)={0x0, 0x2fb3, 0xc6, 0x2, 0xe6}, 0x0, 0x0)

2m52.375486416s ago: executing program 39 (id=630):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x14, 0x12, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x0, 0x1, 0x2, 0x9, 0xffffffffffffffc0}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r5 = epoll_create1(0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc, 0x12, 0xffffffffffffffff, 0x10000000)
r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
flock(r8, 0x2)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, r7, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f00000000c0)={0xe000001a})
preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000100)=""/115, 0x73}], 0x1, 0x80000001, 0x80000000)
ppoll(&(0x7f00000001c0)=[{r5, 0x1065}], 0x1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)="948ae3310b1ff5bb47216039fa98f87e77a6c25d0e047a7a38ed9476152101b587430b7c7f0d9e25e2b1b60acc3bd89116f6b698177ee02dcebeb41cc6a5be8569969a86d5948c52902d4c07eb61891d852501d6e5fe17f327d15857afbabde5e34522834640e764f660c0ce30ce53a8d5f6ae048b610b8044a68fc9d665cf83b71003c5169a3846ee38a98c0af9d5eed1fac8ce8b99195d2617d9a9e0f6ad74ff35c1575989c81e14847b6a60fe762f588bf161443a66036d9e0b7791f05cb2504e211e349479e4952c2620b6911e12cbf92badd531486c921bee4a390ba836f0565b46aa44a2aca6beb3254dc3888031dd80fc814e4c882a3a6e9813", 0xfd}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}], 0x20}}, {{&(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000740)="205e51e30187fdbf8f25e6ef79516a0af2556295e654a57d7c88702f8fc8ef7a7fdee3415be3b4971a2fba78aa162a2d41a60becd2e4b85f11b446e850a37d5b1a03bbc772eb356860b8169ec41440beb015512efa9c22bdb72cf65a2fa6f4fdf06cfd8edca0540c64417cfb59a186cf4d2cbcd67da2df15d8240de658ad9dd2fdf63b856cafa6c1bc9cf3b3e3cc456d4d7c31133ed9b01bdfdefb3d4a5f2ac4c14c8a396931d932e9ac1b72113533c2cad4d699af31a1579aa8a7a43343e0b624c2f236709f656547c32b016300c2e5dcd5c991bf4ef64d17bfb5", 0xdb}], 0x1, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x108, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x3, [{@broadcast, 0x6}, {@broadcast, 0x2}, {@multicast1, 0x800}, {@local, 0x1}, {@loopback, 0x1e}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x3, "12"}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x67, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @private=0xa010100, @local, @broadcast]}, @lsrr={0x83, 0x1f, 0xb3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @empty, @rand_addr=0x64010100, @empty]}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x3, [{@loopback, 0x4c2a1310}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x81}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xeff53779}, {@empty, 0x6}, {@multicast2, 0x29e}, {@loopback}]}, @timestamp_addr={0x44, 0x54, 0x8d, 0x1, 0x1, [{@broadcast, 0x4}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010101, 0xe6}, {@remote}, {@loopback, 0x8}, {@private=0xa010100, 0x1}, {@remote, 0xb}, {@remote}, {@empty, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_retopts={{0x80, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x14, 0x3, [{0x6, 0xe, "c4348967c353eda69baf7d24"}]}, @cipso={0x86, 0x48, 0x2, [{0x5, 0x4, "6ce9"}, {0x6, 0x10, "d2d733b2c468cfcc49af6c4c4e58"}, {0x6, 0x7, "abaaf05d7b"}, {0x7, 0x11, "680b81374b7f73ddc71f2c8eae2d1f"}, {0x5, 0x9, "06b755292a8824"}, {0x5, 0xd, "c5948be496a8bc421335e3"}]}, @lsrr={0x83, 0xf, 0x58, [@local, @remote, @private=0xa010102]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x1e8}}], 0x2, 0x20000000)

2m44.468228447s ago: executing program 40 (id=700):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
mkdirat(r0, &(0x7f0000000300)='./file0\x00', 0x10a)
close(r0)
writev(r0, &(0x7f0000000400), 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0xfffffffffffffeb7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x5, 0xb7, 0xa})

2m43.162000444s ago: executing program 41 (id=726):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000db5520000000000001021000fcffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0/../file0\x00', r3, 0x4000, r1}, 0x18)

2m42.568577006s ago: executing program 42 (id=734):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)

2m41.95413274s ago: executing program 43 (id=738):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000540)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00420152c4c7ef7f633ea8000000004d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c370fd65509ff9c85cbd090000008b9412ffa005000000000000273d94d3d75d2327ae06fb74cea53cd8f2abbcf843f247be745ac8e75c32b9460623409a4af21c2568c62dbe7e78359bf47bdb82bbdd40be4a7e5d3396b0212ad24405886f22285c70296a4bb673226b70c4d0e6b98b7a9c2644d4cd55cb77b6abbec07137f6f9d178abb6b3c3bd2c932f52ff1f308e49e9ea435e999a11765291492bfbe10b148bbfddd6f7d6ca1469e4b3646ffc"], 0x9, 0xa36, &(0x7f0000001580)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
execve(&(0x7f0000001080)='./file0\x00', &(0x7f0000001240)={[&(0x7f00000010c0)='iso9660\x00', &(0x7f0000001100)='-\x00', &(0x7f0000001140)='\x00', &(0x7f0000001180)='\x00', &(0x7f00000011c0)='bridge0\x00', &(0x7f0000001200)=':!.&.-&-.\x00']}, &(0x7f00000013c0)={[&(0x7f0000001280)='+\x00', &(0x7f00000012c0)='$,\\\x00', &(0x7f0000001300)='net/tcp6\x00', &(0x7f0000001340)='\'\x00', &(0x7f0000001380)='(\x00']})

2m33.903607491s ago: executing program 44 (id=777):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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")

2m32.837263187s ago: executing program 45 (id=789):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff"], 0x4}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pipe2$9p(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r5 = dup(r3)
write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r0, 0xa3085000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
chmod(&(0x7f0000000000)='./file0\x00', 0x101)

2m23.032270037s ago: executing program 46 (id=897):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8)

2m21.466428085s ago: executing program 47 (id=912):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
setrlimit(0x7, &(0x7f0000000400))
socket$can_bcm(0x1d, 0x2, 0x2)

53.420148816s ago: executing program 48 (id=2117):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={0x0, 0x1400, &(0x7f0000001580)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x48084)

28.502080584s ago: executing program 3 (id=2667):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0)
symlink(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="080000000800000000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140))
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000380)={0x1})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
close(r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="3d5a1d2a7031ee4d25e8a962cb3a17fdf9cd9311a537d185406d7f494960eceaae8bbd57746956da18eb069d3f4cbf81594e9de20a865aeeeac80341a036ddf6a07d7f3c9ad6fd1175465fdee7d59816a11eefac121e6c8eec7eba2c66b94e3f18987f78b6b1c19b4d696948c76d63ff612c4f18a972440871819d671a3d4536d6f92d810570e260d2b7fd5e5db6151f7c8f00843883e1d3645279eb64ddc6b2e01ecd255f5d252aa9668b5006d7fcc7f2b958fe39a0022566b6f073855910fa367cb05304a9d4c503b4c83f365ec2d176", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x1ff, 0xfffffff9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/70, 0x46, 0x0, &(0x7f00000004c0)=""/78, 0x4e}}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r6}, 0x10)
openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x8000, 0x2}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20)

27.619201638s ago: executing program 3 (id=2679):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1201, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x10})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0)
close(r1)
symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket(0x1, 0x4, 0xffffffe1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x8, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = gettid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
unshare(0x20000400)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x22, 0xfffffffffffffffc}, 0xa)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x19, 0x4, @tid=r3}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000002c0))

27.33317526s ago: executing program 3 (id=2687):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000ec0), 0x6000)

27.33272814s ago: executing program 3 (id=2688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x22e00a9, &(0x7f0000000000)=ANY=[])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000080d725dd6c20d3d97db8489150100fcff0500040001000000050002000a050000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c00020000697000a35087589c52134124e41c0c63d7a07dc5f730dbf6101d99f9da3220c26f"], 0x8)
close(r3)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x783)

27.223587091s ago: executing program 3 (id=2689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESDEC=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000083d2860221cd41edceae4dbbd4a3ef252c1edebaf2d5df619dc2cd394b8f2f8c992e1505bb6debee702084c56bf731e68d765684b010352e13ea20a372d18474d2eb88"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX=r2, @ANYRES16=0x0], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10)
setitimer(0x2, 0x0, 0x0) (async)
setitimer(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r6}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r6}, 0x10)
timer_delete(0x0) (async)
timer_delete(0x0)
r7 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r8}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r9}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

26.407766325s ago: executing program 3 (id=2698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close(r5)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r8, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b85e789128f765976a200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

26.392067075s ago: executing program 49 (id=2698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
close(r5)
sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, r8, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x117}, @void, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b85e789128f765976a200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

16.402681046s ago: executing program 7 (id=2878):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

16.374227986s ago: executing program 2 (id=2879):
fsmount(0xffffffffffffffff, 0x0, 0x7)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_destroy(0x0)

16.334050766s ago: executing program 7 (id=2881):
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x2002402, &(0x7f0000000100))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fstat(0xffffffffffffffff, &(0x7f0000000180))

16.333750016s ago: executing program 2 (id=2882):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48)
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(0x0, &(0x7f0000000000))
write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='xprtrdma_dma_maperr\x00', r6, 0x0, 0x2}, 0x18)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x6e}}}}, [@NL80211_PMSR_ATTR_PEERS={0x2c, 0xe, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004080}, 0x884)

16.304762536s ago: executing program 7 (id=2883):
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@orlov}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@errors_remount}, {@nomblk_io_submit}, {@nogrpid, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000e18f56d1278e0d00001700"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
dup2(r1, r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r8 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39)
write$binfmt_script(r8, &(0x7f0000000080), 0x208e24b)
r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xbe00}], 0x2, 0x1200, 0x41001, 0x3)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

16.183984597s ago: executing program 2 (id=2884):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

15.809917519s ago: executing program 2 (id=2885):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x22e00a9, &(0x7f0000000000)=ANY=[])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000080d725dd6c20d3d97db8489150100fcff0500040001000000050002000a050000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c00020000697000a35087589c52134124e41c0c63d7a07dc5f730dbf6101d99f9da3220c26f"], 0x8)
close(r3)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0185879, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

15.67192143s ago: executing program 9 (id=2887):
fsmount(0xffffffffffffffff, 0x0, 0x7)
socket$inet(0x2, 0x3, 0xff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
io_destroy(0x0)

15.67158279s ago: executing program 9 (id=2888):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004000000000000000000000e5e50df9902c48000000400000000016000000000000"], 0x48)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x400000}, 0x18)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000300)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}], [{@euid_gt={'euid>', r2}}, {@appraise}, {@dont_measure}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r3, r3, 0x0, 0x800000009)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)

15.54960935s ago: executing program 9 (id=2893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ftruncate(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
semget(0x3, 0x2, 0x284)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x60)
open(0x0, 0x185102, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

15.54352829s ago: executing program 2 (id=2894):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
flock(0xffffffffffffffff, 0xfb8cbf45da2632e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
syz_open_dev$sg(0x0, 0xc, 0x80080)
gettid()
timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001ec0)="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", &(0x7f00000008c0)="84285fa6eac57feec9a47cb1e6bbb6bb3a7129aeb112cdece55e60fe52b17fae187d87c8e8bfd623659c65dadc1fbd86b88b9fd8aecf340e25856c6b6652090595f2ec43245fe77239cd591be1838ddfd1b349d45241b6f44bb416de5fade2a15397dd85225f10d25b6766d2a3fc87faaf0d0420accd626d07cbaa814e8bc47c73fd43c0fa816bfc337fe13d0bf6386644af67056e3ac9786b69eb72380223639bb7ffac74527535f200b380e0ae98412ce5c3e2e168fb083877b068470a4e04782986b5b4fa707ab50777bcb09ca9d98a"}}, &(0x7f00000006c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

15.462100061s ago: executing program 9 (id=2895):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x22e00a9, &(0x7f0000000000)=ANY=[])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000080d725dd6c20d3d97db8489150100fcff0500040001000000050002000a050000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c00020000697000a35087589c52134124e41c0c63d7a07dc5f730dbf6101d99f9da3220c26f"], 0x8)
close(r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

15.402388421s ago: executing program 9 (id=2897):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1050f0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2904, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

15.308169831s ago: executing program 2 (id=2901):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x20, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='4\xb9\xdfs\x7f')
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xdd0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r3 = timerfd_create(0x7, 0x0)
timerfd_settime(r3, 0x2, &(0x7f00000002c0), &(0x7f0000000100))

15.289893981s ago: executing program 50 (id=2901):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0x20, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000018c0)=""/249, 0xf9}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='4\xb9\xdfs\x7f')
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xdd0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]})
r3 = timerfd_create(0x7, 0x0)
timerfd_settime(r3, 0x2, &(0x7f00000002c0), &(0x7f0000000100))

15.164903572s ago: executing program 7 (id=2908):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x22e00a9, &(0x7f0000000000)=ANY=[])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000080d725dd6c20d3d97db8489150100fcff0500040001000000050002000a050000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c00020000697000a35087589c52134124e41c0c63d7a07dc5f730dbf6101d99f9da3220c26f"], 0x8)
close(r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$eJzs3M9rE1sUwPGTNG3SlDZZPB6v7/HoRTe6Gdq4V4K0IAaU2og/QJg2Ew0Zk5CJlRSxceXWf8PQZTdS0PoHdOPOlRtx043gpqA1ksykSdpJG1ObtOT7gXJP594zP3In4czAzPadV4/TSUtL6gXxBpR4RUqyKxKuRo6lcRHxiEdqzYi9MGA3Jbk49u3j/0pEorHY7LxSc9GFSxGl1MTU26fP1s5tFsZur09s+GUr/GD7a+Tz1t9bk9s/Fx6lLJWyVCZbULpazH4q6IumoRIpK60pddM0dMtQqYxl5O3+bMHZrORyRaVnEuPBXN6wLKVniiptFFUhqwr5otIf6qmM0jRNjQdlcOxM1Zrc7+bFy/PzerTLjS51mYc/bvPQ3ny+/uV5X2ntiZdPbp8AAMBpVa///c31/05r/e9xWm9z/e8oSala/9+6e+96B/X/xkib+j97oP53ri+kpT9pZqn/uxU4uCheHuq+/scZkR8VKa9J4xv94v7adC2g/gcAAAAAAAAAAAAAAAAAAAAA4CzYqVRClUolVG29YsfVP7/zwEj9/37vJ05G8/zbc+2rzjrzPyCaHtwLiJgvl+PLcbu1+6NJSYkphkxLSH7UzgeHHc9di816VE1Y3pmrTv7qcnyoNX9GQhJ2z5+x81Vr/rAEm/MjEpK/3PMjrvkjcuF8U74mIfmwJFkxJVE7rxv5z2eUunojti9/VBIuT8wBAAAAAHAWaWqP6/W7prXrt/M7uT8w7Xp97pN/ff09dgAAAAAABoVVXEnrpmnkjwxeOxlHDv7iDOx4zccNhjs9Cn/na35TCzzt1hzY++ie/NPDI20E9XcyHzp41BnU0uXcnlnt/T4fO5jqy9Z91ZO+aUmw7eCJIbcP/LDA77yVubpkt7JvzOX1/74XV65MHjHLJxT09GcIAAAAQA80iv5+7wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOrF68T6/cxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfFrwAAAP//CgoTZA==")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14.987432494s ago: executing program 9 (id=2909):
fsmount(0xffffffffffffffff, 0x0, 0x7)
socket$inet(0x2, 0x3, 0xff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
io_destroy(0x0)

14.977334823s ago: executing program 51 (id=2909):
fsmount(0xffffffffffffffff, 0x0, 0x7)
socket$inet(0x2, 0x3, 0xff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
io_destroy(0x0)

14.944381543s ago: executing program 7 (id=2912):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x83, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000380)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)

14.294600007s ago: executing program 7 (id=2928):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

14.294397706s ago: executing program 52 (id=2928):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

13.832032519s ago: executing program 6 (id=2940):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

13.786086019s ago: executing program 6 (id=2941):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

13.64168858s ago: executing program 6 (id=2944):
fsmount(0xffffffffffffffff, 0x0, 0x7)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
io_destroy(0x0)

13.577525471s ago: executing program 6 (id=2946):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x22e00a9, &(0x7f0000000000)=ANY=[])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd700000000000080d725dd6c20d3d97db8489150100fcff0500040001000000050002000a050000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c00020000697000a35087589c52134124e41c0c63d7a07dc5f730dbf6101d99f9da3220c26f"], 0x8)
close(r3)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16], 0x42, 0x304, &(0x7f0000000a40)="$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")
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

13.477668301s ago: executing program 6 (id=2948):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

12.976190024s ago: executing program 6 (id=2953):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ftruncate(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
semget(0x3, 0x2, 0x284)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, 0x0, 0x0, 0x0)
open(0x0, 0x14927e, 0x60)
open(0x0, 0x185102, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

12.976036724s ago: executing program 53 (id=2953):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
ftruncate(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
semget(0x3, 0x2, 0x284)
r2 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r2, 0x0, 0x0, 0x0)
open(0x0, 0x14927e, 0x60)
open(0x0, 0x185102, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

1.91519801s ago: executing program 4 (id=3174):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

1.822585511s ago: executing program 4 (id=3178):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})

1.761940551s ago: executing program 1 (id=3180):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

1.697865332s ago: executing program 8 (id=3181):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x8, 0x3)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@norecovery}, {@grpid}, {@init_itable}, {@abort}, {@noblock_validity}, {@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x577}}]}, 0x0, 0x618, &(0x7f0000000640)="$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")

1.675157022s ago: executing program 1 (id=3183):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

1.598693492s ago: executing program 1 (id=3184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1001, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c)

1.544159852s ago: executing program 1 (id=3185):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$eJzs3M1PXFUbAPBnZhha2vLCW2u12CpajcQPKPTDLtzUaOJCExNd1LhCoA12WkzBxDZE0QUuTRP3xqWJf4Eb68aoKxO3ujcmxLCxuhpzZ+6FKcwAAwNTnd8vue05cy4557n3nplnzp2ZADrWYPJPLuJQRPwSEX3V6t07DFb/u7M8P/HX8vxELsrl1//IVfb7c3l+Its1+7uD1Uq5vEG/i29FjJdKU9fT+sjc1XdHZm/cfHb66vjlqctT18bOnz9z+kT3ubGzLYmzNxnrwAczx4+9/OatVycu3nr7h6+S8R5K22vjaJXB6tGt64lWd9ZmvTXlXFcbB0JTChGRnK5iZf73RSF6Vtr64qWP2zo4YFeVy/nyvsbNC2XgPyxJ1IFOlL3QJ+9/s22PUo97wtKFWFnHuJNu1ZauyKf7FNP3SLthMCIuLvz9ebLFLq1DAADUun0hIp6pl//l4+j+1f3+l94b6o+I/0fE4Yi4LyKORMT9EXE0Ih6IiAeb7H/tHZL1+U+5b3uRbU2S/z2f3tu6O//Lsr/oL6S13kr8xdyl6dLUqfSYDEVxX1If3aCPb1/8+dNGbbX5X7Il/We5YDqO37vWLNBNjs+N7yTmWksfRQx01Ys/t5LzJvnxsYgY2GYf0099ebxR2+bxb6AFSXn5i4gnq+d/IdbEn8k1vD85+ty5sbMj+6M0dWokuyrW+/Gnxdca9b+j+Ftg6XY5DtS9/lfi78/tj5i9cfNK5X7tbPN9LP76ScP3NNu9/rtzb1TK3elj74/PzV0fjejOvbL+8bHVv83q2f7J9T90sv78PxyrR+KhiEgu4hMR8XBEPJKO/dGIeCwiTm4Q//cvPP5O8/FvsCrfQkn8k5ud/6g9/80XCle++7r5+DPJ+T9TKQ2lj2zl+W+rA9zJsQMAAIB/i3zlM/C5/PBKOZ8fHq5+hv9IHMiXZmbnnr408961yepn5fujmM9Wuvpq1kNH07XhrD62pn46XTf+rNBTqQ9PzJQm2x08dLiDDeZ/4rdCu0cH7Drf14LOZf5D5zL/oXOZ/9C5zH/oXPXm/4dtGAew9zZ5/e/Zq3EAe0/+D53L/IfOZf5DR2r43fj8jr7yr9CmwjfdO/uthq0XIn+PhLzrhWJE7EVfxajb1LXlH7PYZmFf3aZ2PzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0xj8BAAD//37l4X0=")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0)
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

1.333802963s ago: executing program 1 (id=3187):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f00000001c0), 0xff, 0x276, &(0x7f0000000840)="$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")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1f5)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000001140)='kmem_cache_free\x00'}, 0x18)
get_robust_list(0x0, &(0x7f0000000b00)=&(0x7f0000000ac0)={&(0x7f0000000780)={&(0x7f0000000740)}, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)}}, &(0x7f0000000b40)=0x18)

1.263737554s ago: executing program 0 (id=3188):
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@orlov}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@errors_remount}, {@nomblk_io_submit}, {@nogrpid, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000e18f56d1278e0d00001700"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
dup2(r1, r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39)
write$binfmt_script(r7, &(0x7f0000000080), 0x208e24b)
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xbe00}], 0x2, 0x1200, 0x41001, 0x3)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

1.188564564s ago: executing program 8 (id=3190):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

1.124111044s ago: executing program 8 (id=3192):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
flock(0xffffffffffffffff, 0xfb8cbf45da2632e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
syz_open_dev$sg(&(0x7f0000000580), 0xc, 0x80080)
gettid()
timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001ec0), &(0x7f00000008c0)="84285fa6eac57feec9a47cb1e6bbb6bb3a7129aeb112cdece55e60fe52b17fae187d87c8e8bfd623659c65dadc1fbd86b88b9fd8aecf340e25856c6b6652090595f2ec43245fe77239cd591be1838ddfd1b349d45241b6f44bb416de5fade2a15397dd85225f10d25b6766d2a3fc87faaf0d0420accd626d07cbaa814e8bc47c73fd43c0fa816bfc337fe13d0bf6386644af67056e3ac9786b69eb72380223639bb7ffac74527535f200b380e0ae98412ce5c3e2e168fb083877b068470a4e04782986b5b4fa707ab50777bcb09ca9d98a"}}, &(0x7f00000006c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

964.751285ms ago: executing program 4 (id=3195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

943.657335ms ago: executing program 4 (id=3197):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0)
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

559.488047ms ago: executing program 5 (id=3199):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f0000000940)={[{@nobarrier}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x14}}, {@journal_dev={'journal_dev', 0x3d, 0x489}}, {@errors_continue}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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")

501.098077ms ago: executing program 4 (id=3200):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2)
sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r3, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)

483.469007ms ago: executing program 5 (id=3201):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

431.751068ms ago: executing program 5 (id=3202):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

340.848968ms ago: executing program 1 (id=3203):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x90e, &(0x7f0000000100)={[{@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@grpjquota}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@errors_remount}, {@usrjquota}]}, 0x3, 0x44d, &(0x7f0000000280)="$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")
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
socket$inet6_udplite(0xa, 0x2, 0x88)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x1d, 0x3, 0x2)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa1081e, &(0x7f0000000200)={[{@dioread_nolock}]}, 0x1, 0x4f2, &(0x7f0000001240)="$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")

289.965739ms ago: executing program 0 (id=3204):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pS    \x00'}, 0x20)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1)

289.610499ms ago: executing program 4 (id=3205):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff})

217.461259ms ago: executing program 5 (id=3206):
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x2002402, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fstat(0xffffffffffffffff, 0x0)

217.031149ms ago: executing program 0 (id=3207):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x2)

216.093109ms ago: executing program 8 (id=3208):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@rand_addr, <r3=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', <r4=>0x0, 0x2f, 0xb, 0x2, 0x5, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x69}, 0x7800, 0x20, 0x80, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x2, 0xb6, 0xab, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x1c1, 0x10f}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000600)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x7c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8)
r7 = gettid()
tkill(r7, 0x12)
signalfd(r0, &(0x7f0000000040)={[0x100000001]}, 0x8)
rt_sigaction(0x12, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))

182.867749ms ago: executing program 0 (id=3209):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
rmdir(0x0)

141.27358ms ago: executing program 5 (id=3210):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
pivot_root(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0x8, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', &(0x7f0000000940), 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")

113.55221ms ago: executing program 0 (id=3211):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@grpquota}, {@data_err_ignore}, {@grpjquota, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}]}, 0x1, 0x455, &(0x7f0000000d80)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = memfd_create(&(0x7f0000000380)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xb6\xe2\v', 0x0)
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0/../file0'}, 0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

64.15936ms ago: executing program 0 (id=3212):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3c0)
symlink(0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="080000000800000000000600", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140))
ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000380)={0x1})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69)
close(r4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYBLOB="3d5a1d2a7031ee4d25e8a962cb3a17fdf9cd9311a537d185406d7f494960eceaae8bbd57746956da18eb069d3f4cbf81594e9de20a865aeeeac80341a036ddf6a07d7f3c9ad6fd1175465fdee7d59816a11eefac121e6c8eec7eba2c66b94e3f18987f78b6b1c19b4d696948c76d63ff612c4f18a972440871819d671a3d4536d6f92d810570e260d2b7fd5e5db6151f7c8f00843883e1d3645279eb64ddc6b2e01ecd255f5d252aa9668b5006d7fcc7f2b958fe39a0022566b6f073855910fa367cb05304a9d4c503b4c83f365ec2d176", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r5, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x1ff, 0xfffffff9)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/70, 0x46, 0x0, &(0x7f00000004c0)=""/78, 0x4e}}, 0x10)
openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x8000, 0x2}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20)

63.79796ms ago: executing program 8 (id=3213):
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

19.83298ms ago: executing program 8 (id=3214):
socket$pppoe(0x18, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@orlov}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@errors_remount}, {@nomblk_io_submit}, {@nogrpid, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.state\x00', 0x275a, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000e18f56d1278e0d00001700"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})
dup2(r1, r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r7 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39)
write$binfmt_script(r7, &(0x7f0000000080), 0x208e24b)
r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xbe00}], 0x2, 0x1200, 0x41001, 0x3)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

0s ago: executing program 5 (id=3215):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x28)
unlink(&(0x7f0000000180)='./file1\x00')
open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000900020073797a3200000000050004000000000013000300686173683a6e65742c696661636500000c000780050015000500000005f104000a0000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400682c1013950a5ae400008000a359", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x8, 0x4, 0x8, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x4}, 0x18)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
pause()
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
lsm_get_self_attr(0x69, &(0x7f0000000300)={0x0, 0x0, 0xd0, 0xb0, ""/176}, &(0x7f0000000100)=0xd0, 0x1)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0x200}, 0x18)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0/../file0\x00', r4, 0x4000, r2}, 0x18)
lsm_get_self_attr(0x67, &(0x7f0000000240)={0x0, 0x0, 0x91, 0x71, ""/113}, &(0x7f00000000c0)=0x91, 0x1)
lsm_get_self_attr(0x69, &(0x7f0000000140)={0x0, 0x0, 0xd0, 0xb0, ""/176}, &(0x7f0000000040)=0xd0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x405, 0x72bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x40044)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@private0, <r8=>0x0}, &(0x7f0000000900)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000085100000faffffff2d641800000000008500cd5d47f1f500006000000085000069867d530018520000100000000000000000000000cfe8deb2f67529ad44a1ed4472b58fabd267ebd6a153381e496cd8244590"], &(0x7f00000006c0)='syzkaller\x00', 0x7ff, 0x9b, &(0x7f0000000a40)=""/143, 0x41100, 0x0, '\x00', r8, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x4, 0x4, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000980)=[r2, r4], &(0x7f0000000a00)=[{0x3, 0x2, 0xc, 0xe}, {0x2, 0x1, 0x0, 0x8}, {0x2, 0x8, 0x40000005, 0x7}, {0x4, 0x5, 0x12, 0x3}], 0x10, 0x6, @void, @value}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000491}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x60004090)

kernel console output (not intermixed with test programs):

[   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  228.548656][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  228.558836][   T56] bond0 (unregistering): Released all slaves
[  228.607039][T15475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.621271][T15475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.648659][   T56] hsr_slave_0: left promiscuous mode
[  228.723678][   T56] hsr_slave_1: left promiscuous mode
[  228.794543][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.802087][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.872014][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.879499][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.902962][   T56] veth1_macvtap: left promiscuous mode
[  228.908529][   T56] veth0_macvtap: left promiscuous mode
[  228.976091][   T56] team0 (unregistering): Port device team_slave_1 removed
[  228.986707][   T56] team0 (unregistering): Port device team_slave_0 removed
[  229.065227][T15475] team0: Port device team_slave_0 added
[  229.076081][T15475] team0: Port device team_slave_1 added
[  229.106354][T15539] loop2: detected capacity change from 0 to 512
[  229.113225][T15539] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  229.137359][T15539] EXT4-fs: error: could not find journal device path
[  229.147780][T15475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.154827][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.180866][T15475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.192557][T15475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.199569][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.209999][T15540] loop2: detected capacity change from 0 to 512
[  229.225624][T15475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.277233][T15475] hsr_slave_0: entered promiscuous mode
[  229.292918][T15475] hsr_slave_1: entered promiscuous mode
[  229.299643][T15545] loop4: detected capacity change from 0 to 128
[  229.301058][T15540] EXT4-fs (loop2): too many log groups per flexible block group
[  229.313723][T15540] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  229.316411][T15546] loop6: detected capacity change from 0 to 512
[  229.321546][T15540] EXT4-fs (loop2): mount failed
[  229.327666][T15475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.336133][T15546] EXT4-fs: Ignoring removed orlov option
[  229.345258][T15546] EXT4-fs: Ignoring removed nomblk_io_submit option
[  229.347175][T15545] EXT4-fs (loop4): mounted filesystem 76b60900-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.351991][T15546] ext4: Unknown parameter 'nogrpid.nouid32'
[  229.370340][T15475] Cannot create hsr debugfs directory
[  229.379683][T15545] ext4 filesystem being mounted at /336/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.423410][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.433198][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.443720][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.452757][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.463091][T15546] pim6reg1: entered promiscuous mode
[  229.468474][T15546] pim6reg1: entered allmulticast mode
[  229.488694][T15546] loop6: detected capacity change from 0 to 128
[  229.536048][T15546] syz.6.2720: attempt to access beyond end of device
[  229.536048][T15546] loop6: rw=34817, sector=106, nr_sectors = 95 limit=128
[  229.567642][T15550] loop2: detected capacity change from 0 to 8192
[  229.764828][T15559] loop7: detected capacity change from 0 to 512
[  229.785825][T15475] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  229.786769][T15559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.805496][T15559] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.808774][T15475] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  229.824932][T15559] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #12: comm syz.7.2726: invalid size
[  229.826626][T15475] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  229.845794][T15475] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  229.854209][ T8101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.888202][T15475] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.901413][T15475] 8021q: adding VLAN 0 to HW filter on device team0
[  229.911845][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.918948][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.929841][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.936928][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.977554][ T8843] EXT4-fs (loop4): unmounting filesystem 76b60900-f6da-4727-8c75-0525a5b65a09.
[  230.015118][T15475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.188032][T15475] veth0_vlan: entered promiscuous mode
[  230.202171][T15475] veth1_vlan: entered promiscuous mode
[  230.217833][T15475] veth0_macvtap: entered promiscuous mode
[  230.225860][T15475] veth1_macvtap: entered promiscuous mode
[  230.237541][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.248038][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.257926][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.268484][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.278365][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.288828][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.421110][T15588] loop6: detected capacity change from 0 to 512
[  230.499192][T15588] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  230.552694][T15475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.598755][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.609272][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.616074][T15588] EXT4-fs (loop6): corrupt root inode, run e2fsck
[  230.619479][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.636372][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.646248][T15475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.656680][T15475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.673315][T15588] EXT4-fs (loop6): mount failed
[  230.673341][T15475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.700415][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2731'.
[  230.711632][T15475] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.720403][T15475] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.729178][T15475] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.737979][T15475] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.813311][T15607] loop6: detected capacity change from 0 to 512
[  230.822013][T15607] EXT4-fs: Ignoring removed orlov option
[  230.836648][T15607] EXT4-fs: Ignoring removed nomblk_io_submit option
[  230.843308][T15607] ext4: Unknown parameter 'nogrpid.nouid32'
[  230.872768][T15607] pim6reg1: entered promiscuous mode
[  230.878193][T15607] pim6reg1: entered allmulticast mode
[  230.893215][T15607] loop6: detected capacity change from 0 to 128
[  230.925969][T15607] syz.6.2735: attempt to access beyond end of device
[  230.925969][T15607] loop6: rw=34817, sector=106, nr_sectors = 95 limit=128
[  230.947561][T15614] loop4: detected capacity change from 0 to 128
[  230.970607][T15614] EXT4-fs (loop4): mounted filesystem 76b60900-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  230.983058][T15614] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  231.019568][T15614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.028066][T15614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.037937][T15614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.046578][T15614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.066530][T15621] FAULT_INJECTION: forcing a failure.
[  231.066530][T15621] name failslab, interval 1, probability 0, space 0, times 0
[  231.079310][T15621] CPU: 0 UID: 0 PID: 15621 Comm: syz.9.2739 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  231.091588][T15621] Tainted: [W]=WARN
[  231.095415][T15621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  231.105602][T15621] Call Trace:
[  231.108902][T15621]  <TASK>
[  231.111862][T15621]  dump_stack_lvl+0xf2/0x150
[  231.116598][T15621]  dump_stack+0x15/0x1a
[  231.120848][T15621]  should_fail_ex+0x223/0x230
[  231.125543][T15621]  should_failslab+0x8f/0xb0
[  231.130162][T15621]  __kmalloc_node_noprof+0xad/0x410
[  231.135534][T15621]  ? __kvmalloc_node_noprof+0x72/0x170
[  231.141056][T15621]  __kvmalloc_node_noprof+0x72/0x170
[  231.146459][T15621]  alloc_fdtable+0xa5/0x1b0
[  231.151052][T15621]  dup_fd+0x60d/0x6a0
[  231.155111][T15621]  copy_files+0x98/0xe0
[  231.159350][T15621]  copy_process+0xcbf/0x1f90
[  231.164120][T15621]  kernel_clone+0x167/0x5e0
[  231.165748][T15624] SELinux:  Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped).
[  231.168710][T15621]  ? vfs_write+0x596/0x920
[  231.182567][T15621]  __x64_sys_clone+0xe8/0x120
[  231.187285][T15621]  x64_sys_call+0x2d7e/0x2dc0
[  231.191966][T15621]  do_syscall_64+0xc9/0x1c0
[  231.196472][T15621]  ? clear_bhb_loop+0x55/0xb0
[  231.201261][T15621]  ? clear_bhb_loop+0x55/0xb0
[  231.205976][T15621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.211893][T15621] RIP: 0033:0x7f3beef6ff19
[  231.216341][T15621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.235970][T15621] RSP: 002b:00007f3bed5e7008 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  231.244474][T15621] RAX: ffffffffffffffda RBX: 00007f3bef135fa0 RCX: 00007f3beef6ff19
[  231.252540][T15621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  231.260524][T15621] RBP: 00007f3bed5e70a0 R08: 0000000000000000 R09: 0000000000000000
[  231.268595][T15621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  231.276611][T15621] R13: 0000000000000000 R14: 00007f3bef135fa0 R15: 00007ffc821e2248
[  231.284592][T15621]  </TASK>
[  231.411310][T15630] loop2: detected capacity change from 0 to 512
[  231.418215][T15630] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  231.442096][T15630] EXT4-fs: error: could not find journal device path
[  231.443005][T15628] loop9: detected capacity change from 0 to 8192
[  231.473161][T15630] loop2: detected capacity change from 0 to 512
[  231.486838][T15630] EXT4-fs (loop2): too many log groups per flexible block group
[  231.494582][T15630] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  231.501462][T15630] EXT4-fs (loop2): mount failed
[  231.700820][ T8843] EXT4-fs (loop4): unmounting filesystem 76b60900-f6da-4727-8c75-0525a5b65a09.
[  232.137920][T15658] loop4: detected capacity change from 0 to 512
[  232.156559][T15658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.169303][T15658] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.183824][T15658] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2751: invalid size
[  232.205692][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.289898][T15667] loop9: detected capacity change from 0 to 1024
[  232.309145][T15667] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.322337][T15667] ext4 filesystem being mounted at /7/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.355297][T15676] loop4: detected capacity change from 0 to 512
[  232.362191][T15676] EXT4-fs: Ignoring removed orlov option
[  232.368325][T15475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.368671][T15676] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.384224][T15676] ext4: Unknown parameter 'nogrpid.nouid32'
[  232.398276][T15676] pim6reg1: entered promiscuous mode
[  232.403627][T15676] pim6reg1: entered allmulticast mode
[  232.437659][T15680] loop2: detected capacity change from 0 to 512
[  232.444350][T15680] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  232.468279][T15680] EXT4-fs: error: could not find journal device path
[  232.543300][T15680] loop2: detected capacity change from 0 to 512
[  232.577076][T15680] EXT4-fs (loop2): too many log groups per flexible block group
[  232.584896][T15680] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  232.586429][T15690] loop6: detected capacity change from 0 to 512
[  232.594642][T15680] EXT4-fs (loop2): mount failed
[  232.607067][T15690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.620126][T15690] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.636894][T15690] EXT4-fs error (device loop6): ext4_empty_dir:3094: inode #12: comm syz.6.2763: invalid size
[  232.658086][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.718942][T15695] loop6: detected capacity change from 0 to 8192
[  233.002259][   T29] kauditd_printk_skb: 562 callbacks suppressed
[  233.002278][   T29] audit: type=1400 audit(2000000110.856:18005): avc:  denied  { module_request } for  pid=15708 comm="syz.7.2770" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  233.030802][   T29] audit: type=1400 audit(2000000110.876:18006): avc:  denied  { mount } for  pid=15708 comm="syz.7.2770" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  233.064922][T15709] loop7: detected capacity change from 0 to 1024
[  233.073602][   T29] audit: type=1400 audit(2000000110.926:18007): avc:  denied  { mounton } for  pid=15708 comm="syz.7.2770" path="/412/file0/file1" dev="bpf" ino=39663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1
[  233.116657][T15709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.128913][T15709] ext4 filesystem being mounted at /412/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.138632][T15712] loop4: detected capacity change from 0 to 8192
[  233.146447][   T29] audit: type=1400 audit(2000000111.006:18008): avc:  denied  { add_name } for  pid=15708 comm="syz.7.2770" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  233.167523][   T29] audit: type=1400 audit(2000000111.006:18009): avc:  denied  { create } for  pid=15708 comm="syz.7.2770" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  233.188050][   T29] audit: type=1400 audit(2000000111.006:18010): avc:  denied  { read write } for  pid=15708 comm="syz.7.2770" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  233.210977][   T29] audit: type=1400 audit(2000000111.006:18011): avc:  denied  { open } for  pid=15708 comm="syz.7.2770" path="/412/file0/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  233.235205][   T29] audit: type=1400 audit(2000000111.006:18012): avc:  denied  { read } for  pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  233.238127][T15712] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.257372][   T29] audit: type=1400 audit(2000000111.006:18013): avc:  denied  { search } for  pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  233.257406][   T29] audit: type=1400 audit(2000000111.006:18014): avc:  denied  { open } for  pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  233.280784][T15712] FAULT_INJECTION: forcing a failure.
[  233.280784][T15712] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  233.325888][T15712] CPU: 1 UID: 0 PID: 15712 Comm: syz.4.2771 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  233.338232][T15712] Tainted: [W]=WARN
[  233.342074][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  233.352268][T15712] Call Trace:
[  233.355548][T15712]  <TASK>
[  233.358609][T15712]  dump_stack_lvl+0xf2/0x150
[  233.363218][T15712]  dump_stack+0x15/0x1a
[  233.367884][T15712]  should_fail_ex+0x223/0x230
[  233.372609][T15712]  should_fail_alloc_page+0xfd/0x110
[  233.377964][T15712]  __alloc_pages_noprof+0x109/0x340
[  233.383247][T15712]  alloc_pages_mpol_noprof+0xb1/0x1e0
[  233.388662][T15712]  folio_alloc_noprof+0xee/0x130
[  233.393693][T15712]  filemap_alloc_folio_noprof+0x69/0x220
[  233.399342][T15712]  __filemap_get_folio+0x298/0x5b0
[  233.404480][T15712]  ? mark_buffer_dirty+0x107/0x230
[  233.409647][T15712]  cont_write_begin+0x512/0x860
[  233.414513][T15712]  fat_write_begin+0x51/0xe0
[  233.419112][T15712]  ? __pfx_fat_get_block+0x10/0x10
[  233.424356][T15712]  cont_write_begin+0x18b/0x860
[  233.429258][T15712]  fat_write_begin+0x51/0xe0
[  233.433904][T15712]  ? __pfx_fat_get_block+0x10/0x10
[  233.439039][T15712]  generic_cont_expand_simple+0xaa/0x150
[  233.444817][T15712]  fat_cont_expand+0x3a/0x160
[  233.449558][T15712]  fat_setattr+0x2aa/0x840
[  233.454026][T15712]  ? security_inode_setattr+0x5f/0xd0
[  233.459490][T15712]  ? __pfx_fat_setattr+0x10/0x10
[  233.464439][T15712]  notify_change+0x85c/0x8e0
[  233.469056][T15712]  ? security_inode_need_killpriv+0x1c/0x70
[  233.474964][T15712]  do_ftruncate+0x3cf/0x460
[  233.479526][T15712]  __x64_sys_ftruncate+0x67/0xc0
[  233.484500][T15712]  x64_sys_call+0x9d9/0x2dc0
[  233.489237][T15712]  do_syscall_64+0xc9/0x1c0
[  233.493820][T15712]  ? clear_bhb_loop+0x55/0xb0
[  233.498506][T15712]  ? clear_bhb_loop+0x55/0xb0
[  233.503204][T15712]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.509159][T15712] RIP: 0033:0x7faf5b35ff19
[  233.513586][T15712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.533283][T15712] RSP: 002b:00007faf599d7058 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  233.541760][T15712] RAX: ffffffffffffffda RBX: 00007faf5b525fa0 RCX: 00007faf5b35ff19
[  233.549734][T15712] RDX: 0000000000000000 RSI: 000000000100c17a RDI: 0000000000000007
[  233.557743][T15712] RBP: 00007faf599d70a0 R08: 0000000000000000 R09: 0000000000000000
[  233.565715][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  233.573704][T15712] R13: 0000000000000000 R14: 00007faf5b525fa0 R15: 00007ffc7a12b8d8
[  233.581686][T15712]  </TASK>
[  233.589401][ T8101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.592922][T15712] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  233.607080][T15712] FAT-fs (loop4): Filesystem has been set read-only
[  233.640841][T15720] loop9: detected capacity change from 0 to 512
[  233.671762][T15720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.687857][T15718] pim6reg1: entered promiscuous mode
[  233.693277][T15718] pim6reg1: entered allmulticast mode
[  233.752506][T15720] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  233.793531][T15720] EXT4-fs error (device loop9): ext4_empty_dir:3094: inode #12: comm syz.9.2774: invalid size
[  233.798469][T15731] loop2: detected capacity change from 0 to 512
[  233.810830][T15731] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  233.834668][T15731] EXT4-fs: error: could not find journal device path
[  233.844766][T15475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.106387][T15731] loop2: detected capacity change from 0 to 512
[  234.162638][T15735] loop4: detected capacity change from 0 to 1024
[  234.224941][T15735] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  234.241083][T15735] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  234.251227][T15731] EXT4-fs (loop2): too many log groups per flexible block group
[  234.259045][T15731] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  234.261679][T15735] EXT4-fs (loop4): orphan cleanup on readonly fs
[  234.265960][T15731] EXT4-fs (loop2): mount failed
[  234.278014][T15735] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.306828][T15735] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.2780: mark_inode_dirty error
[  234.335997][T15735] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2780: Invalid block bitmap block 3 in block_group 0
[  234.359427][T15735] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2780: Invalid block bitmap block 3 in block_group 0
[  234.362151][T15746] loop7: detected capacity change from 0 to 512
[  234.373146][T15735] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2780: Invalid block bitmap block 3 in block_group 0
[  234.393610][T15735] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.414015][T15735] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.2780: mark_inode_dirty error
[  234.427942][T15746] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  234.436201][T15746] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  234.449579][T15735] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm syz.4.2780: lblock 6 mapped to illegal pblock 1 (length 1)
[  234.457515][T15748] loop9: detected capacity change from 0 to 8192
[  234.470955][T15746] EXT4-fs (loop7): 1 truncate cleaned up
[  234.477380][T15746] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.487419][T15735] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.2780: lblock 0 mapped to illegal pblock 48 (length 1)
[  234.537800][T15735] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2780: Failed to acquire dquot type 0
[  234.565495][T15735] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 49: comm syz.4.2780: lblock 1 mapped to illegal pblock 49 (length 1)
[  234.578097][ T8101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.595140][T15735] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2780: Failed to acquire dquot type 0
[  234.610125][T15760] loop6: detected capacity change from 0 to 1024
[  234.615060][T15735] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.618887][T15760] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  234.640640][T15735] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #15: comm syz.4.2780: mark_inode_dirty error
[  234.647924][T15758] loop2: detected capacity change from 0 to 1024
[  234.652201][T15760] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  234.667716][T15760] EXT4-fs (loop6): orphan cleanup on readonly fs
[  234.674120][T15735] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  234.688024][T15735] EXT4-fs (loop4): 1 orphan inode deleted
[  234.693796][T15760] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.694663][T15735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  234.703729][T15760] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2789: mark_inode_dirty error
[  234.727801][T15758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.741218][T15760] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2789: Invalid block bitmap block 3 in block_group 0
[  234.755961][T15760] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2789: Invalid block bitmap block 3 in block_group 0
[  234.756006][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.770547][T15760] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2789: Invalid block bitmap block 3 in block_group 0
[  234.781248][T15758] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  234.795825][T15760] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.806392][T15758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2788'.
[  234.837310][T13986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.840100][T15760] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2789: mark_inode_dirty error
[  234.858861][T15760] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.2789: lblock 6 mapped to illegal pblock 1 (length 1)
[  234.873365][T15760] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.2789: lblock 0 mapped to illegal pblock 48 (length 1)
[  234.888156][T15760] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2789: Failed to acquire dquot type 0
[  234.904380][T15760] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.2789: lblock 1 mapped to illegal pblock 49 (length 1)
[  234.919184][T15760] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2789: Failed to acquire dquot type 0
[  234.933530][T15760] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  234.944728][T15760] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.2789: mark_inode_dirty error
[  234.960100][T15760] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  234.970838][T15760] EXT4-fs (loop6): 1 orphan inode deleted
[  234.978576][T15760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  234.995282][T15778] loop4: detected capacity change from 0 to 512
[  235.019955][T15778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.033436][T15778] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.060861][T15778] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2795: invalid size
[  235.064703][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.093351][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.125845][T15788] loop2: detected capacity change from 0 to 512
[  235.146303][T15788] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2800: bg 0: block 248: padding at end of block bitmap is not set
[  235.163420][T15788] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2800: Failed to acquire dquot type 1
[  235.176164][T15788] EXT4-fs (loop2): 1 truncate cleaned up
[  235.184926][T15788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.198282][T15788] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.275305][T13986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.291352][T15805] loop9: detected capacity change from 0 to 1024
[  235.310149][T15805] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  235.337654][T15805] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  235.361144][T15805] EXT4-fs (loop9): orphan cleanup on readonly fs
[  235.371924][T15805] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  235.373380][T15812] loop2: detected capacity change from 0 to 512
[  235.382396][T15805] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #3: comm syz.9.2805: mark_inode_dirty error
[  235.406163][T15805] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2805: Invalid block bitmap block 3 in block_group 0
[  235.425372][T15805] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2805: Invalid block bitmap block 3 in block_group 0
[  235.451129][T15805] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.2805: Invalid block bitmap block 3 in block_group 0
[  235.473143][T15805] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  235.474062][T15812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.484998][T15805] EXT4-fs error (device loop9): ext4_dirty_inode:6041: inode #3: comm syz.9.2805: mark_inode_dirty error
[  235.497003][T15812] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.506886][T15805] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 1: comm syz.9.2805: lblock 6 mapped to illegal pblock 1 (length 1)
[  235.551564][T15805] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 48: comm syz.9.2805: lblock 0 mapped to illegal pblock 48 (length 1)
[  235.572036][T15805] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.2805: Failed to acquire dquot type 0
[  235.589960][T15805] EXT4-fs error (device loop9): ext4_map_blocks:671: inode #3: block 49: comm syz.9.2805: lblock 1 mapped to illegal pblock 49 (length 1)
[  235.605333][T15812] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz.2.2810: invalid size
[  235.624431][T15805] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.2805: Failed to acquire dquot type 0
[  235.630438][T15827] loop7: detected capacity change from 0 to 8192
[  235.645741][T15805] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  235.672387][T15805] EXT4-fs error (device loop9): ext4_evict_inode:256: inode #15: comm syz.9.2805: mark_inode_dirty error
[  235.683583][T15833] loop6: detected capacity change from 0 to 512
[  235.702301][T15805] EXT4-fs warning (device loop9): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  235.716967][T13986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.732783][T15805] EXT4-fs (loop9): 1 orphan inode deleted
[  235.739408][T15805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  235.740317][T15833] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2819: bg 0: block 248: padding at end of block bitmap is not set
[  235.796494][T15843] loop2: detected capacity change from 0 to 512
[  235.803147][T15843] EXT4-fs: Ignoring removed orlov option
[  235.808942][T15843] EXT4-fs: Ignoring removed nomblk_io_submit option
[  235.815804][T15843] ext4: Unknown parameter 'nogrpid.nouid32'
[  235.819602][T15833] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2819: Failed to acquire dquot type 1
[  235.844988][T15475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.858478][T15833] EXT4-fs (loop6): 1 truncate cleaned up
[  235.864660][T15833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.880035][T15833] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.975961][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.093045][T15870] loop6: detected capacity change from 0 to 1024
[  236.100302][T15870] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  236.115545][T15870] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  236.125052][T15870] EXT4-fs (loop6): orphan cleanup on readonly fs
[  236.132155][T15870] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.143806][T15870] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2834: mark_inode_dirty error
[  236.157187][T15870] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2834: Invalid block bitmap block 3 in block_group 0
[  236.170936][T15870] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2834: Invalid block bitmap block 3 in block_group 0
[  236.184714][T15870] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2834: Invalid block bitmap block 3 in block_group 0
[  236.198566][T15870] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.208240][T15870] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2834: mark_inode_dirty error
[  236.220349][T15870] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.2834: lblock 6 mapped to illegal pblock 1 (length 1)
[  236.234628][T15870] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.2834: lblock 0 mapped to illegal pblock 48 (length 1)
[  236.248972][T15870] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2834: Failed to acquire dquot type 0
[  236.260600][T15870] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.2834: lblock 1 mapped to illegal pblock 49 (length 1)
[  236.275258][T15870] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2834: Failed to acquire dquot type 0
[  236.286960][T15870] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.296578][T15870] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.2834: mark_inode_dirty error
[  236.308167][T15870] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  236.318395][T15870] EXT4-fs (loop6): 1 orphan inode deleted
[  236.324586][T15870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  236.346830][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.410336][T15882] loop6: detected capacity change from 0 to 1024
[  236.424592][T15882] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  236.440638][T15882] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  236.448953][T15882] EXT4-fs (loop6): orphan cleanup on readonly fs
[  236.464725][T15882] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.475672][T15882] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2839: mark_inode_dirty error
[  236.492605][T15882] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2839: Invalid block bitmap block 3 in block_group 0
[  236.515093][T15882] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2839: Invalid block bitmap block 3 in block_group 0
[  236.530113][T15882] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2839: Invalid block bitmap block 3 in block_group 0
[  236.558778][T15882] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.568457][T15882] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2839: mark_inode_dirty error
[  236.583157][T15882] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.2839: lblock 6 mapped to illegal pblock 1 (length 1)
[  236.599588][T15882] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.2839: lblock 0 mapped to illegal pblock 48 (length 1)
[  236.614062][T15882] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2839: Failed to acquire dquot type 0
[  236.627820][T15882] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.2839: lblock 1 mapped to illegal pblock 49 (length 1)
[  236.642367][T15882] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2839: Failed to acquire dquot type 0
[  236.653887][T15882] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.668045][T15882] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.2839: mark_inode_dirty error
[  236.679747][T15882] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  236.691350][T15882] EXT4-fs (loop6): 1 orphan inode deleted
[  236.697878][T15882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  236.729726][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.836481][T15919] loop6: detected capacity change from 0 to 512
[  236.843154][T15919] EXT4-fs: Ignoring removed orlov option
[  236.849152][T15919] EXT4-fs: Ignoring removed nomblk_io_submit option
[  236.855840][T15919] ext4: Unknown parameter 'nogrpid.nouid32'
[  236.871538][T15919] loop6: detected capacity change from 0 to 128
[  236.912602][T15919] syz.6.2856: attempt to access beyond end of device
[  236.912602][T15919] loop6: rw=34817, sector=106, nr_sectors = 95 limit=128
[  236.941561][T15926] loop2: detected capacity change from 0 to 1024
[  236.950086][T15926] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  236.962508][T15926] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  236.970709][T15926] EXT4-fs (loop2): orphan cleanup on readonly fs
[  236.977785][T15926] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  236.987403][T15926] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #3: comm syz.2.2859: mark_inode_dirty error
[  236.998984][T15926] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2859: Invalid block bitmap block 3 in block_group 0
[  237.013190][T15926] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2859: Invalid block bitmap block 3 in block_group 0
[  237.027266][T15926] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2859: Invalid block bitmap block 3 in block_group 0
[  237.045379][T15926] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  237.051031][T15934] loop9: detected capacity change from 0 to 512
[  237.055146][T15926] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #3: comm syz.2.2859: mark_inode_dirty error
[  237.074127][T15926] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm syz.2.2859: lblock 6 mapped to illegal pblock 1 (length 1)
[  237.092184][T15926] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.2859: lblock 0 mapped to illegal pblock 48 (length 1)
[  237.094306][T15934] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2
[  237.112070][T15938] loop4: detected capacity change from 0 to 512
[  237.115817][T15934] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2
[  237.120697][T15926] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2859: Failed to acquire dquot type 0
[  237.129425][T15934] EXT4-fs (loop9): 1 truncate cleaned up
[  237.147448][T15934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.148836][T15926] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 49: comm syz.2.2859: lblock 1 mapped to illegal pblock 49 (length 1)
[  237.176225][T15926] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.2859: Failed to acquire dquot type 0
[  237.188204][T15926] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  237.189383][T15938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.199421][T15475] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.210366][T15926] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #15: comm syz.2.2859: mark_inode_dirty error
[  237.219217][T15938] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.231467][T15926] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  237.248483][T15938] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2863: invalid size
[  237.251132][T15926] EXT4-fs (loop2): 1 orphan inode deleted
[  237.267624][T15926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  237.298142][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.327818][T13986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.357821][T15946] loop4: detected capacity change from 0 to 512
[  237.378140][T15946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.398350][T15946] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.436577][T15958] loop2: detected capacity change from 0 to 512
[  237.443338][T15958] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  237.467194][T15958] EXT4-fs: error: could not find journal device path
[  237.494628][T15946] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2865: invalid size
[  237.508283][T15958] loop2: detected capacity change from 0 to 512
[  237.532790][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.545231][T15958] EXT4-fs (loop2): too many log groups per flexible block group
[  237.552995][T15958] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  237.560103][T15958] EXT4-fs (loop2): mount failed
[  237.592043][T15966] loop4: detected capacity change from 0 to 1024
[  237.633846][T15972] loop6: detected capacity change from 0 to 1024
[  237.645380][T15972] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.660987][T15966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.673931][T15972] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  237.681587][T15966] ext4 filesystem being mounted at /374/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.693673][T15972] EXT4-fs (loop6): orphan cleanup on readonly fs
[  237.723346][T15972] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  237.731364][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.757331][T15972] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2876: mark_inode_dirty error
[  237.768981][T15972] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2876: Invalid block bitmap block 3 in block_group 0
[  237.785579][T15987] loop7: detected capacity change from 0 to 512
[  237.795911][T15972] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2876: Invalid block bitmap block 3 in block_group 0
[  237.811856][T15987] EXT4-fs: Ignoring removed orlov option
[  237.818540][T15972] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2876: Invalid block bitmap block 3 in block_group 0
[  237.832307][T15972] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  237.833460][T15989] loop4: detected capacity change from 0 to 512
[  237.843106][T15972] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #3: comm syz.6.2876: mark_inode_dirty error
[  237.861972][T15987] EXT4-fs: Ignoring removed nomblk_io_submit option
[  237.863031][T15989] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  237.868683][T15987] ext4: Unknown parameter 'nogrpid.nouid32'
[  237.892366][T15989] EXT4-fs: error: could not find journal device path
[  237.906361][T15972] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm syz.6.2876: lblock 6 mapped to illegal pblock 1 (length 1)
[  237.914505][T15991] loop2: detected capacity change from 0 to 512
[  237.937236][T15972] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.2876: lblock 0 mapped to illegal pblock 48 (length 1)
[  237.938108][T15987] loop7: detected capacity change from 0 to 128
[  237.960041][T15972] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2876: Failed to acquire dquot type 0
[  237.972857][T15989] loop4: detected capacity change from 0 to 512
[  237.983956][T15991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.000917][T15987] syz.7.2883: attempt to access beyond end of device
[  238.000917][T15987] loop7: rw=34817, sector=106, nr_sectors = 95 limit=128
[  238.015641][T15991] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.016110][   T29] kauditd_printk_skb: 515 callbacks suppressed
[  238.016127][   T29] audit: type=1326 audit(2000000115.856:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf5b35eb7a code=0x7ffc0000
[  238.028207][T15972] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 49: comm syz.6.2876: lblock 1 mapped to illegal pblock 49 (length 1)
[  238.032257][   T29] audit: type=1326 audit(2000000115.856:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf5b35eb7a code=0x7ffc0000
[  238.057355][T15972] Quota error (device loop6): do_insert_tree: Can't read tree quota block 1
[  238.069844][   T29] audit: type=1326 audit(2000000115.856:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faf5b35e787 code=0x7ffc0000
[  238.093300][T15972] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  238.093328][T15972] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2876: Failed to acquire dquot type 0
[  238.102019][   T29] audit: type=1326 audit(2000000115.856:18489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faf5b3616ba code=0x7ffc0000
[  238.171210][T15972] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  238.180934][T15989] EXT4-fs (loop4): too many log groups per flexible block group
[  238.181000][T15972] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #15: comm syz.6.2876: mark_inode_dirty error
[  238.188676][T15989] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  238.208334][T15991] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz.2.2884: invalid size
[  238.209768][T15989] EXT4-fs (loop4): mount failed
[  238.218695][T15972] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  238.233981][T15972] EXT4-fs (loop6): 1 orphan inode deleted
[  238.240261][T15972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  238.267631][T13986] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.272720][   T29] audit: type=1326 audit(2000000116.126:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf5b35e880 code=0x7ffc0000
[  238.300291][   T29] audit: type=1326 audit(2000000116.126:18491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf5b35fb1b code=0x7ffc0000
[  238.323845][   T29] audit: type=1326 audit(2000000116.126:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7faf5b35eb7a code=0x7ffc0000
[  238.348580][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.373566][   T29] audit: type=1326 audit(2000000116.136:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.2880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  238.412901][T15999] tmpfs: Unknown parameter 'kfree'
[  238.427722][T16003] loop9: detected capacity change from 0 to 512
[  238.435735][T15999] loop2: detected capacity change from 0 to 128
[  238.451809][T15999] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  238.454900][T16003] EXT4-fs: Ignoring removed nobh option
[  238.466588][T16003] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.473078][T16003] ext4: Unknown parameter 'euid>00000000000000000000'
[  238.540625][T16012] loop6: detected capacity change from 0 to 512
[  238.575721][T16016] tmpfs: Unknown parameter 'kfree'
[  238.582236][T16012] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2891: bg 0: block 248: padding at end of block bitmap is not set
[  238.586029][T16020] loop4: detected capacity change from 0 to 512
[  238.600474][T16012] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2891: Failed to acquire dquot type 1
[  238.619637][T16012] EXT4-fs (loop6): 1 truncate cleaned up
[  238.619923][T16016] loop9: detected capacity change from 0 to 128
[  238.625827][T16012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.632213][T16016] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  238.648694][T16012] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  238.676449][T16020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.689682][ T7360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.690839][T16020] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.720889][T16020] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2896: invalid size
[  238.752975][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.787157][T13908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.897152][T13908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.914039][T16042] loop4: detected capacity change from 0 to 512
[  238.923127][T16045] loop6: detected capacity change from 0 to 512
[  238.932639][T16042] EXT4-fs: Ignoring removed nobh option
[  238.938353][T16042] EXT4-fs: Ignoring removed mblk_io_submit option
[  238.944930][T16042] ext4: Unknown parameter 'euid>00000000000000000000'
[  238.945372][T16048] tmpfs: Unknown parameter 'kfree'
[  238.960133][T16048] loop7: detected capacity change from 0 to 128
[  238.967522][T16045] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  238.991522][T16045] EXT4-fs: error: could not find journal device path
[  238.999821][T13908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.005856][T16048] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  239.047545][T13908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.082511][T16045] loop6: detected capacity change from 0 to 512
[  239.117191][T16045] EXT4-fs (loop6): too many log groups per flexible block group
[  239.125095][T16045] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  239.135147][T16045] EXT4-fs (loop6): mount failed
[  239.214675][T13908] bridge_slave_1: left allmulticast mode
[  239.220357][T13908] bridge_slave_1: left promiscuous mode
[  239.226206][T13908] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.235740][T13908] bridge_slave_0: left allmulticast mode
[  239.241474][T13908] bridge_slave_0: left promiscuous mode
[  239.247189][T13908] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.489255][T13908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.500556][T13908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.511958][T13908] bond0 (unregistering): Released all slaves
[  239.580582][T13908] hsr_slave_0: left promiscuous mode
[  239.586724][T13908] hsr_slave_1: left promiscuous mode
[  239.602382][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.609862][T13908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.618237][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.625902][T13908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.657620][T13908] veth1_macvtap: left promiscuous mode
[  239.663283][T13908] veth0_macvtap: left promiscuous mode
[  239.668926][T13908] veth1_vlan: left promiscuous mode
[  239.674618][T13908] veth0_vlan: left promiscuous mode
[  239.678711][T16094] loop4: detected capacity change from 0 to 512
[  239.691810][T16094] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  239.715789][T16094] EXT4-fs: error: could not find journal device path
[  239.772321][T13908] team0 (unregistering): Port device team_slave_1 removed
[  239.782930][T13908] team0 (unregistering): Port device team_slave_0 removed
[  239.860279][T16033] chnl_net:caif_netlink_parms(): no params data found
[  239.989128][T16124] loop4: detected capacity change from 0 to 512
[  240.014252][T16033] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.021511][T16033] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.035537][T16124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.038574][T16033] bridge_slave_0: entered allmulticast mode
[  240.050566][T16124] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.057464][T16033] bridge_slave_0: entered promiscuous mode
[  240.070733][T16124] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2936: invalid size
[  240.072073][T16033] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.088250][T16033] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.095565][T16033] bridge_slave_1: entered allmulticast mode
[  240.102232][T16033] bridge_slave_1: entered promiscuous mode
[  240.112157][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.142576][T16133] loop4: detected capacity change from 0 to 512
[  240.152744][T16133] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  240.176712][T16133] EXT4-fs: error: could not find journal device path
[  240.203067][T16133] loop4: detected capacity change from 0 to 512
[  240.208616][T16033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.229162][T16133] EXT4-fs (loop4): too many log groups per flexible block group
[  240.236890][T16133] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  240.248067][T16133] EXT4-fs (loop4): mount failed
[  240.255660][T16033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.324526][T16062] chnl_net:caif_netlink_parms(): no params data found
[  240.344293][T16033] team0: Port device team_slave_0 added
[  240.353310][T16033] team0: Port device team_slave_1 added
[  240.389461][T16033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  240.396505][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.422518][T16033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  240.456630][T16033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  240.463611][T16033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  240.489676][T16033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  240.513855][T16105] chnl_net:caif_netlink_parms(): no params data found
[  240.531444][T13908] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.543873][T16159] tmpfs: Unknown parameter 'kfree'
[  240.552650][T16159] loop6: detected capacity change from 0 to 128
[  240.560373][T16159] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  240.577858][T16062] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.585041][T16062] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.592472][T16062] bridge_slave_0: entered allmulticast mode
[  240.599409][T16062] bridge_slave_0: entered promiscuous mode
[  240.609846][T13908] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.648703][T16062] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.655932][T16062] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.670100][T16062] bridge_slave_1: entered allmulticast mode
[  240.686590][T16062] bridge_slave_1: entered promiscuous mode
[  240.713163][T16033] hsr_slave_0: entered promiscuous mode
[  240.723818][T16033] hsr_slave_1: entered promiscuous mode
[  240.732320][T16033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.743340][T16033] Cannot create hsr debugfs directory
[  240.756284][T16169] loop4: detected capacity change from 0 to 512
[  240.775282][T13908] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.811226][T16169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.824409][T16169] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.838961][T16169] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.2950: invalid size
[  240.840364][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.865396][ T8843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.865711][T16105] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.881463][T16105] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.888629][T16105] bridge_slave_0: entered allmulticast mode
[  240.895111][T16105] bridge_slave_0: entered promiscuous mode
[  240.903732][T13908] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.920579][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  240.929772][T16105] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.936980][T16105] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.944327][T16105] bridge_slave_1: entered allmulticast mode
[  240.950762][T16105] bridge_slave_1: entered promiscuous mode
[  240.992489][T16105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.002380][T16062] team0: Port device team_slave_0 added
[  241.002961][T16177] loop4: detected capacity change from 0 to 128
[  241.015474][T16062] team0: Port device team_slave_1 added
[  241.030909][T16105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.046311][T16177] EXT4-fs (loop4): mounted filesystem 76b60900-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  241.067801][T16177] ext4 filesystem being mounted at /404/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  241.101234][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.107747][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.108225][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.117719][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.142614][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.163051][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.179881][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.208390][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.215398][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.241432][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.252294][T13908] bridge_slave_1: left allmulticast mode
[  241.258059][T13908] bridge_slave_1: left promiscuous mode
[  241.263752][T13908] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.272182][T13908] bridge_slave_0: left allmulticast mode
[  241.277883][T13908] bridge_slave_0: left promiscuous mode
[  241.283476][T13908] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.436232][T13908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.446042][T13908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.455813][T13908] bond0 (unregistering): Released all slaves
[  241.480554][T16105] team0: Port device team_slave_0 added
[  241.503379][T13908] hsr_slave_0: left promiscuous mode
[  241.509343][T13908] hsr_slave_1: left promiscuous mode
[  241.515318][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.522781][T13908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.530485][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.537945][T13908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.546796][T13908] veth1_macvtap: left promiscuous mode
[  241.552269][T13908] veth0_macvtap: left promiscuous mode
[  241.557912][T13908] veth1_vlan: left promiscuous mode
[  241.563169][T13908] veth0_vlan: left promiscuous mode
[  241.622337][T13908] team0 (unregistering): Port device team_slave_1 removed
[  241.632249][T13908] team0 (unregistering): Port device team_slave_0 removed
[  241.661933][T16105] team0: Port device team_slave_1 added
[  241.691081][T16062] hsr_slave_0: entered promiscuous mode
[  241.699466][T16062] hsr_slave_1: entered promiscuous mode
[  241.706365][T16062] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.714530][T16062] Cannot create hsr debugfs directory
[  241.715226][ T8843] EXT4-fs (loop4): unmounting filesystem 76b60900-f6da-4727-8c75-0525a5b65a09.
[  241.735624][T16105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.742592][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.768662][T16105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.780275][T16105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.787316][T16105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.813261][T16105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  241.827665][T16192] tmpfs: Unknown parameter 'kfree'
[  241.870345][T16105] hsr_slave_0: entered promiscuous mode
[  241.876492][T16105] hsr_slave_1: entered promiscuous mode
[  241.882330][T16105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  241.890234][T16105] Cannot create hsr debugfs directory
[  241.990691][T16199] loop4: detected capacity change from 0 to 1024
[  241.999138][T16199] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  242.028596][T16199] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  242.036758][T16199] EXT4-fs (loop4): orphan cleanup on readonly fs
[  242.043686][T16199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  242.045693][T16180] chnl_net:caif_netlink_parms(): no params data found
[  242.053708][T16199] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.2957: mark_inode_dirty error
[  242.073340][T16199] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2957: Invalid block bitmap block 3 in block_group 0
[  242.090072][T16199] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2957: Invalid block bitmap block 3 in block_group 0
[  242.104169][T16199] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2957: Invalid block bitmap block 3 in block_group 0
[  242.123009][T16180] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.130148][T16180] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.138488][T16180] bridge_slave_0: entered allmulticast mode
[  242.139337][T16199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  242.145012][T16180] bridge_slave_0: entered promiscuous mode
[  242.155107][T16199] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.2957: mark_inode_dirty error
[  242.171483][T16180] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.178696][T16180] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.185134][T16199] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm syz.4.2957: lblock 6 mapped to illegal pblock 1 (length 1)
[  242.187193][T16180] bridge_slave_1: entered allmulticast mode
[  242.201941][T16199] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.2957: lblock 0 mapped to illegal pblock 48 (length 1)
[  242.206700][T16180] bridge_slave_1: entered promiscuous mode
[  242.221710][T16199] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2957: Failed to acquire dquot type 0
[  242.237801][T16199] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 49: comm syz.4.2957: lblock 1 mapped to illegal pblock 49 (length 1)
[  242.252306][T16199] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2957: Failed to acquire dquot type 0
[  242.263734][T16199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  242.266591][T16180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.286148][T16199] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #15: comm syz.4.2957: mark_inode_dirty error
[  242.297771][T16199] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  242.299843][T16180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.317354][T16199] EXT4-fs (loop4): 1 orphan inode deleted
[  242.338895][T16033] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  242.350311][T13908] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.365869][T16180] team0: Port device team_slave_0 added
[  242.372050][T16033] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  242.382126][T16033] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  242.398607][T16180] team0: Port device team_slave_1 added
[  242.414361][T16033] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  242.426897][T13908] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.440815][T16180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.447844][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.473977][T16180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.490526][T16180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.497583][T16180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.523726][T16180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.572819][T13908] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.587696][T16180] hsr_slave_0: entered promiscuous mode
[  242.593721][T16180] hsr_slave_1: entered promiscuous mode
[  242.599974][T16180] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.607631][T16180] Cannot create hsr debugfs directory
[  242.638821][T13908] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.671842][T16033] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.711735][T16033] 8021q: adding VLAN 0 to HW filter on device team0
[  242.723530][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.730636][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.748748][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.755912][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.811525][T13908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.822050][T13908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.831853][T13908] bond0 (unregistering): Released all slaves
[  242.886331][T13908] hsr_slave_0: left promiscuous mode
[  242.892177][T13908] hsr_slave_1: left promiscuous mode
[  242.897848][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.905396][T13908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.914101][T13908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.921516][T13908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.930241][T13908] veth1_macvtap: left promiscuous mode
[  242.935821][T13908] veth0_macvtap: left promiscuous mode
[  242.977681][T13908] team_slave_1 (unregistering): left allmulticast mode
[  242.984962][T13908] team0 (unregistering): Port device team_slave_1 removed
[  243.022572][T16033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.134019][T16033] veth0_vlan: entered promiscuous mode
[  243.141704][T16033] veth1_vlan: entered promiscuous mode
[  243.157480][T16033] veth0_macvtap: entered promiscuous mode
[  243.164789][T16033] veth1_macvtap: entered promiscuous mode
[  243.175233][T16033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.185822][T16033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.196590][T16033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.208073][T16033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.218626][T16033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.229289][T16033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.239030][T16033] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.247840][T16033] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.256647][T16033] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.265384][T16033] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.291018][   T29] kauditd_printk_skb: 419 callbacks suppressed
[  243.291036][   T29] audit: type=1400 audit(2000000121.146:18905): avc:  denied  { mounton } for  pid=16033 comm="syz-executor" path="/root/syzkaller.9wuBgk/syz-tmp" dev="sda1" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  243.323128][   T29] audit: type=1400 audit(2000000121.146:18906): avc:  denied  { mount } for  pid=16033 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  243.345410][   T29] audit: type=1400 audit(2000000121.146:18907): avc:  denied  { mounton } for  pid=16033 comm="syz-executor" path="/root/syzkaller.9wuBgk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  243.372486][   T29] audit: type=1400 audit(2000000121.146:18908): avc:  denied  { mounton } for  pid=16033 comm="syz-executor" path="/root/syzkaller.9wuBgk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  243.400804][   T29] audit: type=1400 audit(2000000121.186:18909): avc:  denied  { mounton } for  pid=16033 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  243.432986][T16234] loop4: detected capacity change from 0 to 512
[  243.449604][T16234] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  243.473416][T16234] EXT4-fs: error: could not find journal device path
[  243.482386][   T29] audit: type=1400 audit(2000000121.346:18910): avc:  denied  { create } for  pid=16233 comm="syz.4.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  243.509355][   T29] audit: type=1326 audit(2000000121.366:18911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  243.533027][   T29] audit: type=1326 audit(2000000121.366:18912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  243.556698][   T29] audit: type=1326 audit(2000000121.366:18913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  243.580285][   T29] audit: type=1326 audit(2000000121.366:18914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16233 comm="syz.4.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  243.609202][T16234] loop4: detected capacity change from 0 to 512
[  243.629486][T16234] EXT4-fs (loop4): too many log groups per flexible block group
[  243.637216][T16234] EXT4-fs (loop4): failed to initialize mballoc (-12)
[  243.645917][T16234] EXT4-fs (loop4): mount failed
[  243.675869][T16105] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  243.694990][T16105] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  243.704503][T16062] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  243.713215][T16062] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  243.739021][T16245] loop4: detected capacity change from 0 to 512
[  243.745681][T16245] EXT4-fs: Ignoring removed orlov option
[  243.751490][T16245] EXT4-fs: Ignoring removed nomblk_io_submit option
[  243.758215][T16245] ext4: Unknown parameter 'nogrpid.nouid32'
[  243.767170][T16105] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  243.779884][T16062] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  243.789383][T16062] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  243.800249][T16105] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  243.809356][T16245] loop4: detected capacity change from 0 to 128
[  243.869167][T16245] syz.4.2965: attempt to access beyond end of device
[  243.869167][T16245] loop4: rw=34817, sector=106, nr_sectors = 95 limit=128
[  243.899373][T16105] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.912862][T16062] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.924548][T16105] 8021q: adding VLAN 0 to HW filter on device team0
[  243.940427][T13912] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.947602][T13912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.961906][T13908] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.969006][T13908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.991093][T16105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.001636][T16105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.014796][T16062] 8021q: adding VLAN 0 to HW filter on device team0
[  244.045385][T13912] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.052619][T13912] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.061722][T13912] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.068853][T13912] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.123571][T16180] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  244.144907][T16180] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  244.156456][T16180] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  244.165807][T16180] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  244.197921][T16105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.207088][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.231417][T16180] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.248577][T16180] 8021q: adding VLAN 0 to HW filter on device team0
[  244.269074][T13910] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.276361][T13910] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.285843][T13910] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.293020][T13910] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.336046][T16180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.346618][T16180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  244.388737][T16062] veth0_vlan: entered promiscuous mode
[  244.405260][T16062] veth1_vlan: entered promiscuous mode
[  244.423608][T16062] veth0_macvtap: entered promiscuous mode
[  244.436564][T16062] veth1_macvtap: entered promiscuous mode
[  244.450856][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.461422][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.471380][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.481961][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.492712][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.502887][T16180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.537539][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.548057][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.558087][T16062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.568667][T16062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.580064][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.605722][T16105] veth0_vlan: entered promiscuous mode
[  244.614710][T16062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.623531][T16062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.632323][T16062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.641156][T16062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.654350][T16105] veth1_vlan: entered promiscuous mode
[  244.685621][T16180] veth0_vlan: entered promiscuous mode
[  244.702665][T16180] veth1_vlan: entered promiscuous mode
[  244.712175][T16105] veth0_macvtap: entered promiscuous mode
[  244.721632][T16105] veth1_macvtap: entered promiscuous mode
[  244.780351][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.791098][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.801266][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.811904][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.821918][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.832532][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.845998][T16105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.855079][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.865548][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.875597][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.886059][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.896015][T16105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.906503][T16105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.917588][T16105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.943405][T16180] veth0_macvtap: entered promiscuous mode
[  244.952366][T16180] veth1_macvtap: entered promiscuous mode
[  245.143115][T16105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.151968][T16105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.160767][T16105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.169525][T16105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.278061][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.288618][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.298686][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.309174][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.319058][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.329760][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.339826][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  245.350442][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.362419][T16180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.377397][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.387938][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.397990][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.408452][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.418327][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.428857][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.438803][T16180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  245.449421][T16180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  245.460687][T16180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.477013][T16180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.486339][T16180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.495084][T16180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.503878][T16180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.556088][T16317] loop8: detected capacity change from 0 to 512
[  245.621200][T16324] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  245.621200][T16324] The task syz.4.2975 (16324) triggered the difference, watch for misbehavior.
[  245.654498][T16317] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.692794][T16317] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: comm syz.8.2976: invalid size
[  246.365195][T16374] loop4: detected capacity change from 0 to 1024
[  246.371906][T16374] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.419819][T16380] loop5: detected capacity change from 0 to 512
[  246.448272][T16384] loop1: detected capacity change from 0 to 512
[  246.476831][T16380] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.478195][T16384] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  246.492861][T16380] EXT4-fs error (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.2994: invalid size
[  246.503709][T16384] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  246.524125][T16384] EXT4-fs (loop1): 1 truncate cleaned up
[  246.575060][T16393] loop4: detected capacity change from 0 to 1024
[  246.598985][T16395] loop5: detected capacity change from 0 to 512
[  246.608883][T16395] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  246.612757][T16393] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  246.632682][T16395] EXT4-fs: error: could not find journal device path
[  246.661570][T16395] loop5: detected capacity change from 0 to 512
[  246.706856][T16393] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  246.720485][T16404] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3005'.
[  246.739977][T16393] EXT4-fs (loop4): orphan cleanup on readonly fs
[  246.742935][T16395] EXT4-fs (loop5): too many log groups per flexible block group
[  246.754244][T16395] EXT4-fs (loop5): failed to initialize mballoc (-12)
[  246.779369][T16395] EXT4-fs (loop5): mount failed
[  246.794141][T16412] FAULT_INJECTION: forcing a failure.
[  246.794141][T16412] name failslab, interval 1, probability 0, space 0, times 0
[  246.806825][T16412] CPU: 0 UID: 0 PID: 16412 Comm: syz.0.3007 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  246.819155][T16412] Tainted: [W]=WARN
[  246.823008][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  246.833078][T16412] Call Trace:
[  246.836363][T16412]  <TASK>
[  246.839300][T16412]  dump_stack_lvl+0xf2/0x150
[  246.843966][T16412]  dump_stack+0x15/0x1a
[  246.848158][T16412]  should_fail_ex+0x223/0x230
[  246.852855][T16412]  should_failslab+0x8f/0xb0
[  246.857517][T16412]  kmem_cache_alloc_noprof+0x52/0x320
[  246.862904][T16412]  ? audit_log_start+0x34c/0x6b0
[  246.867933][T16412]  audit_log_start+0x34c/0x6b0
[  246.872713][T16412]  audit_seccomp+0x4b/0x130
[  246.877226][T16412]  __seccomp_filter+0x6fa/0x1180
[  246.882208][T16412]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  246.887969][T16412]  ? vfs_write+0x596/0x920
[  246.892401][T16412]  ? putname+0xcf/0xf0
[  246.896482][T16412]  __secure_computing+0x9f/0x1c0
[  246.901476][T16412]  syscall_trace_enter+0xd1/0x1f0
[  246.906574][T16412]  ? fpregs_assert_state_consistent+0x83/0xa0
[  246.912709][T16412]  do_syscall_64+0xaa/0x1c0
[  246.917294][T16412]  ? clear_bhb_loop+0x55/0xb0
[  246.922016][T16412]  ? clear_bhb_loop+0x55/0xb0
[  246.926708][T16412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.932677][T16412] RIP: 0033:0x7f39b6e2e9cf
[  246.937143][T16412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  246.956777][T16412] RSP: 002b:00007f39b54a7020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  246.965265][T16412] RAX: ffffffffffffffda RBX: 00007f39b6ff5fa0 RCX: 00007f39b6e2e9cf
[  246.973260][T16412] RDX: 000000000000009a RSI: 0000000020000680 RDI: 00000000000000c8
[  246.981238][T16412] RBP: 00007f39b54a70a0 R08: 0000000000000000 R09: 0000000000000000
[  246.989242][T16412] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001
[  246.997226][T16412] R13: 0000000000000000 R14: 00007f39b6ff5fa0 R15: 00007ffe4c4cb6e8
[  247.005257][T16412]  </TASK>
[  247.024093][T16393] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  247.037150][T16393] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.3000: mark_inode_dirty error
[  247.060917][T16421] loop8: detected capacity change from 0 to 512
[  247.066134][T16393] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3000: Invalid block bitmap block 3 in block_group 0
[  247.130595][T16393] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3000: Invalid block bitmap block 3 in block_group 0
[  247.150989][T16393] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3000: Invalid block bitmap block 3 in block_group 0
[  247.170309][T16393] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  247.173113][T16433] loop5: detected capacity change from 0 to 512
[  247.179987][T16393] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.3000: mark_inode_dirty error
[  247.187445][T16421] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.204980][T16393] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm syz.4.3000: lblock 6 mapped to illegal pblock 1 (length 1)
[  247.218278][T16421] EXT4-fs error (device loop8): ext4_empty_dir:3094: inode #12: comm syz.8.3010: invalid size
[  247.222213][T16433] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  247.239992][T16433] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  247.250276][T16433] EXT4-fs (loop5): 1 truncate cleaned up
[  247.261037][T16393] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3000: lblock 0 mapped to illegal pblock 48 (length 1)
[  247.286253][T16393] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3000: Failed to acquire dquot type 0
[  247.299241][T16393] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 49: comm syz.4.3000: lblock 1 mapped to illegal pblock 49 (length 1)
[  247.314015][T16393] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3000: Failed to acquire dquot type 0
[  247.327306][T16393] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  247.338550][T16393] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #15: comm syz.4.3000: mark_inode_dirty error
[  247.351562][T16393] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  247.362007][T16393] EXT4-fs (loop4): 1 orphan inode deleted
[  247.454554][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3015'.
[  247.469647][T16441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  247.532566][T16454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16454 comm=syz.4.3021
[  247.570374][T16454] 9pnet: Could not find request transport: fRª¹Çd°¨§X<�³C;€›ÛŸ½H¼‡4•ËÿŠ2nê1®NuëöÉÑ30Ê
[  247.604406][T16457] loop4: detected capacity change from 0 to 512
[  247.626663][T16457] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  247.646697][T16457] EXT4-fs (loop4): 1 truncate cleaned up
[  247.958304][T16478] FAULT_INJECTION: forcing a failure.
[  247.958304][T16478] name failslab, interval 1, probability 0, space 0, times 0
[  247.971015][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.0.3030 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  247.983316][T16478] Tainted: [W]=WARN
[  247.987236][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  247.997309][T16478] Call Trace:
[  248.000595][T16478]  <TASK>
[  248.003570][T16478]  dump_stack_lvl+0xf2/0x150
[  248.008206][T16478]  dump_stack+0x15/0x1a
[  248.012459][T16478]  should_fail_ex+0x223/0x230
[  248.017257][T16478]  should_failslab+0x8f/0xb0
[  248.021935][T16478]  kmem_cache_alloc_noprof+0x52/0x320
[  248.027327][T16478]  ? security_file_alloc+0x32/0x100
[  248.032596][T16478]  security_file_alloc+0x32/0x100
[  248.037682][T16478]  init_file+0x5b/0x1b0
[  248.041962][T16478]  alloc_empty_file+0xea/0x200
[  248.046738][T16478]  alloc_file_pseudo+0xc3/0x140
[  248.051604][T16478]  aio_setup_ring+0x135/0x6a0
[  248.056360][T16478]  ioctx_alloc+0x2b2/0x4c0
[  248.060798][T16478]  __se_sys_io_setup+0x6b/0x1b0
[  248.065667][T16478]  __x64_sys_io_setup+0x31/0x40
[  248.070533][T16478]  x64_sys_call+0x160f/0x2dc0
[  248.075219][T16478]  do_syscall_64+0xc9/0x1c0
[  248.079814][T16478]  ? clear_bhb_loop+0x55/0xb0
[  248.084551][T16478]  ? clear_bhb_loop+0x55/0xb0
[  248.089251][T16478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.095246][T16478] RIP: 0033:0x7f39b6e2ff19
[  248.099668][T16478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.119358][T16478] RSP: 002b:00007f39b54a7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  248.127786][T16478] RAX: ffffffffffffffda RBX: 00007f39b6ff5fa0 RCX: 00007f39b6e2ff19
[  248.135828][T16478] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000002004
[  248.143808][T16478] RBP: 00007f39b54a70a0 R08: 0000000000000000 R09: 0000000000000000
[  248.151853][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.159856][T16478] R13: 0000000000000000 R14: 00007f39b6ff5fa0 R15: 00007ffe4c4cb6e8
[  248.167844][T16478]  </TASK>
[  248.207447][T16477] loop5: detected capacity change from 0 to 128
[  248.216862][T16480] loop1: detected capacity change from 0 to 128
[  248.238786][T16480] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.293605][T16477] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.298972][   T29] kauditd_printk_skb: 974 callbacks suppressed
[  248.298989][   T29] audit: type=1400 audit(2000000126.147:19881): avc:  denied  { ioctl } for  pid=8843 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  248.357753][   T29] audit: type=1400 audit(2000000126.147:19882): avc:  denied  { mount } for  pid=16473 comm="syz.5.3029" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  248.385521][   T29] audit: type=1400 audit(2000000126.187:19883): avc:  denied  { create } for  pid=16485 comm="syz.0.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.406293][   T29] audit: type=1400 audit(2000000126.187:19884): avc:  denied  { map_create } for  pid=16473 comm="syz.5.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  248.425973][   T29] audit: type=1400 audit(2000000126.187:19885): avc:  denied  { bpf } for  pid=16473 comm="syz.5.3029" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  248.426595][T16480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.447048][   T29] audit: type=1400 audit(2000000126.187:19886): avc:  denied  { map_read map_write } for  pid=16473 comm="syz.5.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  248.455366][T16480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.475128][   T29] audit: type=1400 audit(2000000126.187:19887): avc:  denied  { write } for  pid=16485 comm="syz.0.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.503473][   T29] audit: type=1400 audit(2000000126.187:19888): avc:  denied  { read } for  pid=16485 comm="syz.0.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.524118][   T29] audit: type=1400 audit(2000000126.187:19889): avc:  denied  { prog_load } for  pid=16473 comm="syz.5.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  248.543467][   T29] audit: type=1400 audit(2000000126.187:19890): avc:  denied  { perfmon } for  pid=16473 comm="syz.5.3029" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  248.605739][T16499] loop4: detected capacity change from 0 to 512
[  248.626680][T16499] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.657011][T16499] EXT4-fs error (device loop4): ext4_empty_dir:3094: inode #12: comm syz.4.3041: invalid size
[  248.668718][T16503] loop5: detected capacity change from 0 to 8192
[  248.704304][T16510] loop8: detected capacity change from 0 to 512
[  248.727372][T16510] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  248.747701][T16510] EXT4-fs (loop8): 1 truncate cleaned up
[  248.750404][T16518] loop4: detected capacity change from 0 to 512
[  248.762376][T16518] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  248.805152][T16518] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  248.815792][T16518] EXT4-fs (loop4): 1 truncate cleaned up
[  249.025285][T16528] netlink: 'syz.8.3048': attribute type 13 has an invalid length.
[  249.033163][T16528] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3048'.
[  249.045686][T16528] syz_tun: refused to change device tx_queue_len
[  249.052142][T16528] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  249.087335][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3048'.
[  249.096446][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.103906][T16528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.112038][T16528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.119551][T16528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.238262][T16536] random: crng reseeded on system resumption
[  249.376250][T16552] loop1: detected capacity change from 0 to 128
[  249.390300][T16552] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  249.428521][T16552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.437148][T16552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.538956][T16570] loop5: detected capacity change from 0 to 512
[  249.547642][T16568] loop8: detected capacity change from 0 to 512
[  249.555907][T16568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.555982][T16570] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  249.572718][T16570] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  249.581398][T16570] EXT4-fs (loop5): 1 truncate cleaned up
[  249.590537][T16575] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  249.600955][T16568] EXT4-fs (loop8): orphan cleanup on readonly fs
[  249.608082][T16568] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3067: bg 0: block 248: padding at end of block bitmap is not set
[  249.624347][T16568] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3067: Failed to acquire dquot type 1
[  249.643851][T16568] EXT4-fs (loop8): 1 truncate cleaned up
[  249.763049][T16597] FAULT_INJECTION: forcing a failure.
[  249.763049][T16597] name failslab, interval 1, probability 0, space 0, times 0
[  249.775805][T16597] CPU: 0 UID: 0 PID: 16597 Comm: syz.8.3072 Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  249.788085][T16597] Tainted: [W]=WARN
[  249.791910][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  249.801995][T16597] Call Trace:
[  249.805317][T16597]  <TASK>
[  249.808265][T16597]  dump_stack_lvl+0xf2/0x150
[  249.812954][T16597]  dump_stack+0x15/0x1a
[  249.817241][T16597]  should_fail_ex+0x223/0x230
[  249.822028][T16597]  should_failslab+0x8f/0xb0
[  249.826688][T16597]  kmem_cache_alloc_node_noprof+0x59/0x320
[  249.832527][T16597]  ? __alloc_skb+0x10b/0x310
[  249.837226][T16597]  __alloc_skb+0x10b/0x310
[  249.841687][T16597]  netlink_alloc_large_skb+0xad/0xe0
[  249.847001][T16597]  netlink_sendmsg+0x3b4/0x6e0
[  249.851839][T16597]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.857252][T16597]  __sock_sendmsg+0x140/0x180
[  249.862015][T16597]  ____sys_sendmsg+0x312/0x410
[  249.866795][T16597]  __sys_sendmsg+0x19d/0x230
[  249.871488][T16597]  __x64_sys_sendmsg+0x46/0x50
[  249.876283][T16597]  x64_sys_call+0x2734/0x2dc0
[  249.881055][T16597]  do_syscall_64+0xc9/0x1c0
[  249.885574][T16597]  ? clear_bhb_loop+0x55/0xb0
[  249.890252][T16597]  ? clear_bhb_loop+0x55/0xb0
[  249.894928][T16597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.900958][T16597] RIP: 0033:0x7f003bfbff19
[  249.905476][T16597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.925204][T16597] RSP: 002b:00007f003a616058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  249.933739][T16597] RAX: ffffffffffffffda RBX: 00007f003c186080 RCX: 00007f003bfbff19
[  249.941716][T16597] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007
[  249.949765][T16597] RBP: 00007f003a6160a0 R08: 0000000000000000 R09: 0000000000000000
[  249.957744][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  249.965825][T16597] R13: 0000000000000000 R14: 00007f003c186080 R15: 00007ffdf37f81f8
[  249.973818][T16597]  </TASK>
[  250.077688][T16614] loop5: detected capacity change from 0 to 512
[  250.109315][T16616] loop8: detected capacity change from 0 to 512
[  250.125265][T16614] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3083: bg 0: block 248: padding at end of block bitmap is not set
[  250.155375][T16614] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3083: Failed to acquire dquot type 1
[  250.173240][T16614] EXT4-fs (loop5): 1 truncate cleaned up
[  250.179751][T16616] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  250.185141][T16625] loop1: detected capacity change from 0 to 512
[  250.190163][T16616] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  250.195204][T16625] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  250.202753][T16614] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  250.225911][T16625] EXT4-fs: error: could not find journal device path
[  250.228249][T16616] EXT4-fs (loop8): 1 truncate cleaned up
[  250.277239][T16625] loop1: detected capacity change from 0 to 512
[  250.336506][T16639] loop5: detected capacity change from 0 to 512
[  250.350866][T16625] EXT4-fs (loop1): too many log groups per flexible block group
[  250.358679][T16625] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  250.367220][T16625] EXT4-fs (loop1): mount failed
[  250.387606][T16645] loop4: detected capacity change from 0 to 128
[  250.402647][T16645] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  250.451949][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.460506][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.473768][T16639] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.487128][T16639] EXT4-fs error (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.3090: invalid size
[  250.542947][T16658] loop5: detected capacity change from 0 to 512
[  250.577783][T16658] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.592054][T16658] EXT4-fs error (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.3101: invalid size
[  250.897383][T16709] loop5: detected capacity change from 0 to 1024
[  250.911099][T16709] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  250.923744][T16709] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  250.932057][T16709] EXT4-fs (loop5): orphan cleanup on readonly fs
[  250.939326][T16709] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  250.950392][T16709] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #3: comm syz.5.3125: mark_inode_dirty error
[  250.961886][T16709] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3125: Invalid block bitmap block 3 in block_group 0
[  250.976593][T16709] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3125: Invalid block bitmap block 3 in block_group 0
[  251.000735][T16709] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3125: Invalid block bitmap block 3 in block_group 0
[  251.017098][T16709] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  251.038954][T16709] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #3: comm syz.5.3125: mark_inode_dirty error
[  251.050743][T16709] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 1: comm syz.5.3125: lblock 6 mapped to illegal pblock 1 (length 1)
[  251.065990][T16709] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 48: comm syz.5.3125: lblock 0 mapped to illegal pblock 48 (length 1)
[  251.080690][T16709] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3125: Failed to acquire dquot type 0
[  251.092432][T16709] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 49: comm syz.5.3125: lblock 1 mapped to illegal pblock 49 (length 1)
[  251.108353][T16709] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3125: Failed to acquire dquot type 0
[  251.131406][T16709] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  251.143488][T16709] EXT4-fs error (device loop5): ext4_evict_inode:256: inode #15: comm syz.5.3125: mark_inode_dirty error
[  251.163033][T16709] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  251.173672][T16709] EXT4-fs (loop5): 1 orphan inode deleted
[  251.216950][T16737] loop4: detected capacity change from 0 to 1024
[  251.236112][T16737] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  251.248189][T16737] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  251.256400][T16737] EXT4-fs (loop4): orphan cleanup on readonly fs
[  251.267098][T16737] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  251.278128][T16737] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.3139: mark_inode_dirty error
[  251.302199][T16737] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3139: Invalid block bitmap block 3 in block_group 0
[  251.344839][T16737] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3139: Invalid block bitmap block 3 in block_group 0
[  251.388660][T16755] loop1: detected capacity change from 0 to 512
[  251.395720][T16737] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3139: Invalid block bitmap block 3 in block_group 0
[  251.410070][T16737] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  251.419767][T16737] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.3139: mark_inode_dirty error
[  251.431833][T16755] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  251.439961][T16755] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  251.455161][T16737] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm syz.4.3139: lblock 6 mapped to illegal pblock 1 (length 1)
[  251.469384][T16755] EXT4-fs (loop1): 1 truncate cleaned up
[  251.495156][T16737] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.3139: lblock 0 mapped to illegal pblock 48 (length 1)
[  251.526979][T16737] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3139: Failed to acquire dquot type 0
[  251.541657][T16737] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 49: comm syz.4.3139: lblock 1 mapped to illegal pblock 49 (length 1)
[  251.595442][T16737] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3139: Failed to acquire dquot type 0
[  251.602288][T16779] loop5: detected capacity change from 0 to 512
[  251.607329][T16737] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  251.613458][T16779] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  251.646175][T16779] EXT4-fs: error: could not find journal device path
[  251.662933][T16737] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #15: comm syz.4.3139: mark_inode_dirty error
[  251.663254][T16782] loop8: detected capacity change from 0 to 128
[  251.695082][T16737] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  251.706193][T16782] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  251.712013][T16737] EXT4-fs (loop4): 1 orphan inode deleted
[  251.829778][T16793] loop8: detected capacity change from 0 to 512
[  251.901950][T16793] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  251.911581][T16793] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  251.946923][T16793] EXT4-fs (loop8): 1 truncate cleaned up
[  252.060408][T16819] loop5: detected capacity change from 0 to 128
[  252.115449][T16819] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  252.185783][T16789] SELinux:  policydb string length -150994936 does not match expected length 8
[  252.197357][T16789] SELinux: failed to load policy
[  252.417162][T16842] loop8: detected capacity change from 0 to 1024
[  252.428791][T16842] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  252.464161][T16842] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  252.472494][T16842] EXT4-fs (loop8): orphan cleanup on readonly fs
[  252.479955][T16842] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  252.490818][T16842] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #3: comm syz.8.3181: mark_inode_dirty error
[  252.502407][T16842] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3181: Invalid block bitmap block 3 in block_group 0
[  252.517163][T16842] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3181: Invalid block bitmap block 3 in block_group 0
[  252.541815][T16842] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3181: Invalid block bitmap block 3 in block_group 0
[  252.556642][T16842] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  252.558034][T16851] loop1: detected capacity change from 0 to 512
[  252.573145][T16842] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #3: comm syz.8.3181: mark_inode_dirty error
[  252.589804][T16842] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm syz.8.3181: lblock 6 mapped to illegal pblock 1 (length 1)
[  252.605592][T16842] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 48: comm syz.8.3181: lblock 0 mapped to illegal pblock 48 (length 1)
[  252.612408][T16851] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  252.626057][T16853] loop5: detected capacity change from 0 to 512
[  252.628062][T16851] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  252.643478][T16851] EXT4-fs (loop1): 1 truncate cleaned up
[  252.651989][T16842] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3181: Failed to acquire dquot type 0
[  252.654996][T16853] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  252.679285][T16842] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 49: comm syz.8.3181: lblock 1 mapped to illegal pblock 49 (length 1)
[  252.679634][T16853] EXT4-fs (loop5): orphan cleanup on readonly fs
[  252.701067][T16853] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3186: bg 0: block 248: padding at end of block bitmap is not set
[  252.704759][T16842] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.3181: Failed to acquire dquot type 0
[  252.731963][T16853] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3186: Failed to acquire dquot type 1
[  252.744115][T16842] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem
[  252.755859][T16853] EXT4-fs (loop5): 1 truncate cleaned up
[  252.761808][T16842] EXT4-fs error (device loop8): ext4_evict_inode:256: inode #15: comm syz.8.3181: mark_inode_dirty error
[  252.791423][T16842] EXT4-fs warning (device loop8): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  252.802896][T16859] loop1: detected capacity change from 0 to 128
[  252.814842][T16842] EXT4-fs (loop8): 1 orphan inode deleted
[  252.827328][T16859] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  252.915127][T16859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.939867][T16859] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.035690][T16873] loop5: detected capacity change from 0 to 512
[  253.071194][T16873] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.088048][T16873] EXT4-fs error (device loop5): ext4_empty_dir:3094: inode #12: comm syz.5.3194: invalid size
[  253.148235][T16882] loop4: detected capacity change from 0 to 512
[  253.329370][   T29] kauditd_printk_skb: 736 callbacks suppressed
[  253.329389][   T29] audit: type=1400 audit(2000000131.187:20603): avc:  denied  { create } for  pid=16885 comm="syz.5.3198" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  253.393082][T16882] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  253.413489][T16882] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  253.465571][   T29] audit: type=1400 audit(2000000131.237:20604): avc:  denied  { map } for  pid=16885 comm="syz.5.3198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  253.490219][   T29] audit: type=1400 audit(2000000131.237:20605): avc:  denied  { read write } for  pid=16885 comm="syz.5.3198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=44916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  253.521918][T16882] EXT4-fs (loop4): 1 truncate cleaned up
[  253.531416][   T29] audit: type=1326 audit(2000000131.387:20606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.532663][T16890] loop5: detected capacity change from 0 to 512
[  253.561786][T16890] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  253.571093][   T29] audit: type=1326 audit(2000000131.417:20607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.594789][   T29] audit: type=1326 audit(2000000131.417:20608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.618533][   T29] audit: type=1326 audit(2000000131.417:20609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.642716][   T29] audit: type=1326 audit(2000000131.417:20610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.666257][   T29] audit: type=1326 audit(2000000131.417:20611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.690023][   T29] audit: type=1326 audit(2000000131.417:20612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16881 comm="syz.4.3197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5b35ff19 code=0x7ffc0000
[  253.869720][T16899] loop1: detected capacity change from 0 to 512
[  253.900416][T16899] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  253.924221][T16899] EXT4-fs: error: could not find journal device path
[  253.959460][T16914] loop5: detected capacity change from 0 to 512
[  253.967751][T16914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  253.991495][T16899] loop1: detected capacity change from 0 to 512
[  253.997597][T16914] EXT4-fs (loop5): orphan cleanup on readonly fs
[  254.016791][T16914] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3210: bg 0: block 248: padding at end of block bitmap is not set
[  254.031363][T16914] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3210: Failed to acquire dquot type 1
[  254.045529][T16914] EXT4-fs (loop5): 1 truncate cleaned up
[  254.059313][T16899] EXT4-fs (loop1): too many log groups per flexible block group
[  254.067050][T16899] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  254.074768][T16899] EXT4-fs (loop1): mount failed
[  254.089502][T16926] loop8: detected capacity change from 0 to 512
[  254.096315][T16926] EXT4-fs: Ignoring removed orlov option
[  254.106984][T16926] EXT4-fs: Ignoring removed nomblk_io_submit option
[  254.113708][T16926] ext4: Unknown parameter 'nogrpid.nouid32'
[  254.140873][T16926] loop8: detected capacity change from 0 to 128
[  254.142798][T16928] loop5: detected capacity change from 0 to 8192
[  254.161262][T16183] ==================================================================
[  254.169383][T16183] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_symlink
[  254.176535][T16183] 
[  254.178879][T16183] write to 0xffff88810444f544 of 4 bytes by task 3558 on cpu 1:
[  254.186534][T16183]  shmem_symlink+0x349/0x3a0
[  254.191165][T16183]  vfs_symlink+0xca/0x1d0
[  254.193132][T16926] syz.8.3214: attempt to access beyond end of device
[  254.193132][T16926] loop8: rw=34817, sector=106, nr_sectors = 95 limit=128
[  254.195516][T16183]  do_symlinkat+0xdf/0x350
[  254.195555][T16183]  __x64_sys_symlink+0x50/0x60
[  254.218496][T16183]  x64_sys_call+0x28b0/0x2dc0
[  254.223213][T16183]  do_syscall_64+0xc9/0x1c0
[  254.227743][T16183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.233682][T16183] 
[  254.236033][T16183] read to 0xffff88810444f544 of 4 bytes by task 16183 on cpu 0:
[  254.243677][T16183]  fill_mg_cmtime+0x58/0x280
[  254.248284][T16183]  generic_fillattr+0x241/0x330
[  254.253132][T16183]  shmem_getattr+0x17b/0x200
[  254.257726][T16183]  vfs_statx_path+0x171/0x2d0
[  254.262409][T16183]  vfs_statx+0xe1/0x170
[  254.266573][T16183]  __se_sys_newfstatat+0xdc/0x300
[  254.271800][T16183]  __x64_sys_newfstatat+0x55/0x70
[  254.276845][T16183]  x64_sys_call+0x236d/0x2dc0
[  254.281530][T16183]  do_syscall_64+0xc9/0x1c0
[  254.286043][T16183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.291972][T16183] 
[  254.294337][T16183] value changed: 0x01ab6689 -> 0x01d5a6fa
[  254.300062][T16183] 
[  254.302382][T16183] Reported by Kernel Concurrency Sanitizer on:
[  254.308531][T16183] CPU: 0 UID: 0 PID: 16183 Comm: udevd Tainted: G        W          6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  254.320351][T16183] Tainted: [W]=WARN
[  254.324191][T16183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  254.334267][T16183] ==================================================================