last executing test programs:

2.99345748s ago: executing program 0 (id=869):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4c7, &(0x7f0000000b80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x401e, &(0x7f0000000780)={[{@data_journal}, {@resuid}, {@errors_continue}, {@nodelalloc}, {@sysvgroups}, {@acl}], [{@euid_eq}, {@hash}]}, 0x1, 0x43b, &(0x7f0000000c40)="$eJzs3M9rHFUcAPDv7CZp06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRHsSvOpdCkUC2uppZXZnkt3N5mc3We1+PjDd92be8t53Z97ue/M6CaBjDaX/JBF9EfFrRPRXs/UFhqovt5cWJv9eWphMolx+84+kUu7W0sJkXjR/3/480xVR+DSJI03qnbt85fxEqTR9KcuPzl94b3Tu8pVnZy5MnJs+N31x/PTpkyfGnj81/lxL4kzjujX44ezRw6++fe31yTPX3vnpmySPvyGOFhla7+AT5XKLq2uvAzXppKuNDWFLitVuGt2V/t8fxVg5ef3xyidtbRywo8rlcvn+tQ8vloG7WBLtbgHQHvkPfTr/zbddGnr8J9x8sToBSuO+nW3VI11RyMp0N8xvW2koIs4s/vNlusXO3IcAAKjzXTr+eabZ+K8QtfeF7snWUAYi4t6IOBgRpyLiUETcF1Ep+0BEPLjF+hsXSVaPfwo3thXYJqXjvxeyta368V8++ouBYpY7UIm/Ozk7U5o+nn0mw9G9J82PrVPH9y//8nlE/PlXk2O14790S+vPx4JZO2507al/z9TE/MQdB565+XHEYFez+JPllYAkIg5HxOA265h56uujax3bOP51tGCdqfxVxJPV878YDfHnkvXXJ0f3Rmn6+Gh+Vax2/eerb6xV/x3F3wLp+d/X9Ppfjn8gqV2vndt6HVd/+2zNOc12r/+e5K26fR9MzM9fGovoSV6rNrp2/3hDufGV8mn8w8ea9/+DsfJJHImI9CJ+KCIejohHsrY/GhGPRcSxdeL/8aXH391+/DsrjX9qS+d/JdETjXuaJ4rnf/i2rtL85Fzvq7xsfP5PVlLD2Z7NfP9tpl3bu5oBAADg/6cQEX2RFEaW04XCyEj1//Afin2F0uzc/NNnZ9+/OFV9RiD2RuR3uvpr7oeOZdP6PD/ekD+R3Tf+othbyY9Mzpam2h08dLj9a/T/1O/FdrcO2HGe14LOpf9D59L/oXPp/9C5mvT/3na0A9h9zX7/P2pDO4Dd19D/LftBBzH/h86l/0Pn0v+hI831xsYPyUtIrEpEYaeryP8CT7sj7cxEm7+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuTfAAAA//8Jr+X/")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x62040200)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x90800}, 0x18)
renameat2(r7, &(0x7f00000007c0)='./file1\x00', r0, &(0x7f00000005c0)='./file1\x00', 0x4)

2.736415989s ago: executing program 0 (id=870):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file2\x00', 0x81c0, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x181400, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000240)={0x6c, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x0, 0x81, 0xe}, 0x2c)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
close_range(r0, r1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x9, 0xc8, 0x5, 0x803, 0x3, 0x6, 0x7fff, 0x20000000000b2, 0x40, 0x1d1, 0x5, 0x80, 0x38, 0x2, 0xfff7, 0xffff, 0xda7e}, [{0x6474e551, 0x8, 0x3, 0x3, 0x4, 0x100000000, 0x34, 0x8}, {0x2, 0x7, 0x8, 0x0, 0x0, 0xff, 0x80000000, 0x10006d05}], "6fdec5411686a4a26f87cedd1d6a9fd8a7fbecf39e43ce7eaeed65f3530355a5f352c2b3a58bff5e362744e60e9dcd3b2c6f84f11a24fe4deb3d8be155efad8a956c79cf999822b8e6e60bd451cc619420d0f01f0a03a938c50b0c1f67c311db425beaece7e26ff8693ae822c8170d8841a98d864705ff8efcfb2082cdd3eef2023cb13bc911c15d40901f498725db3f714e", ['\x00', '\x00', '\x00', '\x00']}, 0x542)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r3 = getpgid(0x0)
capset(&(0x7f00000001c0)={0x20080522, r3}, &(0x7f0000000200)={0x40, 0x400, 0x4, 0x3, 0x0, 0x100})
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x40, 0x11}, 0x18)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', r4, &(0x7f00000002c0)='./file1/file2\x00', 0x0)

2.514803948s ago: executing program 0 (id=873):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$getownex(r7, 0x10, &(0x7f00000001c0)={0x0, <r8=>0x0})
ptrace$peeksig(0x4209, r8, &(0x7f00000002c0)={0x8}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.195573837s ago: executing program 3 (id=881):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r2 = syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000, 0x1d3}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}})
io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB='YS\x00\x00\x00\x00\x00\x00\x00\bk'], 0x24}}, 0x0)
syz_io_uring_setup(0x207, &(0x7f0000000340)={0x0, 0xa6cc, 0x10100}, &(0x7f0000000300), &(0x7f0000000100)=<r8=>0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r10)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r12=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000002000000060004002b90e1c2cd45dbea", @ANYRES32=r12], 0x20, 0x6044}, 0x6)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={r12, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7, 0x2, 0x2b, 0x0, 0x16, 0xff, 0x7}, &(0x7f0000000080)=0x9c)
connect$netlink(r9, &(0x7f0000000140)=@proc={0x10, 0x0, 0x804, 0x800000}, 0xc)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
bpf$LINK_GET_NEXT_ID(0x1f, 0xfffffffffffffffc, 0x0)
syz_io_uring_setup(0x4c6f, &(0x7f0000000580)={0x0, 0x6a93, 0x800, 0x0, 0x2b5}, &(0x7f0000000040)=<r13=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r13, r8, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00'})
syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

2.179192937s ago: executing program 1 (id=882):
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$inet6(0xa, 0xa, 0x2)
openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0)

2.128488187s ago: executing program 1 (id=884):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/locks\x00', 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
msgrcv(0x0, 0x0, 0x0, 0x3, 0x1000)
ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000280)={0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="8400000000020103000000000000000003000000060007400001000008090000000000000000084000000002100003800c0002800500010084000000480002802c00018014000300fe88000000000000000000000000010114000400000000000000000000000000000000010c00028005000100840000000c000280050001002f000000"], 0x84}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000003ea9a9093da6eb172c9c0bf0b5cd92c3436f688ac8ee697e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000001b40)=""/4096, &(0x7f0000000240)=0x1000)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)
tkill(r6, 0x5)

2.088417867s ago: executing program 3 (id=885):
r0 = socket(0x2, 0x80805, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x2)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
read(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0))
pwritev(r9, &(0x7f0000000380)=[{&(0x7f0000000880)="c495cacefb", 0x5}], 0x1, 0xf, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r10=>r5, 0x0, 0x0, 0x0, 0x2, 0x40, @private0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r10, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2, 0x0, 0x0, 0xfffffffc, 0x1}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x150, 0x4c, 0x1a, 0x150, 0x73, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffffff], [], 'virt_wifi0\x00', 'veth1_macvtap\x00'}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x92, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "b9841be2dff2a8dd83bc97b5f34260959e200db9f88bf6dd11184d5ee7a3a5ef8af3283b738a0cfcfc00260bcee5b87a41f3a4e3d2a0b7ac5fb319f56a68f5918ceb1b9c738ba1e7ca7613be181247b661b7a34e5088af9a5cf650cc70163dfefd3ac6254b09f0d749ca32087c31c737e754803ad55c24a5fd83ffef9389bd37", 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2}, [], 0x0, 0xfffe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
flistxattr(r12, 0x0, 0x0)

1.955489827s ago: executing program 3 (id=886):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff10)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/143, 0x8f, 0x0, 0x0}, &(0x7f0000000400)=0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e2fb19f716f0f2efdd6f7132f70000000000000000000000000000000000000000002f161ac97bab69c2fb2c000000000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
r9 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='alarmtimer_suspend\x00', r2, 0x0, 0x20000000}, 0x18)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

1.901202566s ago: executing program 0 (id=887):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x201, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x11000)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
vmsplice(r2, &(0x7f0000000700)=[{&(0x7f0000000100)="04", 0x1}], 0x1, 0x0)

1.898151946s ago: executing program 3 (id=889):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4c7, &(0x7f0000000b80)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000280), &(0x7f0000000080)=r6}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x62040200)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x90800}, 0x18)
renameat2(r7, &(0x7f00000007c0)='./file1\x00', r0, &(0x7f00000005c0)='./file1\x00', 0x4)

1.815286066s ago: executing program 2 (id=892):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async)
shutdown(r0, 0x1) (async)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x10040)

1.797156346s ago: executing program 2 (id=893):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3fffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0x0, r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f00000000c0), 0x10)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, 0x18}, 0x10)
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1=0x7f000001}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x37)
r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='\a'], 0x10)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2dc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.463493975s ago: executing program 4 (id=896):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet(0x2, 0x3, 0x6)
syz_emit_ethernet(0x2a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000003700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9)

1.386259424s ago: executing program 2 (id=897):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/250, 0xfa, 0x0, &(0x7f0000000680)=""/155, 0x9b}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0), 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007030000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x25, 0x148, 0x138, 0x60, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x328)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40000000001010400000000000000000a00000008000740000000003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400ff0100000000000000000000000000013c0001802c000180140003000000000000000000000000000000000014000400fe8000000004000000000000000000bb0c000280050001000000000010000580"], 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x1000000}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

1.248015154s ago: executing program 2 (id=898):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xe8e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="dc01c6ba1cdcc12519250000000000007f007101001300000000000000000000000000000000000000000000000000000000000000dce600000000000000", @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fe8000000000000000000000000000bb00"/146], 0x1dc}}, 0x0)
r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r7, &(0x7f0000000000)={0x2a, 0x1, 0x7ffe}, 0xc)
writev(r7, &(0x7f0000000380)=[{&(0x7f0000001080)='e', 0x1}], 0x1)

1.244722014s ago: executing program 1 (id=899):
r0 = syz_open_procfs(0x0, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nouser_xattr}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r2 = socket(0x200000000000011, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
set_robust_list(&(0x7f00000002c0)={0x0, 0x9f}, 0x18)
openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/4096, 0x1000}, 0x2}], 0x1, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0xa5, 0x3a, 0x3, 0x0, @loopback, @mcast1, 0x7800, 0x8000, 0x800000}})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
setsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000b00)="9d4e7afb888d33f64ef76ae6508ec683e13cecb6bba3d9d6d32ce37c248bb512a69a08a2b930475d9c2ab6a451d0c22659778610b9616f70a1e814e1aca779b581d59a36fc1e63a1c153efc9200dcadeb0", 0x51)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="184e04"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$P9_RCREATE(r0, &(0x7f0000000940)={0x18, 0x73, 0x1, {{0x1, 0x0, 0x6}, 0x6}}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x7b, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r7 = openat(r1, &(0x7f00000007c0)='./file1\x00', 0x80000, 0x10a)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000980), 0x301480, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x1f, &(0x7f0000000a00)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x40, 0x42, &(0x7f00000001c0)=""/66, 0x41100, 0x64, '\x00', r5, @fallback=0x25, r0, 0x8, &(0x7f0000000340)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x7, 0x4, 0x4414}, 0x10, r6, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[r0, r0, r0, r0, r0, r7, r0], &(0x7f0000000840)=[{0x3, 0x2, 0xb, 0x5}], 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x0, &(0x7f00000000c0)})
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'veth1_to_team\x00', 0x4}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1b7883, 0x0)

1.196023274s ago: executing program 4 (id=900):
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x541b, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000004880)=ANY=[@ANYBLOB="30ea00002e0000009c0000000000000825000000001c0000950027a8ea000d00f9ffffffffffffffddbdc37fe8e0e64b2c15d5641d5754a32c5c625a3f16954e46261213d28847d66b045eefb3842540c2e98726dbe4092d83f65c2a343780c30f1dfae9145564edccf4ed23d5fbb12bde191da16a579b064efd3b51a5c84b72f18554a97b45e27958c2b451864e9b1a9230cbb74324bfb3a4ff560116dce0b5d0a15d023ae1c8d8f3b8b54d3f097759abf45fee336224ec04de9fca4378bd1ae05bc25d11b2f0e077f3e5aec50a09a3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000340)=ANY=[@ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = msgget$private(0x0, 0x120)
msgrcv(r6, 0x0, 0x2c, 0x3, 0x3000)
msgctl$IPC_RMID(r6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
getpriority(0x1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)

1.181707694s ago: executing program 2 (id=901):
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4c7, &(0x7f0000000b80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
unshare(0x62040200)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x90800}, 0x18)
renameat2(r7, &(0x7f00000007c0)='./file1\x00', r0, &(0x7f00000005c0)='./file1\x00', 0x4)

1.086233384s ago: executing program 4 (id=902):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000440105007f000001000000000000000000000000000000006c"], 0x1fc}}, 0x0)

1.085670303s ago: executing program 4 (id=903):
r0 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$inet6(0xa, 0x80002, 0x0)
r3 = syz_io_uring_setup(0x16c2, &(0x7f0000000480)={0x0, 0xbd12, 0x10100, 0x1, 0x327}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000d80), &(0x7f0000000dc0)=r2}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r7, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain)
r8 = socket$kcm(0x10, 0x2, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200), &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x10000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)

1.069319833s ago: executing program 0 (id=904):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x6, 0xfffffff8, 0xc, 0x0, 0x1})
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="e21cc96db3d5cad0c86a0a5166c9ceff8b62f1aa61fd15bf2f4d6f20bcd393f805ec029a1418977163ab327b05946de5c89856c8afe5bc7607dab783dccffb2d01d37b2332daf4a389a4864460078e72a0deb20c8ed43bd9a9971330d6ffac923b0ddf1a5aee9bddaa291889d76b9a246609928a7b491de7529639c4b5e97da2ae2c5853264c42b5322d10563d39cc31140b559dffbe008158b8ffbd44167c060dfc6b76c2cd391ed65f0279eeebed6100506a7bef8880574d16429d93afb7ef888bf166cab15fd4475f5b39d423155865346b0e3e3a6ff906a7119d14b17307b144040ff6d610d3d63216ce5d086fdf932398e01fc2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffadf9, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r5}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r6}, 0x18)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2)

966.083723ms ago: executing program 0 (id=905):
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000000030000000000000000000000020000000000000000000000000000020000000000000a0000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

911.990673ms ago: executing program 3 (id=906):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$binfmt_elf64(r0, &(0x7f0000000780)=ANY=[], 0xfd14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000380)=[{&(0x7f0000000000)="85", 0x1}, {0x0, 0x3000}], 0x2, 0x1200, 0x0, 0x3)

400.137371ms ago: executing program 3 (id=907):
signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8)
r0 = syz_io_uring_setup(0x551e, &(0x7f00000000c0)={0x0, 0xc2c0, 0x10, 0x1, 0x3d6}, &(0x7f0000000000), &(0x7f0000000140))
r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000040)=<r2=>0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0)
sendfile(r3, r3, 0x0, 0x6)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=<r4=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) (async)
syz_io_uring_setup(0x551e, &(0x7f00000000c0)={0x0, 0xc2c0, 0x10, 0x1, 0x3d6}, &(0x7f0000000000), &(0x7f0000000140)) (async)
syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000040)) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) (async)
sendfile(r3, r3, 0x0, 0x6) (async)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000005c0)) (async)
syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async)
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) (async)

374.704231ms ago: executing program 1 (id=908):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r0, r0, 0x0, 0xfffe80)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1073b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

307.875051ms ago: executing program 1 (id=909):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000400018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d0000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000b00)={'nat\x00', 0x0, 0x0, 0x0, [0x882a, 0x9, 0x0, 0x80000001, 0x1, 0x1000], 0x3, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
r3 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9d8, 0x8})
io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1)
sync_file_range(r1, 0x1, 0x8000000000000000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r4=>0x0, 0x0, 0x84, 0xff, 0x8, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x20, 0x1, 0x5, 0x9}})
sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000100)=@deltclass={0x8bc, 0x29, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {0x9, 0x6}, {0x3, 0x5}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_RATE={0x6, 0x5, {0xf5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_RATE64={0xc, 0x6, 0x5}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x8, 0x0, 0x1, 0x101, 0x7, 0x59, 0x8, 0x9, 0x8, 0x4, 0x8, 0x66551f72, 0x7c, 0xc, 0xffff912b, 0x7bc, 0x4, 0xd, 0x2, 0x101, 0xe, 0x180000, 0x3, 0x5, 0xbc, 0x91, 0x9, 0x1, 0x76f, 0x865, 0x4, 0x66d, 0x1, 0x0, 0x0, 0xb477, 0x9, 0x3, 0x0, 0x1, 0x6, 0xef6, 0x0, 0xf01a, 0x2, 0xffffffff, 0x40, 0x400, 0x9, 0x5a9073c7, 0x0, 0x7ff, 0x0, 0x1, 0x5, 0x4, 0x8000, 0x101, 0x5, 0x101, 0x4577, 0x8, 0x8000, 0x8, 0x7fffffff, 0xc, 0x3a7, 0xfffffffe, 0xc2a, 0x6, 0x8, 0x4809, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0xff, 0xe, 0x8, 0x1, 0xfff, 0xfffffffd, 0x3, 0x1, 0x0, 0x2, 0xd827, 0x7cf, 0x71, 0x5, 0x2, 0x80, 0x8, 0x800, 0x8, 0x1, 0x2, 0x4, 0x6, 0x80000001, 0x8, 0x7, 0xe, 0xfffff841, 0x1ff, 0x8000, 0x9, 0x1, 0x16c, 0xff, 0xd0a7, 0x5, 0x3, 0x9, 0x7fff, 0x0, 0x3, 0x4, 0x5, 0x6, 0x5, 0x2, 0x8, 0x7, 0x1, 0x8, 0xfffffffa, 0x8, 0x0, 0x9, 0x5, 0x2, 0x4000, 0x9, 0x2, 0xfffffff8, 0x5, 0xb, 0xc, 0x6, 0x9, 0xe25, 0x40, 0x1, 0x247, 0xfffffffa, 0xc, 0x80000000, 0x6, 0x7f, 0x6, 0x8, 0xeb23, 0xcdde, 0x1, 0x6, 0x10, 0x1, 0x4, 0x3, 0x7, 0x7fff, 0x2, 0xb, 0xa, 0x5, 0x31e, 0x0, 0x4, 0xffffffff, 0x6, 0xb3, 0x9, 0x4, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x0, 0x9, 0x6, 0x10a, 0xffffff36, 0xf, 0x6, 0x4, 0x9, 0x4, 0xcb5e, 0x100, 0x8, 0x80, 0x5, 0x74b9, 0x7, 0x7, 0x0, 0xac, 0x1, 0xc56e, 0xf3e9, 0x7, 0xfff, 0xfffffc01, 0x1, 0x0, 0x7, 0x29, 0x86cc, 0x3, 0x2, 0xfffff000, 0x3ff, 0xe649, 0x80000001, 0x7ff, 0x37e0, 0x101, 0x2faa, 0x7, 0x4, 0x1, 0x8, 0x2, 0x9, 0x9, 0x800, 0x4, 0x0, 0x0, 0xc7, 0x8, 0x7eae, 0x9, 0x1, 0x0, 0x3, 0x9, 0x7, 0x3ff, 0x5, 0x4, 0x0, 0x401, 0x5, 0xf0, 0x3, 0x200, 0x5, 0x0, 0x6, 0xded, 0x38]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffff9, 0x1, 0x4, 0x2, 0xd, 0x1, 0x8, 0xffff003e, 0x0, 0x1a, 0x2, 0x1, 0x7ff, 0x5, 0x35e8, 0x4, 0x80000000, 0x8, 0x2, 0xffff, 0x2, 0x5, 0x1, 0x48ba, 0x9, 0x8, 0x10, 0x2, 0x6, 0xff, 0x6e1c, 0x7, 0x8, 0x7, 0x1, 0x80000000, 0xfffffff8, 0xa, 0x6, 0x3, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8, 0xffff6ea2, 0x5, 0x7, 0x1, 0x0, 0x2, 0x7ff, 0x1, 0x1, 0x4, 0x40, 0x58, 0x4, 0x0, 0x20, 0x7, 0x0, 0x101, 0x32a9ec45, 0x4000, 0x8, 0xff, 0x8001, 0x5, 0xfffffffe, 0xf, 0x9, 0x7, 0xe2cf, 0x2, 0xc6, 0x0, 0x2, 0x2, 0x0, 0xfffffff8, 0x280, 0xf, 0x6, 0xe967, 0x19c, 0x27e, 0x10000, 0x1, 0x4f, 0x4, 0x8, 0x2, 0x6, 0x4d, 0xcf, 0x933d, 0xffff, 0x5, 0x40, 0x8, 0x7, 0x8266, 0x9, 0x8, 0x4, 0xf, 0x4, 0x0, 0x906a79f8, 0x19d, 0x7, 0x6, 0x3, 0x0, 0x7, 0x1ff, 0x13394f0a, 0xffff7fff, 0x10000, 0xa6dc, 0x5, 0xc, 0x9, 0x10001, 0x4, 0x3, 0x4, 0x9, 0x0, 0x1, 0x2, 0x9, 0xfff, 0x8001, 0x7, 0xa, 0x24000000, 0x8, 0x5, 0x7, 0x7, 0x800, 0x2, 0x3, 0x7, 0xfffff92e, 0x9, 0xe94, 0x1, 0x5, 0x6, 0x9, 0xf, 0x1, 0x1000000, 0x1d3e7f51, 0x10, 0x400, 0x6, 0x9, 0x2, 0xfff, 0xcd0, 0x81, 0xbf, 0x10, 0x1, 0x7, 0x0, 0x7, 0x1, 0x9, 0x250, 0x7, 0x6, 0xffffff6f, 0xfffffff7, 0x3, 0xfffff716, 0x5, 0x3, 0x80000001, 0x6e, 0x1, 0x8, 0x2, 0x3, 0x3, 0x1e, 0xf, 0x7, 0x9, 0x4, 0x7, 0x80000001, 0x0, 0xc, 0x8, 0x8, 0x3, 0x492, 0x6, 0x8, 0xff, 0x1, 0xb244, 0x8, 0x2, 0x3, 0x1, 0x365, 0x8, 0x5548, 0x5, 0x10000, 0x2, 0xfffffff9, 0x3, 0x2, 0x8, 0xcaa, 0xffffffff, 0xf0d3, 0x5dd7, 0x9, 0xe3, 0x401, 0xd4cc, 0xf7, 0x107, 0x401, 0x6, 0x4, 0x72bc, 0xcd, 0xd284, 0x1, 0x3, 0x3ff, 0x1, 0x9, 0x8235, 0x55bd, 0x7, 0xcde, 0x8, 0x5, 0x7fffffff, 0x6, 0x8fda, 0x1, 0x2, 0x43]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x1a}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)

267.235371ms ago: executing program 2 (id=910):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x71fe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close(r1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

243.42628ms ago: executing program 4 (id=911):
io_setup(0x4, &(0x7f0000000140)=<r0=>0x0)
io_pgetevents(r0, 0x1, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14, 0x180000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0xc00, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000580)={<r4=>0xffffffffffffffff, 0x100000000, 0x7, 0x9})
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = eventfd(0x9)
io_submit(r0, 0x5, &(0x7f0000000700)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000240)="4a22da36a2b32c27d5bb77af2d85aded2e56b3fb7662571d3290cb1201635dd47cd94f19ac52925459cee49037082646ae9c6351c7c7485661bf335ff6bd9b41c469e7235bc4f21601afbc676ba6b01763319fa4964d95c602e15c36d76309df4c15892c4498e4731442bcc7acaa94f6955d5b398396586ca0d02931d0f1f07cd15d138aa2417c8e1a0646cc3fea56b3a66016f99763284c2d2d518305ac37313fa57b9141b29c51a299d03f853008e53289615b4397cbdd9a24ff9219467586768aee4932bea131d3451a3cf3fee36cc78a221500374291ce4876aeb74f21d48cf4406a7ac52594146e6bff2d26e168a32bb43ebb", 0xf5, 0xfffffffffffffffe, 0x0, 0x2, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f0000000380)="c777cddef0e5ba5caa9c802f83778b1fdbe489e3f5d4421317b4a5611f238c951c4f1674bef75d25499bd4dfaa67e067b5f865b2d7ad879e7f0a296812cb1d1bc334617f0783e7ffaabf0d6bde15", 0x4e, 0x3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xfc01, r3, &(0x7f0000000500)="b0d9d1cf40a4ab5872683fc40c12626f59832661af4176a84af5d2af089e14", 0x1f, 0x2177}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f00000005c0)="4917281919ef1a1fde142e97c23b73dfdbb6d1b573ef455a19bb141c3a529b80f91199ac0df266ac8cb925249abeda5dc88eb08dc16e5a4c9ddefcb4470f50b65bc2f3ca7a3df87e3afdf4fd7bcc1e3c6e57", 0x52, 0x8000000000000000, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x75, r5, &(0x7f0000000680)="360c2713c6abb600f39c176fc1dace1b7f147bd9822fda12976ab587a4", 0x1d, 0x6, 0x0, 0x2, r6}])
r7 = io_uring_setup(0x7967, &(0x7f00000000c0)={0x0, 0x3b5c, 0x8000, 0x0, 0x310})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x50, r7, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055120100000016009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10)
r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0xa, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000001480)={0x3, 0x80, 0x9f, 0x9, 0x9, 0x49, 0x0, 0x100000000, 0x180380, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_config_ext={0x8, 0x3}, 0x900, 0x1, 0xffff, 0x8, 0x10, 0x1000, 0x5, 0x0, 0x6})
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001200050100"], 0x40}}, 0x0)

131.88945ms ago: executing program 1 (id=912):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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")
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
lseek(0xffffffffffffffff, 0x2, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0)
close(0xffffffffffffffff)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2})
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0xa, 0x0, "3e02cc40219ac4b62e46dbd948bb3c3851dac571e570a86ed46588d9921836158a20117ce6a7add63a21178f8592199798b793362dc50881ea54a37c1efe43a821c7be7cdb86b521d783aa51603bdd58"}, 0xd8)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0)

0s ago: executing program 4 (id=913):
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64)

kernel console output (not intermixed with test programs):

735909668.755:1872): avc:  denied  { map } for  pid=4556 comm="syz.4.295" path="/51/file0/cpu.stat" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.509040][   T29] audit: type=1400 audit(1735909668.755:1873): avc:  denied  { execute } for  pid=4556 comm="syz.4.295" path="/51/file0/cpu.stat" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.549513][ T4563] loop4: detected capacity change from 0 to 1024
[   57.566307][ T4565] netlink: 'syz.0.296': attribute type 10 has an invalid length.
[   57.567483][   T29] audit: type=1326 audit(1735909668.845:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x0
[   57.654680][   T29] audit: type=1326 audit(1735909668.925:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.658018][ T4567] loop2: detected capacity change from 0 to 512
[   57.678217][   T29] audit: type=1326 audit(1735909668.925:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.708024][   T29] audit: type=1326 audit(1735909668.925:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.731383][   T29] audit: type=1326 audit(1735909668.925:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.754914][   T29] audit: type=1326 audit(1735909668.925:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.778331][   T29] audit: type=1326 audit(1735909668.925:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.802254][   T29] audit: type=1326 audit(1735909668.925:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4564 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   57.895764][ T4567] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[   57.904372][ T4563] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   57.906262][ T3374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   57.946495][ T4563] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   57.958855][ T4563] EXT4-fs (loop4): This should not happen!! Data will be lost
[   57.958855][ T4563] 
[   57.968700][ T4563] EXT4-fs (loop4): Total free blocks count 0
[   57.974729][ T4563] EXT4-fs (loop4): Free/Dirty block details
[   57.980680][ T4563] EXT4-fs (loop4): free_blocks=68451041280
[   57.986521][ T4563] EXT4-fs (loop4): dirty_blocks=64
[   57.991655][ T4563] EXT4-fs (loop4): Block reservation details
[   57.997720][ T4563] EXT4-fs (loop4): i_reserved_data_blocks=4
[   58.007362][ T4563] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   58.019642][ T4563] EXT4-fs (loop4): This should not happen!! Data will be lost
[   58.019642][ T4563] 
[   58.043003][ T4581] tmpfs: Bad value for 'mpol'
[   58.089014][ T4584] netlink: 'syz.0.303': attribute type 10 has an invalid length.
[   58.122426][ T4584] team0: Device hsr_slave_0 failed to register rx_handler
[   58.225206][ T4599] loop4: detected capacity change from 0 to 512
[   58.298143][ T4599] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.316524][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'.
[   58.329047][ T4604] loop3: detected capacity change from 0 to 128
[   58.342884][ T4604] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   58.472939][ T4608] netlink: 100 bytes leftover after parsing attributes in process `syz.0.308'.
[   58.621785][ T4621] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   58.636387][ T4621] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   58.648722][ T4621] EXT4-fs (loop4): This should not happen!! Data will be lost
[   58.648722][ T4621] 
[   58.658454][ T4621] EXT4-fs (loop4): Total free blocks count 0
[   58.664467][ T4621] EXT4-fs (loop4): Free/Dirty block details
[   58.670448][ T4621] EXT4-fs (loop4): free_blocks=39626
[   58.675872][ T4621] EXT4-fs (loop4): dirty_blocks=16
[   58.681012][ T4621] EXT4-fs (loop4): Block reservation details
[   58.687042][ T4621] EXT4-fs (loop4): i_reserved_data_blocks=16
[   58.723680][ T4604] syz.3.316: attempt to access beyond end of device
[   58.723680][ T4604] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128
[   58.737207][ T4604] buffer_io_error: 1527 callbacks suppressed
[   58.737220][ T4604] Buffer I/O error on dev loop3, logical block 128, lost async page write
[   58.766557][ T4616] lo speed is unknown, defaulting to 1000
[   58.834298][ T4616] lo speed is unknown, defaulting to 1000
[   58.840477][ T4616] lo speed is unknown, defaulting to 1000
[   58.852907][ T4616] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   58.884070][ T4624] netlink: 'syz.2.312': attribute type 10 has an invalid length.
[   58.911561][ T4616] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   58.917699][ T4624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.929002][ T1776] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   58.935695][ T4624] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   58.951986][ T4616] lo speed is unknown, defaulting to 1000
[   58.964520][ T4616] lo speed is unknown, defaulting to 1000
[   58.972637][ T4616] lo speed is unknown, defaulting to 1000
[   58.984150][ T4616] lo speed is unknown, defaulting to 1000
[   58.992055][ T4616] lo speed is unknown, defaulting to 1000
[   58.998588][ T4616] lo speed is unknown, defaulting to 1000
[   59.030269][ T4634] loop3: detected capacity change from 0 to 1024
[   59.127870][ T4634] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   59.150916][ T4634] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   59.163580][ T4634] EXT4-fs (loop3): This should not happen!! Data will be lost
[   59.163580][ T4634] 
[   59.173411][ T4634] EXT4-fs (loop3): Total free blocks count 0
[   59.179455][ T4634] EXT4-fs (loop3): Free/Dirty block details
[   59.185413][ T4634] EXT4-fs (loop3): free_blocks=68451041280
[   59.191260][ T4634] EXT4-fs (loop3): dirty_blocks=64
[   59.196427][ T4634] EXT4-fs (loop3): Block reservation details
[   59.202439][ T4634] EXT4-fs (loop3): i_reserved_data_blocks=4
[   59.209241][ T4634] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   59.218600][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'.
[   59.221500][ T4634] EXT4-fs (loop3): This should not happen!! Data will be lost
[   59.221500][ T4634] 
[   59.302455][ T4665] tmpfs: Bad value for 'mpol'
[   59.401428][ T4673] netlink: 'syz.2.328': attribute type 10 has an invalid length.
[   59.466303][ T4682] loop3: detected capacity change from 0 to 512
[   59.513680][ T4682] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.670421][ T4695] loop0: detected capacity change from 0 to 256
[   60.359985][ T4699] lo speed is unknown, defaulting to 1000
[   60.456345][ T4696] lo speed is unknown, defaulting to 1000
[   60.530347][ T1776] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   60.546416][ T4699] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   60.560990][ T4699] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   60.573406][ T4699] EXT4-fs (loop3): This should not happen!! Data will be lost
[   60.573406][ T4699] 
[   60.583121][ T4699] EXT4-fs (loop3): Total free blocks count 0
[   60.589178][ T4699] EXT4-fs (loop3): Free/Dirty block details
[   60.589649][ T4695] /dev/loop0: Can't open blockdev
[   60.595074][ T4699] EXT4-fs (loop3): free_blocks=39626
[   60.595094][ T4699] EXT4-fs (loop3): dirty_blocks=16
[   60.610666][ T4699] EXT4-fs (loop3): Block reservation details
[   60.616704][ T4699] EXT4-fs (loop3): i_reserved_data_blocks=16
[   60.710628][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'.
[   60.736654][ T4695] syzkaller1: entered allmulticast mode
[   60.943808][ T4719] loop2: detected capacity change from 0 to 512
[   60.975677][ T4720] syz.0.341[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.975772][ T4720] syz.0.341[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   60.995985][ T4722] tmpfs: Bad value for 'mpol'
[   61.023064][ T4719] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   61.037097][ T4725] netlink: 52 bytes leftover after parsing attributes in process `syz.0.341'.
[   61.049300][ T4720] syz.0.341[4720] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   61.049833][ T4719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   61.072034][ T4719] System zones: 1-12
[   61.077176][ T4719] EXT4-fs (loop2): orphan cleanup on readonly fs
[   61.095743][ T4719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.342: bg 0: block 361: padding at end of block bitmap is not set
[   61.123619][ T4515] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.124502][ T4719] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[   61.141593][ T4719] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.342: attempt to clear invalid blocks 33619980 len 1
[   61.160325][ T4515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.178962][ T4719] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.342: invalid indirect mapped block 1811939328 (level 0)
[   61.182319][ T4515] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.208409][ T4728] netlink: 'syz.4.345': attribute type 10 has an invalid length.
[   61.215043][ T4515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.231725][ T4735] loop0: detected capacity change from 0 to 512
[   61.241481][ T4719] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.342: invalid indirect mapped block 2 (level 2)
[   61.242132][ T4735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   61.266561][ T4719] EXT4-fs (loop2): 1 truncate cleaned up
[   61.270146][ T4738] loop3: detected capacity change from 0 to 512
[   61.285104][ T4719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.342'.
[   61.307563][ T4735] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.337303][ T4738] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   61.612504][ T4766] lo speed is unknown, defaulting to 1000
[   61.694040][ T4766] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   61.708599][ T4766] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   61.720946][ T4766] EXT4-fs (loop3): This should not happen!! Data will be lost
[   61.720946][ T4766] 
[   61.730848][ T4766] EXT4-fs (loop3): Total free blocks count 0
[   61.736891][ T4766] EXT4-fs (loop3): Free/Dirty block details
[   61.742803][ T4766] EXT4-fs (loop3): free_blocks=39626
[   61.748679][ T4766] EXT4-fs (loop3): dirty_blocks=16
[   61.753812][ T4766] EXT4-fs (loop3): Block reservation details
[   61.760131][ T4766] EXT4-fs (loop3): i_reserved_data_blocks=16
[   61.801219][ T4762] SELinux:  Context system_u:object_r:syslog_conf_t:s0 is not valid (left unmapped).
[   62.192267][ T4772] loop1: detected capacity change from 0 to 2048
[   62.253568][ T4772]  loop1: p1 < > p4
[   62.271230][ T4787] netlink: 'syz.3.363': attribute type 10 has an invalid length.
[   62.292829][ T4772] loop1: p4 size 8388608 extends beyond EOD, truncated
[   62.336957][ T2999]  loop1: p1 < > p4
[   62.345752][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated
[   62.361039][ T4794] loop2: detected capacity change from 0 to 256
[   62.385818][ T4792] ip6_vti0: entered promiscuous mode
[   62.391655][ T4792] ip6_vti0: left promiscuous mode
[   62.477630][ T4801] netlink: 100 bytes leftover after parsing attributes in process `syz.3.367'.
[   62.509368][ T4807] bond2: entered promiscuous mode
[   62.514444][ T4807] bond2: entered allmulticast mode
[   62.541058][ T4807] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.571000][ T2999]  loop1: p1 < > p4
[   62.575729][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated
[   62.606852][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   62.610988][ T4807] bond2 (unregistering): Released all slaves
[   62.624165][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   62.628678][ T4813] loop0: detected capacity change from 0 to 764
[   62.650584][ T4818] loop3: detected capacity change from 0 to 1024
[   62.671320][ T4813] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   62.744856][ T4818] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   62.760619][ T4818] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   62.773051][ T4818] EXT4-fs (loop3): This should not happen!! Data will be lost
[   62.773051][ T4818] 
[   62.782765][ T4818] EXT4-fs (loop3): Total free blocks count 0
[   62.789514][ T4818] EXT4-fs (loop3): Free/Dirty block details
[   62.795473][ T4818] EXT4-fs (loop3): free_blocks=68451041280
[   62.801423][ T4818] EXT4-fs (loop3): dirty_blocks=64
[   62.806573][ T4818] EXT4-fs (loop3): Block reservation details
[   62.812673][ T4818] EXT4-fs (loop3): i_reserved_data_blocks=4
[   62.819737][ T4818] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   62.831973][ T4818] EXT4-fs (loop3): This should not happen!! Data will be lost
[   62.831973][ T4818] 
[   62.846328][   T29] kauditd_printk_skb: 280 callbacks suppressed
[   62.846345][   T29] audit: type=1400 audit(1735909674.125:2162): avc:  denied  { mount } for  pid=4824 comm="syz.1.376" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   62.896641][   T29] audit: type=1400 audit(1735909674.165:2163): avc:  denied  { create } for  pid=4832 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   62.918022][   T29] audit: type=1400 audit(1735909674.165:2164): avc:  denied  { connect } for  pid=4832 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.949596][   T29] audit: type=1400 audit(1735909674.225:2165): avc:  denied  { read } for  pid=4832 comm="syz.0.377" dev="sockfs" ino=8046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   62.971165][   T29] audit: type=1400 audit(1735909674.225:2166): avc:  denied  { append } for  pid=4832 comm="syz.0.377" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   62.995857][   T29] audit: type=1400 audit(1735909674.225:2167): avc:  denied  { getopt } for  pid=4834 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.029932][ T4835] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.087106][ T4835] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.101003][ T4843] netlink: 'syz.3.378': attribute type 10 has an invalid length.
[   63.156959][ T4835] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.206874][ T4835] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.247571][ T4847] pim6reg0: tun_chr_ioctl cmd 1074025681
[   63.280630][ T4850] netlink: 100 bytes leftover after parsing attributes in process `syz.3.382'.
[   63.290893][ T4835] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.303188][ T4835] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.315247][ T4835] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.343959][ T4835] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.393610][   T29] audit: type=1326 audit(1735909674.665:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b25e5d29 code=0x7ffc0000
[   63.430016][ T4848] loop1: detected capacity change from 0 to 256
[   63.436359][   T29] audit: type=1326 audit(1735909674.705:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f42b25e5d29 code=0x7ffc0000
[   63.460334][   T29] audit: type=1326 audit(1735909674.705:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b25e5d29 code=0x7ffc0000
[   63.485012][   T29] audit: type=1326 audit(1735909674.705:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4853 comm="syz.3.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42b25e5d29 code=0x7ffc0000
[   63.508167][ T4848] FAT-fs (loop1): codepage cp936 not found
[   63.558152][ T4866] loop3: detected capacity change from 0 to 512
[   63.568877][ T3376] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4
[   63.576624][ T3376] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2
[   63.584886][ T3376] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3
[   63.593696][ T3376] hid-generic 0000:3000000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[   63.605273][ T4866] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[   63.666060][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   63.783738][ T4885] 9pnet_fd: Insufficient options for proto=fd
[   63.798262][ T4885] loop4: detected capacity change from 0 to 512
[   63.827232][ T4893] loop3: detected capacity change from 0 to 128
[   63.845540][ T4887] netlink: 'syz.4.394': attribute type 10 has an invalid length.
[   63.852457][ T4893] vfat: Unknown parameter './file1'
[   63.869221][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.876421][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.887044][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.894165][ T4887] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.901533][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.908674][ T4887] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.921926][ T4887] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   63.984340][ T4899] loop4: detected capacity change from 0 to 512
[   64.021404][ T4899] EXT4-fs (loop4): 1 orphan inode deleted
[   64.032215][ T4899] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.043746][ T1776] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1
[   64.115462][ T4906] veth0_to_team: entered promiscuous mode
[   64.121278][ T4906] veth0_to_team: entered allmulticast mode
[   64.284295][ T4925] mmap: syz.0.404 (4925) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   64.303777][ T4925] tipc: Enabling of bearer <eth:teaÍZ,ô> rejected, failed to enable media
[   64.379817][ T4923] lo speed is unknown, defaulting to 1000
[   64.400279][ T4928] loop0: detected capacity change from 0 to 512
[   64.420388][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.405: casefold flag without casefold feature
[   64.457868][ T4928] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.405: couldn't read orphan inode 15 (err -117)
[   64.530378][ T4940] tmpfs: Bad value for 'mpol'
[   64.615271][ T4942] 8021q: VLANs not supported on ipvlan1
[   64.658064][ T4946] loop4: detected capacity change from 0 to 128
[   64.766315][ T4957] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[   64.860407][ T4964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'.
[   64.882533][ T4973] tmpfs: Bad value for 'mpol'
[   64.889535][ T4963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'.
[   64.974149][ T4979] Cannot find del_set index 0 as target
[   65.018727][ T4981] loop0: detected capacity change from 0 to 512
[   65.039880][ T4975] loop4: detected capacity change from 0 to 1764
[   65.041465][ T4981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.083896][ T4981] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.121122][ T4989] netlink: 100 bytes leftover after parsing attributes in process `syz.4.425'.
[   65.174523][ T4995] loop4: detected capacity change from 0 to 128
[   65.207441][ T4992] netlink: 72 bytes leftover after parsing attributes in process `syz.1.424'.
[   65.227038][ T4992] netlink: 'syz.1.424': attribute type 13 has an invalid length.
[   65.274911][ T4998] netlink: 168 bytes leftover after parsing attributes in process `syz.4.427'.
[   65.283970][ T4998] netlink: 17 bytes leftover after parsing attributes in process `syz.4.427'.
[   65.292943][ T4998] netlink: 17 bytes leftover after parsing attributes in process `syz.4.427'.
[   65.321823][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[   65.333237][ T5000] lo: entered allmulticast mode
[   65.353166][ T5006] loop4: detected capacity change from 0 to 1024
[   65.358637][ T5005] loop3: detected capacity change from 0 to 1024
[   65.360606][ T5006] EXT4-fs: quotafile must be on filesystem root
[   65.382987][ T5006] loop4: detected capacity change from 0 to 1024
[   65.388570][ T5007] loop0: detected capacity change from 0 to 512
[   65.395939][ T5006] EXT4-fs: quotafile must be on filesystem root
[   65.412195][ T5007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   65.440893][ T5007] EXT4-fs (loop0): 1 truncate cleaned up
[   65.463640][ T5005] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   65.478687][ T5005] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   65.491096][ T5005] EXT4-fs (loop3): This should not happen!! Data will be lost
[   65.491096][ T5005] 
[   65.500804][ T5005] EXT4-fs (loop3): Total free blocks count 0
[   65.506975][ T5005] EXT4-fs (loop3): Free/Dirty block details
[   65.512895][ T5005] EXT4-fs (loop3): free_blocks=68451041280
[   65.518800][ T5005] EXT4-fs (loop3): dirty_blocks=64
[   65.523951][ T5005] EXT4-fs (loop3): Block reservation details
[   65.530013][ T5005] EXT4-fs (loop3): i_reserved_data_blocks=4
[   65.533503][ T5019] nfs4: Bad value for 'source'
[   65.537464][ T5005] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   65.553614][ T5005] EXT4-fs (loop3): This should not happen!! Data will be lost
[   65.553614][ T5005] 
[   65.579492][ T5024] veth0_to_team: entered promiscuous mode
[   65.585292][ T5024] veth0_to_team: entered allmulticast mode
[   65.622502][ T5028] smc: net device bond0 erased user defined pnetid SYZ0
[   65.679260][ T5038] lo speed is unknown, defaulting to 1000
[   65.709466][ T5041] erspan1: entered promiscuous mode
[   65.743756][ T5047] capability: warning: `syz.3.441' uses 32-bit capabilities (legacy support in use)
[   65.842464][ T5056] loop1: detected capacity change from 0 to 8192
[   65.901181][ T5060] loop1: detected capacity change from 0 to 512
[   65.926639][ T5060] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.445: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[   65.945136][ T5060] EXT4-fs error (device loop1): ext4_quota_enable:7115: comm syz.1.445: Bad quota inode: 3, type: 0
[   65.959050][ T5060] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   65.973993][ T5060] EXT4-fs (loop1): mount failed
[   66.000975][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.008459][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.017116][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.024510][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.031967][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.039429][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.047581][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.054984][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.062475][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.069937][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.078062][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.085485][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.093044][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.132882][ T5065] lo speed is unknown, defaulting to 1000
[   66.230118][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   66.248142][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.256358][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.263815][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.271442][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.278872][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.286972][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.294363][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.301972][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.309401][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.317578][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.325038][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.332842][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.340294][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.348361][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.355860][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.363322][    T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   66.373904][    T9] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID vffffff.fd Device [syz0] on syz1
[   66.442553][ T5074] loop4: detected capacity change from 0 to 1024
[   66.466902][ T5074] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   66.481976][ T5074] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   66.494340][ T5074] EXT4-fs (loop4): This should not happen!! Data will be lost
[   66.494340][ T5074] 
[   66.504189][ T5074] EXT4-fs (loop4): Total free blocks count 0
[   66.510253][ T5074] EXT4-fs (loop4): Free/Dirty block details
[   66.516192][ T5074] EXT4-fs (loop4): free_blocks=68451041280
[   66.522026][ T5074] EXT4-fs (loop4): dirty_blocks=64
[   66.527255][ T5074] EXT4-fs (loop4): Block reservation details
[   66.533250][ T5074] EXT4-fs (loop4): i_reserved_data_blocks=4
[   66.539783][ T5074] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   66.552144][ T5074] EXT4-fs (loop4): This should not happen!! Data will be lost
[   66.552144][ T5074] 
[   66.558205][ T5078] ªªªªªª: renamed from syzkaller0
[   66.649189][ T5083] loop2: detected capacity change from 0 to 512
[   66.668804][ T5083] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.683907][ T5089] loop0: detected capacity change from 0 to 512
[   66.805182][ T5100] tmpfs: Bad value for 'mpol'
[   66.823474][ T5089] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   66.855645][ T5095] loop3: detected capacity change from 0 to 512
[   66.904223][ T5102] lo speed is unknown, defaulting to 1000
[   67.301796][ T5095] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3.
[   67.381185][ T5102] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   67.396389][ T5102] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   67.408734][ T5102] EXT4-fs (loop2): This should not happen!! Data will be lost
[   67.408734][ T5102] 
[   67.418525][ T5102] EXT4-fs (loop2): Total free blocks count 0
[   67.424523][ T5102] EXT4-fs (loop2): Free/Dirty block details
[   67.431260][ T5102] EXT4-fs (loop2): free_blocks=39626
[   67.436782][ T5102] EXT4-fs (loop2): dirty_blocks=16
[   67.442014][ T5102] EXT4-fs (loop2): Block reservation details
[   67.448059][ T5102] EXT4-fs (loop2): i_reserved_data_blocks=16
[   67.541639][ T4948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   67.561545][ T3296] EXT4-fs unmount: 79 callbacks suppressed
[   67.561560][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.591870][ T5117] lo speed is unknown, defaulting to 1000
[   67.672535][ T5117] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   67.687073][ T5117] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   67.699411][ T5117] EXT4-fs (loop0): This should not happen!! Data will be lost
[   67.699411][ T5117] 
[   67.709274][ T5117] EXT4-fs (loop0): Total free blocks count 0
[   67.715266][ T5117] EXT4-fs (loop0): Free/Dirty block details
[   67.721201][ T5117] EXT4-fs (loop0): free_blocks=39626
[   67.726583][ T5117] EXT4-fs (loop0): dirty_blocks=16
[   67.731706][ T5117] EXT4-fs (loop0): Block reservation details
[   67.737718][ T5117] EXT4-fs (loop0): i_reserved_data_blocks=16
[   67.981559][ T5128] __nla_validate_parse: 5 callbacks suppressed
[   67.981576][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'.
[   68.005479][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.040648][ T5128] loop1: detected capacity change from 0 to 512
[   68.047613][ T5133] loop3: detected capacity change from 0 to 512
[   68.062302][ T5128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.076703][ T5136] loop2: detected capacity change from 0 to 1024
[   68.085897][ T5128] EXT4-fs (loop1): orphan cleanup on readonly fs
[   68.109389][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.123317][ T5128] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.462: bg 0: block 248: padding at end of block bitmap is not set
[   68.155603][ T5133] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.166169][ T5128] __quota_error: 275 callbacks suppressed
[   68.166187][ T5128] Quota error (device loop1): write_blk: dquota write failed
[   68.178489][ T5137] loop0: detected capacity change from 0 to 1024
[   68.180133][ T5128] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   68.195671][ T5128] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.462: Failed to acquire dquot type 1
[   68.209773][ T5136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.255544][ T5128] EXT4-fs (loop1): 1 truncate cleaned up
[   68.256779][ T5136] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   68.273205][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.277555][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.289302][ T5136] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   68.313582][ T5136] EXT4-fs (loop2): This should not happen!! Data will be lost
[   68.313582][ T5136] 
[   68.314281][ T5137] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.464: missing EA_INODE flag
[   68.323255][ T5136] EXT4-fs (loop2): Total free blocks count 0
[   68.323276][ T5136] EXT4-fs (loop2): Free/Dirty block details
[   68.347462][ T5136] EXT4-fs (loop2): free_blocks=68451041280
[   68.353330][ T5136] EXT4-fs (loop2): dirty_blocks=64
[   68.358571][ T5136] EXT4-fs (loop2): Block reservation details
[   68.364622][ T5136] EXT4-fs (loop2): i_reserved_data_blocks=4
[   68.367269][ T5137] EXT4-fs (loop0): Remounting filesystem read-only
[   68.373891][ T5136] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   68.408412][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.427842][ T5147] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   68.432849][ T5147] loop4: detected capacity change from 0 to 512
[   68.530487][   T29] audit: type=1400 audit(1735909679.795:2446): avc:  denied  { tracepoint } for  pid=5135 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   68.567791][ T5147] EXT4-fs: Ignoring removed orlov option
[   68.575426][   T29] audit: type=1400 audit(1735909679.845:2447): avc:  denied  { create } for  pid=5146 comm="syz.4.468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161
[   68.576602][   T29] audit: type=1400 audit(1735909679.845:2448): avc:  denied  { associate } for  pid=5146 comm="syz.4.468" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[   68.669001][   T29] audit: type=1400 audit(1735909679.845:2449): avc:  denied  { mounton } for  pid=5146 comm="syz.4.468" path="/93/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616
[   68.672149][ T5147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   68.894888][   T29] audit: type=1400 audit(1735909680.165:2450): avc:  denied  { read } for  pid=5149 comm="syz.1.467" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   68.918038][   T29] audit: type=1400 audit(1735909680.165:2451): avc:  denied  { open } for  pid=5149 comm="syz.1.467" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   68.941718][   T29] audit: type=1400 audit(1735909680.165:2452): avc:  denied  { setopt } for  pid=5149 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   68.943867][ T5147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.961249][   T29] audit: type=1400 audit(1735909680.185:2453): avc:  denied  { ioctl } for  pid=5149 comm="syz.1.467" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[   68.980446][ T5147] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.022048][ T5147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.468: bg 0: block 255: padding at end of block bitmap is not set
[   69.038155][ T5147] EXT4-fs (loop4): Remounting filesystem read-only
[   69.048271][ T5147] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1605: inode #19: comm syz.4.468: cleanup dec ref error -117
[   69.058348][ T5160] loop1: detected capacity change from 0 to 512
[   69.080152][ T5154] lo speed is unknown, defaulting to 1000
[   69.092821][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.101766][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.114536][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.116015][ T5154] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   69.139003][ T5154] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   69.151437][ T5154] EXT4-fs (loop3): This should not happen!! Data will be lost
[   69.151437][ T5154] 
[   69.161189][ T5154] EXT4-fs (loop3): Total free blocks count 0
[   69.167914][ T5154] EXT4-fs (loop3): Free/Dirty block details
[   69.173815][ T5154] EXT4-fs (loop3): free_blocks=39626
[   69.178816][ T5160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.179274][ T5154] EXT4-fs (loop3): dirty_blocks=16
[   69.192930][ T5160] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.197449][ T5154] EXT4-fs (loop3): Block reservation details
[   69.213235][ T5154] EXT4-fs (loop3): i_reserved_data_blocks=16
[   69.242175][ T5168] loop0: detected capacity change from 0 to 512
[   69.251815][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.276090][ T5168] EXT4-fs: Ignoring removed mblk_io_submit option
[   69.297697][ T5168] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   69.353315][ T5168] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.472: corrupted in-inode xattr: e_value out of bounds
[   69.360133][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'.
[   69.368592][ T5168] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.472: couldn't read orphan inode 15 (err -117)
[   69.390416][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.423901][ T5168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.452476][ T5173] lo speed is unknown, defaulting to 1000
[   69.497147][ T5173] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   69.511743][ T5173] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   69.524029][ T5173] EXT4-fs (loop1): This should not happen!! Data will be lost
[   69.524029][ T5173] 
[   69.533906][ T5173] EXT4-fs (loop1): Total free blocks count 0
[   69.539925][ T5173] EXT4-fs (loop1): Free/Dirty block details
[   69.545907][ T5173] EXT4-fs (loop1): free_blocks=39626
[   69.551242][ T5173] EXT4-fs (loop1): dirty_blocks=16
[   69.556440][ T5173] EXT4-fs (loop1): Block reservation details
[   69.562427][ T5173] EXT4-fs (loop1): i_reserved_data_blocks=16
[   69.692082][ T5176] loop4: detected capacity change from 0 to 512
[   69.782806][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.790498][ T5181] loop4: detected capacity change from 0 to 512
[   69.819709][ T5183] tmpfs: Bad value for 'mpol'
[   69.875211][ T5181] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.477: Failed to acquire dquot type 1
[   69.897355][ T5181] EXT4-fs (loop4): 1 truncate cleaned up
[   69.908412][ T5181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.932655][ T5181] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.955052][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.975765][ T5196] veth0_to_team: entered promiscuous mode
[   69.981526][ T5196] veth0_to_team: entered allmulticast mode
[   69.999162][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.134114][ T5206] loop1: detected capacity change from 0 to 1024
[   70.138389][ T5205] loop3: detected capacity change from 0 to 512
[   70.144786][ T5206] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   70.158400][ T5206] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   70.170545][ T5206] JBD2: no valid journal superblock found
[   70.176331][ T5206] EXT4-fs (loop1): Could not load journal inode
[   70.209544][ T5205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.222352][ T5205] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.294881][ T5218] loop1: detected capacity change from 0 to 512
[   70.295161][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.310229][ T5223] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.483: Directory hole found for htree leaf block 0
[   70.330891][ T5225] EXT4-fs error (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.483: Directory hole found for htree leaf block 0
[   70.345569][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.352632][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.376121][ T5218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.422006][ T5218] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   70.434022][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.472721][ T5224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   70.568215][ T5237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.481'.
[   70.744376][ T5249] tmpfs: Bad value for 'mpol'
[   71.036052][ T5252] lo speed is unknown, defaulting to 1000
[   71.175290][ T5252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   71.189829][ T5252] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   71.202181][ T5252] EXT4-fs (loop1): This should not happen!! Data will be lost
[   71.202181][ T5252] 
[   71.212559][ T5252] EXT4-fs (loop1): Total free blocks count 0
[   71.218604][ T5252] EXT4-fs (loop1): Free/Dirty block details
[   71.224546][ T5252] EXT4-fs (loop1): free_blocks=39626
[   71.229965][ T5252] EXT4-fs (loop1): dirty_blocks=16
[   71.235098][ T5252] EXT4-fs (loop1): Block reservation details
[   71.241852][ T5252] EXT4-fs (loop1): i_reserved_data_blocks=16
[   71.306616][ T5256] loop2: detected capacity change from 0 to 1024
[   71.340466][ T5256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.357889][ T4948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   71.374873][ T5256] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   71.425266][ T5273] loop3: detected capacity change from 0 to 2048
[   71.432110][ T5273] ext4: Unknown parameter ''
[   71.456527][ T5256] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   71.468914][ T5256] EXT4-fs (loop2): This should not happen!! Data will be lost
[   71.468914][ T5256] 
[   71.479288][ T5256] EXT4-fs (loop2): Total free blocks count 0
[   71.485288][ T5256] EXT4-fs (loop2): Free/Dirty block details
[   71.491251][ T5256] EXT4-fs (loop2): free_blocks=68451041280
[   71.497089][ T5256] EXT4-fs (loop2): dirty_blocks=64
[   71.502231][ T5256] EXT4-fs (loop2): Block reservation details
[   71.509079][ T5256] EXT4-fs (loop2): i_reserved_data_blocks=4
[   71.546618][ T5273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.497'.
[   71.556403][ T5256] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   71.620148][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.651658][ T5280] loop3: detected capacity change from 0 to 1024
[   71.669794][ T5280] ext4: Unknown parameter 'subj_type'
[   71.706528][ T5283] loop0: detected capacity change from 0 to 512
[   71.743607][ T5283] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.501: iget: special inode unallocated
[   71.766374][ T5283] EXT4-fs (loop0): Remounting filesystem read-only
[   71.773026][ T5283] EXT4-fs (loop0): no journal found
[   71.778330][ T5283] EXT4-fs (loop0): can't get journal size
[   71.791510][ T5283] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   71.801555][ T5289] can0: slcan on ptm0.
[   71.814398][ T5283] EXT4-fs (loop0): failed to initialize system zone (-117)
[   71.844293][ T5283] EXT4-fs (loop0): mount failed
[   71.925601][ T5286] can0 (unregistered): slcan off ptm0.
[   72.017506][ T5316] loop0: detected capacity change from 0 to 512
[   72.068633][ T5316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.084440][ T5316] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.118519][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.163920][ T5316] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.507: mark_inode_dirty error
[   72.217314][ T5316] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.239713][ T5316] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.507: mark_inode_dirty error
[   72.257010][ T5337] loop1: detected capacity change from 0 to 512
[   72.260314][ T5335] loop4: detected capacity change from 0 to 512
[   72.284039][ T5328] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.309636][ T5335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.327759][ T5328] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.507: mark_inode_dirty error
[   72.329161][ T5335] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.359231][ T5337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5337 comm=syz.1.519
[   72.371698][ T5337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5337 comm=syz.1.519
[   72.383152][ T5345] loop3: detected capacity change from 0 to 1024
[   72.389179][ T5328] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.412012][ T5336] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.416504][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.447934][ T5336] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.507: mark_inode_dirty error
[   72.469293][ T5336] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.507: corrupted inode contents
[   72.488026][ T5345] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   72.506670][ T5345] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   72.519078][ T5345] EXT4-fs (loop3): This should not happen!! Data will be lost
[   72.519078][ T5345] 
[   72.529461][ T5345] EXT4-fs (loop3): Total free blocks count 0
[   72.535536][ T5345] EXT4-fs (loop3): Free/Dirty block details
[   72.541498][ T5345] EXT4-fs (loop3): free_blocks=68451041280
[   72.547384][ T5345] EXT4-fs (loop3): dirty_blocks=64
[   72.552533][ T5345] EXT4-fs (loop3): Block reservation details
[   72.559162][ T5345] EXT4-fs (loop3): i_reserved_data_blocks=4
[   72.582318][ T5345] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   72.618550][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.652097][ T5352] loop1: detected capacity change from 0 to 8192
[   72.658914][ T5352] vfat: Unknown parameter '
'
[   72.723612][ T5356] lo speed is unknown, defaulting to 1000
[   72.837434][ T5358] loop1: detected capacity change from 0 to 1024
[   72.845202][ T5356] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   72.859764][ T5356] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   72.872316][ T5356] EXT4-fs (loop4): This should not happen!! Data will be lost
[   72.872316][ T5356] 
[   72.882004][ T5356] EXT4-fs (loop4): Total free blocks count 0
[   72.888173][ T5356] EXT4-fs (loop4): Free/Dirty block details
[   72.894097][ T5356] EXT4-fs (loop4): free_blocks=39626
[   72.899426][ T5356] EXT4-fs (loop4): dirty_blocks=16
[   72.904547][ T5356] EXT4-fs (loop4): Block reservation details
[   72.910689][ T5356] EXT4-fs (loop4): i_reserved_data_blocks=16
[   73.286228][ T4951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   73.331383][ T5358] __quota_error: 109 callbacks suppressed
[   73.331398][ T5358] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[   73.346508][ T5358] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[   73.356361][ T5358] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.516: Failed to acquire dquot type 0
[   73.357776][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.377243][ T5358] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[   73.392215][ T5358] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.516: corrupted inode contents
[   73.414095][ T5358] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.516: mark_inode_dirty error
[   73.440696][ T5358] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.516: corrupted inode contents
[   73.468823][ T5373] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[   73.470663][ T5358] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.516: mark_inode_dirty error
[   73.492437][   T29] audit: type=1400 audit(1735909684.765:2559): avc:  denied  { read } for  pid=5366 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   73.493881][ T5358] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.516: corrupted inode contents
[   73.551775][ T5358] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[   73.560555][ T5358] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.516: corrupted inode contents
[   73.586574][   T29] audit: type=1400 audit(1735909684.865:2560): avc:  denied  { append } for  pid=5377 comm="syz.3.520" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   73.602953][ T5358] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.516: mark_inode_dirty error
[   73.627797][ T5358] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[   73.650214][ T5358] EXT4-fs (loop1): 1 truncate cleaned up
[   73.656371][ T5358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.697424][ T5382] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[   73.726517][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.766945][ T5389] loop2: detected capacity change from 0 to 512
[   73.771644][ T5391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'.
[   73.783410][ T5389] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   73.807179][ T5389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.815274][ T5393] loop0: detected capacity change from 0 to 512
[   73.835126][ T5389] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.526: corrupted inode contents
[   73.847521][ T5391] lo speed is unknown, defaulting to 1000
[   73.861704][ T5389] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.526: mark_inode_dirty error
[   73.875190][ T5393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.881775][ T5389] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.526: corrupted inode contents
[   73.888522][ T5393] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.907689][ T5402] loop3: detected capacity change from 0 to 1024
[   73.919703][ T5402] ext2: Bad value for 'max_dir_size_kb'
[   74.041860][ T5410] loop4: detected capacity change from 0 to 512
[   74.048217][   T29] audit: type=1326 audit(1735909685.315:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.071663][   T29] audit: type=1326 audit(1735909685.315:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.095184][   T29] audit: type=1326 audit(1735909685.315:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.098489][ T5410] EXT4-fs: inline encryption not supported
[   74.118601][   T29] audit: type=1326 audit(1735909685.315:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.148241][   T29] audit: type=1326 audit(1735909685.315:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.171715][   T29] audit: type=1326 audit(1735909685.315:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5408 comm="syz.4.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9079305d29 code=0x7ffc0000
[   74.181794][ T5412] lo speed is unknown, defaulting to 1000
[   74.229107][ T5410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.254631][ T5407] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, 
[   74.254636][ T5410] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.274031][ T5407] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   74.282576][ T5407] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   74.294934][ T5407] EXT4-fs (loop0): This should not happen!! Data will be lost
[   74.294934][ T5407] 
[   74.304683][ T5407] EXT4-fs (loop0): Total free blocks count 0
[   74.310780][ T5407] EXT4-fs (loop0): Free/Dirty block details
[   74.316825][ T5407] EXT4-fs (loop0): free_blocks=39626
[   74.322241][ T5407] EXT4-fs (loop0): dirty_blocks=16
[   74.327402][ T5407] EXT4-fs (loop0): Block reservation details
[   74.332544][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'.
[   74.333392][ T5407] EXT4-fs (loop0): i_reserved_data_blocks=16
[   74.343556][ T5411] lo speed is unknown, defaulting to 1000
[   74.393864][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.434478][ T5422] loop1: detected capacity change from 0 to 1024
[   74.452870][ T5424] loop4: detected capacity change from 0 to 1024
[   74.471821][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.496532][ T5424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.566036][ T5424] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   74.585430][ T5424] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   74.597770][ T5424] EXT4-fs (loop4): This should not happen!! Data will be lost
[   74.597770][ T5424] 
[   74.607581][ T5424] EXT4-fs (loop4): Total free blocks count 0
[   74.613592][ T5424] EXT4-fs (loop4): Free/Dirty block details
[   74.619536][ T5424] EXT4-fs (loop4): free_blocks=68451041280
[   74.625457][ T5424] EXT4-fs (loop4): dirty_blocks=64
[   74.630667][ T5424] EXT4-fs (loop4): Block reservation details
[   74.636745][ T5424] EXT4-fs (loop4): i_reserved_data_blocks=4
[   74.643285][ T5424] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   74.737226][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.751299][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.814351][  T371] tipc: Subscription rejected, illegal request
[   74.828738][ T5444] team0: Device gtp0 is of different type
[   75.030194][ T5448] loop2: detected capacity change from 0 to 8192
[   75.079506][ T5468] loop3: detected capacity change from 0 to 1024
[   75.085770][ T5448]  loop2: p1 p2 p3
[   75.089679][ T5448] loop2: p1 size 67108864 extends beyond EOD, truncated
[   75.104436][ T5448] loop2: p2 start 98631679 is beyond EOD, truncated
[   75.111211][ T5448] loop2: p3 size 423702036 extends beyond EOD, truncated
[   75.156562][ T5468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.172483][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   75.206712][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[   75.208991][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   75.234324][ T5474] loop2: detected capacity change from 0 to 512
[   75.242320][ T5468] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   75.258369][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   75.270702][ T5468] EXT4-fs (loop3): This should not happen!! Data will be lost
[   75.270702][ T5468] 
[   75.280487][ T5468] EXT4-fs (loop3): Total free blocks count 0
[   75.287177][ T5468] EXT4-fs (loop3): Free/Dirty block details
[   75.287633][ T5474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.293181][ T5468] EXT4-fs (loop3): free_blocks=68451041280
[   75.307357][ T5474] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.311489][ T5468] EXT4-fs (loop3): dirty_blocks=64
[   75.311507][ T5468] EXT4-fs (loop3): Block reservation details
[   75.311520][ T5468] EXT4-fs (loop3): i_reserved_data_blocks=4
[   75.311959][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   75.363335][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.504154][ T5483] loop1: detected capacity change from 0 to 512
[   75.511563][ T5483] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[   75.521867][ T5483] EXT4-fs (loop1): group descriptors corrupted!
[   75.540449][ T5479] lo speed is unknown, defaulting to 1000
[   75.569159][ T5479] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   75.583674][ T5479] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   75.596043][ T5479] EXT4-fs (loop2): This should not happen!! Data will be lost
[   75.596043][ T5479] 
[   75.605988][ T5479] EXT4-fs (loop2): Total free blocks count 0
[   75.612212][ T5479] EXT4-fs (loop2): Free/Dirty block details
[   75.618206][ T5479] EXT4-fs (loop2): free_blocks=39626
[   75.623549][ T5479] EXT4-fs (loop2): dirty_blocks=16
[   75.628713][ T5479] EXT4-fs (loop2): Block reservation details
[   75.634740][ T5479] EXT4-fs (loop2): i_reserved_data_blocks=16
[   75.654319][ T5485] syz.1.554[5485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.654468][ T5485] syz.1.554[5485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.675617][ T5485] syz.1.554[5485] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.841841][ T5497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.557'.
[   75.866645][ T5496] netlink: 56 bytes leftover after parsing attributes in process `syz.0.557'.
[   75.956803][ T5506] loop4: detected capacity change from 0 to 512
[   76.015830][ T5496] 9pnet_fd: Insufficient options for proto=fd
[   76.160126][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.185448][ T5506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.198069][ T5506] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.245091][ T5509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'.
[   76.271600][ T5507] netlink: 133492 bytes leftover after parsing attributes in process `syz.3.552'.
[   76.325638][ T5516] vxlan1: entered promiscuous mode
[   76.330863][ T5516] vxlan1: entered allmulticast mode
[   76.397413][   T28] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   76.683002][ T5525] tmpfs: Bad value for 'mpol'
[   76.710302][ T5529] loop3: detected capacity change from 0 to 512
[   76.738497][ T5531] loop2: detected capacity change from 0 to 128
[   76.782158][ T5535] loop3: detected capacity change from 0 to 512
[   76.813092][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.830477][ T5537] pim6reg9: entered allmulticast mode
[   76.839706][ T5531] syz.2.567: attempt to access beyond end of device
[   76.839706][ T5531] loop2: rw=0, sector=121, nr_sectors = 920 limit=128
[   76.904950][ T5535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.962355][ T5535] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.997884][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.009941][ T5548] lo speed is unknown, defaulting to 1000
[   77.051959][ T5550] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.062375][ T5547] lo speed is unknown, defaulting to 1000
[   77.094026][ T5560] tmpfs: Bad value for 'mpol'
[   77.140997][ T5564] smc: net device bond0 applied user defined pnetid SYZ0
[   77.248380][ T5577] loop2: detected capacity change from 0 to 512
[   77.263184][ T5577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   77.298419][ T5577] EXT4-fs (loop2): 1 truncate cleaned up
[   77.306976][ T5577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.327942][ T5582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'.
[   77.533502][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'.
[   77.564193][ T5587] netlink: 96 bytes leftover after parsing attributes in process `syz.1.584'.
[   77.595502][ T5577] tipc: Started in network mode
[   77.600442][ T5577] tipc: Node identity 2d0e7f093f10799c002e, cluster identity 4711
[   77.810381][ T5589] serio: Serial port ptm0
[   77.830401][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.869123][ T5589] netlink: 'syz.0.585': attribute type 10 has an invalid length.
[   77.984632][ T5589] syz_tun: entered promiscuous mode
[   78.013325][ T5589] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   78.069686][ T5595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.587'.
[   78.263418][ T5606] tmpfs: Bad value for 'mpol'
[   78.432726][   T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   78.566098][   T29] kauditd_printk_skb: 270 callbacks suppressed
[   78.566115][   T29] audit: type=1326 audit(1735909689.845:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   78.584283][ T5603] vhci_hcd: invalid port number 0
[   78.595906][   T29] audit: type=1326 audit(1735909689.845:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.2.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   78.691743][ T5611] lo speed is unknown, defaulting to 1000
[   79.312263][ T5637] loop2: detected capacity change from 0 to 128
[   79.328572][ T5636] loop4: detected capacity change from 0 to 1024
[   79.330543][ T5637] FAT-fs (loop2): invalid media value (0x00)
[   79.341095][ T5637] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   79.350444][ T5637] FAT-fs (loop2): Can't find a valid FAT filesystem
[   79.372111][ T5639] loop3: detected capacity change from 0 to 1024
[   79.382517][   T29] audit: type=1326 audit(1735909690.665:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.408548][ T5639] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[   79.411566][   T29] audit: type=1326 audit(1735909690.675:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.419964][ T5636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.441307][   T29] audit: type=1326 audit(1735909690.685:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.441349][   T29] audit: type=1326 audit(1735909690.685:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.441383][   T29] audit: type=1326 audit(1735909690.685:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.441557][   T29] audit: type=1326 audit(1735909690.685:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.441591][   T29] audit: type=1326 audit(1735909690.685:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.441639][   T29] audit: type=1326 audit(1735909690.685:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5642 comm="syz.0.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   79.459229][ T5639] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   79.614314][ T5639] EXT4-fs (loop3): mount failed
[   79.639004][ T5636] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   79.681937][ T5657] tmpfs: Bad value for 'mpol'
[   79.683925][ T5636] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   79.698990][ T5636] EXT4-fs (loop4): This should not happen!! Data will be lost
[   79.698990][ T5636] 
[   79.708698][ T5636] EXT4-fs (loop4): Total free blocks count 0
[   79.714772][ T5636] EXT4-fs (loop4): Free/Dirty block details
[   79.720875][ T5636] EXT4-fs (loop4): free_blocks=68451041280
[   79.726737][ T5636] EXT4-fs (loop4): dirty_blocks=64
[   79.731864][ T5636] EXT4-fs (loop4): Block reservation details
[   79.737910][ T5636] EXT4-fs (loop4): i_reserved_data_blocks=4
[   79.748723][ T4948] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[   79.784953][ T5659] loop3: detected capacity change from 0 to 256
[   79.794001][ T5659] vfat: Unknown parameter 'sh'
[   79.879420][ T5663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'.
[   79.960316][ T5669] lo speed is unknown, defaulting to 1000
[   80.552917][ T5684] xt_hashlimit: max too large, truncated to 1048576
[   80.560985][ T5684] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   80.585350][ T5684] lo speed is unknown, defaulting to 1000
[   80.913615][ T5692] loop4: detected capacity change from 0 to 512
[   80.923763][ T5692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   80.954863][ T5692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.969089][ T5692] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.046895][ T5709] bridge0: port 3(vlan0) entered blocking state
[   81.053247][ T5709] bridge0: port 3(vlan0) entered disabled state
[   81.059971][ T5709] vlan0: entered allmulticast mode
[   81.062005][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.080603][ T5709] vlan0: left allmulticast mode
[   81.153455][ T5725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5725 comm=syz.0.628
[   81.215090][ T5731] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   81.224281][ T5723] loop2: detected capacity change from 0 to 512
[   81.269894][ T5723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.289374][ T5723] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.304795][ T5734] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.317867][ T5740] netlink: 48 bytes leftover after parsing attributes in process `syz.3.632'.
[   81.331251][ T5740] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   81.400433][ T5734] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.611424][ T4951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   81.631386][ T5734] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.677167][ T5734] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.700402][ T5753] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   81.714948][ T5753] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   81.727333][ T5753] EXT4-fs (loop2): This should not happen!! Data will be lost
[   81.727333][ T5753] 
[   81.737013][ T5753] EXT4-fs (loop2): Total free blocks count 0
[   81.743009][ T5753] EXT4-fs (loop2): Free/Dirty block details
[   81.748977][ T5753] EXT4-fs (loop2): free_blocks=39626
[   81.754272][ T5753] EXT4-fs (loop2): dirty_blocks=16
[   81.759407][ T5753] EXT4-fs (loop2): Block reservation details
[   81.765456][ T5753] EXT4-fs (loop2): i_reserved_data_blocks=16
[   81.873725][ T5752] lo speed is unknown, defaulting to 1000
[   81.891122][ T5758] loop3: detected capacity change from 0 to 512
[   81.920560][ T5757] proc: Bad value for 'gid'
[   81.925636][ T5757] xt_TPROXY: Can be used only with -p tcp or -p udp
[   81.933769][ T5758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.946430][ T5758] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.115423][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.154966][ T5785] netlink: 96 bytes leftover after parsing attributes in process `syz.0.643'.
[   82.175027][ T5770] lo speed is unknown, defaulting to 1000
[   82.183114][ T5785] x_tables: duplicate underflow at hook 1
[   82.219556][ T5770] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   82.234198][ T5770] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   82.246501][ T5770] EXT4-fs (loop3): This should not happen!! Data will be lost
[   82.246501][ T5770] 
[   82.256232][ T5770] EXT4-fs (loop3): Total free blocks count 0
[   82.262256][ T5770] EXT4-fs (loop3): Free/Dirty block details
[   82.268232][ T5770] EXT4-fs (loop3): free_blocks=39626
[   82.273569][ T5770] EXT4-fs (loop3): dirty_blocks=16
[   82.278754][ T5770] EXT4-fs (loop3): Block reservation details
[   82.284844][ T5770] EXT4-fs (loop3): i_reserved_data_blocks=16
[   82.295349][ T5794] netlink: 'syz.0.645': attribute type 12 has an invalid length.
[   82.307720][ T5798] loop2: detected capacity change from 0 to 512
[   82.314247][ T5798] EXT4-fs: Ignoring removed oldalloc option
[   82.353046][ T5798] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   82.376251][ T5798] EXT4-fs (loop2): 1 truncate cleaned up
[   82.382557][ T5798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.398858][ T5801] 9pnet_fd: Insufficient options for proto=fd
[   82.409028][ T5801] loop4: detected capacity change from 0 to 512
[   82.479999][ T5818] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   82.493706][ T5798] loop2: detected capacity change from 512 to 64
[   82.510469][ T5798] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 19: block 77:freeing already freed block (bit 76); block bitmap corrupt.
[   82.525774][ T5798] EXT4-fs (loop2): pa ffff8881064f2770: logic 0, phys. 65, len 64
[   82.533759][ T5798] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 12
[   82.569097][ T3296] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -12)
[   82.581857][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.682001][ T5824] lo speed is unknown, defaulting to 1000
[   82.830611][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.106468][ T5832] netlink: 96 bytes leftover after parsing attributes in process `syz.1.657'.
[   83.195952][ T5835] netlink: 96 bytes leftover after parsing attributes in process `syz.1.658'.
[   83.611231][   T29] kauditd_printk_skb: 467 callbacks suppressed
[   83.611255][   T29] audit: type=1400 audit(1735909694.885:3314): avc:  denied  { mount } for  pid=5855 comm="syz.3.664" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   83.613347][ T5859] loop4: detected capacity change from 0 to 512
[   83.658347][   T29] audit: type=1326 audit(1735909694.935:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.682444][   T29] audit: type=1326 audit(1735909694.935:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.706602][   T29] audit: type=1326 audit(1735909694.935:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.730300][   T29] audit: type=1326 audit(1735909694.935:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.739134][ T5859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.756418][   T29] audit: type=1326 audit(1735909694.965:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.790163][ T5859] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.801270][   T29] audit: type=1326 audit(1735909694.965:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.825321][   T29] audit: type=1326 audit(1735909694.965:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.849501][   T29] audit: type=1326 audit(1735909694.965:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.872888][   T29] audit: type=1326 audit(1735909694.965:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5862 comm="syz.0.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79da05d29 code=0x7ffc0000
[   83.897656][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'.
[   83.906638][ T5871] netlink: 'syz.2.667': attribute type 5 has an invalid length.
[   83.917543][ T5871] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.927005][ T5871] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.935760][ T5871] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.944550][ T5871] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.954562][ T5871] vxlan0: entered promiscuous mode
[   84.001764][ T5865] $Hÿ: renamed from bond0 (while UP)
[   84.030844][ T5865] $Hÿ: entered promiscuous mode
[   84.036067][ T5865] bond_slave_0: entered promiscuous mode
[   84.041936][ T5865] bond_slave_1: entered promiscuous mode
[   84.048398][ T5865] batadv0: entered promiscuous mode
[   84.056853][ T5876] loop3: detected capacity change from 0 to 512
[   84.085039][ T5874] lo speed is unknown, defaulting to 1000
[   84.093516][ T5880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=5880 comm=syz.0.671
[   84.114998][ T5874] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   84.117834][ T5878] loop1: detected capacity change from 0 to 1764
[   84.129706][ T5874] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   84.148243][ T5874] EXT4-fs (loop4): This should not happen!! Data will be lost
[   84.148243][ T5874] 
[   84.151800][ T4948] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   84.158076][ T5874] EXT4-fs (loop4): Total free blocks count 0
[   84.158093][ T5874] EXT4-fs (loop4): Free/Dirty block details
[   84.158108][ T5874] EXT4-fs (loop4): free_blocks=39626
[   84.174597][ T5874] EXT4-fs (loop4): dirty_blocks=16
[   84.191051][ T5874] EXT4-fs (loop4): Block reservation details
[   84.197161][ T5874] EXT4-fs (loop4): i_reserved_data_blocks=16
[   84.220411][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.234047][ T5876] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.350656][ T5888] syz.1.673[5888] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.350738][ T5888] syz.1.673[5888] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   84.525643][ T5896] lo speed is unknown, defaulting to 1000
[   84.624357][ T5896] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   84.639042][ T5896] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   84.651398][ T5896] EXT4-fs (loop3): This should not happen!! Data will be lost
[   84.651398][ T5896] 
[   84.661131][ T5896] EXT4-fs (loop3): Total free blocks count 0
[   84.667152][ T5896] EXT4-fs (loop3): Free/Dirty block details
[   84.673075][ T5896] EXT4-fs (loop3): free_blocks=39626
[   84.678480][ T5896] EXT4-fs (loop3): dirty_blocks=16
[   84.683648][ T5896] EXT4-fs (loop3): Block reservation details
[   84.689697][ T5896] EXT4-fs (loop3): i_reserved_data_blocks=16
[   84.784902][ T5899] loop1: detected capacity change from 0 to 128
[   84.932958][ T5921] loop2: detected capacity change from 0 to 2048
[   84.983998][ T5921] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28
[   84.996707][ T5921] EXT4-fs (loop2): This should not happen!! Data will be lost
[   84.996707][ T5921] 
[   85.006442][ T5921] EXT4-fs (loop2): Total free blocks count 0
[   85.006462][ T5921] EXT4-fs (loop2): Free/Dirty block details
[   85.006477][ T5921] EXT4-fs (loop2): free_blocks=0
[   85.006492][ T5921] EXT4-fs (loop2): dirty_blocks=0
[   85.006507][ T5921] EXT4-fs (loop2): Block reservation details
[   85.006520][ T5921] EXT4-fs (loop2): i_reserved_data_blocks=0
[   85.049613][ T5923] SELinux:  Context Ü is not valid (left unmapped).
[   85.061086][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'.
[   85.136005][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'.
[   85.339898][ T5960] netlink: 'syz.2.696': attribute type 1 has an invalid length.
[   85.347679][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[   85.368075][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'.
[   85.380474][ T5958] netlink: 'syz.2.696': attribute type 1 has an invalid length.
[   85.388271][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[   85.400934][ T5972] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   85.417883][ T5958] loop2: detected capacity change from 0 to 1024
[   85.434802][ T5958] EXT4-fs: dax option not supported
[   85.449496][ T5966] ip6tnl2: entered promiscuous mode
[   85.454945][ T5966] ip6tnl2: entered allmulticast mode
[   85.483181][ T5978] loop3: detected capacity change from 0 to 256
[   85.502297][ T5975] vlan2: entered promiscuous mode
[   85.507477][ T5975] vlan2: entered allmulticast mode
[   85.768808][ T6006] loop3: detected capacity change from 0 to 512
[   85.819911][ T6006] EXT4-fs: Ignoring removed oldalloc option
[   85.827315][ T6026] loop4: detected capacity change from 0 to 128
[   85.845488][ T6006] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.712: Parent and EA inode have the same ino 15
[   85.862803][ T6006] EXT4-fs (loop3): Remounting filesystem read-only
[   85.869403][ T6006] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5)
[   85.880745][ T6006] EXT4-fs (loop3): 1 orphan inode deleted
[   85.887025][ T6006] SELinux: (dev loop3, type ext4) getxattr errno 5
[   85.954823][ T6039] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.033330][ T6062] loop3: detected capacity change from 0 to 1024
[   86.053151][ T6062] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.086610][ T6062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.730: bg 0: block 393: padding at end of block bitmap is not set
[   86.102475][ T6062] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117
[   86.115100][ T6062] EXT4-fs (loop3): This should not happen!! Data will be lost
[   86.115100][ T6062] 
[   86.126007][ T6066] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'.
[   86.159757][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.168352][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.223990][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.231547][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.239027][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.248508][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.254031][ T6087] lo speed is unknown, defaulting to 1000
[   86.255958][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.269250][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.277429][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.284870][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.285932][ T6082] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   86.292356][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.307275][ T6082] vhci_hcd: default hub control req: d300 v0000 i0000 l0
[   86.315074][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.322528][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.330039][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.338249][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.343219][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'.
[   86.345687][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.362003][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.370223][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.377690][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.385193][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.392642][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.407271][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.412598][ T6092] loop4: detected capacity change from 0 to 256
[   86.414724][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.429135][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.436584][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.444050][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.451497][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.459738][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.467261][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.474692][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.482181][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.490448][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.497903][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.505312][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.512764][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.520961][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.528559][ T3376] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[   86.537508][ T6092] FAT-fs (loop4): bogus number of FAT sectors
[   86.537630][ T3376] hid-generic 0000:0003:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   86.543659][ T6092] FAT-fs (loop4): Can't find a valid FAT filesystem
[   86.887417][ T6123] loop3: detected capacity change from 0 to 1024
[   86.920564][ T6123] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   86.937682][ T6123] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   86.950116][ T6123] EXT4-fs (loop3): This should not happen!! Data will be lost
[   86.950116][ T6123] 
[   86.959855][ T6123] EXT4-fs (loop3): Total free blocks count 0
[   86.966620][ T6123] EXT4-fs (loop3): Free/Dirty block details
[   86.972556][ T6123] EXT4-fs (loop3): free_blocks=68451041280
[   86.978501][ T6123] EXT4-fs (loop3): dirty_blocks=64
[   86.983630][ T6123] EXT4-fs (loop3): Block reservation details
[   86.989679][ T6123] EXT4-fs (loop3): i_reserved_data_blocks=4
[   87.030961][ T6123] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   87.043317][ T6123] EXT4-fs (loop3): This should not happen!! Data will be lost
[   87.043317][ T6123] 
[   87.252164][ T6131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6131 comm=syz.3.754
[   87.289072][ T6134] loop1: detected capacity change from 0 to 512
[   87.328655][ T6134] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.346133][ T4945] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   87.442794][ T6149] netlink: 'syz.2.757': attribute type 12 has an invalid length.
[   87.586299][ T6153] lo speed is unknown, defaulting to 1000
[   87.998770][ T6164] lo speed is unknown, defaulting to 1000
[   88.262336][ T6166] loop3: detected capacity change from 0 to 1024
[   88.271829][ T6173] loop1: detected capacity change from 0 to 1024
[   88.310449][ T6166] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   88.320256][ T6166] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[   88.385278][ T6173] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   88.435768][ T6166] lo speed is unknown, defaulting to 1000
[   88.439666][ T6173] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   88.453965][ T6173] EXT4-fs (loop1): This should not happen!! Data will be lost
[   88.453965][ T6173] 
[   88.463875][ T6173] EXT4-fs (loop1): Total free blocks count 0
[   88.470765][ T6173] EXT4-fs (loop1): Free/Dirty block details
[   88.476815][ T6173] EXT4-fs (loop1): free_blocks=68451041280
[   88.482731][ T6173] EXT4-fs (loop1): dirty_blocks=64
[   88.488269][ T6173] EXT4-fs (loop1): Block reservation details
[   88.494292][ T6173] EXT4-fs (loop1): i_reserved_data_blocks=4
[   88.495907][ T4123] IPVS: starting estimator thread 0...
[   88.501599][ T6173] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   88.518039][ T6173] EXT4-fs (loop1): This should not happen!! Data will be lost
[   88.518039][ T6173] 
[   88.616185][ T6187] IPVS: using max 2064 ests per chain, 103200 per kthread
[   88.638722][   T29] kauditd_printk_skb: 302 callbacks suppressed
[   88.638740][   T29] audit: type=1400 audit(2000000001.850:3626): avc:  denied  { mounton } for  pid=6191 comm="syz.3.770" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1
[   88.704370][ T6213] xt_hashlimit: max too large, truncated to 1048576
[   88.711297][   T29] audit: type=1400 audit(2000000001.910:3627): avc:  denied  { write } for  pid=6203 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   88.742406][ T6209] netlink: 64 bytes leftover after parsing attributes in process `syz.4.771'.
[   88.853049][ T6230] netlink: 'syz.0.775': attribute type 28 has an invalid length.
[   88.917364][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'.
[   88.926238][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'.
[   89.000704][ T6234] netlink: 'syz.1.777': attribute type 10 has an invalid length.
[   89.269216][ T6193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   89.349627][ T6242] lo speed is unknown, defaulting to 1000
[   89.522825][   T29] audit: type=1326 audit(2000000002.700:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.546267][   T29] audit: type=1326 audit(2000000002.700:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.569750][   T29] audit: type=1326 audit(2000000002.700:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.593153][   T29] audit: type=1326 audit(2000000002.700:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.616539][   T29] audit: type=1326 audit(2000000002.700:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.640088][   T29] audit: type=1326 audit(2000000002.700:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.663474][   T29] audit: type=1326 audit(2000000002.710:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.686907][   T29] audit: type=1326 audit(2000000002.710:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.2.780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd060565d29 code=0x7ffc0000
[   89.761872][ T6250] loop3: detected capacity change from 0 to 512
[   89.809399][ T6250] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.151034][ T6261] lo speed is unknown, defaulting to 1000
[   90.426316][ T6267] loop1: detected capacity change from 0 to 1024
[   90.456940][ T6268] netlink: 'syz.0.786': attribute type 3 has an invalid length.
[   90.464712][ T6268] __nla_validate_parse: 1 callbacks suppressed
[   90.464791][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.786'.
[   90.631325][ T6267] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   90.673456][ T6267] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   90.685838][ T6267] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.685838][ T6267] 
[   90.695636][ T6267] EXT4-fs (loop1): Total free blocks count 0
[   90.701798][ T6267] EXT4-fs (loop1): Free/Dirty block details
[   90.707751][ T6267] EXT4-fs (loop1): free_blocks=68451041280
[   90.713592][ T6267] EXT4-fs (loop1): dirty_blocks=64
[   90.718812][ T6267] EXT4-fs (loop1): Block reservation details
[   90.724813][ T6267] EXT4-fs (loop1): i_reserved_data_blocks=4
[   90.782171][ T6284] xt_NFQUEUE: number of total queues is 0
[   90.826447][ T6267] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   90.838730][ T6267] EXT4-fs (loop1): This should not happen!! Data will be lost
[   90.838730][ T6267] 
[   90.868615][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'.
[   90.905249][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'.
[   90.936375][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'.
[   90.986188][ T6302] lo speed is unknown, defaulting to 1000
[   91.018458][ T6301] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6301 comm=syz.4.799
[   91.027222][ T6307] netlink: 100 bytes leftover after parsing attributes in process `syz.2.797'.
[   91.036962][ T6308] loop1: detected capacity change from 0 to 512
[   91.051748][ T6311] program syz.0.800 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.064966][ T6292] loop3: detected capacity change from 0 to 512
[   91.073549][ T6292] EXT4-fs: Ignoring removed orlov option
[   91.088509][ T6292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.110812][ T6292] EXT4-fs (loop3): orphan cleanup on readonly fs
[   91.112236][ T6316] loop4: detected capacity change from 0 to 512
[   91.118773][ T6308] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.245505][ T6292] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.793: bg 0: block 248: padding at end of block bitmap is not set
[   91.256380][ T6322] loop2: detected capacity change from 0 to 512
[   91.269619][ T6292] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.793: Failed to acquire dquot type 1
[   91.284317][ T6292] EXT4-fs (loop3): 1 truncate cleaned up
[   91.350026][ T6324] lo speed is unknown, defaulting to 1000
[   91.450049][ T6322] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.537448][ T6316] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.700593][ T6316] lo speed is unknown, defaulting to 1000
[   91.736847][ T6316] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   91.751406][ T6316] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   91.763880][ T6316] EXT4-fs (loop4): This should not happen!! Data will be lost
[   91.763880][ T6316] 
[   91.773582][ T6316] EXT4-fs (loop4): Total free blocks count 0
[   91.779759][ T6316] EXT4-fs (loop4): Free/Dirty block details
[   91.785882][ T6316] EXT4-fs (loop4): free_blocks=39626
[   91.791187][ T6316] EXT4-fs (loop4): dirty_blocks=16
[   91.796510][ T6316] EXT4-fs (loop4): Block reservation details
[   91.802516][ T6316] EXT4-fs (loop4): i_reserved_data_blocks=16
[   91.880240][ T6343] 
: renamed from bond0 (while UP)
[   91.911561][ T6343] loop2: detected capacity change from 0 to 512
[   92.019268][ T6343] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #3: comm syz.2.807: pblk 0 bad header/extent: invalid magic - magic a, entries 1, max 4(0), depth 0(0)
[   92.091723][ T6343] EXT4-fs error (device loop2): ext4_quota_enable:7115: comm syz.2.807: Bad quota inode: 3, type: 0
[   92.185953][ T6369] netlink: 100 bytes leftover after parsing attributes in process `syz.1.814'.
[   92.204669][ T6343] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   92.284512][ T6374] netlink: 'syz.4.816': attribute type 1 has an invalid length.
[   92.292344][ T6374] netlink: 224 bytes leftover after parsing attributes in process `syz.4.816'.
[   92.465225][ T6343] EXT4-fs (loop2): mount failed
[   92.760444][ T6382] loop2: detected capacity change from 0 to 512
[   92.762967][ T6384] loop4: detected capacity change from 0 to 1024
[   92.780837][ T6385] loop1: detected capacity change from 0 to 512
[   92.792792][ T6385] EXT4-fs: Ignoring removed i_version option
[   92.798905][ T6385] EXT4-fs: Ignoring removed mblk_io_submit option
[   92.809984][ T6385] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   92.906200][ T6385] EXT4-fs (loop1): 1 truncate cleaned up
[   93.023262][ T6384] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   93.090712][ T6384] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   93.103099][ T6384] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.103099][ T6384] 
[   93.113062][ T6384] EXT4-fs (loop4): Total free blocks count 0
[   93.119463][ T6384] EXT4-fs (loop4): Free/Dirty block details
[   93.125580][ T6384] EXT4-fs (loop4): free_blocks=68451041280
[   93.131423][ T6384] EXT4-fs (loop4): dirty_blocks=64
[   93.136663][ T6384] EXT4-fs (loop4): Block reservation details
[   93.142666][ T6384] EXT4-fs (loop4): i_reserved_data_blocks=4
[   93.149528][ T6217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   93.166456][ T6384] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   93.179489][ T6384] EXT4-fs (loop4): This should not happen!! Data will be lost
[   93.179489][ T6384] 
[   93.258372][ T6397] loop1: detected capacity change from 0 to 128
[   93.331115][ T6402] lo speed is unknown, defaulting to 1000
[   93.365036][ T6403] netlink: 'syz.3.826': attribute type 10 has an invalid length.
[   93.517558][ T6410] loop1: detected capacity change from 0 to 1024
[   93.597952][ T6410] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   93.614724][ T6418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.627127][ T6410] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   93.639527][ T6410] EXT4-fs (loop1): This should not happen!! Data will be lost
[   93.639527][ T6410] 
[   93.649217][ T6410] EXT4-fs (loop1): Total free blocks count 0
[   93.655220][ T6410] EXT4-fs (loop1): Free/Dirty block details
[   93.661170][ T6410] EXT4-fs (loop1): free_blocks=68451041280
[   93.667052][ T6410] EXT4-fs (loop1): dirty_blocks=64
[   93.668522][ T6419] xt_hashlimit: max too large, truncated to 1048576
[   93.672168][ T6410] EXT4-fs (loop1): Block reservation details
[   93.672185][ T6410] EXT4-fs (loop1): i_reserved_data_blocks=4
[   93.687389][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   93.687407][   T29] audit: type=1326 audit(2000000006.890:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.3.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42b25e5d29 code=0x0
[   93.723624][ T6419] lo speed is unknown, defaulting to 1000
[   93.733578][ T6410] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   93.746096][ T6410] EXT4-fs (loop1): This should not happen!! Data will be lost
[   93.746096][ T6410] 
[   93.772891][ T6418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.828577][ T6418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.849449][ T6433] loop2: detected capacity change from 0 to 512
[   93.856151][ T6433] EXT4-fs: Ignoring removed nomblk_io_submit option
[   93.868951][ T6418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.883558][ T6433] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   93.891578][ T6433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=3842c01c, mo2=0002]
[   93.900546][ T6433] System zones: 1-12
[   93.904791][ T6433] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[   93.914418][ T6433] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[   93.934540][ T6418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.946077][ T6418] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.958371][   T29] audit: type=1400 audit(2000000007.170:3681): avc:  denied  { remount } for  pid=6432 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   93.978189][ T6433] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[   93.991349][ T6418] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.009307][ T6433] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 3: comm syz.2.846: lblock 0 mapped to illegal pblock 3 (length 1)
[   94.024287][ T6433] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.846: error -117 reading directory block
[   94.039701][ T6418] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.049428][ T6433] netlink: 112 bytes leftover after parsing attributes in process `syz.2.846'.
[   94.162850][ T6444] loop2: detected capacity change from 0 to 512
[   94.208556][ T6444] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.225039][ T6448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.840'.
[   94.338913][ T6449] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in;
[   94.338913][ T6449]    program syz.0.840 not setting count and/or reply_len properly
[   94.373113][ T6444] lo speed is unknown, defaulting to 1000
[   94.398551][ T6215] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.410468][ T6444] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   94.424974][ T6444] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   94.437281][ T6444] EXT4-fs (loop2): This should not happen!! Data will be lost
[   94.437281][ T6444] 
[   94.446967][ T6444] EXT4-fs (loop2): Total free blocks count 0
[   94.453112][ T6444] EXT4-fs (loop2): Free/Dirty block details
[   94.459213][ T6444] EXT4-fs (loop2): free_blocks=39626
[   94.464602][ T6444] EXT4-fs (loop2): dirty_blocks=16
[   94.469766][ T6444] EXT4-fs (loop2): Block reservation details
[   94.475830][ T6444] EXT4-fs (loop2): i_reserved_data_blocks=16
[   94.502747][ T6452] netlink: 'syz.4.841': attribute type 10 has an invalid length.
[   94.740003][ T6458] loop2: detected capacity change from 0 to 512
[   94.822546][   T29] audit: type=1400 audit(2000000008.000:3682): avc:  denied  { ioctl } for  pid=6465 comm="syz.4.849" path="socket:[14944]" dev="sockfs" ino=14944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   94.860490][ T6473] loop3: detected capacity change from 0 to 512
[   94.937638][ T6474] lo speed is unknown, defaulting to 1000
[   95.049549][ T6473] EXT4-fs: test_dummy_encryption option not supported
[   95.181715][   T29] audit: type=1400 audit(2000000008.330:3683): avc:  denied  { write } for  pid=6475 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   95.201674][   T29] audit: type=1400 audit(2000000008.330:3684): avc:  denied  { getopt } for  pid=6475 comm="syz.1.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   95.302230][ T6481] syz.3.852[6481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.302395][ T6481] syz.3.852[6481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.316764][ T6481] syz.3.852[6481] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   95.384883][ T6469] loop4: detected capacity change from 0 to 164
[   95.410433][   T29] audit: type=1400 audit(2000000008.620:3685): avc:  denied  { name_bind } for  pid=6488 comm="syz.3.853" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   95.435299][ T6458] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.468499][ T6469] syz.4.849: attempt to access beyond end of device
[   95.468499][ T6469] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   95.585479][ T6469] syz.4.849: attempt to access beyond end of device
[   95.585479][ T6469] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   95.609210][ T6469] syz.4.849: attempt to access beyond end of device
[   95.609210][ T6469] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   95.610083][ T6494] loop3: detected capacity change from 0 to 512
[   95.625475][ T6469] syz.4.849: attempt to access beyond end of device
[   95.625475][ T6469] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164
[   95.656451][ T6494] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.692788][ T6498] loop2: detected capacity change from 0 to 512
[   95.734334][ T6498] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.754228][ T6494] lo speed is unknown, defaulting to 1000
[   95.787520][ T6494] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   95.802062][ T6494] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   95.814420][ T6494] EXT4-fs (loop3): This should not happen!! Data will be lost
[   95.814420][ T6494] 
[   95.824218][ T6494] EXT4-fs (loop3): Total free blocks count 0
[   95.830297][ T6494] EXT4-fs (loop3): Free/Dirty block details
[   95.836254][ T6494] EXT4-fs (loop3): free_blocks=39626
[   95.841673][ T6494] EXT4-fs (loop3): dirty_blocks=16
[   95.846903][ T6494] EXT4-fs (loop3): Block reservation details
[   95.852896][ T6494] EXT4-fs (loop3): i_reserved_data_blocks=16
[   95.995587][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[   96.010294][ T6511] netlink: 'syz.2.860': attribute type 10 has an invalid length.
[   96.036488][ T6514] netlink: 'syz.0.861': attribute type 32 has an invalid length.
[   96.037929][   T29] audit: type=1400 audit(2000000009.240:3686): avc:  denied  { ioctl } for  pid=6509 comm="syz.0.861" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14192 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   96.044355][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'.
[   96.122716][ T6522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6522 comm=syz.0.861
[   96.160654][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[   96.169650][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.863'.
[   96.176704][ T6514] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[   96.300806][ T6528] loop3: detected capacity change from 0 to 1024
[   96.333918][ T6528] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   96.351800][ T6528] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   96.364256][ T6528] EXT4-fs (loop3): This should not happen!! Data will be lost
[   96.364256][ T6528] 
[   96.374282][ T6528] EXT4-fs (loop3): Total free blocks count 0
[   96.380352][ T6528] EXT4-fs (loop3): Free/Dirty block details
[   96.386385][ T6528] EXT4-fs (loop3): free_blocks=68451041280
[   96.392230][ T6528] EXT4-fs (loop3): dirty_blocks=64
[   96.397410][ T6528] EXT4-fs (loop3): Block reservation details
[   96.403476][ T6528] EXT4-fs (loop3): i_reserved_data_blocks=4
[   96.420723][ T6535] lo speed is unknown, defaulting to 1000
[   96.473592][ T6538] lo speed is unknown, defaulting to 1000
[   96.600773][ T6528] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   96.613119][ T6528] EXT4-fs (loop3): This should not happen!! Data will be lost
[   96.613119][ T6528] 
[   96.805181][ T6542] loop4: detected capacity change from 0 to 1024
[   96.826323][ T6542] veth0_virt_wifi: entered promiscuous mode
[   96.834615][ T6542] veth0_virt_wifi: left promiscuous mode
[   96.851212][ T6546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.861662][ T6546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.876760][ T6549] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.872'.
[   96.886371][ T6544] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.872'.
[   96.899529][ T6542] SELinux:  Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped).
[   96.913385][   T29] audit: type=1400 audit(2000000010.120:3687): avc:  denied  { relabelto } for  pid=6541 comm="syz.4.871" name="file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0"
[   96.941468][   T29] audit: type=1400 audit(2000000010.120:3688): avc:  denied  { associate } for  pid=6541 comm="syz.4.871" name="file0" dev="tmpfs" ino=922 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_run_t:s0"
[   96.973683][ T6546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.984078][ T6546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.034023][ T6557] netlink: 'syz.2.876': attribute type 10 has an invalid length.
[   97.068226][ T6546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.078623][ T6546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.129682][   T29] audit: type=1400 audit(2000000010.340:3689): avc:  denied  { override_creds } for  pid=6570 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   97.148913][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'.
[   97.183399][ T6573] netlink: 100 bytes leftover after parsing attributes in process `syz.1.882'.
[   97.198050][ T6546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.209103][ T6546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.261141][ T6583] loop2: detected capacity change from 0 to 2048
[   97.284767][ T6583] EXT4-fs (loop2): shut down requested (0)
[   97.296600][ T6546] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.304975][ T6546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.318575][ T6546] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.326954][ T6546] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.339321][ T6546] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.347694][ T6546] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.362108][ T6546] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.370414][ T6546] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.445263][ T6597] loop3: detected capacity change from 0 to 512
[   97.468533][ T6597] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.580468][ T6612] netlink: 'syz.2.893': attribute type 10 has an invalid length.
[   97.691326][ T6614] lo speed is unknown, defaulting to 1000
[   98.024557][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'.
[   98.106814][ T6630] loop1: detected capacity change from 0 to 1024
[   98.114475][ T6630] EXT4-fs: Ignoring removed nobh option
[   98.120205][ T6630] EXT4-fs: Ignoring removed bh option
[   98.125653][ T6630] ext4: Unknown parameter 'nouser_xattr'
[   98.178087][ T6636] loop2: detected capacity change from 0 to 512
[   98.205282][ T6636] EXT4-fs mount: 47 callbacks suppressed
[   98.205302][ T6636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.229154][ T6636] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.381990][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.483546][ T6654] lo speed is unknown, defaulting to 1000
[   98.582324][ T6654] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   98.596986][ T6654] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28
[   98.609392][ T6654] EXT4-fs (loop2): This should not happen!! Data will be lost
[   98.609392][ T6654] 
[   98.619066][ T6654] EXT4-fs (loop2): Total free blocks count 0
[   98.625111][ T6654] EXT4-fs (loop2): Free/Dirty block details
[   98.631098][ T6654] EXT4-fs (loop2): free_blocks=39626
[   98.636439][ T6654] EXT4-fs (loop2): dirty_blocks=16
[   98.641596][ T6654] EXT4-fs (loop2): Block reservation details
[   98.647632][ T6654] EXT4-fs (loop2): i_reserved_data_blocks=16
[   98.688580][ T6658] loop3: detected capacity change from 0 to 1024
[   98.798726][ T6658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.821196][ T6658] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[   98.836456][ T6658] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 16 with error 28
[   98.848956][ T6658] EXT4-fs (loop3): This should not happen!! Data will be lost
[   98.848956][ T6658] 
[   98.858828][ T6658] EXT4-fs (loop3): Total free blocks count 0
[   98.864855][ T6658] EXT4-fs (loop3): Free/Dirty block details
[   98.870935][ T6658] EXT4-fs (loop3): free_blocks=68451041280
[   98.873241][ T6217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   98.876833][ T6658] EXT4-fs (loop3): dirty_blocks=64
[   98.892580][ T6658] EXT4-fs (loop3): Block reservation details
[   98.898611][ T6658] EXT4-fs (loop3): i_reserved_data_blocks=4
[   98.904986][ T6658] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 4 with error 28
[   99.046498][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.909'.
[   99.069902][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.355584][ T6656] ==================================================================
[   99.363733][ T6656] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping
[   99.372375][ T6656] 
[   99.374695][ T6656] write to 0xffffea0004bc3c58 of 8 bytes by task 6683 on cpu 1:
[   99.382347][ T6656]  delete_from_page_cache_batch+0x308/0x700
[   99.388254][ T6656]  truncate_inode_pages_range+0x1c5/0x6b0
[   99.393978][ T6656]  truncate_inode_pages_final+0x55/0x60
[   99.399529][ T6656]  evict+0x305/0x570
[   99.403423][ T6656]  iput+0x42a/0x5b0
[   99.407224][ T6656]  dentry_unlink_inode+0x24f/0x260
[   99.412337][ T6656]  __dentry_kill+0x18b/0x4c0
[   99.416925][ T6656]  shrink_dentry_list+0x1bc/0x3e0
[   99.421957][ T6656]  shrink_dcache_parent+0x43/0x1b0
[   99.427066][ T6656]  do_one_tree+0x16/0xb0
[   99.431307][ T6656]  shrink_dcache_for_umount+0x58/0xe0
[   99.436677][ T6656]  generic_shutdown_super+0x3e/0x220
[   99.441978][ T6656]  kill_anon_super+0x2b/0x140
[   99.446691][ T6656]  kill_litter_super+0x3d/0x50
[   99.451476][ T6656]  ramfs_kill_sb+0x2d/0x40
[   99.455918][ T6656]  deactivate_locked_super+0x7d/0x1c0
[   99.461297][ T6656]  deactivate_super+0x9f/0xb0
[   99.466031][ T6656]  cleanup_mnt+0x268/0x2e0
[   99.470447][ T6656]  __cleanup_mnt+0x19/0x20
[   99.474875][ T6656]  task_work_run+0x13a/0x1a0
[   99.479519][ T6656]  syscall_exit_to_user_mode+0xa8/0x120
[   99.485089][ T6656]  do_syscall_64+0xd6/0x1c0
[   99.489766][ T6656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.495723][ T6656] 
[   99.498070][ T6656] read to 0xffffea0004bc3c58 of 8 bytes by task 6656 on cpu 0:
[   99.505608][ T6656]  folio_mapping+0xa0/0x120
[   99.510127][ T6656]  lru_add+0x89/0x440
[   99.514125][ T6656]  folio_batch_move_lru+0x15f/0x230
[   99.519336][ T6656]  lru_add_drain_cpu+0x7c/0x260
[   99.524198][ T6656]  lru_add_drain+0x26/0x80
[   99.528635][ T6656]  free_pages_and_swap_cache+0x69/0x410
[   99.534190][ T6656]  tlb_flush_mmu+0x2cf/0x440
[   99.538778][ T6656]  unmap_page_range+0x1fc8/0x2380
[   99.543814][ T6656]  unmap_single_vma+0x142/0x1d0
[   99.548684][ T6656]  unmap_vmas+0x18d/0x2b0
[   99.553030][ T6656]  exit_mmap+0x18a/0x680
[   99.557268][ T6656]  __mmput+0x28/0x1d0
[   99.561253][ T6656]  mmput+0x4c/0x60
[   99.564979][ T6656]  exit_mm+0xe4/0x190
[   99.568970][ T6656]  do_exit+0x559/0x17f0
[   99.573137][ T6656]  do_group_exit+0x102/0x150
[   99.577726][ T6656]  get_signal+0xeb9/0x1000
[   99.582150][ T6656]  arch_do_signal_or_restart+0x95/0x4b0
[   99.587704][ T6656]  syscall_exit_to_user_mode+0x62/0x120
[   99.593259][ T6656]  do_syscall_64+0xd6/0x1c0
[   99.597773][ T6656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.603676][ T6656] 
[   99.605989][ T6656] value changed: 0xffff8881171e2fe0 -> 0x0000000000000000
[   99.613101][ T6656] 
[   99.615478][ T6656] Reported by Kernel Concurrency Sanitizer on:
[   99.621680][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.0.905 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0
[   99.633236][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   99.643463][ T6656] ==================================================================
[   99.652602][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   99.664718][ T6682] loop1: detected capacity change from 0 to 8192
[  100.146125][ T6217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.625781][ T6217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.906027][ T6193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration