last executing test programs:

2m19.929219934s ago: executing program 2 (id=401):
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
close(r0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='cpuhp_enter\x00', r4}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xf, &(0x7f0000000080)=@raw=[@generic={0x7, 0x6, 0x7, 0x7, 0xc}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x497}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x209}, @alu={0x7, 0x0, 0xd, 0x6, 0x5, 0xffffffffffffffff, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x6, 0x5, 0xa, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}, @TCA_TBF_RATE64={0xc, 0x4, 0x7b66349e05b59aa}]}}]}, 0x468}}, 0x0)

2m19.070667677s ago: executing program 2 (id=419):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd70006ad99df51400000018000180140002006e657464657673695c2a939a71132281a7526d30000000000000080408003a00"], 0x3c}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x9}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000e995"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)

2m18.573711624s ago: executing program 2 (id=424):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
modify_ldt$read(0x0, 0x0, 0x11)

2m18.368130627s ago: executing program 2 (id=426):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x1000408, &(0x7f0000000840)=ANY=[@ANYBLOB="646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c71756965742c6e6f646f74732c666c7573682c756d61736b3d30303030303030303030303030303030303030303030302c646f74732c646f74732c756d61736b3d30303030303030303030303030303030303037373737372c6e66732c646f74732c747a3d5554432c646f74732c646f74732c6e6f636173652c7379735f696d6d757461626c652c646f74732c00f8a7354494367fe599abb0e9fee8f6cdbd4415cc7bc52b6352f54afc78e51de6b37ae8efbdfe1689a174697f9528b4217d017a472c4c8e00a5cdd06438f130234c66db3e61a4ea6b90f67ddc19c74c6ac93054e1668cf0ff55fdebea678f16269706271797abeebc6b043e549356dfa4c7e8b4e091a7a6cfc601e4e66e509afea6dcc9d274ab27afd6f183050075b86a3ffc8dfcd249c141fd90a5331224d62867d9b87a8e7d0cf56567584e7adde32f223d2a9bd69b39c51152b3a827f49a0f7e23d51ac4128630c7668a0b38090b5c86636aee6face102356400fbbd"], 0xfd, 0x1d0, &(0x7f0000000200)="$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")
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xd]}, 0x8, 0x80000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x16, 0x4, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)

2m18.241653789s ago: executing program 2 (id=427):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', r0}, 0x18)

2m17.956560894s ago: executing program 2 (id=431):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000})
pause()
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fadvise64(0xffffffffffffffff, 0x4, 0x3, 0x5)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c)
r3 = dup2(r2, r2)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000100)=0xf, 0x4)

2m17.934679824s ago: executing program 32 (id=431):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
io_uring_setup(0x4e4d, &(0x7f0000000080)={0x0, 0x5275, 0x80, 0x9, 0x200000})
pause()
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fadvise64(0xffffffffffffffff, 0x4, 0x3, 0x5)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c)
r3 = dup2(r2, r2)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000100)=0xf, 0x4)

4.343749615s ago: executing program 0 (id=2251):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = io_uring_setup(0x22da, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x321})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000200), 0x0)

4.331050845s ago: executing program 0 (id=2254):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r3, 0x0, 0x20)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

4.266971726s ago: executing program 0 (id=2256):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0)
syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440))
r3 = syz_open_dev$loop(&(0x7f0000001b80), 0xff, 0x2)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r4=>0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f200242c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0400000000000000050200798f7a6d5918a52b03", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00\x00'], 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_int(r5, 0x1, 0x30, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14)
timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000001a80)=""/4096, 0x1000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x58, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r9 = dup(r8)
sendmsg$netlink(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}, {0x0}], 0x2}, 0x0)
ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000001bc0)={0xe, 0x8})
syz_clone(0xc002c400, &(0x7f0000000780)="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", 0xfc, &(0x7f00000002c0), &(0x7f0000000480), &(0x7f0000000340)="2752e4296b26af4a902d4bc0c8660ffee495ca008dc3b915a261d4c7a19f5f931211a5fc1292392ad2146eae77ebfae7c3389a1af31314943d4e4abb9170cbbca330c8ba6beb7f764087ea1c7d340fb80bfd4f494280e9746152d0c3fd8300"/108)

3.086001724s ago: executing program 1 (id=2267):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe6, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
unshare(0x60480)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ext4_read_block_bitmap_load\x00', r2}, 0x18)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x44)
fgetxattr(r3, &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
ppoll(&(0x7f0000000d40)=[{}], 0x1, 0x0, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f00000009c0)={0xa458, 0x98, 0x7, 0xf6, 0x8, "0982aa400000000000e6ffffab5b00", 0x5, 0x2})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
syz_clone3(&(0x7f0000000440)={0x13210a500, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x58)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901)
move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r9, 0x0, 0x48c4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)

2.971190886s ago: executing program 5 (id=2270):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
mq_open(0x0, 0x80, 0xa7, 0x0)
r2 = syz_io_uring_setup(0x110b, &(0x7f0000000100)={0x0, 0xd736, 0x400, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r2, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)

2.226584577s ago: executing program 0 (id=2273):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x79, 0x0, &(0x7f0000000380)="899878806a7648616d03fd24b7c0139142c35bad49b78c7b5c4bd7709c4583807089b5b0a87a6a0fd481bdb0c8e59bcc1ff1fcdb879cc22aef225468a7cf3ada28f8eedbecf2e940d9c0aa534e174c38bea1248d89a03d24622558778a028a0745f488f878e47ddbd926f43becf45dc51c320c3685af18be06", 0x0, 0x20632, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES32=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d40"], 0x0)
io_setup(0x81, &(0x7f0000000180)=<r7=>0x0)
r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}])
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000060000000c0000000c0000000a00000010000000000000040000400000002e6161302e5f4e00"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffb7, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

2.131787238s ago: executing program 1 (id=2274):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000850000000e000000850000000500000095000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18)
acct(0x0)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10)
removexattr(0x0, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil)
shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000140)=""/67)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94)
timer_settime(0x0, 0x1, 0x0, 0x0)
syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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")
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/14], 0x48)
capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x85, 0x5, 0x8})

2.086111469s ago: executing program 5 (id=2275):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="0006040000000000fc02000000000000000000000000000000000001"], 0x38)
pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
close_range(r6, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x100000001)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.00561923s ago: executing program 3 (id=2276):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getpid()
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r2, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0)
sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000e00)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="27050200590214000600002fb96dbcf706e1050007008100000088a8accb", 0x1e}, {&(0x7f00000002c0)="fc405593c572ae34", 0x8}], 0x2}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0)
sendfile(r6, r3, 0x0, 0x8)

1.910648172s ago: executing program 1 (id=2277):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@noblock_validity}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@i_version}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000800080000000000180001801400020076657468305f6d6163767461700000000800070001"], 0x3c}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
set_mempolicy(0x1, &(0x7f0000000280)=0x9, 0x80)

1.887255002s ago: executing program 5 (id=2278):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x224, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xea, 0x8, "e5072dc772e058ebd46bd8cf1be6f426b0fdab1bddee81d8ce39f225169fd2ec4c58f64d5a1a1e027796e5fbee8771688423627f51b9f3dfabd5fb3e6e8ef532b49aa3ccf21a3474cc76db45ea757c0073dc6907d769c63ad0b672febb750832786c0d963dea9abc474afbe1cf312ebbd0a452af1c72f672982340518a936d9dfd68ec566307c4e04a6d3a5ae3392d2466cae0d4dd6a103b06cce2ca3c553e3a3bdf651fe4a1e772f17797c1db03d8d2234c90d9b1ded4454a43a3b9bf31c81a91f7d1dca572d0a0898a0d70fac804b623094592b3f6f053520be00a8a1c42ea44139f722f30"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x7a, 0x8, "4324c87ea186443f7da3df1717f2d99ea1393d0341a5db4604188b0a84736e59ead60bb9f27db9a34b876e48aaa1f7db0a67552cd19bedddf66821fdc3181e4882777e773a5763437a9126707862de43eb952c45aee14862ac6b8c86290fc301348176a844ee6702d156fce8321b6165dd40fb929c7a"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x40, 0x8, "86990b54608047d0d2328cb76531a760d50b2b4c45cffd40f4d9c59328f5facbe0991cac827730070c721cdba5ca2b4335b183d1f4d972aeed65f92d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x22, 0x8, "49573110d7588a675c86e4eb10dbf8cb2e086445ab0ad2b71ef33ae01470"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x1f8, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x36, 0xc, "813483d5e2e995d5ce0536f5e31d8d36ae198cbb9d8721eb811e196103380d0e0c8f33235126ed3d577497964e05ac052c08"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_USERDATA={0xe9, 0xc, "7d6a6bb3dac2dd9542f08fad74cbffaea49b83ea467c3558449a10dbc8b0f91ac8ead722400d6bceea0b792ecbc2ece6150ee9235ebd1b7c88738fb80ed103adfceb548867d72e23f69771993e51f13f555d70c7b4c2d336cfdc3601bdabf86c543590481a9be2c47d7455f354b3e9ecb0f025650688eb9d73d0709c97f3d1a4f05077c70dfaff7e411c0d1e95513cd5b6be04a420b7112cb48a66e34b28919bd94369d792a436c48400f4683435121cf93ab1abbff1880b2d5109f753620693e6a4115db38cbf9f17cd2ea875413466f2e176a7140d464bc51690872ea6e79702897d4d8b"}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e679369}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3a6247fc}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x4a0}, 0x1, 0x0, 0x0, 0x4004}, 0xc0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.877370832s ago: executing program 3 (id=2279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x6}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
tkill(0x0, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
io_getevents(0x0, 0x2, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c)
r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000000000000001}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20)
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
close(r11)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20)
lsm_get_self_attr(0x68, &(0x7f0000000400)={0x0, 0x0, 0xd9, 0xb9, ""/185}, &(0x7f0000000340)=0xd9, 0x0)

1.818330303s ago: executing program 4 (id=2280):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)

1.811869293s ago: executing program 1 (id=2281):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000050000000000000000000000850000002200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000007b00000095"], &(0x7f0000000740)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.811262263s ago: executing program 5 (id=2282):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = gettid()
ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
unshare(0x20000400)
r1 = io_uring_setup(0x7de, &(0x7f00000000c0)={0x0, 0xb3cd, 0x0, 0x0, 0x384})
r2 = eventfd2(0x7, 0x80800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
lseek(r4, 0x2b, 0x1)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x74, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0xd044}, 0x10)
r6 = open(0x0, 0x20000, 0x3)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@generic={0x4, 0x8, 0x5, 0x40, 0x5e9dd649}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000007c0)=[{0x2, 0x4, 0x8, 0x9}, {0x4, 0x1, 0x7, 0x3}, {0x0, 0x1, 0xc, 0x9}, {0x0, 0x4, 0x0, 0x7}, {0x0, 0x1, 0x9, 0xb}, {0x3, 0x2, 0xb, 0x2}, {0x4, 0x2, 0x2, 0xa}, {0x2, 0x5, 0x10, 0x7}], 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x2, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x6b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x85db, 0xee, &(0x7f0000000400)=""/238, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1, r6, 0x8, &(0x7f0000000540)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x4, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r7, 0x0, 0x0, &(0x7f0000000900), 0x10, 0xfff, @void, @value}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000a80)={0x5, &(0x7f0000000a40)=[{0x0, 0x10, 0x7, 0x7cab}, {0x8, 0xe7, 0x7, 0x4}, {0xff, 0x4, 0x3, 0xffffff00}, {0x200, 0x5, 0x8, 0x4}, {0x9, 0x4, 0xd, 0x81}]})
syz_io_uring_setup(0x10f, 0x0, &(0x7f00000001c0), 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
dup2(r8, r8)

1.754289424s ago: executing program 4 (id=2283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000bc00000095"], &(0x7f0000000280)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x79, 0x0, &(0x7f0000000380)="899878806a7648616d03fd24b7c0139142c35bad49b78c7b5c4bd7709c4583807089b5b0a87a6a0fd481bdb0c8e59bcc1ff1fcdb879cc22aef225468a7cf3ada28f8eedbecf2e940d9c0aa534e174c38bea1248d89a03d24622558778a028a0745f488f878e47ddbd926f43becf45dc51c320c3685af18be06", 0x0, 0x20632, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000007e5c2131862783d00000624193d6aed935e8e3092fc990d06338a3e695a8003dacee8473d35462f6df2a09096c62bb9a38245484a4434a2adcf708c9e8681633b2ead4f5ae72dc23ea41bb8afa621a98f0e1693179bcca4b452719a6e53b213d394c3f6e4335766a833e66b8a71ccd548b08da89c73cddd68a49ee37bcc4a86fea831b9b9d38d9275f88e2756b0624abe50c6d57c7a43382615c43e0baf3c7c37f3abf12be150f05bbf4eb32252976b24f27d6b5f3cd740b4d947b8dd0072b6ab1592cde81915bc7ecdbd70bea2fe028eaa685505a217479baa223cbe36fa8ead68f3f02d241fc7c750391ea248bb456cd14ac58ab0132f36e25297a6a4dd0f3756d989bb3670e435978a85673a8bfa18fd3a4afe76ae36dec26305606c54ff14ebf13e3e1482dc11a575f2b2c25d8832560320760978d11736c6ba3254ca8a5a54f08e0b790ef5c5b04be5e88200a9e9a9e2c", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES32=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d40"], 0x0)
io_setup(0x81, &(0x7f0000000180)=<r7=>0x0)
r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}])
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="3200f759000000"], 0x8)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000060000000c0000000c0000000a00000010000000000000040000400000002e6161302e5f4e00"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

1.690493455s ago: executing program 3 (id=2284):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffa, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
alarm(0x400)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
gettid()
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x2}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c00000000000278b802f66ccc053c4b79a2932cce9078ac1e0001e000000112009078e0000001"], 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

1.491454938s ago: executing program 5 (id=2285):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
mq_open(0x0, 0x80, 0xa7, 0x0)
r2 = syz_io_uring_setup(0x110b, &(0x7f0000000100)={0x0, 0xd736, 0x400, 0x3, 0xbf7ffffa}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000})
io_uring_enter(r2, 0x1c3a, 0xe176, 0x22, 0x0, 0x0)

1.460284908s ago: executing program 0 (id=2286):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x2800092, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}]}, 0x2, 0x50c, &(0x7f0000001000)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0))
creat(&(0x7f0000000140)='./bus/file0\x00', 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000002c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@dax}, {@nomblk_io_submit}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffefffffffffffff}, 0x18)
unshare(0x62040200)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0xd3be, 0x2, 0x0, 'queue1\x00', 0x6})
io_setup(0x7fff, &(0x7f0000000600))
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet_dccp(0x2, 0x6, 0x0)
renameat2(r0, &(0x7f0000000080)='./bus/file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x2)

716.78163ms ago: executing program 4 (id=2287):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b00010062617461647600000400028008000a", @ANYRES32=r3], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0)

662.42956ms ago: executing program 3 (id=2288):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000066000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={0x0, r0}, 0x18)

661.863691ms ago: executing program 3 (id=2289):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000280)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nobh}, {@dioread_nolock}, {@abort}, {@noload}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0x64, 0x50e, &(0x7f0000000bc0)="$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")

632.381921ms ago: executing program 4 (id=2290):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaa6a05ee4a000000000008004500001c00000000003390780065071070f551000000ffffffff0000"], 0x0)

629.683651ms ago: executing program 5 (id=2291):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18)
kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0xfffffffb)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r4 = getpid()
openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046)
sched_setscheduler(r4, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000f6ff000000000008c4282cb389880fbc00fd9a33910a118c372fae9501745e36d0a338212d163f5cacf318697885b25aa4586ac5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013100000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000800b7080000000000007b8af8ff00000000bfa200000000000050dad22e1dc77b7cbeac07020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000280)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nobh}, {@dioread_nolock}, {@abort}, {@noload}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0x64, 0x50e, &(0x7f0000000bc0)="$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")
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='syzkaller\x00')

595.870331ms ago: executing program 4 (id=2292):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@noblock_validity}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@i_version}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000800080000000000180001801400020076657468305f6d6163767461700000000800070001"], 0x3c}}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18)
set_mempolicy(0x1, &(0x7f0000000280)=0x9, 0x80)

441.742324ms ago: executing program 1 (id=2293):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000280)="ef00001dde1be72a699bf6bd617d19f3e5035a2b74f78de553daaa8490a6da624c28e1ff578b6e8b9b96e49e818f408374a69d24d02e7cb0439cd2018325ff9d19f6b8fd8da4ad260f1fce4856637e05494004216895264c54c6719af02342acce93ef25d1a1d7146298", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x50)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x6000009)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
fchown(0xffffffffffffffff, 0x0, 0x0)

359.880325ms ago: executing program 0 (id=2294):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xc7f}, 0x18)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0x3fffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0x3, 0x2)
write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @void, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x4, 0x6, 0x0, 0x8, {[@mss={0x2, 0x4, 0xb}]}}, {"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"}}}}, 0xfc4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@deltfilter={0x50, 0x2d, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff2, 0xd}, {0xfff2, 0xffe0}, {0x0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x280270cb}, @filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0x8}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xffe0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004090}, 0x20008803)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000014c0)={&(0x7f00000015c0)={0x1c0, r10, 0x100, 0xf0bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x37}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9bf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4060004}, 0x2000c011)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
vmsplice(r11, 0x0, 0x0, 0x1)
getpid()
socket$inet_udp(0x2, 0x2, 0x0)

224.603877ms ago: executing program 4 (id=2295):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000001000), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}})
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000340)=""/175)
setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

188.214118ms ago: executing program 3 (id=2296):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x79, 0x0, &(0x7f0000000380)="899878806a7648616d03fd24b7c0139142c35bad49b78c7b5c4bd7709c4583807089b5b0a87a6a0fd481bdb0c8e59bcc1ff1fcdb879cc22aef225468a7cf3ada28f8eedbecf2e940d9c0aa534e174c38bea1248d89a03d24622558778a028a0745f488f878e47ddbd926f43becf45dc51c320c3685af18be06", 0x0, 0x20632, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x5}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES32=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d40"], 0x0)
io_setup(0x81, &(0x7f0000000180)=<r7=>0x0)
r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r8, &(0x7f0000000340)='p', 0x300}])
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRESOCT=r6, @ANYRES64=r1, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000060000000c0000000c0000000a00000010000000000000040000400000002e6161302e5f4e00"], 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0xffffffb7, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000002100)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd)

0s ago: executing program 1 (id=2297):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8041}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8094)
pipe2(&(0x7f0000001cc0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r10, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x0, 0x54a7}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x48000)

kernel console output (not intermixed with test programs):

yscall_64+0xd0/0x1a0
[  173.180824][ T9127]  ? clear_bhb_loop+0x40/0x90
[  173.180844][ T9127]  ? clear_bhb_loop+0x40/0x90
[  173.180868][ T9127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.180894][ T9127] RIP: 0033:0x7f656b31d37c
[  173.180914][ T9127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  173.180990][ T9127] RSP: 002b:00007f6569987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.181014][ T9127] RAX: ffffffffffffffda RBX: 00007f656b545fa0 RCX: 00007f656b31d37c
[  173.181030][ T9127] RDX: 000000000000000f RSI: 00007f65699870a0 RDI: 0000000000000005
[  173.181046][ T9127] RBP: 00007f6569987090 R08: 0000000000000000 R09: 0000000000000000
[  173.181097][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.181112][ T9127] R13: 0000000000000000 R14: 00007f656b545fa0 R15: 00007ffe3815dd68
[  173.181135][ T9127]  </TASK>
[  173.401189][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.441563][ T9129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1836'.
[  173.453211][ T9131] xt_socket: unknown flags 0xc
[  173.474979][ T9136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1837'.
[  173.538549][ T9143] xt_hashlimit: max too large, truncated to 1048576
[  173.576267][ T9143] loop1: detected capacity change from 0 to 2048
[  173.588670][ T9141] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  173.598884][ T9143] EXT4-fs: inline encryption not supported
[  173.657555][ T9143] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal
[  173.689282][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.746916][ T9153] loop0: detected capacity change from 0 to 8192
[  173.833671][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.909532][ T9163] program syz.5.1848 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  174.074083][ T9163] FAULT_INJECTION: forcing a failure.
[  174.074083][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.087788][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.5.1848 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  174.087838][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  174.087854][ T9163] Call Trace:
[  174.087862][ T9163]  <TASK>
[  174.087870][ T9163]  __dump_stack+0x1d/0x30
[  174.087959][ T9163]  dump_stack_lvl+0xe8/0x140
[  174.087977][ T9163]  dump_stack+0x15/0x1b
[  174.087999][ T9163]  should_fail_ex+0x265/0x280
[  174.088039][ T9163]  should_fail+0xb/0x20
[  174.088082][ T9163]  should_fail_usercopy+0x1a/0x20
[  174.088101][ T9163]  _copy_from_user+0x1c/0xb0
[  174.088125][ T9163]  scsi_ioctl+0x116b/0x1500
[  174.088155][ T9163]  ? avc_has_perm+0xd3/0x150
[  174.088177][ T9163]  ? file_has_perm+0x324/0x370
[  174.088221][ T9163]  ? do_vfs_ioctl+0x993/0x15b0
[  174.088252][ T9163]  sg_ioctl+0xdf6/0x1360
[  174.088287][ T9163]  ? __pfx_sg_ioctl+0x10/0x10
[  174.088334][ T9163]  __se_sys_ioctl+0xcb/0x140
[  174.088355][ T9163]  __x64_sys_ioctl+0x43/0x50
[  174.088408][ T9163]  x64_sys_call+0x19a8/0x2fb0
[  174.088447][ T9163]  do_syscall_64+0xd0/0x1a0
[  174.088474][ T9163]  ? clear_bhb_loop+0x40/0x90
[  174.088502][ T9163]  ? clear_bhb_loop+0x40/0x90
[  174.088529][ T9163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.088580][ T9163] RIP: 0033:0x7f2b9697e969
[  174.088596][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.088613][ T9163] RSP: 002b:00007f2b94fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  174.088630][ T9163] RAX: ffffffffffffffda RBX: 00007f2b96ba5fa0 RCX: 00007f2b9697e969
[  174.088642][ T9163] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 000000000000000b
[  174.088655][ T9163] RBP: 00007f2b94fe7090 R08: 0000000000000000 R09: 0000000000000000
[  174.088749][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.088765][ T9163] R13: 0000000000000000 R14: 00007f2b96ba5fa0 R15: 00007ffcdd3fe258
[  174.088790][ T9163]  </TASK>
[  174.377312][ T9168] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1850'.
[  174.397174][ T9169] loop0: detected capacity change from 0 to 512
[  174.403984][ T9169] EXT4-fs: Ignoring removed nobh option
[  174.410719][ T9169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  174.422492][ T9169] EXT4-fs (loop0): orphan cleanup on readonly fs
[  174.429831][ T9169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1849: bg 0: block 248: padding at end of block bitmap is not set
[  174.449157][ T9169] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1849: Failed to acquire dquot type 1
[  174.461449][ T9169] EXT4-fs (loop0): 1 truncate cleaned up
[  174.468461][ T9169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  174.560747][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.570093][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.595918][ T9180] loop4: detected capacity change from 0 to 1024
[  174.609289][ T9184] batadv9: entered allmulticast mode
[  174.615915][ T9184] 8021q: adding VLAN 0 to HW filter on device batadv9
[  174.629493][ T9184] bridge0: port 11(batadv9) entered blocking state
[  174.636812][ T9184] bridge0: port 11(batadv9) entered disabled state
[  174.644679][ T9180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.658203][ T9180] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  174.661537][ T9184] batadv9: entered promiscuous mode
[  174.675265][ T9184] bridge0: port 11(batadv9) entered blocking state
[  174.681882][ T9184] bridge0: port 11(batadv9) entered forwarding state
[  174.718995][ T9193] FAULT_INJECTION: forcing a failure.
[  174.718995][ T9193] name failslab, interval 1, probability 0, space 0, times 0
[  174.732868][ T9193] CPU: 1 UID: 0 PID: 9193 Comm: syz.1.1858 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  174.732961][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  174.732977][ T9193] Call Trace:
[  174.732985][ T9193]  <TASK>
[  174.732994][ T9193]  __dump_stack+0x1d/0x30
[  174.733029][ T9193]  dump_stack_lvl+0xe8/0x140
[  174.733052][ T9193]  dump_stack+0x15/0x1b
[  174.733073][ T9193]  should_fail_ex+0x265/0x280
[  174.733109][ T9193]  should_failslab+0x8c/0xb0
[  174.733174][ T9193]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  174.733198][ T9193]  ? sidtab_sid2str_get+0xa0/0x130
[  174.733237][ T9193]  kmemdup_noprof+0x2b/0x70
[  174.733262][ T9193]  sidtab_sid2str_get+0xa0/0x130
[  174.733329][ T9193]  security_sid_to_context_core+0x1eb/0x2e0
[  174.733378][ T9193]  security_sid_to_context+0x27/0x40
[  174.733413][ T9193]  selinux_lsmprop_to_secctx+0x67/0xf0
[  174.733453][ T9193]  security_lsmprop_to_secctx+0x43/0x80
[  174.733475][ T9193]  audit_log_task_context+0x77/0x190
[  174.733509][ T9193]  audit_log_task+0xf4/0x250
[  174.733610][ T9193]  audit_seccomp+0x61/0x100
[  174.733664][ T9193]  ? __seccomp_filter+0x68c/0x10d0
[  174.733745][ T9193]  __seccomp_filter+0x69d/0x10d0
[  174.733774][ T9193]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  174.733807][ T9193]  ? vfs_write+0x75e/0x8d0
[  174.733841][ T9193]  __secure_computing+0x82/0x150
[  174.733868][ T9193]  syscall_trace_enter+0xcf/0x1e0
[  174.733925][ T9193]  do_syscall_64+0xaa/0x1a0
[  174.733960][ T9193]  ? clear_bhb_loop+0x40/0x90
[  174.734061][ T9193]  ? clear_bhb_loop+0x40/0x90
[  174.734082][ T9193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.734138][ T9193] RIP: 0033:0x7f656b31e969
[  174.734153][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.734173][ T9193] RSP: 002b:00007f6569987038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8
[  174.734193][ T9193] RAX: ffffffffffffffda RBX: 00007f656b545fa0 RCX: 00007f656b31e969
[  174.734205][ T9193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  174.734217][ T9193] RBP: 00007f6569987090 R08: 0000000000000000 R09: 0000000000000000
[  174.734241][ T9193] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[  174.734289][ T9193] R13: 0000000000000000 R14: 00007f656b545fa0 R15: 00007ffe3815dd68
[  174.734313][ T9193]  </TASK>
[  174.736719][ T9191] lo speed is unknown, defaulting to 1000
[  174.798194][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1857'.
[  175.038604][ T9201] loop3: detected capacity change from 0 to 1024
[  175.045854][ T9201] EXT4-fs: Ignoring removed oldalloc option
[  175.051999][ T9201] EXT4-fs: Ignoring removed i_version option
[  175.079938][   T29] kauditd_printk_skb: 298 callbacks suppressed
[  175.079951][   T29] audit: type=1326 audit(1747298025.346:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.110774][   T29] audit: type=1326 audit(1747298025.346:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.129105][   T31] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled
[  175.134933][   T29] audit: type=1326 audit(1747298025.346:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.144260][   T31] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled
[  175.168257][   T29] audit: type=1326 audit(1747298025.346:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.201048][   T29] audit: type=1326 audit(1747298025.346:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.226098][   T29] audit: type=1326 audit(1747298025.346:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.249818][   T29] audit: type=1326 audit(1747298025.346:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.274224][   T29] audit: type=1326 audit(1747298025.346:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.298402][   T29] audit: type=1326 audit(1747298025.356:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.322510][   T29] audit: type=1326 audit(1747298025.356:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9200 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x7ffc0000
[  175.537527][ T9213] loop4: detected capacity change from 0 to 512
[  175.546129][ T9213] ext4 filesystem being mounted at /356/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.629265][ T9217] loop3: detected capacity change from 0 to 1024
[  175.655685][ T9217] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.671443][ T9217] siw: device registration error -23
[  175.810483][ T9223] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  176.327458][ T9226] lo speed is unknown, defaulting to 1000
[  176.367171][ T9226] EXT4-fs error (device loop4): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.4.1865: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  176.388777][ T9226] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: comm syz.4.1865: directory missing '.'
[  176.649687][ T9235] loop3: detected capacity change from 0 to 1024
[  176.662138][ T9235] EXT4-fs: Ignoring removed nobh option
[  176.667837][ T9235] EXT4-fs: Ignoring removed bh option
[  176.700343][ T9236] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  176.749559][ T9235] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1870: Allocating blocks 481-513 which overlap fs metadata
[  176.793461][ T9246] batadv10: entered allmulticast mode
[  176.810792][ T9235] EXT4-fs (loop3): Remounting filesystem read-only
[  176.839158][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv10
[  176.848862][ T9234] EXT4-fs (loop3): pa ffff888106e29af0: logic 256, phys. 369, len 9
[  176.889666][ T9246] bridge0: port 12(batadv10) entered blocking state
[  176.896591][ T9246] bridge0: port 12(batadv10) entered disabled state
[  176.932932][ T9246] batadv10: entered promiscuous mode
[  176.948865][ T9246] bridge0: port 12(batadv10) entered blocking state
[  176.955653][ T9246] bridge0: port 12(batadv10) entered forwarding state
[  176.976612][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.997491][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.005964][ T9253] loop3: detected capacity change from 0 to 164
[  177.047337][ T9253] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  177.067218][ T9249] loop4: detected capacity change from 0 to 1024
[  177.073529][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'.
[  177.082694][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'.
[  177.094789][ T9249] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  177.112141][ T9255] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  177.131343][ T9258] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  177.150383][ T9258] rock: directory entry would overflow storage
[  177.156763][ T9258] rock: sig=0x4f50, size=4, remaining=3
[  177.162611][ T9258] iso9660: Corrupted directory entry in block 4 of inode 1792
[  177.260122][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1879'.
[  177.298121][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1880'.
[  177.311274][ T1728] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled
[  177.321563][ T1728] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled
[  177.380426][ T9274] loop3: detected capacity change from 0 to 512
[  177.395327][ T9274] EXT4-fs (loop3): orphan cleanup on readonly fs
[  177.410468][ T9274] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1882: bad orphan inode 13
[  177.421802][ T9274] ext4_test_bit(bit=12, block=18) = 1
[  177.427274][ T9274] is_bad_inode(inode)=0
[  177.431572][ T9274] NEXT_ORPHAN(inode)=2130706432
[  177.436651][ T9274] max_ino=32
[  177.439947][ T9274] i_nlink=1
[  177.472293][ T9277] Falling back ldisc for ttyS3.
[  177.492963][ T9274] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  177.502707][ T9277] loop5: detected capacity change from 0 to 2048
[  177.512382][ T9274] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1882: bg 0: block 248: padding at end of block bitmap is not set
[  177.527278][ T9274] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1882: Failed to acquire dquot type 1
[  177.539242][ T9274] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  177.557191][ T9281] loop1: detected capacity change from 0 to 512
[  177.564160][ T9281] EXT4-fs: Ignoring removed nobh option
[  177.570271][ T9281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.587171][ T9281] EXT4-fs (loop1): orphan cleanup on readonly fs
[  177.594549][ T9281] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1885: bg 0: block 248: padding at end of block bitmap is not set
[  177.609534][ T9281] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1885: Failed to acquire dquot type 1
[  177.629900][ T9281] EXT4-fs (loop1): 1 truncate cleaned up
[  177.640883][ T9285] batadv5: entered allmulticast mode
[  177.657223][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv5
[  177.664587][ T9287] loop3: detected capacity change from 0 to 1024
[  177.677055][ T9287] EXT4-fs: Ignoring removed nobh option
[  177.677852][ T9289] loop0: detected capacity change from 0 to 512
[  177.683990][ T9287] EXT4-fs: Ignoring removed bh option
[  177.697671][ T9289] EXT4-fs: Ignoring removed nobh option
[  177.698759][ T9285] bridge0: port 7(batadv5) entered blocking state
[  177.710086][ T9285] bridge0: port 7(batadv5) entered disabled state
[  177.710229][ T9289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.717862][ T9285] batadv5: entered promiscuous mode
[  177.731124][ T9285] bridge0: port 7(batadv5) entered blocking state
[  177.737883][ T9285] bridge0: port 7(batadv5) entered forwarding state
[  177.755992][ T9287] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1886: Allocating blocks 481-513 which overlap fs metadata
[  177.777485][ T9287] EXT4-fs (loop3): Remounting filesystem read-only
[  177.782595][ T9289] EXT4-fs (loop0): orphan cleanup on readonly fs
[  177.788702][ T9286] EXT4-fs (loop3): pa ffff888106e97af0: logic 256, phys. 369, len 9
[  177.814818][ T9289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1888: bg 0: block 248: padding at end of block bitmap is not set
[  177.830456][ T9289] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1888: Failed to acquire dquot type 1
[  177.845490][ T9289] EXT4-fs (loop0): 1 truncate cleaned up
[  177.981374][ T9311] loop3: detected capacity change from 0 to 512
[  177.995618][ T9311] EXT4-fs (loop3): orphan cleanup on readonly fs
[  178.002657][ T9311] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1894: bad orphan inode 13
[  178.013561][ T9311] ext4_test_bit(bit=12, block=18) = 1
[  178.018952][ T9311] is_bad_inode(inode)=0
[  178.023198][ T9311] NEXT_ORPHAN(inode)=2130706432
[  178.028068][ T9311] max_ino=32
[  178.031362][ T9311] i_nlink=1
[  178.084282][ T9311] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  178.112402][ T9311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1894: bg 0: block 248: padding at end of block bitmap is not set
[  178.127707][ T9311] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1894: Failed to acquire dquot type 1
[  178.140046][ T9311] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.157132][   T31] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled
[  178.166846][   T31] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled
[  178.242552][ T9319] loop3: detected capacity change from 0 to 512
[  178.250585][ T9319] EXT4-fs (loop3): orphan cleanup on readonly fs
[  178.259559][ T9319] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1896: bad orphan inode 13
[  178.270882][ T9319] ext4_test_bit(bit=12, block=18) = 1
[  178.276369][ T9319] is_bad_inode(inode)=0
[  178.281015][ T9319] NEXT_ORPHAN(inode)=2130706432
[  178.286111][ T9319] max_ino=32
[  178.289364][ T9319] i_nlink=1
[  178.305540][ T9322] loop1: detected capacity change from 0 to 512
[  178.323686][ T9322] EXT4-fs (loop1): orphan cleanup on readonly fs
[  178.330527][ T9322] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1897: bad orphan inode 13
[  178.341176][ T9322] ext4_test_bit(bit=12, block=18) = 1
[  178.346955][ T9322] is_bad_inode(inode)=0
[  178.351518][ T9322] NEXT_ORPHAN(inode)=2130706432
[  178.356544][ T9322] max_ino=32
[  178.359853][ T9322] i_nlink=1
[  178.363643][ T9324] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  178.375288][ T9322] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  178.392477][ T9324] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1896: bg 0: block 248: padding at end of block bitmap is not set
[  178.401986][ T9322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1897: bg 0: block 248: padding at end of block bitmap is not set
[  178.408911][ T9324] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1896: Failed to acquire dquot type 1
[  178.424247][ T9322] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1897: Failed to acquire dquot type 1
[  178.443474][ T9324] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.460157][ T9322] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  178.552991][ T9329] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  178.587903][ T9335] batadv8: entered allmulticast mode
[  178.594511][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv8
[  178.611116][ T9335] bridge0: port 3(batadv8) entered blocking state
[  178.619020][ T9335] bridge0: port 3(batadv8) entered disabled state
[  178.620593][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.635390][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.650945][ T9333] loop1: detected capacity change from 0 to 1024
[  178.659325][ T9335] batadv8: entered promiscuous mode
[  178.676124][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1902'.
[  178.685323][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1902'.
[  178.705262][ T9333] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  178.797352][ T9345] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.1905'.
[  178.838202][ T9355] loop5: detected capacity change from 0 to 512
[  178.849460][ T9355] EXT4-fs: Ignoring removed nobh option
[  178.856852][ T9355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  178.873545][ T9355] EXT4-fs (loop5): orphan cleanup on readonly fs
[  178.875954][ T9357] loop0: detected capacity change from 0 to 512
[  178.889839][ T9355] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1908: bg 0: block 248: padding at end of block bitmap is not set
[  178.906640][ T9355] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1908: Failed to acquire dquot type 1
[  178.918616][ T9355] EXT4-fs (loop5): 1 truncate cleaned up
[  178.925445][ T9357] EXT4-fs (loop0): orphan cleanup on readonly fs
[  178.934642][ T9357] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1909: bad orphan inode 13
[  178.968139][ T9357] ext4_test_bit(bit=12, block=18) = 1
[  178.973828][ T9357] is_bad_inode(inode)=0
[  178.978011][ T9357] NEXT_ORPHAN(inode)=2130706432
[  178.983153][ T9357] max_ino=32
[  178.986421][ T9357] i_nlink=1
[  179.000888][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.020323][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.038617][ T9361] loop3: detected capacity change from 0 to 1024
[  179.054441][ T9361] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  179.064535][ T9357] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  179.082541][ T9357] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1909: bg 0: block 248: padding at end of block bitmap is not set
[  179.097402][ T9357] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.1909: Failed to acquire dquot type 1
[  179.099212][   T12] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled
[  179.118258][   T12] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled
[  179.127762][ T9357] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  179.251975][ T9371] Falling back ldisc for ttyS3.
[  179.280662][ T9373] batadv7: entered allmulticast mode
[  179.287974][ T9373] 8021q: adding VLAN 0 to HW filter on device batadv7
[  179.297113][ T9373] bridge0: port 9(batadv7) entered blocking state
[  179.304308][ T9373] bridge0: port 9(batadv7) entered disabled state
[  179.311599][ T9373] batadv7: entered promiscuous mode
[  179.317879][ T9373] bridge0: port 9(batadv7) entered blocking state
[  179.324588][ T9373] bridge0: port 9(batadv7) entered forwarding state
[  179.359844][ T9375] syzkaller1: entered promiscuous mode
[  179.366168][ T9375] syzkaller1: entered allmulticast mode
[  179.377858][ T9375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.421935][ T9377] Falling back ldisc for ttyS3.
[  179.427335][ T9378] vhci_hcd: invalid port number 65
[  179.439116][ T9375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.503671][ T9375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.553353][ T9375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.598190][ T9384] loop4: detected capacity change from 0 to 128
[  179.630240][ T9375] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.642294][ T9375] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.665938][ T9375] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.678067][ T9375] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.781866][ T1728] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[  179.791277][ T1728] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[  180.040730][ T9401] loop5: detected capacity change from 0 to 2048
[  180.041695][ T9400] Falling back ldisc for ttyS3.
[  180.088961][   T29] kauditd_printk_skb: 174 callbacks suppressed
[  180.088980][   T29] audit: type=1326 audit(1747298030.356:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.120043][   T29] audit: type=1326 audit(1747298030.356:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.144681][   T29] audit: type=1326 audit(1747298030.356:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.168418][   T29] audit: type=1326 audit(1747298030.356:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.192044][   T29] audit: type=1326 audit(1747298030.356:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.215975][   T29] audit: type=1326 audit(1747298030.356:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.240250][   T29] audit: type=1326 audit(1747298030.356:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.268602][   T29] audit: type=1326 audit(1747298030.356:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.5.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  180.322658][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.340214][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.365400][ T9403] loop4: detected capacity change from 0 to 1024
[  180.408498][ T9411] loop1: detected capacity change from 0 to 512
[  180.415394][ T9411] EXT4-fs: Ignoring removed nobh option
[  180.421665][ T9411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.430828][ T9403] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  180.432322][ T9411] EXT4-fs (loop1): orphan cleanup on readonly fs
[  180.446731][ T9411] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1927: bg 0: block 248: padding at end of block bitmap is not set
[  180.462773][ T9411] Quota error (device loop1): write_blk: dquota write failed
[  180.470297][ T9411] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  180.480424][ T9411] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1927: Failed to acquire dquot type 1
[  180.489230][ T9415] loop5: detected capacity change from 0 to 512
[  180.493899][ T9411] EXT4-fs (loop1): 1 truncate cleaned up
[  180.506194][ T9415] EXT4-fs: Ignoring removed mblk_io_submit option
[  180.513338][ T9415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  180.535476][ T9415] EXT4-fs (loop5): 1 truncate cleaned up
[  180.732033][ T9429] loop3: detected capacity change from 0 to 512
[  180.741650][ T9429] ext4 filesystem being mounted at /431/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.937845][ T9433] loop5: detected capacity change from 0 to 1024
[  181.721901][ T9432] lo speed is unknown, defaulting to 1000
[  181.733878][ T9433] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.766787][ T9434] EXT4-fs error (device loop3): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.3.1934: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  181.790093][ T9431] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1933: bg 0: block 393: padding at end of block bitmap is not set
[  181.805901][ T9434] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.1934: directory missing '.'
[  181.820807][ T9431] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117
[  181.833731][ T9431] EXT4-fs (loop5): This should not happen!! Data will be lost
[  181.833731][ T9431] 
[  182.047406][ T9443] loop3: detected capacity change from 0 to 1024
[  182.062911][ T9443] EXT4-fs: Ignoring removed oldalloc option
[  182.069460][ T9443] EXT4-fs: Ignoring removed i_version option
[  182.178028][ T9451] netlink: 2564 bytes leftover after parsing attributes in process `syz.4.1939'.
[  182.242822][ T9457] sch_fq: defrate 2048 ignored.
[  182.257679][ T9457] loop4: detected capacity change from 0 to 512
[  182.278822][ T9457] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.296684][ T9460] netlink: 'syz.1.1941': attribute type 3 has an invalid length.
[  182.304848][ T9460] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1941'.
[  182.506882][ T9469] 9pnet_fd: Insufficient options for proto=fd
[  182.517058][ T9469] loop1: detected capacity change from 0 to 512
[  182.532858][ T9469] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c01d, mo2=0002]
[  182.541499][ T9469] System zones: 0-2, 18-18, 34-34
[  182.547520][ T9469] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1945: bg 0: block 248: padding at end of block bitmap is not set
[  182.564001][ T9469] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1945: Failed to acquire dquot type 1
[  182.576799][ T9469] EXT4-fs (loop1): 1 truncate cleaned up
[  182.583404][ T9469] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.856098][ T9475] loop1: detected capacity change from 0 to 1024
[  182.914281][ T9475] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.935061][ T9475] siw: device registration error -23
[  183.081914][ T9479] Falling back ldisc for ttyS3.
[  183.192482][ T9483] loop3: detected capacity change from 0 to 512
[  183.213431][ T9483] ext4 filesystem being mounted at /434/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.332574][ T9487] loop4: detected capacity change from 0 to 1024
[  183.349791][ T9487] EXT4-fs: Ignoring removed oldalloc option
[  183.356569][ T9487] EXT4-fs: Ignoring removed i_version option
[  183.429661][ T9489] loop5: detected capacity change from 0 to 1024
[  184.652278][ T9490] lo speed is unknown, defaulting to 1000
[  184.689772][ T9490] EXT4-fs error (device loop3): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.3.1949: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  184.711966][ T9490] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.1949: directory missing '.'
[  184.734762][ T9489] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.778582][ T9485] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1948: bg 0: block 393: padding at end of block bitmap is not set
[  184.797566][ T9485] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117
[  184.811218][ T9485] EXT4-fs (loop5): This should not happen!! Data will be lost
[  184.811218][ T9485] 
[  184.855368][ T9500] netlink: 'syz.4.1952': attribute type 3 has an invalid length.
[  184.912494][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.921528][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.986120][ T9502] loop4: detected capacity change from 0 to 1024
[  185.028964][ T9502] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  185.110706][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'.
[  185.119894][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1956'.
[  185.163094][   T29] kauditd_printk_skb: 118 callbacks suppressed
[  185.163112][   T29] audit: type=1326 audit(1747298035.436:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.195560][   T29] audit: type=1326 audit(1747298035.476:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.222684][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1957'.
[  185.232180][   T29] audit: type=1326 audit(1747298035.496:8095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.257374][   T29] audit: type=1326 audit(1747298035.496:8096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.282570][   T29] audit: type=1326 audit(1747298035.496:8097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.308129][   T29] audit: type=1326 audit(1747298035.496:8098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.333233][   T29] audit: type=1326 audit(1747298035.496:8099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.358472][   T29] audit: type=1326 audit(1747298035.496:8100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.383763][   T29] audit: type=1326 audit(1747298035.496:8101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.408358][   T29] audit: type=1326 audit(1747298035.496:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9512 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  185.738085][ T9526] loop4: detected capacity change from 0 to 512
[  185.757067][ T9526] EXT4-fs (loop4): orphan cleanup on readonly fs
[  185.764771][ T9526] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1962: bad orphan inode 13
[  185.775367][ T9526] ext4_test_bit(bit=12, block=18) = 1
[  185.781017][ T9526] is_bad_inode(inode)=0
[  185.786926][ T9526] NEXT_ORPHAN(inode)=2130706432
[  185.792791][ T9526] max_ino=32
[  185.796361][ T9526] i_nlink=1
[  185.806922][ T9526] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.1962: deleted inode referenced: 12
[  185.822454][ T9526] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.1962: deleted inode referenced: 12
[  185.835534][ T9526] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.1962: deleted inode referenced: 12
[  185.903561][ T9529] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  185.998376][ T9532] loop4: detected capacity change from 0 to 764
[  186.272216][ T9536] loop4: detected capacity change from 0 to 1024
[  186.445191][ T9536] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.464862][ T9536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set
[  186.480428][ T9536] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117
[  186.493486][ T9536] EXT4-fs (loop4): This should not happen!! Data will be lost
[  186.493486][ T9536] 
[  186.619127][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1968'.
[  186.649764][ T9548] loop3: detected capacity change from 0 to 512
[  186.657249][ T9548] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.668381][ T9548] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  186.676479][ T9548] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102]
[  186.684842][ T9548] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  186.694902][ T9548] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  186.784969][ T9556] loop5: detected capacity change from 0 to 512
[  186.791884][ T9556] EXT4-fs: Ignoring removed nobh option
[  186.799980][ T9556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  186.810094][ T9556] EXT4-fs (loop5): orphan cleanup on readonly fs
[  186.817339][ T9556] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1970: bg 0: block 248: padding at end of block bitmap is not set
[  186.833304][ T9556] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.1970: Failed to acquire dquot type 1
[  186.852775][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.861402][ T9556] EXT4-fs (loop5): 1 truncate cleaned up
[  186.868143][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.889971][ T9555] loop3: detected capacity change from 0 to 1024
[  186.937222][ T9555] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  186.967426][ T9563] netlink: 2564 bytes leftover after parsing attributes in process `syz.1.1974'.
[  186.971377][ T9568] loop4: detected capacity change from 0 to 1024
[  186.984153][ T9568] EXT4-fs: Ignoring removed oldalloc option
[  186.990193][ T9568] EXT4-fs: Ignoring removed i_version option
[  187.045746][ T9572] loop4: detected capacity change from 0 to 512
[  187.058330][ T9572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  187.080473][ T9572] EXT4-fs (loop4): 1 truncate cleaned up
[  187.098630][ T9572] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  187.120181][ T9579] macvtap0: entered promiscuous mode
[  187.126847][ T9579] macvtap0: left promiscuous mode
[  187.254342][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'.
[  187.366483][ T9591] loop4: detected capacity change from 0 to 256
[  187.389134][ T9593] FAULT_INJECTION: forcing a failure.
[  187.389134][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.402517][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.0.1985 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  187.402596][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  187.402620][ T9593] Call Trace:
[  187.402628][ T9593]  <TASK>
[  187.402636][ T9593]  __dump_stack+0x1d/0x30
[  187.402675][ T9593]  dump_stack_lvl+0xe8/0x140
[  187.402701][ T9593]  dump_stack+0x15/0x1b
[  187.402812][ T9593]  should_fail_ex+0x265/0x280
[  187.402846][ T9593]  should_fail+0xb/0x20
[  187.402904][ T9593]  should_fail_usercopy+0x1a/0x20
[  187.402924][ T9593]  _copy_to_user+0x20/0xa0
[  187.402950][ T9593]  simple_read_from_buffer+0xb5/0x130
[  187.402987][ T9593]  proc_fail_nth_read+0x100/0x140
[  187.403087][ T9593]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  187.403113][ T9593]  vfs_read+0x19d/0x6f0
[  187.403139][ T9593]  ? __rcu_read_unlock+0x4f/0x70
[  187.403200][ T9593]  ? __fget_files+0x184/0x1c0
[  187.403252][ T9593]  ksys_read+0xda/0x1a0
[  187.403298][ T9593]  __x64_sys_read+0x40/0x50
[  187.403324][ T9593]  x64_sys_call+0x2d77/0x2fb0
[  187.403346][ T9593]  do_syscall_64+0xd0/0x1a0
[  187.403370][ T9593]  ? clear_bhb_loop+0x40/0x90
[  187.403408][ T9593]  ? clear_bhb_loop+0x40/0x90
[  187.403545][ T9593]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.403566][ T9593] RIP: 0033:0x7f7ce6e8d37c
[  187.403586][ T9593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  187.403605][ T9593] RSP: 002b:00007f7ce54f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  187.403623][ T9593] RAX: ffffffffffffffda RBX: 00007f7ce70b5fa0 RCX: 00007f7ce6e8d37c
[  187.403636][ T9593] RDX: 000000000000000f RSI: 00007f7ce54f70a0 RDI: 0000000000000003
[  187.403648][ T9593] RBP: 00007f7ce54f7090 R08: 0000000000000000 R09: 0000000000000000
[  187.403719][ T9593] R10: 0000200000002100 R11: 0000000000000246 R12: 0000000000000001
[  187.403730][ T9593] R13: 0000000000000000 R14: 00007f7ce70b5fa0 R15: 00007ffc19121918
[  187.403750][ T9593]  </TASK>
[  187.661314][ T9595] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  187.751194][ T9600] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.1988'.
[  187.835706][ T9609] SELinux: syz.3.1991 (9609) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[  187.839819][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1992'.
[  187.964325][ T9615] lo speed is unknown, defaulting to 1000
[  188.010437][ T9620] loop0: detected capacity change from 0 to 2048
[  188.051129][ T9620] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.1996: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  188.112545][ T9620] EXT4-fs (loop0): Remounting filesystem read-only
[  188.145457][ T9630] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  188.195851][ T9638] FAULT_INJECTION: forcing a failure.
[  188.195851][ T9638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.209183][ T9638] CPU: 1 UID: 0 PID: 9638 Comm: syz.5.2002 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  188.209288][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  188.209325][ T9638] Call Trace:
[  188.209332][ T9638]  <TASK>
[  188.209341][ T9638]  __dump_stack+0x1d/0x30
[  188.209366][ T9638]  dump_stack_lvl+0xe8/0x140
[  188.209389][ T9638]  dump_stack+0x15/0x1b
[  188.209408][ T9638]  should_fail_ex+0x265/0x280
[  188.209446][ T9638]  should_fail+0xb/0x20
[  188.209532][ T9638]  should_fail_usercopy+0x1a/0x20
[  188.209554][ T9638]  _copy_to_user+0x20/0xa0
[  188.209701][ T9638]  simple_read_from_buffer+0xb5/0x130
[  188.209729][ T9638]  proc_fail_nth_read+0x100/0x140
[  188.209758][ T9638]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.209784][ T9638]  vfs_read+0x19d/0x6f0
[  188.209844][ T9638]  ? __rcu_read_unlock+0x4f/0x70
[  188.209870][ T9638]  ? __fget_files+0x184/0x1c0
[  188.209908][ T9638]  ksys_read+0xda/0x1a0
[  188.209941][ T9638]  __x64_sys_read+0x40/0x50
[  188.210033][ T9638]  x64_sys_call+0x2d77/0x2fb0
[  188.210059][ T9638]  do_syscall_64+0xd0/0x1a0
[  188.210089][ T9638]  ? clear_bhb_loop+0x40/0x90
[  188.210115][ T9638]  ? clear_bhb_loop+0x40/0x90
[  188.210142][ T9638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.210212][ T9638] RIP: 0033:0x7f2b9697d37c
[  188.210230][ T9638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  188.210350][ T9638] RSP: 002b:00007f2b94fe7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.210373][ T9638] RAX: ffffffffffffffda RBX: 00007f2b96ba5fa0 RCX: 00007f2b9697d37c
[  188.210388][ T9638] RDX: 000000000000000f RSI: 00007f2b94fe70a0 RDI: 0000000000000003
[  188.210420][ T9638] RBP: 00007f2b94fe7090 R08: 0000000000000000 R09: 0000000000000000
[  188.210432][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.210445][ T9638] R13: 0000000000000000 R14: 00007f2b96ba5fa0 R15: 00007ffcdd3fe258
[  188.210464][ T9638]  </TASK>
[  188.221254][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.349567][ T9651] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  188.379508][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.405649][ T9651] loop3: detected capacity change from 0 to 256
[  188.441483][ T9632] loop4: detected capacity change from 0 to 1024
[  188.535306][ T9632] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  188.693967][ T9661] netlink: 'syz.3.2006': attribute type 3 has an invalid length.
[  188.783838][ T9667] FAULT_INJECTION: forcing a failure.
[  188.783838][ T9667] name failslab, interval 1, probability 0, space 0, times 0
[  188.796725][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.0.2012 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  188.796798][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  188.796813][ T9667] Call Trace:
[  188.796820][ T9667]  <TASK>
[  188.796829][ T9667]  __dump_stack+0x1d/0x30
[  188.796855][ T9667]  dump_stack_lvl+0xe8/0x140
[  188.796881][ T9667]  dump_stack+0x15/0x1b
[  188.796929][ T9667]  should_fail_ex+0x265/0x280
[  188.796999][ T9667]  should_failslab+0x8c/0xb0
[  188.797108][ T9667]  kmem_cache_alloc_node_noprof+0x57/0x320
[  188.797136][ T9667]  ? alloc_vmap_area+0x200/0x1950
[  188.797210][ T9667]  alloc_vmap_area+0x200/0x1950
[  188.797285][ T9667]  ? get_perf_callchain+0x456/0x530
[  188.797320][ T9667]  ? should_failslab+0x8c/0xb0
[  188.797348][ T9667]  ? __kmalloc_cache_node_noprof+0x18a/0x320
[  188.797446][ T9667]  __get_vm_area_node+0x173/0x1d0
[  188.797479][ T9667]  __vmalloc_node_range_noprof+0x26a/0xdf0
[  188.797510][ T9667]  ? kernel_read_file+0x2c3/0x500
[  188.797626][ T9667]  ? selinux_kernel_load_from_file+0x221/0x260
[  188.797665][ T9667]  ? kernel_read_file+0x2c3/0x500
[  188.797691][ T9667]  vmalloc_noprof+0x5e/0x70
[  188.797719][ T9667]  ? kernel_read_file+0x2c3/0x500
[  188.797809][ T9667]  kernel_read_file+0x2c3/0x500
[  188.797851][ T9667]  __se_sys_finit_module+0x2d3/0x460
[  188.798008][ T9667]  __x64_sys_finit_module+0x3e/0x50
[  188.798048][ T9667]  x64_sys_call+0x2029/0x2fb0
[  188.798079][ T9667]  do_syscall_64+0xd0/0x1a0
[  188.798106][ T9667]  ? clear_bhb_loop+0x40/0x90
[  188.798159][ T9667]  ? clear_bhb_loop+0x40/0x90
[  188.798243][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.798298][ T9667] RIP: 0033:0x7f7ce6e8e969
[  188.798317][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.798386][ T9667] RSP: 002b:00007f7ce54f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  188.798404][ T9667] RAX: ffffffffffffffda RBX: 00007f7ce70b5fa0 RCX: 00007f7ce6e8e969
[  188.798415][ T9667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  188.798426][ T9667] RBP: 00007f7ce54f7090 R08: 0000000000000000 R09: 0000000000000000
[  188.798437][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.798448][ T9667] R13: 0000000000000000 R14: 00007f7ce70b5fa0 R15: 00007ffc19121918
[  188.798471][ T9667]  </TASK>
[  188.798482][ T9667] syz.0.2012: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0
[  189.060813][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.0.2012 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  189.060893][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  189.060907][ T9667] Call Trace:
[  189.060916][ T9667]  <TASK>
[  189.060926][ T9667]  __dump_stack+0x1d/0x30
[  189.060952][ T9667]  dump_stack_lvl+0xe8/0x140
[  189.060983][ T9667]  dump_stack+0x15/0x1b
[  189.060998][ T9667]  warn_alloc+0x12b/0x1a0
[  189.061032][ T9667]  __vmalloc_node_range_noprof+0x28e/0xdf0
[  189.061075][ T9667]  ? selinux_kernel_load_from_file+0x221/0x260
[  189.061200][ T9667]  ? kernel_read_file+0x2c3/0x500
[  189.061269][ T9667]  vmalloc_noprof+0x5e/0x70
[  189.061290][ T9667]  ? kernel_read_file+0x2c3/0x500
[  189.061333][ T9667]  kernel_read_file+0x2c3/0x500
[  189.061375][ T9667]  __se_sys_finit_module+0x2d3/0x460
[  189.061502][ T9667]  __x64_sys_finit_module+0x3e/0x50
[  189.061541][ T9667]  x64_sys_call+0x2029/0x2fb0
[  189.061568][ T9667]  do_syscall_64+0xd0/0x1a0
[  189.061590][ T9667]  ? clear_bhb_loop+0x40/0x90
[  189.061653][ T9667]  ? clear_bhb_loop+0x40/0x90
[  189.061687][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.061714][ T9667] RIP: 0033:0x7f7ce6e8e969
[  189.061738][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.061794][ T9667] RSP: 002b:00007f7ce54f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139
[  189.061818][ T9667] RAX: ffffffffffffffda RBX: 00007f7ce70b5fa0 RCX: 00007f7ce6e8e969
[  189.061833][ T9667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  189.061844][ T9667] RBP: 00007f7ce54f7090 R08: 0000000000000000 R09: 0000000000000000
[  189.061855][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.061939][ T9667] R13: 0000000000000000 R14: 00007f7ce70b5fa0 R15: 00007ffc19121918
[  189.061961][ T9667]  </TASK>
[  189.253235][ T9667] Mem-Info:
[  189.256424][ T9667] active_anon:42786 inactive_anon:94 isolated_anon:0
[  189.256424][ T9667]  active_file:6905 inactive_file:14555 isolated_file:0
[  189.256424][ T9667]  unevictable:2897 dirty:512 writeback:0
[  189.256424][ T9667]  slab_reclaimable:3255 slab_unreclaimable:16441
[  189.256424][ T9667]  mapped:29650 shmem:37677 pagetables:1050
[  189.256424][ T9667]  sec_pagetables:0 bounce:0
[  189.256424][ T9667]  kernel_misc_reclaimable:0
[  189.256424][ T9667]  free:1845033 free_pcp:8723 free_cma:0
[  189.302715][ T9667] Node 0 active_anon:171144kB inactive_anon:376kB active_file:27620kB inactive_file:58220kB unevictable:11588kB isolated(anon):0kB isolated(file):0kB mapped:118600kB dirty:2048kB writeback:0kB shmem:150708kB writeback_tmp:0kB kernel_stack:2976kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  189.333310][ T9667] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  189.360529][ T9667] lowmem_reserve[]: 0 2884 7863 7863
[  189.361550][ T9669] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  189.366176][ T9667] Node 0 DMA32 free:2949932kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB
[  189.404783][ T9667] lowmem_reserve[]: 0 0 4978 4978
[  189.409952][ T9667] Node 0 Normal free:4414840kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:171144kB inactive_anon:376kB active_file:27620kB inactive_file:58220kB unevictable:11588kB writepending:2048kB present:5242880kB managed:5098244kB mlocked:11588kB bounce:0kB free_pcp:36752kB local_pcp:2204kB free_cma:0kB
[  189.442551][ T9667] lowmem_reserve[]: 0 0 0 0
[  189.447261][ T9667] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  189.460167][ T9667] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949932kB
[  189.477113][ T9667] Node 0 Normal: 187*4kB (UME) 109*8kB (UME) 592*16kB (UME) 370*32kB (UME) 231*64kB (UM) 188*128kB (UME) 234*256kB (UME) 249*512kB (UME) 212*1024kB (UM) 98*2048kB (UME) 915*4096kB (UM) = 4414804kB
[  189.497581][ T9667] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[  189.507271][ T9667] 59223 total pagecache pages
[  189.512242][ T9667] 111 pages in swap cache
[  189.516730][ T9667] Free swap  = 124552kB
[  189.520992][ T9667] Total swap = 124996kB
[  189.525226][ T9667] 2097051 pages RAM
[  189.529084][ T9667] 0 pages HighMem/MovableOnly
[  189.534009][ T9667] 80259 pages reserved
[  189.581553][ T9678] loop3: detected capacity change from 0 to 512
[  189.586594][ T9680] netlink: 'syz.5.2018': attribute type 10 has an invalid length.
[  189.596140][ T9680] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2018'.
[  189.609462][ T9681] loop1: detected capacity change from 0 to 512
[  189.616268][ T9681] EXT4-fs: Ignoring removed nobh option
[  189.622556][ T9681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  189.624412][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2019'.
[  189.647090][ T9681] EXT4-fs (loop1): orphan cleanup on readonly fs
[  189.654954][ T9681] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2015: bg 0: block 248: padding at end of block bitmap is not set
[  189.662200][ T9678] EXT4-fs (loop3): orphan cleanup on readonly fs
[  189.678902][ T9681] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2015: Failed to acquire dquot type 1
[  189.694385][ T9681] EXT4-fs (loop1): 1 truncate cleaned up
[  189.694815][ T9678] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2014: bad orphan inode 13
[  189.729175][ T9678] ext4_test_bit(bit=12, block=18) = 1
[  189.734751][ T9678] is_bad_inode(inode)=0
[  189.739358][ T9678] NEXT_ORPHAN(inode)=2130706432
[  189.744292][ T9678] max_ino=32
[  189.747593][ T9678] i_nlink=1
[  189.767224][ T9694] loop5: detected capacity change from 0 to 2048
[  189.804304][ T9678] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  189.817738][ T9694] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.2023: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  189.842210][ T9697] loop0: detected capacity change from 0 to 1024
[  189.849276][ T9697] EXT4-fs: Ignoring removed nobh option
[  189.855221][ T9697] EXT4-fs: Ignoring removed bh option
[  189.865970][ T9694] EXT4-fs (loop5): Remounting filesystem read-only
[  189.882848][ T9678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2014: bg 0: block 248: padding at end of block bitmap is not set
[  189.898499][ T9697] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2024: Allocating blocks 481-513 which overlap fs metadata
[  189.908662][ T9678] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2014: Failed to acquire dquot type 1
[  189.922972][ T9697] EXT4-fs (loop0): Remounting filesystem read-only
[  189.941425][ T9696] EXT4-fs (loop0): pa ffff888106e29af0: logic 256, phys. 369, len 9
[  190.010583][ T9678] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  190.037167][ T9706] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  190.116251][ T9717] __nla_validate_parse: 1 callbacks suppressed
[  190.116297][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2032'.
[  190.131804][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2032'.
[  190.154637][ T9721] loop4: detected capacity change from 0 to 512
[  190.171201][ T9723] loop0: detected capacity change from 0 to 512
[  190.192671][ T9723] EXT4-fs (loop0): orphan cleanup on readonly fs
[  190.199394][ T9723] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2033: bad orphan inode 13
[  190.211691][ T9723] ext4_test_bit(bit=12, block=18) = 1
[  190.217312][ T9723] is_bad_inode(inode)=0
[  190.221533][ T9723] NEXT_ORPHAN(inode)=2130706432
[  190.226570][ T9723] max_ino=32
[  190.229899][ T9723] i_nlink=1
[  190.236215][ T9721] EXT4-fs (loop4): orphan cleanup on readonly fs
[  190.243522][ T9723] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2033: deleted inode referenced: 12
[  190.255575][ T9721] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2031: bad orphan inode 13
[  190.271562][ T9721] ext4_test_bit(bit=12, block=18) = 1
[  190.277581][ T9721] is_bad_inode(inode)=0
[  190.281914][ T9721] NEXT_ORPHAN(inode)=2130706432
[  190.287000][ T9721] max_ino=32
[  190.290330][ T9721] i_nlink=1
[  190.297392][   T29] kauditd_printk_skb: 445 callbacks suppressed
[  190.297407][   T29] audit: type=1326 audit(1747298040.566:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.327562][   T29] audit: type=1326 audit(1747298040.566:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.351372][   T29] audit: type=1326 audit(1747298040.566:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.375028][   T29] audit: type=1326 audit(1747298040.566:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.376124][ T9723] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2033: deleted inode referenced: 12
[  190.399087][   T29] audit: type=1326 audit(1747298040.566:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.399134][   T29] audit: type=1326 audit(1747298040.566:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.458308][   T29] audit: type=1326 audit(1747298040.566:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.476629][ T9721] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.2031: deleted inode referenced: 12
[  190.507945][ T9721] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.2031: deleted inode referenced: 12
[  190.538040][ T9734] loop5: detected capacity change from 0 to 2048
[  190.548092][   T29] audit: type=1326 audit(1747298040.696:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.552324][ T9723] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2033: deleted inode referenced: 12
[  190.572029][   T29] audit: type=1326 audit(1747298040.696:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.572067][   T29] audit: type=1326 audit(1747298040.696:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.5.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  190.574031][ T9721] EXT4-fs error (device loop4): ext4_lookup:1793: inode #2: comm syz.4.2031: deleted inode referenced: 12
[  190.661949][ T9736] loop3: detected capacity change from 0 to 1024
[  190.803031][ T9730] Falling back ldisc for ttyS3.
[  191.027231][ T9736] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.077469][ T9735] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2036: bg 0: block 393: padding at end of block bitmap is not set
[  191.092749][ T9735] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117
[  191.092835][ T9735] EXT4-fs (loop3): This should not happen!! Data will be lost
[  191.092835][ T9735] 
[  191.139422][ T9750] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  191.313521][ T9756] loop3: detected capacity change from 0 to 1024
[  191.320925][ T9756] EXT4-fs: Ignoring removed oldalloc option
[  191.326959][ T9756] EXT4-fs: Ignoring removed i_version option
[  191.354796][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'.
[  191.363904][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2045'.
[  191.412601][ T9766] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  191.431150][ T9766] loop0: detected capacity change from 0 to 256
[  191.434820][ T9768] loop3: detected capacity change from 0 to 512
[  191.444389][ T9764] Falling back ldisc for ttyS3.
[  191.461221][ T9768] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  191.471908][ T9764] loop4: detected capacity change from 0 to 2048
[  191.478837][ T9768] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 393220)!
[  191.489747][ T9768] EXT4-fs (loop3): group descriptors corrupted!
[  191.501185][ T9768] vlan2: entered allmulticast mode
[  191.506605][ T9768] bridge_slave_0: entered allmulticast mode
[  191.609502][ T9772] netlink: 'syz.0.2047': attribute type 3 has an invalid length.
[  191.780730][ T9776] loop4: detected capacity change from 0 to 1024
[  191.912981][ T9776] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.929176][ T9776] siw: device registration error -23
[  192.108653][ T9782] loop1: detected capacity change from 0 to 512
[  192.109058][ T9785] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  192.132982][ T9782] EXT4-fs (loop1): orphan cleanup on readonly fs
[  192.139838][ T9782] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2051: bad orphan inode 13
[  192.201351][ T9782] ext4_test_bit(bit=12, block=18) = 1
[  192.206988][ T9782] is_bad_inode(inode)=0
[  192.211153][ T9782] NEXT_ORPHAN(inode)=2130706432
[  192.216116][ T9782] max_ino=32
[  192.219324][ T9782] i_nlink=1
[  192.284629][ T9782] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  192.322859][ T9782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2051: bg 0: block 248: padding at end of block bitmap is not set
[  192.342055][ T9782] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2051: Failed to acquire dquot type 1
[  192.367510][ T9795] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.2056'.
[  192.502057][ T9782] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  192.616820][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2057'.
[  192.626133][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'.
[  192.676444][ T9810] loop1: detected capacity change from 0 to 1024
[  192.703106][ T9810] EXT4-fs: Ignoring removed oldalloc option
[  192.709199][ T9810] EXT4-fs: Ignoring removed i_version option
[  192.746283][ T9817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2062'.
[  192.786181][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  192.863653][ T9820] sd 0:0:1:0: device reset
[  192.871975][ T9823] Falling back ldisc for ttyS3.
[  192.901028][ T9824] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  192.954923][ T9827] x_tables: unsorted underflow at hook 3
[  193.751596][ T9852] loop3: detected capacity change from 0 to 512
[  193.770988][ T9852] EXT4-fs (loop3): failed to initialize system zone (-117)
[  193.779057][ T9852] EXT4-fs (loop3): mount failed
[  193.796638][ T9855] loop1: detected capacity change from 0 to 1024
[  193.803851][ T9855] EXT4-fs: Ignoring removed oldalloc option
[  193.810047][ T9855] EXT4-fs: Ignoring removed i_version option
[  193.824180][ T9855] EXT4-fs mount: 100 callbacks suppressed
[  193.824198][ T9855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.858679][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.908850][ T9863] batadv8: entered allmulticast mode
[  193.915635][ T9863] 8021q: adding VLAN 0 to HW filter on device batadv8
[  193.922199][ T9859] Falling back ldisc for ttyS3.
[  194.227185][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.268662][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.316861][ T9874] loop4: detected capacity change from 0 to 1024
[  194.419776][ T9874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.469098][ T9874] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  194.655566][ T9945] FAULT_INJECTION: forcing a failure.
[  194.655566][ T9945] name failslab, interval 1, probability 0, space 0, times 0
[  194.668557][ T9945] CPU: 1 UID: 0 PID: 9945 Comm: syz.3.2085 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  194.668637][ T9945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  194.668652][ T9945] Call Trace:
[  194.668661][ T9945]  <TASK>
[  194.668669][ T9945]  __dump_stack+0x1d/0x30
[  194.668690][ T9945]  dump_stack_lvl+0xe8/0x140
[  194.668714][ T9945]  dump_stack+0x15/0x1b
[  194.668731][ T9945]  should_fail_ex+0x265/0x280
[  194.668825][ T9945]  should_failslab+0x8c/0xb0
[  194.668961][ T9945]  __kmalloc_node_noprof+0xa9/0x410
[  194.669019][ T9945]  ? __vmalloc_node_range_noprof+0x3c5/0xdf0
[  194.669051][ T9945]  __vmalloc_node_range_noprof+0x3c5/0xdf0
[  194.669170][ T9945]  ? selinux_capable+0x1f9/0x270
[  194.669200][ T9945]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  194.669233][ T9945]  __vmalloc_noprof+0x5f/0x70
[  194.669256][ T9945]  ? bpf_prog_alloc_no_stats+0x47/0x390
[  194.669320][ T9945]  bpf_prog_alloc_no_stats+0x47/0x390
[  194.669379][ T9945]  ? bpf_prog_alloc+0x2a/0x150
[  194.669408][ T9945]  bpf_prog_alloc+0x3c/0x150
[  194.669441][ T9945]  bpf_prog_load+0x514/0x1070
[  194.669529][ T9945]  ? security_bpf+0x2b/0x90
[  194.669564][ T9945]  __sys_bpf+0x51d/0x790
[  194.669681][ T9945]  __x64_sys_bpf+0x41/0x50
[  194.669712][ T9945]  x64_sys_call+0x2478/0x2fb0
[  194.669736][ T9945]  do_syscall_64+0xd0/0x1a0
[  194.669764][ T9945]  ? clear_bhb_loop+0x40/0x90
[  194.669792][ T9945]  ? clear_bhb_loop+0x40/0x90
[  194.669843][ T9945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.669940][ T9945] RIP: 0033:0x7f7874dce969
[  194.669960][ T9945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.669983][ T9945] RSP: 002b:00007f7873437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  194.670004][ T9945] RAX: ffffffffffffffda RBX: 00007f7874ff5fa0 RCX: 00007f7874dce969
[  194.670018][ T9945] RDX: 000000000000001a RSI: 00002000000001c0 RDI: 0000000000000005
[  194.670030][ T9945] RBP: 00007f7873437090 R08: 0000000000000000 R09: 0000000000000000
[  194.670041][ T9945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.670054][ T9945] R13: 0000000000000000 R14: 00007f7874ff5fa0 R15: 00007ffeacb58548
[  194.670073][ T9945]  </TASK>
[  195.085734][ T9950] loop1: detected capacity change from 0 to 1024
[  195.124051][ T9950] EXT4-fs: Ignoring removed oldalloc option
[  195.130305][ T9950] EXT4-fs: Ignoring removed i_version option
[  195.177819][ T9950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.270295][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.299002][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.384127][   T29] kauditd_printk_skb: 402 callbacks suppressed
[  195.384144][   T29] audit: type=1326 audit(1747298045.656:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cb8b5927 code=0x7ffc0000
[  195.414282][   T29] audit: type=1326 audit(1747298045.656:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cb85ab39 code=0x7ffc0000
[  195.438930][   T29] audit: type=1326 audit(1747298045.656:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f49cb8b5927 code=0x7ffc0000
[  195.463245][   T29] audit: type=1326 audit(1747298045.656:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f49cb85ab39 code=0x7ffc0000
[  195.488057][   T29] audit: type=1326 audit(1747298045.656:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.512918][   T29] audit: type=1326 audit(1747298045.656:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.576234][   T29] audit: type=1326 audit(1747298045.806:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.600161][   T29] audit: type=1326 audit(1747298045.806:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.623755][   T29] audit: type=1326 audit(1747298045.806:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.647699][   T29] audit: type=1326 audit(1747298045.816:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  195.735905][ T9957] Falling back ldisc for ttyS3.
[  195.752761][ T9967] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  195.827642][ T9969] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  195.982809][ T9979] loop3: detected capacity change from 0 to 512
[  196.071596][ T9980] loop0: detected capacity change from 0 to 1024
[  196.230188][ T9979] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.273137][ T9980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.286227][ T9980] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.317168][ T9979] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2095: bad orphan inode 13
[  196.380406][ T9979] ext4_test_bit(bit=12, block=18) = 1
[  196.385960][ T9979] is_bad_inode(inode)=0
[  196.390167][ T9979] NEXT_ORPHAN(inode)=2130706432
[  196.395264][ T9979] max_ino=32
[  196.398555][ T9979] i_nlink=1
[  196.422684][ T9979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.455031][ T9979] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2095: deleted inode referenced: 12
[  196.493580][ T9979] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2095: deleted inode referenced: 12
[  196.513696][ T9979] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2095: deleted inode referenced: 12
[  196.554642][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.657677][ T9990] loop5: detected capacity change from 0 to 1024
[  196.684074][ T9990] EXT4-fs: Ignoring removed oldalloc option
[  196.690220][ T9990] EXT4-fs: Ignoring removed i_version option
[  196.776976][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.799087][ T9990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.818400][ T9996] FAULT_INJECTION: forcing a failure.
[  196.818400][ T9996] name failslab, interval 1, probability 0, space 0, times 0
[  196.831309][ T9996] CPU: 0 UID: 0 PID: 9996 Comm: syz.4.2101 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  196.831399][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  196.831416][ T9996] Call Trace:
[  196.831425][ T9996]  <TASK>
[  196.831433][ T9996]  __dump_stack+0x1d/0x30
[  196.831454][ T9996]  dump_stack_lvl+0xe8/0x140
[  196.831473][ T9996]  dump_stack+0x15/0x1b
[  196.831491][ T9996]  should_fail_ex+0x265/0x280
[  196.831546][ T9996]  should_failslab+0x8c/0xb0
[  196.831578][ T9996]  kmem_cache_alloc_noprof+0x50/0x310
[  196.831603][ T9996]  ? audit_log_start+0x365/0x6c0
[  196.831657][ T9996]  audit_log_start+0x365/0x6c0
[  196.831706][ T9996]  ? pcpu_alloc_area+0x59c/0x5c0
[  196.831740][ T9996]  audit_seccomp+0x48/0x100
[  196.831844][ T9996]  ? __seccomp_filter+0x68c/0x10d0
[  196.831873][ T9996]  __seccomp_filter+0x69d/0x10d0
[  196.831895][ T9996]  ? do_dentry_open+0x914/0xa20
[  196.831912][ T9996]  ? __rcu_read_unlock+0x4f/0x70
[  196.831933][ T9996]  ? mntput_no_expire+0x6f/0x3d0
[  196.832033][ T9996]  __secure_computing+0x82/0x150
[  196.832059][ T9996]  syscall_trace_enter+0xcf/0x1e0
[  196.832082][ T9996]  do_syscall_64+0xaa/0x1a0
[  196.832107][ T9996]  ? clear_bhb_loop+0x40/0x90
[  196.832133][ T9996]  ? clear_bhb_loop+0x40/0x90
[  196.832229][ T9996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.832249][ T9996] RIP: 0033:0x7f49cb8bd37c
[  196.832267][ T9996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  196.832287][ T9996] RSP: 002b:00007f49c9f27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  196.832354][ T9996] RAX: ffffffffffffffda RBX: 00007f49cbae5fa0 RCX: 00007f49cb8bd37c
[  196.832370][ T9996] RDX: 000000000000000f RSI: 00007f49c9f270a0 RDI: 0000000000000007
[  196.832386][ T9996] RBP: 00007f49c9f27090 R08: 0000000000000000 R09: 0000000000000000
[  196.832401][ T9996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  196.832416][ T9996] R13: 0000000000000000 R14: 00007f49cbae5fa0 R15: 00007fff9647e0a8
[  196.832441][ T9996]  </TASK>
[  197.071531][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.197280][T10001] netlink: 2564 bytes leftover after parsing attributes in process `syz.4.2103'.
[  197.211183][T10004] loop5: detected capacity change from 0 to 8192
[  197.303413][T10008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2104'.
[  197.377422][T10017] loop0: detected capacity change from 0 to 512
[  197.400593][T10017] EXT4-fs (loop0): orphan cleanup on readonly fs
[  197.416211][T10017] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2108: bad orphan inode 13
[  197.416381][T10017] ext4_test_bit(bit=12, block=18) = 1
[  197.432371][T10017] is_bad_inode(inode)=0
[  197.436739][T10017] NEXT_ORPHAN(inode)=2130706432
[  197.441872][T10017] max_ino=32
[  197.445449][T10017] i_nlink=1
[  197.449605][T10017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.480936][T10017] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2108: deleted inode referenced: 12
[  197.520469][T10017] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2108: deleted inode referenced: 12
[  197.548179][T10021] loop5: detected capacity change from 0 to 1024
[  197.569932][T10017] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2108: deleted inode referenced: 12
[  197.584615][T10021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  197.619211][T10021] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.649837][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.665845][T10021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000]
[  197.700318][T10021] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.2109: lblock 2 mapped to illegal pblock 2 (length 1)
[  197.733706][T10021] EXT4-fs (loop5): Remounting filesystem read-only
[  197.747627][T10024] macvtap0: entered promiscuous mode
[  197.762095][T10021] EXT4-fs (loop5): 1 orphan inode deleted
[  197.777001][T10024] macvtap0: left promiscuous mode
[  197.787927][T10021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.950118][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.008460][T10031] loop0: detected capacity change from 0 to 1024
[  198.018500][T10031] EXT4-fs: Ignoring removed oldalloc option
[  198.024704][T10031] EXT4-fs: Ignoring removed i_version option
[  198.061550][T10032] loop4: detected capacity change from 0 to 1024
[  198.085477][T10032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.097895][T10032] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.113100][T10032] siw: device registration error -23
[  198.246638][T10033] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  198.345380][T10031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.436646][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.459690][T10044] netlink: 2564 bytes leftover after parsing attributes in process `syz.5.2116'.
[  198.509747][T10047] loop3: detected capacity change from 0 to 512
[  198.516544][T10047] EXT4-fs: Ignoring removed nobh option
[  198.540104][T10047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.558962][T10047] EXT4-fs (loop3): orphan cleanup on readonly fs
[  198.565999][T10047] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2115: bg 0: block 248: padding at end of block bitmap is not set
[  198.580663][T10047] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2115: Failed to acquire dquot type 1
[  198.596254][T10047] EXT4-fs (loop3): 1 truncate cleaned up
[  198.607690][T10047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.731434][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.011629][T10069] FAULT_INJECTION: forcing a failure.
[  199.011629][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.025399][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.4.2123 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  199.025454][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  199.025466][T10069] Call Trace:
[  199.025473][T10069]  <TASK>
[  199.025481][T10069]  __dump_stack+0x1d/0x30
[  199.025515][T10069]  dump_stack_lvl+0xe8/0x140
[  199.025539][T10069]  dump_stack+0x15/0x1b
[  199.025560][T10069]  should_fail_ex+0x265/0x280
[  199.025599][T10069]  should_fail+0xb/0x20
[  199.025641][T10069]  should_fail_usercopy+0x1a/0x20
[  199.025662][T10069]  _copy_from_user+0x1c/0xb0
[  199.025688][T10069]  ___sys_sendmsg+0xc1/0x1d0
[  199.025727][T10069]  __x64_sys_sendmsg+0xd4/0x160
[  199.025801][T10069]  x64_sys_call+0x2999/0x2fb0
[  199.025822][T10069]  do_syscall_64+0xd0/0x1a0
[  199.025852][T10069]  ? clear_bhb_loop+0x40/0x90
[  199.025876][T10069]  ? clear_bhb_loop+0x40/0x90
[  199.025966][T10069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.026046][T10069] RIP: 0033:0x7f49cb8be969
[  199.026060][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.026150][T10069] RSP: 002b:00007f49c9f27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.026246][T10069] RAX: ffffffffffffffda RBX: 00007f49cbae5fa0 RCX: 00007f49cb8be969
[  199.026258][T10069] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000003
[  199.026269][T10069] RBP: 00007f49c9f27090 R08: 0000000000000000 R09: 0000000000000000
[  199.026285][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.026299][T10069] R13: 0000000000000000 R14: 00007f49cbae5fa0 R15: 00007fff9647e0a8
[  199.026353][T10069]  </TASK>
[  199.248635][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.329021][T10076] macvtap0: entered promiscuous mode
[  199.344473][T10076] macvtap0: left promiscuous mode
[  199.376445][T10078] loop0: detected capacity change from 0 to 512
[  199.417080][T10078] EXT4-fs (loop0): orphan cleanup on readonly fs
[  199.429060][T10078] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2127: bad orphan inode 13
[  199.445653][T10078] ext4_test_bit(bit=12, block=18) = 1
[  199.451388][T10078] is_bad_inode(inode)=0
[  199.455673][T10078] NEXT_ORPHAN(inode)=2130706432
[  199.460639][T10078] max_ino=32
[  199.463984][T10078] i_nlink=1
[  199.478595][T10078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.505797][T10078] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2127: deleted inode referenced: 12
[  199.542874][T10078] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2127: deleted inode referenced: 12
[  199.569697][T10086] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  199.582053][T10078] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm syz.0.2127: deleted inode referenced: 12
[  199.595522][T10086] loop3: detected capacity change from 0 to 256
[  199.630925][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.674925][T10092] loop0: detected capacity change from 0 to 512
[  199.712988][T10092] EXT4-fs (loop0): orphan cleanup on readonly fs
[  199.719673][T10092] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2132: bad orphan inode 13
[  199.737126][T10092] ext4_test_bit(bit=12, block=18) = 1
[  199.742696][T10092] is_bad_inode(inode)=0
[  199.747521][T10092] NEXT_ORPHAN(inode)=2130706432
[  199.752573][T10092] max_ino=32
[  199.755794][T10092] i_nlink=1
[  199.768436][T10092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.849854][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.963486][T10086] netlink: 'syz.3.2130': attribute type 3 has an invalid length.
[  200.085928][T10109] FAULT_INJECTION: forcing a failure.
[  200.085928][T10109] name failslab, interval 1, probability 0, space 0, times 0
[  200.099002][T10109] CPU: 0 UID: 0 PID: 10109 Comm: syz.4.2139 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  200.099050][T10109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  200.099065][T10109] Call Trace:
[  200.099072][T10109]  <TASK>
[  200.099080][T10109]  __dump_stack+0x1d/0x30
[  200.099105][T10109]  dump_stack_lvl+0xe8/0x140
[  200.099131][T10109]  dump_stack+0x15/0x1b
[  200.099148][T10109]  should_fail_ex+0x265/0x280
[  200.099248][T10109]  ? assoc_array_delete+0x58/0x950
[  200.099269][T10109]  should_failslab+0x8c/0xb0
[  200.099342][T10109]  __kmalloc_cache_noprof+0x4c/0x320
[  200.099365][T10109]  assoc_array_delete+0x58/0x950
[  200.099456][T10109]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  200.099490][T10109]  key_unlink+0x66/0xf0
[  200.099517][T10109]  keyctl_keyring_unlink+0xe1/0x120
[  200.099572][T10109]  __se_sys_keyctl+0x5a3/0xb80
[  200.099597][T10109]  ? __rcu_read_unlock+0x4f/0x70
[  200.099622][T10109]  ? __fget_files+0x184/0x1c0
[  200.099651][T10109]  ? fput+0x8f/0xc0
[  200.099746][T10109]  __x64_sys_keyctl+0x67/0x80
[  200.099765][T10109]  x64_sys_call+0x2e7f/0x2fb0
[  200.099805][T10109]  do_syscall_64+0xd0/0x1a0
[  200.099828][T10109]  ? clear_bhb_loop+0x40/0x90
[  200.099920][T10109]  ? clear_bhb_loop+0x40/0x90
[  200.099941][T10109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.100010][T10109] RIP: 0033:0x7f49cb8be969
[  200.100078][T10109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.100101][T10109] RSP: 002b:00007f49c9f27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  200.100121][T10109] RAX: ffffffffffffffda RBX: 00007f49cbae5fa0 RCX: 00007f49cb8be969
[  200.100133][T10109] RDX: fffffffffffffffb RSI: 000000002ef7bf6c RDI: 0000000000000009
[  200.100144][T10109] RBP: 00007f49c9f27090 R08: 0000000000000000 R09: 0000000000000000
[  200.100155][T10109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.100208][T10109] R13: 0000000000000000 R14: 00007f49cbae5fa0 R15: 00007fff9647e0a8
[  200.100227][T10109]  </TASK>
[  200.363017][T10112] macvtap0: entered promiscuous mode
[  200.369079][T10112] macvtap0: left promiscuous mode
[  200.606148][T10115] loop4: detected capacity change from 0 to 1024
[  200.614674][T10115] EXT4-fs: Ignoring removed nobh option
[  200.621274][T10115] EXT4-fs: Ignoring removed bh option
[  200.646337][T10119] loop3: detected capacity change from 0 to 512
[  200.682014][T10119] EXT4-fs (loop3): orphan cleanup on readonly fs
[  200.692933][T10119] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2143: bad orphan inode 13
[  200.712373][T10119] ext4_test_bit(bit=12, block=18) = 1
[  200.717984][T10119] is_bad_inode(inode)=0
[  200.722256][T10119] NEXT_ORPHAN(inode)=2130706432
[  200.727390][T10119] max_ino=32
[  200.730778][T10119] i_nlink=1
[  200.765091][T10119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  200.797285][T10119] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2143: deleted inode referenced: 12
[  200.831879][T10115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.854634][T10115] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2142: Allocating blocks 481-513 which overlap fs metadata
[  200.890437][T10119] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2143: deleted inode referenced: 12
[  200.897672][T10127] loop5: detected capacity change from 0 to 1024
[  200.918889][T10127] EXT4-fs: Ignoring removed nobh option
[  200.921940][T10115] EXT4-fs (loop4): Remounting filesystem read-only
[  200.924580][T10127] EXT4-fs: Ignoring removed bh option
[  200.928372][T10128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.950237][T10114] EXT4-fs (loop4): pa ffff888106e29af0: logic 256, phys. 369, len 9
[  200.967305][T10119] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2143: deleted inode referenced: 12
[  200.969764][T10128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.001558][T10127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.027838][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.051373][T10128] loop0: detected capacity change from 0 to 1024
[  201.069625][T10127] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.2146: Allocating blocks 481-513 which overlap fs metadata
[  201.086584][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.102437][T10127] EXT4-fs (loop5): Remounting filesystem read-only
[  201.102973][T10128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.131654][T10134] loop4: detected capacity change from 0 to 512
[  201.139596][T10125] EXT4-fs (loop5): pa ffff888106e29af0: logic 256, phys. 369, len 9
[  201.162057][T10128] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  201.176475][   T29] kauditd_printk_skb: 169 callbacks suppressed
[  201.176493][   T29] audit: type=1326 audit(1747298051.446:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10137 comm="syz.1.2149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f656b31e969 code=0x0
[  201.177587][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.195038][T10134] EXT4-fs (loop4): orphan cleanup on readonly fs
[  201.222946][T10134] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2147: bad orphan inode 13
[  201.239735][T10134] ext4_test_bit(bit=12, block=18) = 1
[  201.245266][T10134] is_bad_inode(inode)=0
[  201.249497][T10134] NEXT_ORPHAN(inode)=2130706432
[  201.254652][T10134] max_ino=32
[  201.257874][T10134] i_nlink=1
[  201.261866][T10134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.282149][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.291223][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.306451][T10141] loop3: detected capacity change from 0 to 1024
[  201.316158][T10145] loop5: detected capacity change from 0 to 512
[  201.316582][T10134] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  201.334561][T10141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.349696][T10141] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  201.354861][T10134] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2147: bg 0: block 248: padding at end of block bitmap is not set
[  201.361250][T10145] EXT4-fs (loop5): 1 orphan inode deleted
[  201.376969][T10134] Quota error (device loop4): write_blk: dquota write failed
[  201.378713][T10145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.385953][T10134] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  201.399039][T10145] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.408510][T10134] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2147: Failed to acquire dquot type 1
[  201.419715][ T9935] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  201.440612][ T9935] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1
[  201.457437][T10134] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  201.469079][   T29] audit: type=1400 audit(1747298051.736:9126): avc:  denied  { execute_no_trans } for  pid=10144 comm="+}[@" path="/326/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  201.474012][T10145] netlink: 60 bytes leftover after parsing attributes in process `+}[@'.
[  201.505677][T10145] team0: No ports can be present during mode change
[  201.528866][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.549476][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.558727][ T9935] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  201.569031][ T9935] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:60: Failed to release dquot type 1
[  201.595567][T10153] macvtap0: entered promiscuous mode
[  201.602274][T10153] macvtap0: left promiscuous mode
[  201.617587][T10155] macvtap0: entered promiscuous mode
[  201.623940][T10155] macvtap0: left promiscuous mode
[  201.795727][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.850362][T10162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  201.911661][T10168] loop4: detected capacity change from 0 to 1024
[  201.922417][T10168] EXT4-fs: Ignoring removed oldalloc option
[  201.928779][T10168] EXT4-fs: Ignoring removed i_version option
[  201.967113][T10169] loop0: detected capacity change from 0 to 512
[  201.973874][T10169] EXT4-fs: Ignoring removed nobh option
[  201.980112][T10169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.989409][T10169] EXT4-fs (loop0): orphan cleanup on readonly fs
[  201.996654][T10169] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2157: bg 0: block 248: padding at end of block bitmap is not set
[  202.011883][T10169] Quota error (device loop0): write_blk: dquota write failed
[  202.019696][T10169] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  202.029847][T10169] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.2157: Failed to acquire dquot type 1
[  202.042085][T10169] EXT4-fs (loop0): 1 truncate cleaned up
[  202.049383][T10169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.069882][T10168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.098695][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.129234][   T29] audit: type=1326 audit(1747298052.396:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.4.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  202.129709][T10175] loop3: detected capacity change from 0 to 512
[  202.161022][   T29] audit: type=1326 audit(1747298052.436:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.4.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  202.194498][T10175] EXT4-fs (loop3): orphan cleanup on readonly fs
[  202.201481][T10175] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2159: bad orphan inode 13
[  202.201693][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.221472][T10175] ext4_test_bit(bit=12, block=18) = 1
[  202.227062][T10175] is_bad_inode(inode)=0
[  202.231283][T10175] NEXT_ORPHAN(inode)=2130706432
[  202.236236][T10175] max_ino=32
[  202.239531][T10175] i_nlink=1
[  202.243416][T10175] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.268559][T10175] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2159: deleted inode referenced: 12
[  202.323697][T10182] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2159: deleted inode referenced: 12
[  202.356938][T10175] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.2159: deleted inode referenced: 12
[  202.385972][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.465612][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.474570][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.490298][T10194] loop3: detected capacity change from 0 to 1024
[  202.503283][T10194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.517102][T10194] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  202.762207][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.820355][T10202] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  202.878483][T10208] netlink: 'syz.5.2171': attribute type 2 has an invalid length.
[  202.911587][T10211] macvtap0: entered promiscuous mode
[  202.917919][T10211] macvtap0: left promiscuous mode
[  203.069011][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2177'.
[  203.078481][T10223] netlink: 'syz.5.2176': attribute type 298 has an invalid length.
[  203.131540][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.218407][T10230] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  203.345396][T10243] netlink: 'syz.4.2184': attribute type 2 has an invalid length.
[  203.552109][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.561089][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.575021][T10254] loop4: detected capacity change from 0 to 1024
[  203.593185][T10254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.606504][T10254] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  203.933026][T10262] lo speed is unknown, defaulting to 1000
[  204.092543][T10266] FAULT_INJECTION: forcing a failure.
[  204.092543][T10266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.106097][T10266] CPU: 0 UID: 0 PID: 10266 Comm: syz.5.2192 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  204.106132][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  204.106144][T10266] Call Trace:
[  204.106153][T10266]  <TASK>
[  204.106163][T10266]  __dump_stack+0x1d/0x30
[  204.106189][T10266]  dump_stack_lvl+0xe8/0x140
[  204.106276][T10266]  dump_stack+0x15/0x1b
[  204.106292][T10266]  should_fail_ex+0x265/0x280
[  204.106334][T10266]  should_fail+0xb/0x20
[  204.106365][T10266]  should_fail_usercopy+0x1a/0x20
[  204.106390][T10266]  strncpy_from_user+0x25/0x230
[  204.106419][T10266]  ? kmem_cache_alloc_noprof+0x186/0x310
[  204.106491][T10266]  ? getname_flags+0x80/0x3b0
[  204.106532][T10266]  getname_flags+0xae/0x3b0
[  204.106640][T10266]  getname_uflags+0x21/0x30
[  204.106683][T10266]  __x64_sys_execveat+0x5d/0x90
[  204.106789][T10266]  x64_sys_call+0x2dae/0x2fb0
[  204.106815][T10266]  do_syscall_64+0xd0/0x1a0
[  204.106839][T10266]  ? clear_bhb_loop+0x40/0x90
[  204.106862][T10266]  ? clear_bhb_loop+0x40/0x90
[  204.106889][T10266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.106948][T10266] RIP: 0033:0x7f2b9697e969
[  204.106974][T10266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.106991][T10266] RSP: 002b:00007f2b94fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  204.107022][T10266] RAX: ffffffffffffffda RBX: 00007f2b96ba5fa0 RCX: 00007f2b9697e969
[  204.107034][T10266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  204.107048][T10266] RBP: 00007f2b94fe7090 R08: 0000000000001000 R09: 0000000000000000
[  204.107064][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.107107][T10266] R13: 0000000000000000 R14: 00007f2b96ba5fa0 R15: 00007ffcdd3fe258
[  204.107174][T10266]  </TASK>
[  204.350536][T10270] loop5: detected capacity change from 0 to 2048
[  204.382592][T10277] macvtap0: entered promiscuous mode
[  204.389125][T10277] macvtap0: left promiscuous mode
[  204.416463][T10270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.457654][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.505825][T10283] macvtap0: entered promiscuous mode
[  204.514219][T10283] macvtap0: left promiscuous mode
[  204.530314][T10287] loop1: detected capacity change from 0 to 2048
[  204.559419][T10292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2201'.
[  204.583797][T10287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.693499][T10287] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  204.767587][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.948741][T10308] loop1: detected capacity change from 0 to 512
[  204.955493][T10308] EXT4-fs: Ignoring removed nobh option
[  204.961632][T10308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  204.973273][T10308] EXT4-fs (loop1): orphan cleanup on readonly fs
[  204.981868][T10308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2204: bg 0: block 248: padding at end of block bitmap is not set
[  204.997100][T10308] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2204: Failed to acquire dquot type 1
[  205.008972][T10308] EXT4-fs (loop1): 1 truncate cleaned up
[  205.016137][T10308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  205.223215][ T9919] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  205.238474][ T9919] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  205.251416][ T9919] EXT4-fs (loop5): This should not happen!! Data will be lost
[  205.251416][ T9919] 
[  205.261368][ T9919] EXT4-fs (loop5): Total free blocks count 0
[  205.267645][ T9919] EXT4-fs (loop5): Free/Dirty block details
[  205.273716][ T9919] EXT4-fs (loop5): free_blocks=2415919504
[  205.279467][ T9919] EXT4-fs (loop5): dirty_blocks=14144
[  205.285221][ T9919] EXT4-fs (loop5): Block reservation details
[  205.291521][ T9919] EXT4-fs (loop5): i_reserved_data_blocks=884
[  205.311686][ T9910] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  205.442832][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'.
[  205.452742][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'.
[  205.465375][T10315] batadv6: entered allmulticast mode
[  205.471653][T10315] 8021q: adding VLAN 0 to HW filter on device batadv6
[  205.513938][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.523095][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.536994][T10320] netlink: 'syz.4.2211': attribute type 2 has an invalid length.
[  205.545193][T10317] loop3: detected capacity change from 0 to 1024
[  205.555961][T10321] netlink: 'syz.5.2210': attribute type 2 has an invalid length.
[  205.577489][T10317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.599889][T10317] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  205.736458][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.766860][T10333] FAULT_INJECTION: forcing a failure.
[  205.766860][T10333] name failslab, interval 1, probability 0, space 0, times 0
[  205.767087][T10343] loop1: detected capacity change from 0 to 512
[  205.779985][T10333] CPU: 0 UID: 0 PID: 10333 Comm: syz.5.2212 Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  205.780073][T10333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  205.780091][T10333] Call Trace:
[  205.780101][T10333]  <TASK>
[  205.780113][T10333]  __dump_stack+0x1d/0x30
[  205.780151][T10333]  dump_stack_lvl+0xe8/0x140
[  205.780179][T10333]  dump_stack+0x15/0x1b
[  205.780248][T10333]  should_fail_ex+0x265/0x280
[  205.780292][T10333]  should_failslab+0x8c/0xb0
[  205.780354][T10333]  kmem_cache_alloc_noprof+0x50/0x310
[  205.780388][T10333]  ? skb_clone+0x151/0x1f0
[  205.780430][T10333]  skb_clone+0x151/0x1f0
[  205.780564][T10333]  pfkey_broadcast_one+0x66/0x1b0
[  205.780605][T10333]  pfkey_broadcast+0x20a/0x240
[  205.780643][T10333]  pfkey_sendmsg+0x8c6/0x900
[  205.780714][T10333]  ? avc_has_perm+0xd3/0x150
[  205.780770][T10333]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  205.780809][T10333]  __sock_sendmsg+0x142/0x180
[  205.780847][T10333]  ____sys_sendmsg+0x31e/0x4e0
[  205.780879][T10333]  ___sys_sendmsg+0x17b/0x1d0
[  205.780937][T10333]  __x64_sys_sendmsg+0xd4/0x160
[  205.780970][T10333]  x64_sys_call+0x2999/0x2fb0
[  205.781077][T10333]  do_syscall_64+0xd0/0x1a0
[  205.781108][T10333]  ? clear_bhb_loop+0x40/0x90
[  205.781137][T10333]  ? clear_bhb_loop+0x40/0x90
[  205.781166][T10333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.781194][T10333] RIP: 0033:0x7f2b9697e969
[  205.781284][T10333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.781308][T10333] RSP: 002b:00007f2b94fc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.781332][T10333] RAX: ffffffffffffffda RBX: 00007f2b96ba6080 RCX: 00007f2b9697e969
[  205.781361][T10333] RDX: 0000000004000010 RSI: 0000200000000400 RDI: 0000000000000003
[  205.781387][T10333] RBP: 00007f2b94fc6090 R08: 0000000000000000 R09: 0000000000000000
[  205.781403][T10333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.781419][T10333] R13: 0000000000000001 R14: 00007f2b96ba6080 R15: 00007ffcdd3fe258
[  205.781445][T10333]  </TASK>
[  205.846488][T10344] loop4: detected capacity change from 0 to 1024
[  205.885868][T10343] EXT4-fs (loop1): orphan cleanup on readonly fs
[  205.923900][T10344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.927490][T10343] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2214: bad orphan inode 13
[  205.930973][T10344] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.992157][T10343] ext4_test_bit(bit=12, block=18) = 1
[  206.057776][T10343] is_bad_inode(inode)=0
[  206.062102][T10343] NEXT_ORPHAN(inode)=2130706432
[  206.062115][T10343] max_ino=32
[  206.062123][T10343] i_nlink=1
[  206.062744][T10343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.074978][T10338] siw: device registration error -23
[  206.107200][T10353] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  206.149130][T10355] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  206.158385][T10356] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  206.175327][T10356] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2214: bg 0: block 248: padding at end of block bitmap is not set
[  206.199966][T10356] __quota_error: 87 callbacks suppressed
[  206.200056][T10356] Quota error (device loop1): write_blk: dquota write failed
[  206.213348][T10356] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  206.223689][T10356] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2214: Failed to acquire dquot type 1
[  206.245046][T10356] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  206.280911][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.327765][   T29] audit: type=1326 audit(1747298056.596:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.3.2219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7874dce969 code=0x0
[  206.338761][T10361] loop5: detected capacity change from 0 to 1024
[  206.362657][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.387889][T10361] EXT4-fs: Ignoring removed oldalloc option
[  206.393965][T10361] EXT4-fs: Ignoring removed i_version option
[  206.405523][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2221'.
[  206.414661][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'.
[  206.427459][T10363] batadv11: entered allmulticast mode
[  206.443173][T10363] 8021q: adding VLAN 0 to HW filter on device batadv11
[  206.460922][T10353] netlink: 'syz.0.2217': attribute type 3 has an invalid length.
[  206.484096][T10361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.531590][   T29] audit: type=1326 audit(1747298056.776:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.533987][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.555556][   T29] audit: type=1326 audit(1747298056.776:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.588457][   T29] audit: type=1326 audit(1747298056.776:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.611952][   T29] audit: type=1326 audit(1747298056.776:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.612406][T10370] loop1: detected capacity change from 0 to 512
[  206.635656][   T29] audit: type=1326 audit(1747298056.776:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.644699][T10370] EXT4-fs: Ignoring removed nobh option
[  206.665498][   T29] audit: type=1326 audit(1747298056.776:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.672188][ T4775] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.694609][   T29] audit: type=1326 audit(1747298056.776:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.5.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b9697e969 code=0x7ffc0000
[  206.737598][T10370] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  206.768782][T10370] EXT4-fs (loop1): orphan cleanup on readonly fs
[  206.784800][T10370] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2222: bg 0: block 248: padding at end of block bitmap is not set
[  206.810425][T10370] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2222: Failed to acquire dquot type 1
[  206.835270][T10370] EXT4-fs (loop1): 1 truncate cleaned up
[  206.889599][T10380] loop5: detected capacity change from 0 to 512
[  206.896431][T10380] EXT4-fs: Ignoring removed nobh option
[  206.904343][T10380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  206.914690][T10380] EXT4-fs (loop5): orphan cleanup on readonly fs
[  206.922595][T10380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2224: bg 0: block 248: padding at end of block bitmap is not set
[  206.938235][T10380] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2224: Failed to acquire dquot type 1
[  206.950750][T10380] EXT4-fs (loop5): 1 truncate cleaned up
[  206.977026][T10385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2228'.
[  207.015025][T10389] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  207.034318][T10387] binfmt_misc: register: failed to install interpreter file ./file2
[  207.087694][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  207.091054][T10391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.106135][T10391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.152992][T10398] loop4: detected capacity change from 0 to 1024
[  207.159963][T10398] EXT4-fs: Ignoring removed oldalloc option
[  207.166472][T10398] EXT4-fs: Ignoring removed i_version option
[  207.229097][T10408] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  207.279789][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2240'.
[  207.301622][T10410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.320304][T10410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.330234][T10416] loop4: detected capacity change from 0 to 1024
[  207.336970][T10410] loop3: detected capacity change from 0 to 1024
[  207.344770][T10416] EXT4-fs: Ignoring removed nobh option
[  207.350385][T10416] EXT4-fs: Ignoring removed bh option
[  207.356218][T10410] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  207.376665][T10416] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2242: Allocating blocks 481-513 which overlap fs metadata
[  207.391490][T10416] EXT4-fs (loop4): Remounting filesystem read-only
[  207.398878][T10415] EXT4-fs (loop4): pa ffff888106e97850: logic 256, phys. 369, len 9
[  207.427316][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'.
[  207.459835][T10424] macvtap0: entered promiscuous mode
[  207.466218][T10424] macvtap0: left promiscuous mode
[  207.851669][T10436] binfmt_misc: register: failed to install interpreter file ./file2
[  207.947503][T10438] loop1: detected capacity change from 0 to 1024
[  208.015642][T10438] EXT4-fs: Ignoring removed oldalloc option
[  208.021614][T10438] EXT4-fs: Ignoring removed i_version option
[  208.171096][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2255'.
[  208.182835][T10453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2252'.
[  208.311265][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.319934][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.350719][T10458] loop1: detected capacity change from 0 to 1024
[  208.364372][T10458] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  208.571936][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.580553][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.595146][T10470] loop4: detected capacity change from 0 to 1024
[  208.641183][T10470] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  208.753120][T10475] loop5: detected capacity change from 0 to 1024
[  209.148469][T10475] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.170209][T10482] netlink: 'syz.1.2262': attribute type 2 has an invalid length.
[  209.178737][T10472] siw: device registration error -23
[  209.240892][T10485] loop1: detected capacity change from 0 to 1024
[  209.252255][T10485] EXT4-fs: Ignoring removed oldalloc option
[  209.258229][T10485] EXT4-fs: Ignoring removed i_version option
[  209.349373][T10491] loop4: detected capacity change from 0 to 1024
[  209.395956][T10491] EXT4-fs: Ignoring removed nobh option
[  209.401593][T10491] EXT4-fs: Ignoring removed bh option
[  209.455133][T10491] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.2266: Allocating blocks 481-513 which overlap fs metadata
[  209.498898][T10491] EXT4-fs (loop4): Remounting filesystem read-only
[  209.511301][T10499] loop3: detected capacity change from 0 to 512
[  209.519261][T10490] EXT4-fs (loop4): pa ffff888106e97850: logic 256, phys. 369, len 9
[  209.529161][T10499] ext4 filesystem being mounted at /499/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.620766][T10507] macvtap0: entered promiscuous mode
[  209.637451][T10507] macvtap0: left promiscuous mode
[  209.665047][T10508] 9pnet_fd: Insufficient options for proto=fd
[  209.812177][T10512] lo speed is unknown, defaulting to 1000
[  209.842409][T10513] loop4: detected capacity change from 0 to 512
[  209.849462][T10513] EXT4-fs: Ignoring removed nobh option
[  209.902137][T10515] lo speed is unknown, defaulting to 1000
[  210.012683][T10513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.022612][T10515] EXT4-fs error (device loop3): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.3.2269: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  210.043475][T10515] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.2269: directory missing '.'
[  210.056713][T10513] EXT4-fs (loop4): orphan cleanup on readonly fs
[  210.064595][T10513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2272: bg 0: block 248: padding at end of block bitmap is not set
[  210.079535][T10513] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2272: Failed to acquire dquot type 1
[  210.092306][T10513] EXT4-fs (loop4): 1 truncate cleaned up
[  210.297889][T10518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.316459][T10518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.427239][T10523] loop1: detected capacity change from 0 to 2048
[  210.471942][T10520] Falling back ldisc for ttyS3.
[  210.538201][T10528] loop1: detected capacity change from 0 to 1024
[  210.545719][T10528] EXT4-fs: Ignoring removed oldalloc option
[  210.551821][T10528] EXT4-fs: Ignoring removed i_version option
[  210.762305][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.779931][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.795348][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'.
[  210.820417][T10542] loop4: detected capacity change from 0 to 1024
[  210.933462][T10542] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  211.405191][T10559] lo speed is unknown, defaulting to 1000
[  211.778477][T10561] batadv6: entered allmulticast mode
[  211.792690][T10561] 8021q: adding VLAN 0 to HW filter on device batadv6
[  211.873035][T10565] loop3: detected capacity change from 0 to 512
[  211.890024][T10565] EXT4-fs: Ignoring removed nobh option
[  211.910831][T10571] loop4: detected capacity change from 0 to 1024
[  211.927978][T10565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.947339][T10565] EXT4-fs (loop3): orphan cleanup on readonly fs
[  211.952518][T10571] EXT4-fs: Ignoring removed oldalloc option
[  211.960156][T10571] EXT4-fs: Ignoring removed i_version option
[  211.970216][T10573] loop5: detected capacity change from 0 to 512
[  211.976931][T10573] EXT4-fs: Ignoring removed nobh option
[  211.983679][T10573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  211.999043][T10573] EXT4-fs (loop5): orphan cleanup on readonly fs
[  212.012112][T10573] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2291: bg 0: block 248: padding at end of block bitmap is not set
[  212.031946][T10573] __quota_error: 258 callbacks suppressed
[  212.031961][T10573] Quota error (device loop5): write_blk: dquota write failed
[  212.035897][T10576] loop1: detected capacity change from 0 to 512
[  212.037955][T10573] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  212.062367][T10573] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2291: Failed to acquire dquot type 1
[  212.074274][T10573] EXT4-fs (loop5): 1 truncate cleaned up
[  212.098547][T10576] EXT4-fs (loop1): orphan cleanup on readonly fs
[  212.111030][T10565] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2289: bg 0: block 248: padding at end of block bitmap is not set
[  212.111158][T10576] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2293: bad orphan inode 13
[  212.144179][T10565] Quota error (device loop3): write_blk: dquota write failed
[  212.148244][T10576] ext4_test_bit(bit=12, block=18) = 1
[  212.151848][T10565] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  212.151876][T10565] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2289: Failed to acquire dquot type 1
[  212.157302][T10576] is_bad_inode(inode)=0
[  212.157314][T10576] NEXT_ORPHAN(inode)=2130706432
[  212.157323][T10576] max_ino=32
[  212.157330][T10576] i_nlink=1
[  212.219979][   T29] audit: type=1326 audit(1747298062.486:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.233975][T10565] EXT4-fs (loop3): 1 truncate cleaned up
[  212.251706][T10576] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.2293: deleted inode referenced: 12
[  212.278317][   T29] audit: type=1326 audit(1747298062.486:9475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.278360][   T29] audit: type=1326 audit(1747298062.486:9476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.278386][   T29] audit: type=1326 audit(1747298062.486:9477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.278415][   T29] audit: type=1326 audit(1747298062.486:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.278518][   T29] audit: type=1326 audit(1747298062.486:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10570 comm="syz.4.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49cb8be969 code=0x7ffc0000
[  212.279803][T10576] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.2293: deleted inode referenced: 12
[  212.280345][T10576] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.2293: deleted inode referenced: 12
[  212.280412][ T3318] ==================================================================
[  212.280448][ T3318] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  212.280489][ T3318] 
[  212.280496][ T3318] read-write to 0xffff888237d26b70 of 8 bytes by task 10576 on cpu 1:
[  212.280516][ T3318]  find_get_block_common+0x4f0/0x960
[  212.280547][ T3318]  bdev_getblk+0x7f/0x3d0
[  212.280572][ T3318]  ext4_getblk+0x1b6/0x510
[  212.280601][ T3318]  ext4_bread_batch+0x5c/0x320
[  212.280630][ T3318]  __ext4_find_entry+0x840/0xf40
[  212.280652][ T3318]  ext4_lookup+0xbb/0x390
[  212.280669][ T3318]  path_openat+0xcf0/0x2170
[  212.280692][ T3318]  do_filp_open+0x109/0x230
[  212.280714][ T3318]  do_open_execat+0xd8/0x260
[  212.280735][ T3318]  alloc_bprm+0x28/0x660
[  212.280760][ T3318]  do_execveat_common+0x12e/0x750
[  212.280791][ T3318]  __x64_sys_execve+0x5c/0x70
[  212.280818][ T3318]  x64_sys_call+0x13ab/0x2fb0
[  212.280844][ T3318]  do_syscall_64+0xd0/0x1a0
[  212.280885][ T3318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.280905][ T3318] 
[  212.280910][ T3318] read to 0xffff888237d26b70 of 8 bytes by task 3318 on cpu 0:
[  212.280925][ T3318]  has_bh_in_lru+0x35/0x1f0
[  212.280945][ T3318]  smp_call_function_many_cond+0x394/0xb20
[  212.280970][ T3318]  on_each_cpu_cond_mask+0x3c/0x80
[  212.280991][ T3318]  invalidate_bh_lrus+0x2a/0x30
[  212.281018][ T3318]  blkdev_flush_mapping+0x9a/0x1a0
[  212.281053][ T3318]  bdev_release+0x2bf/0x3d0
[  212.281083][ T3318]  blkdev_release+0x15/0x20
[  212.281110][ T3318]  __fput+0x29b/0x650
[  212.281125][ T3318]  ____fput+0x1c/0x30
[  212.281146][ T3318]  task_work_run+0x131/0x1a0
[  212.281167][ T3318]  resume_user_mode_work+0x6a/0x70
[  212.281193][ T3318]  syscall_exit_to_user_mode+0x77/0xb0
[  212.281211][ T3318]  do_syscall_64+0xdd/0x1a0
[  212.281236][ T3318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.281262][ T3318] 
[  212.281267][ T3318] value changed: 0x0000000000000000 -> 0xffff888122e2e138
[  212.281281][ T3318] 
[  212.281285][ T3318] Reported by Kernel Concurrency Sanitizer on:
[  212.281299][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(voluntary) 
[  212.281331][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  212.281347][ T3318] ==================================================================
[  212.322844][T10582] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  212.436321][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.458737][T10586] loop9: detected capacity change from 0 to 7
[  212.480349][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.484479][T10586] buffer_io_error: 8 callbacks suppressed
[  212.484495][T10586] Buffer I/O error on dev loop9, logical block 0, async page read
[  212.535779][T10588] loop1: detected capacity change from 0 to 512
[  212.547166][T10584] loop3: detected capacity change from 0 to 1024
[  212.564912][T10586] Buffer I/O error on dev loop9, logical block 0, async page read
[  212.622645][T10588] EXT4-fs (loop1): orphan cleanup on readonly fs
[  212.626004][T10586]  loop9: unable to read partition table
[  212.634817][T10588] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2297: bad orphan inode 13
[  212.636948][T10586] loop_reread_partitions: partition scan of loop9 (�被������ڬ��dƤ����ݡ�����
[  212.636948][T10586] 
U�������) failed (rc=-5)
[  212.641600][T10588] ext4_test_bit(bit=12, block=18) = 1
[  212.804706][T10588] is_bad_inode(inode)=0
[  212.804718][T10588] NEXT_ORPHAN(inode)=2130706432
[  212.804729][T10588] max_ino=32
[  212.804737][T10588] i_nlink=1
[  212.828070][T10584] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  212.866957][T10588] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  212.887664][T10588] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2297: bg 0: block 248: padding at end of block bitmap is not set
[  212.905389][T10588] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2297: Failed to acquire dquot type 1
[  212.917265][T10588] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.