last executing test programs:

1m55.482729903s ago: executing program 3 (id=824):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10)
syz_read_part_table(0x60f, &(0x7f0000000740)="$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")
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000280)={&(0x7f0000000000)=@isdn={0x22, 0x1, 0xc, 0x6}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000d80)=[{0x38, 0x1, 0x7f, "3caa1d69b7bc237307d1380afa022d1d79fe94da3216cdef79a54ca3314e7c018cf5f9f80e5feeb9"}, {0x110, 0x10b, 0x1ff, "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"}, {0x1010, 0x113, 0xfff, "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"}, {0xd0, 0x84, 0x2, "25a23154fe83c3aa3831cda562ea5454f2859df46c904f0bc8ec3f39e6a73446b6dcddc06a79ffbd43431b1d5b8160ccc5aa6a7b84be982d1fda8485d37d7ae5fd3c71508fa0b0b9d30bcd7f05361c897885f91873e1f3b661a458a1978061e7f034cdcb82f568a5d3c893746ad9cb3b1057c0d660b5d2ab7957a950a36e9175d8052db85e1927f5d98ab42b19a9eba6af9d81491980100941f4a69602f29dd1a71c846df81bf5857a6316eb1cfc85ae609c2acc8a644c690b35ff68"}, {0xc0, 0x11, 0x0, "1e81332f86e065a9b916ec603b32997a37e0348234acf02be6cc7d260cd55688cea520fe11ce3a7b8a67f0ec3a46f270641052d349ee3f52040ec07d4f780a746d889cdc7c448937216aaba7821710178e42a03c238ce85724f30ecbd6fc117bd030c8a4207698dfd936e0b1f98c65abbdc9a7cd793831cf8b26591eb1cf3e89cdfc4f9a9ddcbae6fed67587d44e52e707f6843e56032b96b872579ed7f46897050f24a1bf9dd6bcfa797d"}, {0xf8, 0x11, 0x6, "d2c0d3e12dbdb0d26a3f978f57a9cb84c6d297e59828176297e8e3c5ca636f00fc35d5c49221e62b7a7220f31b7024aeacc723d997b6ccaca4864e852237e8184a7998aa07046f151b8c242ce55ff380db7618757c42e27518d378f3edd5cd17ef797bae2477638b944e61224b522e6a5a5979d1a685b4afc8488869495566a00826add87d7adc298ff62513edbfc839f41cea8b82429e216df8b554ea6608ee943065385956374ca818684a43f03de7480457caf0a80ddcd6c618c5ac6be3eca4a212a30bf0f4f29d863e5dabacb55a634b17e07bb170b6e4f2b0bf02bf0eac0289c8a2"}, {0xf8, 0x119, 0x9, "b9ee7febabf7f5934384b7a3cefc64daa6440a03b0555b0f5f0071da07347443405321a0a6d8282b5628d8c5af312e5158434c7de2d49968f137989d98d531ee0632515e3c171aff9e5b66d754c0c8c6462c290bcacb84982e99eef358eaca5d822445d4ba5ec44576d15fcfa53d0943234a078d4e81709bd432fa6ecd7789f9319864215ec1f9aca4155f6b6340f9c46d4cf74b78c30a21a7e43e0de3ad6c51bc04ac5b391aa5a9b4f4428f1f22be31769a82430ddfbd8f111817378819ece9533ee97b24ba9169e52250487ec525e9d873ea234816b5e2335e94bee6aa7cb126202c"}, {0x60, 0x218, 0xc, "25a1f801e8c1585f385cdf3b53363aaa324dcbfabdebea6059327c4bdfcb111272fa76cef1a4be55e86b731cda72851e41e3624fe8740bbe3b81d5aead7510de47f9c589f76ae0f6d41449cf0b0b3e"}], 0x1538}, 0x8981)
r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103})
io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0)
write(r7, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r3, 0x0, 0x40)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0)

1m54.603600556s ago: executing program 3 (id=834):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
timer_create(0x3, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) (fail_nth: 9)

1m54.235601022s ago: executing program 3 (id=837):
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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")

1m53.899585127s ago: executing program 3 (id=839):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$eJzs2s9qE1EUB+CTP02LCGYtLgbcuCrVJzBICsWAEMlCceFA4yYjwmQzyaoP4hP4PD5JVt1F6oSkURGknUxtvg9CDvlNMucykHsX5+OTz5PzL9NPH75/jaOXSbQjonkZ0Y1mtKLUiI1GdOK6iwAA/jfDYdqruweqlee99OoMd/hbMvpWS0MAAAAAAAAAAADc2L/M/zfN/wPAvVDO/3fqboMK5Xkv7azOb9vM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1uVwuHy3/8qq7PwDg9tn/AWD/2P8BYP/Y/wFg/7x99/51bzDoD5PkKGJxUYyKUfle5qdng/5J8lN3861FUYxa6/x5mSfb+UE8WOUv/ph34tnTMr/KXr0Z/JIfxnn1ywcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuOU7Wuo31p4uiGLXKfHNBN7bysjo9G/RPVhds5+143N7dOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbm87mkzTLxrmiiqIdETu41/HD8mkerJ7q7d8iolHRLyvuZlHffxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCv6Ww+SbNsnE/r7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCums/kkzbJxXmFR9xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvR8BAAD//2/WhiY=")
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
unshare(0x28020480)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000000061103c00"/24], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00')
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t')
ptrace(0x10, r6)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

1m52.944852451s ago: executing program 3 (id=858):
socket(0x10, 0x3, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x58900, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xf, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="00000000ba00090018110000bcea", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000c3dc0700050000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000780)=""/4096, 0x40e00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0xa50, 0x3}, 0xfffffeb0, 0x2390b, 0xffffffffffffffff, 0x1, &(0x7f0000001780), &(0x7f00000017c0)=[{0x1, 0x5, 0x1, 0x3}], 0x10, 0x7, @void, @value}, 0x94)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xb6e1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x108)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r3)
r4 = socket(0x40000000015, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x14, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r5, 0x5)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0xb000000, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r7, 0x2)

1m52.689479024s ago: executing program 3 (id=864):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

1m52.689039444s ago: executing program 32 (id=864):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

3.888647584s ago: executing program 2 (id=3069):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000005f43267d56a50835000000"], &(0x7f00000001c0)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4a}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000002900003f83b05d18b590c62069aece9931c6000b000000fffffff800000000480000000000000029000000390000006206023b00000000fc000000000000000000000000000000f8020000000000000000000600000001fc010000000000ce07d444a85b000000c502a50a135ca6bc4497adfa1c348fc16556c6d579bfd60394ce214e2d4128ba73417e3fa3c58ce9fb9910fbfd2d60f7b04214c957663a16463a3e527840292560c226e587ff249b91a8c5c6f6c58ef33840055a2ded0ecbaeb6fda19b440ea801000000d7c99f45e62d798a", @ANYRES64=r0], 0x60}}], 0x2, 0x4000045)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3.839921095s ago: executing program 2 (id=3070):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x25dfdbfb, {0x2, 0x18, 0x50, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c091}, 0x8000)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[], 0x15)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000004200)='t', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x134}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000000)={0x7, 'syzkaller1\x00', {}, 0x7})
sendfile(r7, r6, 0x0, 0x3ffff)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
sendfile(r7, r6, 0x0, 0x7ffff000)

3.125538275s ago: executing program 0 (id=3075):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000", 0x17}], 0x1}, 0x4)

2.74355609s ago: executing program 0 (id=3085):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x40000, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
lseek(r4, 0x5, 0x3)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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")
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5}, 0x38)
recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000840)=""/225, 0xe1}], 0x5}, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d49380", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r5)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)

1.838384493s ago: executing program 4 (id=3092):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r2, 0x0, 0x0, 0x4, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000005f43267d56a50835000000"], &(0x7f00000001c0)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4a}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000002900003f83b05d18b590c62069aece9931c6000b000000fffffff800000000480000000000000029000000390000006206023b00000000fc000000000000000000000000000000f8020000000000000000000600000001fc010000000000ce07d444a85b000000c502a50a135ca6bc4497adfa1c348fc16556c6d579bfd60394ce214e2d4128ba73417e3fa3c58ce9fb9910fbfd2d60f7b04214c957663a16463a3e527840292560c226e587ff249b91a8c5c6f6c58ef33840055a2ded0ecbaeb6fda19b440ea801000000d7c99f45e62d798a", @ANYRES64=r0], 0x60}}], 0x2, 0x4000045)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.837934633s ago: executing program 0 (id=3093):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0), 0x0)

1.571620788s ago: executing program 4 (id=3097):
unshare(0x22020400)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x14)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', <r4=>0x0, 0x4, 0xf2, 0x5, 0x1, 0xd7, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7800, 0x0, 0x3}})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x180, 0x12, 0x800, 0x70bd25, 0x25dfdbfb, {0x1e, 0x5, 0x3, 0x1, {0x4e20, 0x4e21, [0x5, 0x8, 0x8, 0x10], [0x9, 0x9645, 0x1, 0x7], r4, [0x4]}, 0x10001, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "d9f04238553e87624f63cc906f5bcdbcdbeb3b0de06884a59481befb8f9807dc243ae4abc2abdcb4c7f338a88fdeae00525da701d6337d7c704c1495eaf19d2c962b8a44253c7abf8ca00ff02b2126238f7079f159fa1a97d00304d63986133c0fdc5a874773dfcbe5e2e857370d7167a6105268fd0570021d0ca96d322f5776bd9849349a734e58dafb65ffba0e304ae5dd82d48c41a29dedd824b726be"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "6755bd080338003603d2a38deadb6ef4ff2838dc62ba832a3e391bf5049a1f478998bf4f08d6ce9569abdd82fc656489c0c39fc700189ba1a9a4f8c9c6b0ed12e190ffffe1504cf25aad59604e9c26fc0de68d67fde703ea74e2264ee7a6a890ea661c837e817e258814dd6bde83304de79af2e0dcc803979884e05bdb91d6f0b7de96fdbf46df411cebf1"}]}, 0x180}, 0x1, 0x0, 0x0, 0x4080}, 0x200200c5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095", @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='alloc_extent_state\x00', r1, 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000feff000000a1010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r10}, 0x10)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814)

1.517498568s ago: executing program 4 (id=3099):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x800)

1.460552459s ago: executing program 4 (id=3103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x40000, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
lseek(r5, 0x5, 0x3)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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")
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r7 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5}, 0x38)
recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000840)=""/225, 0xe1}], 0x5}, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d49380", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)

1.425964s ago: executing program 5 (id=3104):
r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0)

1.40843391s ago: executing program 0 (id=3105):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.364790681s ago: executing program 0 (id=3106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x25dfdbfb, {0x2, 0x18, 0x50, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c091}, 0x8000)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[], 0x15)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000004200)='t', 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000010000100"/19, @ANYRES32=r10, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c000000000008001c000000000008001f00000000006c000a8014000700fc01000000000000000000000000000014000700fe80000000000000000000000000000014000700200100000000000000000000000000010500080002"], 0x134}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000000)={0x7, 'syzkaller1\x00', {}, 0x7})
sendfile(r7, r6, 0x0, 0x3ffff)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
sendfile(r7, r6, 0x0, 0x7ffff000)

636.963231ms ago: executing program 2 (id=3079):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "4e3c774a25ca2416dd2173ebdee16bcc3a946a6995b83739d0d86a414fe4557dcd0ec3ac37b1542919db11c0b2faadd45c4ab57b836495617b0b63b90367"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

587.958372ms ago: executing program 4 (id=3107):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
preadv(r2, 0x0, 0x0, 0x4, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8)
name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200)
openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000005f43267d56a50835000000"], &(0x7f00000001c0)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r9, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x4a}, 0x1c, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000000000002900003f83b05d18b590c62069aece9931c6000b000000fffffff800000000480000000000000029000000390000006206023b00000000fc000000000000000000000000000000f8020000000000000000000600000001fc010000000000ce07d444a85b000000c502a50a135ca6bc4497adfa1c348fc16556c6d579bfd60394ce214e2d4128ba73417e3fa3c58ce9fb9910fbfd2d60f7b04214c957663a16463a3e527840292560c226e587ff249b91a8c5c6f6c58ef33840055a2ded0ecbaeb6fda19b440ea801000000d7c99f45e62d798a", @ANYRES64=r0], 0x60}}], 0x2, 0x4000045)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r10, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

561.351053ms ago: executing program 2 (id=3108):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a", 0x23}], 0x1}, 0x4)

557.555222ms ago: executing program 5 (id=3109):
unshare(0x22020400)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x14)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', <r4=>0x0, 0x4, 0xf2, 0x5, 0x1, 0xd7, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7800, 0x0, 0x3}})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x180, 0x12, 0x800, 0x70bd25, 0x25dfdbfb, {0x1e, 0x5, 0x3, 0x1, {0x4e20, 0x4e21, [0x5, 0x8, 0x8, 0x10], [0x9, 0x9645, 0x1, 0x7], r4, [0x4]}, 0x10001, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "d9f04238553e87624f63cc906f5bcdbcdbeb3b0de06884a59481befb8f9807dc243ae4abc2abdcb4c7f338a88fdeae00525da701d6337d7c704c1495eaf19d2c962b8a44253c7abf8ca00ff02b2126238f7079f159fa1a97d00304d63986133c0fdc5a874773dfcbe5e2e857370d7167a6105268fd0570021d0ca96d322f5776bd9849349a734e58dafb65ffba0e304ae5dd82d48c41a29dedd824b726be"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "6755bd080338003603d2a38deadb6ef4ff2838dc62ba832a3e391bf5049a1f478998bf4f08d6ce9569abdd82fc656489c0c39fc700189ba1a9a4f8c9c6b0ed12e190ffffe1504cf25aad59604e9c26fc0de68d67fde703ea74e2264ee7a6a890ea661c837e817e258814dd6bde83304de79af2e0dcc803979884e05bdb91d6f0b7de96fdbf46df411cebf1"}]}, 0x180}, 0x1, 0x0, 0x0, 0x4080}, 0x200200c5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095", @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='alloc_extent_state\x00', r1, 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000feff000000a1010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r10}, 0x10)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814)

475.045643ms ago: executing program 5 (id=3111):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {0x0}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3", 0x2d}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc999", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08", 0x76}], 0x2}}], 0x2, 0xc0)
close(r0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

446.087754ms ago: executing program 5 (id=3113):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0, 0x2}], 0x2)

420.459505ms ago: executing program 2 (id=3114):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0), 0x0)

407.027815ms ago: executing program 5 (id=3115):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

382.127865ms ago: executing program 0 (id=3116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd28, 0x25dfdbfb, {0x2, 0x18, 0x50, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c091}, 0x8000)
pipe(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000380)=ANY=[], 0x15)
setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000", @ANYRES64=0x0, @ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r7, &(0x7f0000004200)='t', 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x134}}, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000000)={0x7, 'syzkaller1\x00', {}, 0x7})
sendfile(r7, r6, 0x0, 0x3ffff)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660)
sendfile(r7, r6, 0x0, 0x7ffff000)

370.532555ms ago: executing program 2 (id=3117):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x5}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x40000, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42)
lseek(r5, 0x5, 0x3)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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")
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3)
r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r7 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5}, 0x38)
recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000840)=""/225, 0xe1}], 0x5}, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d49380", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)

363.301206ms ago: executing program 1 (id=3118):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_EMATCHES={0x5c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "4e3c774a25ca2416dd2173ebdee16bcc3a946a6995b83739d0d86a414fe4557dcd0ec3ac37b1542919db11c0b2faadd45c4ab57b836495617b0b63b90367"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

307.923686ms ago: executing program 5 (id=3119):
r0 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x4ab}, 0x18)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0)

260.997837ms ago: executing program 1 (id=3120):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000e40), 0x10400, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x9, 0xffff}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20040000)
r6 = socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r6)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7, <r10=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r9}, 0x20)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'tunl0\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0xb, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x71d}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x8, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000c40)='GPL\x00', 0xa3, 0x0, 0x0, 0x40f00, 0x7, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2a9eb, r9, 0x1, 0x0, &(0x7f0000000cc0)=[{0x2, 0x4, 0x1, 0x9}], 0x10, 0xfffffffc, @void, @value}, 0x94)
flock(r9, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

246.910297ms ago: executing program 4 (id=3121):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000ac1e000100000000e7ff0000000000000000000000002af5001dd96f4200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000000020000000000000000000000480001007368613338342d61726d00"/225], 0x138}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f34", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x3500, 0x5dd8, 0x0, 0x9, 0x5, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0)
socket$key(0xf, 0x3, 0x2)

88.853999ms ago: executing program 1 (id=3122):
unshare(0x22020400)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x10, @short}, 0x14)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', <r4=>0x0, 0x4, 0xf2, 0x5, 0x1, 0xd7, @dev={0xfe, 0x80, '\x00', 0x27}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x7800, 0x0, 0x3}})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x180, 0x12, 0x800, 0x70bd25, 0x25dfdbfb, {0x1e, 0x5, 0x3, 0x1, {0x4e20, 0x4e21, [0x5, 0x8, 0x8, 0x10], [0x9, 0x9645, 0x1, 0x7], r4, [0x4]}, 0x10001, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "d9f04238553e87624f63cc906f5bcdbcdbeb3b0de06884a59481befb8f9807dc243ae4abc2abdcb4c7f338a88fdeae00525da701d6337d7c704c1495eaf19d2c962b8a44253c7abf8ca00ff02b2126238f7079f159fa1a97d00304d63986133c0fdc5a874773dfcbe5e2e857370d7167a6105268fd0570021d0ca96d322f5776bd9849349a734e58dafb65ffba0e304ae5dd82d48c41a29dedd824b726be"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "6755bd080338003603d2a38deadb6ef4ff2838dc62ba832a3e391bf5049a1f478998bf4f08d6ce9569abdd82fc656489c0c39fc700189ba1a9a4f8c9c6b0ed12e190ffffe1504cf25aad59604e9c26fc0de68d67fde703ea74e2264ee7a6a890ea661c837e817e258814dd6bde83304de79af2e0dcc803979884e05bdb91d6f0b7de96fdbf46df411cebf1"}]}, 0x180}, 0x1, 0x0, 0x0, 0x4080}, 0x200200c5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095", @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='alloc_extent_state\x00', r1, 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000feff000000a1010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r10}, 0x10)
connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814)

45.93727ms ago: executing program 1 (id=3123):
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940))

25.02261ms ago: executing program 1 (id=3124):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000640)}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3", 0x2d}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc999", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08", 0x76}], 0x2}}], 0x2, 0xc0)
close(r0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)

0s ago: executing program 1 (id=3125):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]})
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a", 0x23}], 0x1}, 0x4)

kernel console output (not intermixed with test programs):

dev="sockfs" ino=23869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.362820][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2073'.
[  155.370749][   T29] audit: type=1400 audit(1748638040.151:7709): avc:  denied  { wake_alarm } for  pid=9250 comm="syz.1.2074" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  155.411887][ T9247] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  155.453609][ T9237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.465294][ T9237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.510447][ T9237] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.519478][ T9237] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.528557][ T9237] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.537530][ T9237] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.600781][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.611286][ T9242] 8021q: adding VLAN 0 to HW filter on device team0
[  155.627140][ T9242] batman_adv: batadv0: Interface activated: team0
[  155.640194][ T9242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.657299][ T9254] bridge_slave_1: left allmulticast mode
[  155.663095][ T9254] bridge_slave_1: left promiscuous mode
[  155.668897][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.677244][ T9254] bridge_slave_0: left allmulticast mode
[  155.683204][ T9254] bridge_slave_0: left promiscuous mode
[  155.688960][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.807309][   T29] audit: type=1326 audit(1748638040.585:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66a0e969 code=0x7ffc0000
[  155.831992][   T29] audit: type=1326 audit(1748638040.585:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.1.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66a0e969 code=0x7ffc0000
[  155.960876][ T9285] program syz.5.2088 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.032797][ T9295] loop2: detected capacity change from 0 to 1024
[  156.049927][ T9295] EXT4-fs: Ignoring removed bh option
[  156.055470][ T9295] EXT4-fs: Ignoring removed nomblk_io_submit option
[  156.151344][ T9305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  156.184226][ T9313] program syz.4.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.197042][ T9313] FAULT_INJECTION: forcing a failure.
[  156.197042][ T9313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.210480][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.4.2098 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
[  156.210516][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  156.210529][ T9313] Call Trace:
[  156.210535][ T9313]  <TASK>
[  156.210542][ T9313]  __dump_stack+0x1d/0x30
[  156.210563][ T9313]  dump_stack_lvl+0xe8/0x140
[  156.210582][ T9313]  dump_stack+0x15/0x1b
[  156.210666][ T9313]  should_fail_ex+0x265/0x280
[  156.210705][ T9313]  should_fail+0xb/0x20
[  156.210733][ T9313]  should_fail_usercopy+0x1a/0x20
[  156.210756][ T9313]  _copy_from_user+0x1c/0xb0
[  156.210783][ T9313]  scsi_ioctl+0x116f/0x14d0
[  156.210813][ T9313]  ? avc_has_perm+0xd3/0x150
[  156.210860][ T9313]  ? file_has_perm+0x324/0x370
[  156.210889][ T9313]  ? do_vfs_ioctl+0x9df/0x11d0
[  156.210921][ T9313]  sg_ioctl+0xdf6/0x1360
[  156.211022][ T9313]  ? __pfx_sg_ioctl+0x10/0x10
[  156.211060][ T9313]  __se_sys_ioctl+0xcb/0x140
[  156.211095][ T9313]  __x64_sys_ioctl+0x43/0x50
[  156.211123][ T9313]  x64_sys_call+0x19a8/0x2fb0
[  156.211203][ T9313]  do_syscall_64+0xd2/0x200
[  156.211233][ T9313]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  156.211259][ T9313]  ? clear_bhb_loop+0x40/0x90
[  156.211356][ T9313]  ? clear_bhb_loop+0x40/0x90
[  156.211384][ T9313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.211405][ T9313] RIP: 0033:0x7f8a9116e969
[  156.211420][ T9313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.211487][ T9313] RSP: 002b:00007f8a8f7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  156.211567][ T9313] RAX: ffffffffffffffda RBX: 00007f8a91395fa0 RCX: 00007f8a9116e969
[  156.211583][ T9313] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000005
[  156.211598][ T9313] RBP: 00007f8a8f7d7090 R08: 0000000000000000 R09: 0000000000000000
[  156.211613][ T9313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.211628][ T9313] R13: 0000000000000000 R14: 00007f8a91395fa0 R15: 00007ffd03f355b8
[  156.211697][ T9313]  </TASK>
[  156.584592][ T9334] loop5: detected capacity change from 0 to 1024
[  156.605609][ T9334] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  156.615593][ T9334] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  156.653110][ T9334] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  156.666888][ T9334] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.2107: unexpected bad inode w/o EXT4_IGET_BAD
[  156.680840][ T9334] EXT4-fs (loop5): no journal found
[  156.686289][ T9334] EXT4-fs (loop5): can't get journal size
[  156.692276][ T9345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.114892][ T9390] loop4: detected capacity change from 0 to 1024
[  157.134792][ T9389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.149176][ T9390] EXT4-fs: Ignoring removed bh option
[  157.156080][ T9390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  157.549030][ T9419] loop2: detected capacity change from 0 to 128
[  157.560256][ T9418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  157.569004][ T9418] FAT-fs (loop2): Filesystem has been set read-only
[  157.597116][ T9418] bio_check_eod: 22 callbacks suppressed
[  157.597139][ T9418] syz.2.2143: attempt to access beyond end of device
[  157.597139][ T9418] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  157.621379][ T9418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  157.629918][ T9418] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  157.641134][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.641134][ T9419] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128
[  157.654560][ T9419] buffer_io_error: 22 callbacks suppressed
[  157.654575][ T9419] Buffer I/O error on dev loop2, logical block 2065, async page read
[  157.669943][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.669943][ T9419] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128
[  157.683604][ T9419] Buffer I/O error on dev loop2, logical block 2066, async page read
[  157.693541][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.693541][ T9419] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128
[  157.706914][ T9419] Buffer I/O error on dev loop2, logical block 2067, async page read
[  157.715564][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.715564][ T9419] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128
[  157.728912][ T9419] Buffer I/O error on dev loop2, logical block 2068, async page read
[  157.737457][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.737457][ T9419] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128
[  157.750849][ T9419] Buffer I/O error on dev loop2, logical block 2069, async page read
[  157.760852][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.760852][ T9419] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128
[  157.774475][ T9419] Buffer I/O error on dev loop2, logical block 2070, async page read
[  157.783971][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.783971][ T9419] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128
[  157.797322][ T9419] Buffer I/O error on dev loop2, logical block 2071, async page read
[  157.814178][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.814178][ T9419] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128
[  157.827478][ T9419] Buffer I/O error on dev loop2, logical block 2072, async page read
[  157.858699][ T9419] syz.2.2143: attempt to access beyond end of device
[  157.858699][ T9419] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128
[  157.872234][ T9419] Buffer I/O error on dev loop2, logical block 2065, async page read
[  157.899834][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  157.916624][ T9419] Buffer I/O error on dev loop2, logical block 2066, async page read
[  157.945814][ T9430] FAULT_INJECTION: forcing a failure.
[  157.945814][ T9430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.959196][ T9430] CPU: 0 UID: 0 PID: 9430 Comm: syz.4.2147 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
[  157.959288][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  157.959304][ T9430] Call Trace:
[  157.959311][ T9430]  <TASK>
[  157.959320][ T9430]  __dump_stack+0x1d/0x30
[  157.959349][ T9430]  dump_stack_lvl+0xe8/0x140
[  157.959395][ T9430]  dump_stack+0x15/0x1b
[  157.959412][ T9430]  should_fail_ex+0x265/0x280
[  157.959445][ T9430]  should_fail+0xb/0x20
[  157.959475][ T9430]  should_fail_usercopy+0x1a/0x20
[  157.959501][ T9430]  _copy_from_iter+0xcf/0xe40
[  157.959520][ T9430]  ? __build_skb_around+0x1a0/0x200
[  157.959546][ T9430]  ? __alloc_skb+0x223/0x320
[  157.959609][ T9430]  netlink_sendmsg+0x471/0x6b0
[  157.959642][ T9430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  157.959673][ T9430]  __sock_sendmsg+0x142/0x180
[  157.959693][ T9430]  ____sys_sendmsg+0x31e/0x4e0
[  157.959745][ T9430]  ___sys_sendmsg+0x17b/0x1d0
[  157.959843][ T9430]  __x64_sys_sendmsg+0xd4/0x160
[  157.959980][ T9430]  x64_sys_call+0x2999/0x2fb0
[  157.960008][ T9430]  do_syscall_64+0xd2/0x200
[  157.960041][ T9430]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  157.960189][ T9430]  ? clear_bhb_loop+0x40/0x90
[  157.960211][ T9430]  ? clear_bhb_loop+0x40/0x90
[  157.960237][ T9430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.960273][ T9430] RIP: 0033:0x7f8a9116e969
[  157.960363][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  157.960387][ T9430] RSP: 002b:00007f8a8f7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.960412][ T9430] RAX: ffffffffffffffda RBX: 00007f8a91395fa0 RCX: 00007f8a9116e969
[  157.960429][ T9430] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  157.960497][ T9430] RBP: 00007f8a8f7d7090 R08: 0000000000000000 R09: 0000000000000000
[  157.960590][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.960605][ T9430] R13: 0000000000000000 R14: 00007f8a91395fa0 R15: 00007ffd03f355b8
[  157.960649][ T9430]  </TASK>
[  158.179610][ T9435] netlink: 'syz.0.2149': attribute type 10 has an invalid length.
[  158.187742][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2149'.
[  158.226698][ T9435] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  158.528734][ T9457] loop2: detected capacity change from 0 to 1024
[  158.535611][ T9457] EXT4-fs: Ignoring removed bh option
[  158.541370][ T9457] EXT4-fs: Ignoring removed nomblk_io_submit option
[  158.570116][ T9457] EXT4-fs mount: 22 callbacks suppressed
[  158.570244][ T9457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.657308][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.671606][ T9462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.710522][ T9466] loop0: detected capacity change from 0 to 512
[  158.723457][ T9471] loop4: detected capacity change from 0 to 164
[  158.735094][ T9466] /dev/loop0: Can't open blockdev
[  159.100993][ T9495] Cannot find set identified by id 0 to match
[  159.108662][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  159.264862][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.309127][ T9513] loop0: detected capacity change from 0 to 512
[  159.326808][ T9513] loop0: detected capacity change from 0 to 2048
[  159.335742][ T9513] EXT4-fs: Ignoring removed bh option
[  159.345172][ T9516] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2183'.
[  159.363603][ T9513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.387958][ T9519] loop5: detected capacity change from 0 to 1024
[  159.398310][ T9519] EXT4-fs: Ignoring removed bh option
[  159.404703][ T9519] EXT4-fs: Ignoring removed nomblk_io_submit option
[  159.447075][ T9519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.480299][ T9519] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2180'.
[  159.489353][ T9519] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2180'.
[  159.595821][ T9526] loop2: detected capacity change from 0 to 512
[  159.641221][ T9526] EXT4-fs: Ignoring removed oldalloc option
[  159.647398][ T9526] EXT4-fs: Ignoring removed mblk_io_submit option
[  159.664227][ T9526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  159.687327][ T9526] EXT4-fs (loop2): orphan cleanup on readonly fs
[  159.715011][ T9526] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2186: Failed to acquire dquot type 1
[  159.728188][ T9526] EXT4-fs (loop2): 1 truncate cleaned up
[  159.737245][ T9526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  160.113896][ T9542] Cannot find set identified by id 0 to match
[  160.124475][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'.
[  160.147339][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.179599][ T3425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  160.198128][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  160.210529][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  160.210529][ T3425] 
[  160.220383][ T3425] EXT4-fs (loop0): Total free blocks count 0
[  160.226607][ T3425] EXT4-fs (loop0): Free/Dirty block details
[  160.232732][ T3425] EXT4-fs (loop0): free_blocks=2415919104
[  160.238783][ T3425] EXT4-fs (loop0): dirty_blocks=8224
[  160.244167][ T3425] EXT4-fs (loop0): Block reservation details
[  160.250410][ T3425] EXT4-fs (loop0): i_reserved_data_blocks=514
[  160.264486][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  160.315595][ T9559] loop4: detected capacity change from 0 to 1024
[  160.322616][ T9559] EXT4-fs: Ignoring removed bh option
[  160.328155][ T9559] EXT4-fs: Ignoring removed nomblk_io_submit option
[  160.335587][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.360533][ T9559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.421580][ T9574] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2195'.
[  160.435798][ T9576] Cannot find set identified by id 0 to match
[  160.443420][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2204'.
[  160.481890][ T9579] loop0: detected capacity change from 0 to 512
[  160.531309][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2203'.
[  160.540369][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2203'.
[  160.580033][ T9579] loop0: detected capacity change from 0 to 2048
[  160.631955][ T9579] EXT4-fs: Ignoring removed bh option
[  160.747281][ T9579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.038387][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.079096][   T29] kauditd_printk_skb: 423 callbacks suppressed
[  161.079115][   T29] audit: type=1326 audit(1748638045.896:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.084066][ T9602] loop4: detected capacity change from 0 to 512
[  161.086467][   T29] audit: type=1326 audit(1748638045.896:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.139205][   T29] audit: type=1326 audit(1748638045.896:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.162714][   T29] audit: type=1326 audit(1748638045.896:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.186304][   T29] audit: type=1326 audit(1748638045.896:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.209947][   T29] audit: type=1326 audit(1748638045.896:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.233820][   T29] audit: type=1326 audit(1748638045.896:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.257446][   T29] audit: type=1326 audit(1748638045.896:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  161.281044][   T29] audit: type=1326 audit(1748638045.896:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a9116e9a3 code=0x7ffc0000
[  161.304414][   T29] audit: type=1326 audit(1748638045.896:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9601 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a9116d41f code=0x7ffc0000
[  161.329194][ T9602] EXT4-fs: Ignoring removed oldalloc option
[  161.335186][ T9602] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.362685][ T9602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.380930][ T9608] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2215'.
[  161.384728][ T9609] Cannot find set identified by id 0 to match
[  161.399398][   T37] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  161.400372][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2216'.
[  161.414765][   T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  161.427756][ T9602] EXT4-fs (loop4): orphan cleanup on readonly fs
[  161.436691][   T37] EXT4-fs (loop0): This should not happen!! Data will be lost
[  161.436691][   T37] 
[  161.453723][   T37] EXT4-fs (loop0): Total free blocks count 0
[  161.460061][   T37] EXT4-fs (loop0): Free/Dirty block details
[  161.466171][   T37] EXT4-fs (loop0): free_blocks=2415919104
[  161.472233][   T37] EXT4-fs (loop0): dirty_blocks=8144
[  161.478746][   T37] EXT4-fs (loop0): Block reservation details
[  161.484823][   T37] EXT4-fs (loop0): i_reserved_data_blocks=509
[  161.494915][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  161.507614][ T9602] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2212: Failed to acquire dquot type 1
[  161.547571][ T9602] EXT4-fs (loop4): 1 truncate cleaned up
[  161.554190][ T9602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  161.773692][ T9640] loop2: detected capacity change from 0 to 1024
[  161.782512][ T9640] EXT4-fs: Ignoring removed bh option
[  161.788267][ T9640] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.801752][ T9640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.872371][ T9645] loop0: detected capacity change from 0 to 1024
[  161.890680][ T9645] EXT4-fs: Ignoring removed bh option
[  161.896278][ T9645] EXT4-fs: Ignoring removed nomblk_io_submit option
[  161.914866][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.915882][ T9645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.948962][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2228'.
[  161.958110][ T9645] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2228'.
[  162.026173][ T9653] xt_connbytes: Forcing CT accounting to be enabled
[  162.032920][ T9653] Cannot find set identified by id 0 to match
[  162.040600][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2231'.
[  162.485258][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.555673][ T9674] loop2: detected capacity change from 0 to 512
[  162.606119][ T9674] EXT4-fs: Ignoring removed oldalloc option
[  162.626352][ T9674] EXT4-fs: Ignoring removed mblk_io_submit option
[  162.649695][ T9674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  162.653783][ T9678] Cannot find set identified by id 0 to match
[  162.659479][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.699446][ T9674] EXT4-fs (loop2): orphan cleanup on readonly fs
[  162.721364][ T9674] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2241: Failed to acquire dquot type 1
[  162.733841][ T9674] EXT4-fs (loop2): 1 truncate cleaned up
[  162.741535][ T9674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  162.807339][ T9703] loop4: detected capacity change from 0 to 512
[  162.825351][ T9703] loop4: detected capacity change from 0 to 2048
[  162.836251][ T9703] EXT4-fs: Ignoring removed bh option
[  162.852056][ T9703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.889879][ T9712] loop5: detected capacity change from 0 to 1024
[  162.908215][ T9712] EXT4-fs: Ignoring removed bh option
[  162.914075][ T9712] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.945416][ T9712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.131735][ T9721] loop0: detected capacity change from 0 to 1024
[  163.140105][ T9721] EXT4-fs: Ignoring removed bh option
[  163.145575][ T9721] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.170641][ T9721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.384928][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.456886][ T9729] Cannot find set identified by id 0 to match
[  163.681215][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.704892][ T3888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  163.720542][ T3888] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  163.733493][ T3888] EXT4-fs (loop4): This should not happen!! Data will be lost
[  163.733493][ T3888] 
[  163.743319][ T3888] EXT4-fs (loop4): Total free blocks count 0
[  163.749363][ T3888] EXT4-fs (loop4): Free/Dirty block details
[  163.756044][ T3888] EXT4-fs (loop4): free_blocks=2415919104
[  163.761844][ T3888] EXT4-fs (loop4): dirty_blocks=8224
[  163.767309][ T3888] EXT4-fs (loop4): Block reservation details
[  163.773319][ T3888] EXT4-fs (loop4): i_reserved_data_blocks=514
[  163.791221][   T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  163.874489][ T9750] loop2: detected capacity change from 0 to 512
[  163.886175][ T9750] EXT4-fs: Ignoring removed oldalloc option
[  163.892186][ T9750] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.914901][ T9750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.936255][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.946186][ T9751] Cannot find set identified by id 0 to match
[  163.954540][ T9750] EXT4-fs (loop2): orphan cleanup on readonly fs
[  163.994877][ T9750] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2269: Failed to acquire dquot type 1
[  164.053502][ T9750] EXT4-fs (loop2): 1 truncate cleaned up
[  164.062805][ T9750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.076625][ T9768] loop0: detected capacity change from 0 to 512
[  164.105784][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.126502][ T9768] loop0: detected capacity change from 0 to 2048
[  164.136938][ T9768] EXT4-fs: Ignoring removed bh option
[  164.166449][ T9768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.264176][ T9792] loop4: detected capacity change from 0 to 1024
[  164.277375][ T9793] loop2: detected capacity change from 0 to 1024
[  164.314039][ T9792] EXT4-fs: Ignoring removed bh option
[  164.319520][ T9792] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.332273][ T9793] EXT4-fs: Ignoring removed bh option
[  164.337737][ T9793] EXT4-fs: Ignoring removed nomblk_io_submit option
[  164.355345][ T9797] Cannot find set identified by id 0 to match
[  164.373753][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.391877][ T9792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.911130][ T3888] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  164.928186][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  164.940556][ T3888] EXT4-fs (loop0): This should not happen!! Data will be lost
[  164.940556][ T3888] 
[  164.950541][ T3888] EXT4-fs (loop0): Total free blocks count 0
[  164.956637][ T3888] EXT4-fs (loop0): Free/Dirty block details
[  164.962667][ T3888] EXT4-fs (loop0): free_blocks=2415919104
[  164.968478][ T3888] EXT4-fs (loop0): dirty_blocks=8224
[  164.973785][ T3888] EXT4-fs (loop0): Block reservation details
[  164.979847][ T3888] EXT4-fs (loop0): i_reserved_data_blocks=514
[  164.990493][ T9824] Cannot find set identified by id 0 to match
[  165.030602][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  165.058311][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.078613][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.152303][ T9835] loop5: detected capacity change from 0 to 512
[  165.169369][ T9835] EXT4-fs: Ignoring removed oldalloc option
[  165.175516][ T9835] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.197016][ T9835] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.212092][ T9835] EXT4-fs (loop5): orphan cleanup on readonly fs
[  165.224773][ T9835] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2302: Failed to acquire dquot type 1
[  165.241755][ T9851] loop4: detected capacity change from 0 to 512
[  165.258527][ T9851] loop4: detected capacity change from 0 to 2048
[  165.265459][ T9851] EXT4-fs: Ignoring removed bh option
[  165.272066][ T9835] EXT4-fs (loop5): 1 truncate cleaned up
[  165.279279][ T9835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  165.331265][ T9851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.332095][ T9857] __nla_validate_parse: 15 callbacks suppressed
[  165.332113][ T9857] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2307'.
[  165.357649][ T9859] Cannot find set identified by id 0 to match
[  165.378868][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.393565][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'.
[  165.500423][ T9873] loop0: detected capacity change from 0 to 1024
[  165.520186][ T9873] EXT4-fs: Ignoring removed bh option
[  165.525682][ T9873] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.545979][ T9873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.563375][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2310'.
[  165.572503][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2310'.
[  165.647728][ T9888] loop5: detected capacity change from 0 to 1024
[  165.778071][ T9888] EXT4-fs: Ignoring removed bh option
[  165.783538][ T9888] EXT4-fs: Ignoring removed nomblk_io_submit option
[  165.812758][ T9888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.891225][ T9891] loop2: detected capacity change from 0 to 512
[  165.899195][ T9891] EXT4-fs: Ignoring removed oldalloc option
[  165.906759][ T9891] EXT4-fs: Ignoring removed mblk_io_submit option
[  165.914216][ T9891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.928793][ T9891] EXT4-fs (loop2): orphan cleanup on readonly fs
[  165.944262][ T9891] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2319: Failed to acquire dquot type 1
[  165.958242][ T9891] EXT4-fs (loop2): 1 truncate cleaned up
[  165.968617][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.022690][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.065312][ T9899] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2321'.
[  166.078090][ T3888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  166.107974][ T3888] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  166.120377][ T3888] EXT4-fs (loop4): This should not happen!! Data will be lost
[  166.120377][ T3888] 
[  166.130094][ T3888] EXT4-fs (loop4): Total free blocks count 0
[  166.136125][ T3888] EXT4-fs (loop4): Free/Dirty block details
[  166.142179][ T3888] EXT4-fs (loop4): free_blocks=2415919104
[  166.147923][ T3888] EXT4-fs (loop4): dirty_blocks=8224
[  166.153365][ T3888] EXT4-fs (loop4): Block reservation details
[  166.159356][ T3888] EXT4-fs (loop4): i_reserved_data_blocks=514
[  166.170063][ T3888] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  166.323783][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.388875][ T9913] Cannot find set identified by id 0 to match
[  166.402168][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.410923][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'.
[  166.433431][ T9919] loop0: detected capacity change from 0 to 512
[  166.451574][   T29] kauditd_printk_skb: 225 callbacks suppressed
[  166.451589][   T29] audit: type=1326 audit(1748638051.305:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.494394][ T9925] loop5: detected capacity change from 0 to 512
[  166.501549][ T9925] EXT4-fs: Ignoring removed oldalloc option
[  166.507663][ T9925] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.515255][ T9919] loop0: detected capacity change from 0 to 2048
[  166.525449][ T9919] EXT4-fs: Ignoring removed bh option
[  166.533614][   T29] audit: type=1326 audit(1748638051.335:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.557887][   T29] audit: type=1326 audit(1748638051.335:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.581533][   T29] audit: type=1326 audit(1748638051.345:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.583197][ T9925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.605952][   T29] audit: type=1326 audit(1748638051.345:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.637269][   T29] audit: type=1326 audit(1748638051.345:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.661866][   T29] audit: type=1326 audit(1748638051.345:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.685374][   T29] audit: type=1326 audit(1748638051.345:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  166.709750][   T29] audit: type=1326 audit(1748638051.345:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdef1a8e9a3 code=0x7ffc0000
[  166.711128][ T9925] EXT4-fs (loop5): orphan cleanup on readonly fs
[  166.733624][   T29] audit: type=1326 audit(1748638051.345:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.5.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdef1a8d41f code=0x7ffc0000
[  166.742274][ T9925] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2331: Failed to acquire dquot type 1
[  166.777704][ T9919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.791952][ T9925] EXT4-fs (loop5): 1 truncate cleaned up
[  166.807969][ T9934] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2336'.
[  166.820252][ T9925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.853640][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.020650][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2339'.
[  167.029699][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2339'.
[  167.053841][ T9959] loop4: detected capacity change from 0 to 1024
[  167.061775][ T9959] EXT4-fs: Ignoring removed bh option
[  167.067426][ T9959] EXT4-fs: Ignoring removed nomblk_io_submit option
[  167.087600][ T9959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.282473][ T9964] Cannot find set identified by id 0 to match
[  167.290746][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'.
[  167.356482][ T3888] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  167.413983][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  167.427251][ T3888] EXT4-fs (loop0): This should not happen!! Data will be lost
[  167.427251][ T3888] 
[  167.437106][ T3888] EXT4-fs (loop0): Total free blocks count 0
[  167.443193][ T3888] EXT4-fs (loop0): Free/Dirty block details
[  167.449296][ T3888] EXT4-fs (loop0): free_blocks=2415919104
[  167.455036][ T3888] EXT4-fs (loop0): dirty_blocks=8224
[  167.461409][ T3888] EXT4-fs (loop0): Block reservation details
[  167.467814][ T3888] EXT4-fs (loop0): i_reserved_data_blocks=514
[  167.481887][ T3888] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  167.785176][ T9994] Cannot find set identified by id 0 to match
[  167.860161][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.979264][T10010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.149400][T10029] Cannot find set identified by id 0 to match
[  168.192747][T10035] loop2: detected capacity change from 0 to 1024
[  168.199739][T10035] EXT4-fs: Ignoring removed bh option
[  168.205447][T10035] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.217847][T10035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.286949][T10044] loop0: detected capacity change from 0 to 1024
[  168.297070][T10044] EXT4-fs: Ignoring removed bh option
[  168.303413][T10044] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.314460][T10044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.501692][T10055] netlink: 'syz.4.2381': attribute type 27 has an invalid length.
[  168.548179][T10055] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.558549][T10055] 8021q: adding VLAN 0 to HW filter on device team0
[  168.565867][T10055] batman_adv: batadv0: Interface activated: team0
[  168.641969][T10055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.664341][T10063] Cannot find set identified by id 0 to match
[  168.910080][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.011558][T10087] loop2: detected capacity change from 0 to 512
[  169.042349][T10087] loop2: detected capacity change from 0 to 2048
[  169.050106][T10087] EXT4-fs: Ignoring removed bh option
[  169.063888][T10087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.069510][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.120333][T10095] set match dimension is over the limit!
[  169.224230][T10109] netlink: 'syz.5.2402': attribute type 27 has an invalid length.
[  169.274798][T10109] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.291104][T10109] 8021q: adding VLAN 0 to HW filter on device team0
[  169.308778][T10109] batman_adv: batadv0: Interface activated: team0
[  169.329442][T10117] loop0: detected capacity change from 0 to 1024
[  169.336130][T10109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.336486][T10117] EXT4-fs: Ignoring removed bh option
[  169.357543][T10117] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.397055][T10117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.842972][ T3888] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  169.886578][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  169.898869][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  169.898869][ T3888] 
[  169.908612][ T3888] EXT4-fs (loop2): Total free blocks count 0
[  169.914947][ T3888] EXT4-fs (loop2): Free/Dirty block details
[  169.920914][ T3888] EXT4-fs (loop2): free_blocks=2415919104
[  169.926720][ T3888] EXT4-fs (loop2): dirty_blocks=8224
[  169.932024][ T3888] EXT4-fs (loop2): Block reservation details
[  169.938291][ T3888] EXT4-fs (loop2): i_reserved_data_blocks=514
[  169.951931][T10139] Cannot find set identified by id 0 to match
[  170.015607][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  170.087408][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.147721][T10150] netlink: 'syz.4.2420': attribute type 27 has an invalid length.
[  170.177322][T10150] batman_adv: batadv0: Interface deactivated: team0
[  170.213834][T10150] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.224902][T10150] 8021q: adding VLAN 0 to HW filter on device team0
[  170.233077][T10150] batman_adv: batadv0: Interface activated: team0
[  170.267452][T10150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.267912][T10161] loop2: detected capacity change from 0 to 512
[  170.345192][T10161] loop2: detected capacity change from 0 to 2048
[  170.351985][T10161] EXT4-fs: Ignoring removed bh option
[  170.393491][T10161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.479067][T10172] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  170.523929][T10183] Cannot find set identified by id 0 to match
[  170.531594][T10183] __nla_validate_parse: 18 callbacks suppressed
[  170.531608][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2431'.
[  170.574504][T10188] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2433'.
[  170.604857][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2429'.
[  170.614076][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2429'.
[  170.724371][T10201] vhci_hcd: default hub control req: 6031 v09fa i0008 l0
[  170.760253][T10203] Cannot find add_set index 0 as target
[  171.019331][T10206] loop0: detected capacity change from 0 to 1024
[  171.040477][T10206] EXT4-fs: Ignoring removed orlov option
[  171.046602][T10206] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.061353][T10208] loop5: detected capacity change from 0 to 512
[  171.070264][T10206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.113556][T10208] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  171.138355][T10208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  171.166372][T10208] System zones: 1-12
[  171.170706][T10208] EXT4-fs (loop5): 1 truncate cleaned up
[  171.177241][T10208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.194610][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  171.195114][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2440'.
[  171.207273][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  171.207273][ T3888] 
[  171.226196][ T3888] EXT4-fs (loop2): Total free blocks count 0
[  171.232255][ T3888] EXT4-fs (loop2): Free/Dirty block details
[  171.238176][ T3888] EXT4-fs (loop2): free_blocks=2415919104
[  171.243946][ T3888] EXT4-fs (loop2): dirty_blocks=7232
[  171.249249][ T3888] EXT4-fs (loop2): Block reservation details
[  171.255444][ T3888] EXT4-fs (loop2): i_reserved_data_blocks=452
[  171.276030][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  171.324179][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.353006][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.374006][T10220] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2445'.
[  171.407799][T10222] Cannot find set identified by id 0 to match
[  171.445510][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'.
[  171.539115][T10238] loop5: detected capacity change from 0 to 1024
[  171.549775][T10238] EXT4-fs: Ignoring removed bh option
[  171.555511][T10238] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.577037][T10245] loop2: detected capacity change from 0 to 512
[  171.602267][T10245] loop2: detected capacity change from 0 to 2048
[  171.608994][T10245] EXT4-fs: Ignoring removed bh option
[  171.683535][T10257] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2458'.
[  171.784386][T10260] loop4: detected capacity change from 0 to 1024
[  171.800519][T10260] EXT4-fs: Ignoring removed bh option
[  171.806135][T10260] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.874546][T10266] netlink: 'syz.1.2460': attribute type 27 has an invalid length.
[  172.020673][T10266] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.030891][T10266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.076509][T10269] Cannot find set identified by id 0 to match
[  172.085611][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'.
[  172.095679][T10267] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2457'.
[  172.422031][   T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  172.425634][T10294] netlink: 'syz.0.2473': attribute type 27 has an invalid length.
[  172.447259][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  172.459572][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  172.459572][   T12] 
[  172.469365][   T12] EXT4-fs (loop2): Total free blocks count 0
[  172.475356][   T12] EXT4-fs (loop2): Free/Dirty block details
[  172.481281][   T12] EXT4-fs (loop2): free_blocks=2415919104
[  172.487012][   T12] EXT4-fs (loop2): dirty_blocks=8224
[  172.492345][   T12] EXT4-fs (loop2): Block reservation details
[  172.492808][T10291] Cannot find set identified by id 0 to match
[  172.498410][   T12] EXT4-fs (loop2): i_reserved_data_blocks=514
[  172.522705][ T3425] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  172.535339][ T3425] EXT4-fs (loop2): This should not happen!! Data will be lost
[  172.535339][ T3425] 
[  172.632036][T10299] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.644589][T10299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.772212][T10324] loop4: detected capacity change from 0 to 1024
[  172.792663][T10324] EXT4-fs: Ignoring removed bh option
[  172.798362][T10324] EXT4-fs: Ignoring removed nomblk_io_submit option
[  172.813174][T10327] loop2: detected capacity change from 0 to 1024
[  172.824992][T10328] Cannot find set identified by id 0 to match
[  172.833667][T10327] EXT4-fs: Ignoring removed orlov option
[  172.839585][T10327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.004697][T10338] loop5: detected capacity change from 0 to 1024
[  173.011575][T10338] EXT4-fs: Ignoring removed bh option
[  173.017232][T10338] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.508951][   T29] kauditd_printk_skb: 108 callbacks suppressed
[  173.508967][   T29] audit: type=1400 audit(1748638058.391:8474): avc:  denied  { listen } for  pid=10347 comm="syz.4.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  173.855811][   T29] audit: type=1400 audit(1748638058.692:8475): avc:  denied  { ioctl } for  pid=10347 comm="syz.4.2491" path="socket:[27798]" dev="sockfs" ino=27798 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  173.880740][   T29] audit: type=1400 audit(1748638058.692:8476): avc:  denied  { append } for  pid=10347 comm="syz.4.2491" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  173.925654][T10359] set match dimension is over the limit!
[  174.284365][   T29] audit: type=1400 audit(1748638058.942:8477): avc:  denied  { tracepoint } for  pid=10364 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  174.304336][   T29] audit: type=1400 audit(1748638058.963:8478): avc:  denied  { read } for  pid=10364 comm="syz.2.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  174.323713][   T29] audit: type=1400 audit(1748638059.053:8479): avc:  denied  { execute } for  pid=10364 comm="syz.2.2497" path="/484/file0" dev="tmpfs" ino=2608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  174.572968][T10376] loop2: detected capacity change from 0 to 512
[  174.606032][T10376] loop2: detected capacity change from 0 to 2048
[  174.631955][T10376] EXT4-fs: Ignoring removed bh option
[  175.001584][T10402] Cannot find set identified by id 0 to match
[  175.075261][T10408] loop4: detected capacity change from 0 to 1024
[  175.096465][T10408] EXT4-fs: Ignoring removed bh option
[  175.102013][T10408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  175.173411][T10413] loop0: detected capacity change from 0 to 1024
[  175.187160][T10413] EXT4-fs: Ignoring removed bh option
[  175.192716][T10413] EXT4-fs: Ignoring removed nomblk_io_submit option
[  175.444099][   T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  175.459787][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  175.472828][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  175.472828][   T37] 
[  175.482930][   T37] EXT4-fs (loop2): Total free blocks count 0
[  175.489146][   T37] EXT4-fs (loop2): Free/Dirty block details
[  175.495278][   T37] EXT4-fs (loop2): free_blocks=2415919104
[  175.501948][   T37] EXT4-fs (loop2): dirty_blocks=8224
[  175.507408][   T37] EXT4-fs (loop2): Block reservation details
[  175.513432][   T37] EXT4-fs (loop2): i_reserved_data_blocks=514
[  175.525845][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  175.539217][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  175.539217][   T37] 
[  175.602572][T10437] Cannot find set identified by id 0 to match
[  175.620611][T10437] __nla_validate_parse: 11 callbacks suppressed
[  175.620631][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'.
[  175.751428][T10440] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2527'.
[  175.901138][T10454] netlink: 'syz.4.2531': attribute type 27 has an invalid length.
[  175.914478][T10457] loop2: detected capacity change from 0 to 512
[  175.954438][T10457] loop2: detected capacity change from 0 to 2048
[  175.963753][T10457] EXT4-fs: Ignoring removed bh option
[  175.964835][T10454] batman_adv: batadv0: Interface deactivated: team0
[  175.977419][   T29] audit: type=1326 audit(1748638060.847:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  176.001173][   T29] audit: type=1326 audit(1748638060.847:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  176.025067][   T29] audit: type=1326 audit(1748638060.858:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  176.048676][   T29] audit: type=1326 audit(1748638060.858:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.5.2537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  176.104984][T10465] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.114019][T10465] 8021q: adding VLAN 0 to HW filter on device team0
[  176.121914][T10465] batman_adv: batadv0: Interface activated: team0
[  176.132600][T10465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.167819][T10475] netlink: 'syz.1.2541': attribute type 10 has an invalid length.
[  176.169670][T10471] loop0: detected capacity change from 0 to 512
[  176.183201][T10471] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.204248][T10471] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.225406][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2542'.
[  176.268479][T10483] netlink: 'syz.1.2543': attribute type 1 has an invalid length.
[  176.303174][T10487] loop5: detected capacity change from 0 to 1024
[  176.310828][T10487] EXT4-fs: Ignoring removed orlov option
[  176.311685][T10489] netlink: 'syz.0.2545': attribute type 1 has an invalid length.
[  176.316802][T10487] EXT4-fs: Ignoring removed nomblk_io_submit option
[  176.325095][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2543'.
[  176.345717][T10483] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.370408][T10489] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.407326][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2545'.
[  176.418816][T10490] bond1 (unregistering): Released all slaves
[  176.457887][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2547'.
[  176.505643][T10503] openvswitch: netlink: Message has 6 unknown bytes.
[  176.560476][T10508] loop5: detected capacity change from 0 to 2048
[  176.569553][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2549'.
[  176.629989][T10510] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2549'.
[  176.640203][T10508] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2549'.
[  176.675460][T10513] loop5: detected capacity change from 0 to 512
[  176.682834][T10513] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  176.710967][T10513] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6
[  176.728446][T10513] loop5: detected capacity change from 0 to 512
[  176.735429][T10513] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.764998][   T37] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  176.782174][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  176.794483][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  176.794483][   T37] 
[  176.804306][   T37] EXT4-fs (loop2): Total free blocks count 0
[  176.810323][   T37] EXT4-fs (loop2): Free/Dirty block details
[  176.816311][   T37] EXT4-fs (loop2): free_blocks=2415919104
[  176.822132][   T37] EXT4-fs (loop2): dirty_blocks=8224
[  176.827460][   T37] EXT4-fs (loop2): Block reservation details
[  176.833459][   T37] EXT4-fs (loop2): i_reserved_data_blocks=514
[  176.849074][   T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  176.861847][   T37] EXT4-fs (loop2): This should not happen!! Data will be lost
[  176.861847][   T37] 
[  176.945033][T10513] EXT4-fs (loop5): 1 truncate cleaned up
[  177.017360][T10521] loop5: detected capacity change from 0 to 128
[  177.033450][T10521] netlink: 'syz.5.2553': attribute type 10 has an invalid length.
[  177.041774][T10521] batman_adv: batadv0: Interface deactivated: team0
[  177.097486][T10531] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2557'.
[  177.237055][T10537] Cannot find set identified by id 0 to match
[  177.291651][T10540] loop5: detected capacity change from 0 to 512
[  177.317958][T10540] loop5: detected capacity change from 0 to 2048
[  177.328476][T10540] EXT4-fs: Ignoring removed bh option
[  177.478539][T10554] netlink: 'syz.1.2567': attribute type 10 has an invalid length.
[  177.599885][T10569] Cannot find set identified by id 0 to match
[  177.868800][T10587] loop4: detected capacity change from 0 to 1024
[  177.875783][T10587] EXT4-fs: Ignoring removed bh option
[  177.881252][T10587] EXT4-fs: Ignoring removed nomblk_io_submit option
[  177.890832][T10589] loop2: detected capacity change from 0 to 128
[  177.907319][T10589] netlink: 'syz.2.2582': attribute type 10 has an invalid length.
[  177.915723][T10589] batman_adv: batadv0: Interface deactivated: team0
[  177.941938][T10596] Cannot find set identified by id 0 to match
[  178.139891][ T3888] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  178.197550][ T3888] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  178.209984][ T3888] EXT4-fs (loop5): This should not happen!! Data will be lost
[  178.209984][ T3888] 
[  178.220569][ T3888] EXT4-fs (loop5): Total free blocks count 0
[  178.226714][ T3888] EXT4-fs (loop5): Free/Dirty block details
[  178.232741][ T3888] EXT4-fs (loop5): free_blocks=2415919104
[  178.238696][ T3888] EXT4-fs (loop5): dirty_blocks=8224
[  178.244855][ T3888] EXT4-fs (loop5): Block reservation details
[  178.250877][ T3888] EXT4-fs (loop5): i_reserved_data_blocks=514
[  178.263345][ T3961] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  178.276214][ T3961] EXT4-fs (loop5): This should not happen!! Data will be lost
[  178.276214][ T3961] 
[  178.312059][T10619] loop2: detected capacity change from 0 to 128
[  178.339891][T10619] netlink: 'syz.2.2597': attribute type 10 has an invalid length.
[  178.370513][T10621] Cannot find set identified by id 0 to match
[  178.459627][T10631] loop0: detected capacity change from 0 to 512
[  178.541544][T10631] loop0: detected capacity change from 0 to 2048
[  178.555806][T10631] EXT4-fs: Ignoring removed bh option
[  178.676068][T10652] loop4: detected capacity change from 0 to 128
[  178.700891][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  178.700907][   T29] audit: type=1326 audit(1748638063.594:8574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.734561][   T29] audit: type=1326 audit(1748638063.634:8575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.758269][   T29] audit: type=1326 audit(1748638063.634:8576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.782219][   T29] audit: type=1326 audit(1748638063.634:8577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.834910][T10652] netlink: 'syz.4.2610': attribute type 10 has an invalid length.
[  178.856516][T10652] batman_adv: batadv0: Interface deactivated: team0
[  178.868830][   T29] audit: type=1326 audit(1748638063.704:8578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.892355][   T29] audit: type=1326 audit(1748638063.704:8579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.915978][   T29] audit: type=1326 audit(1748638063.704:8580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.930837][T10660] Cannot find set identified by id 0 to match
[  178.939735][   T29] audit: type=1326 audit(1748638063.724:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.939777][   T29] audit: type=1326 audit(1748638063.724:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  178.939814][   T29] audit: type=1326 audit(1748638063.724:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10651 comm="syz.4.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9116e969 code=0x7ffc0000
[  179.173786][T10682] loop4: detected capacity change from 0 to 128
[  179.187479][T10682] netlink: 'syz.4.2623': attribute type 10 has an invalid length.
[  179.265802][T10686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10686 comm=syz.1.2622
[  179.308636][   T37] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  179.325262][   T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  179.337647][   T37] EXT4-fs (loop0): This should not happen!! Data will be lost
[  179.337647][   T37] 
[  179.347338][   T37] EXT4-fs (loop0): Total free blocks count 0
[  179.353876][   T37] EXT4-fs (loop0): Free/Dirty block details
[  179.359780][   T37] EXT4-fs (loop0): free_blocks=2415919104
[  179.365554][   T37] EXT4-fs (loop0): dirty_blocks=8224
[  179.370980][   T37] EXT4-fs (loop0): Block reservation details
[  179.377026][   T37] EXT4-fs (loop0): i_reserved_data_blocks=514
[  179.395214][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  179.407792][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[  179.407792][   T12] 
[  179.438335][T10690] Cannot find set identified by id 0 to match
[  179.577564][T10707] loop5: detected capacity change from 0 to 512
[  179.603770][T10709] loop2: detected capacity change from 0 to 128
[  179.675466][T10707] loop5: detected capacity change from 0 to 2048
[  179.683296][T10718] Cannot find set identified by id 0 to match
[  179.700378][T10707] EXT4-fs: Ignoring removed bh option
[  180.088313][T10743] loop2: detected capacity change from 0 to 128
[  180.157551][T10749] Cannot find set identified by id 0 to match
[  180.421127][   T37] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  180.437693][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  180.450798][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  180.450798][   T37] 
[  180.460678][   T37] EXT4-fs (loop5): Total free blocks count 0
[  180.466934][   T37] EXT4-fs (loop5): Free/Dirty block details
[  180.472898][   T37] EXT4-fs (loop5): free_blocks=2415919104
[  180.479352][   T37] EXT4-fs (loop5): dirty_blocks=8224
[  180.484650][   T37] EXT4-fs (loop5): Block reservation details
[  180.490886][   T37] EXT4-fs (loop5): i_reserved_data_blocks=514
[  180.502115][T10773] loop2: detected capacity change from 0 to 1024
[  180.504755][T10775] Cannot find set identified by id 0 to match
[  180.509041][T10773] EXT4-fs: Ignoring removed bh option
[  180.520995][T10773] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.532081][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  180.544693][   T37] EXT4-fs (loop5): This should not happen!! Data will be lost
[  180.544693][   T37] 
[  180.599427][T10773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10773 comm=syz.2.2656
[  180.685736][T10791] __nla_validate_parse: 20 callbacks suppressed
[  180.685754][T10791] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2669'.
[  180.944452][T10801] loop4: detected capacity change from 0 to 128
[  180.987825][T10799] validate_nla: 3 callbacks suppressed
[  180.987843][T10799] netlink: 'syz.4.2672': attribute type 10 has an invalid length.
[  181.161061][T10815] set match dimension is over the limit!
[  181.169745][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'.
[  181.204730][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2681'.
[  181.220993][T10821] netlink: 'syz.2.2680': attribute type 27 has an invalid length.
[  181.258569][T10823] loop4: detected capacity change from 0 to 1024
[  181.265437][T10823] EXT4-fs: Ignoring removed bh option
[  181.271711][T10823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  181.282950][T10827] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2683'.
[  181.385187][T10836] loop2: detected capacity change from 0 to 128
[  181.397142][T10836] netlink: 'syz.2.2687': attribute type 10 has an invalid length.
[  181.783217][T10854] Cannot find set identified by id 0 to match
[  181.791917][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2692'.
[  182.021826][T10842] chnl_net:caif_netlink_parms(): no params data found
[  182.044421][   T37] bridge_slave_1: left allmulticast mode
[  182.050291][   T37] bridge_slave_1: left promiscuous mode
[  182.056248][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.076584][   T37] bridge_slave_0: left allmulticast mode
[  182.082349][   T37] bridge_slave_0: left promiscuous mode
[  182.082469][T10869] loop5: detected capacity change from 0 to 128
[  182.088124][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.131301][T10869] netlink: 'syz.5.2699': attribute type 10 has an invalid length.
[  182.140050][T10872] loop0: detected capacity change from 0 to 512
[  182.178191][T10872] loop0: detected capacity change from 0 to 2048
[  182.185287][T10872] EXT4-fs: Ignoring removed bh option
[  182.199856][   T37] dvmrp1 (unregistering): left allmulticast mode
[  182.378723][T10884] Cannot find set identified by id 0 to match
[  182.387947][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'.
[  182.477478][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.487625][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.497078][   T37] bond0 (unregistering): Released all slaves
[  182.532273][T10842] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.540394][T10842] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.565734][T10842] bridge_slave_0: entered allmulticast mode
[  182.572465][T10842] bridge_slave_0: entered promiscuous mode
[  182.579575][T10842] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.586724][T10842] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.593896][T10842] bridge_slave_1: entered allmulticast mode
[  182.601286][T10842] bridge_slave_1: entered promiscuous mode
[  182.628505][T10842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.640895][T10842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.661081][T10901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2709'.
[  182.797809][T10842] team0: Port device team_slave_0 added
[  182.806122][T10842] team0: Port device team_slave_1 added
[  182.827730][T10842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.834822][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.860919][T10842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.872543][T10842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.879621][T10842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.906005][T10842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.941246][T10842] hsr_slave_0: entered promiscuous mode
[  182.947580][T10842] hsr_slave_1: entered promiscuous mode
[  182.968927][T10842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.977185][T10842] Cannot create hsr debugfs directory
[  182.986502][ T3425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  183.007649][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  183.019941][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  183.019941][ T3425] 
[  183.029841][ T3425] EXT4-fs (loop0): Total free blocks count 0
[  183.036314][ T3425] EXT4-fs (loop0): Free/Dirty block details
[  183.042315][ T3425] EXT4-fs (loop0): free_blocks=2415919104
[  183.048150][ T3425] EXT4-fs (loop0): dirty_blocks=8224
[  183.053462][ T3425] EXT4-fs (loop0): Block reservation details
[  183.059536][ T3425] EXT4-fs (loop0): i_reserved_data_blocks=514
[  183.075838][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  183.088501][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  183.088501][ T3425] 
[  183.092717][T10913] loop2: detected capacity change from 0 to 128
[  183.111877][T10913] netlink: 'syz.2.2715': attribute type 10 has an invalid length.
[  183.242617][T10923] Cannot find set identified by id 0 to match
[  183.265330][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'.
[  183.321548][T10933] loop2: detected capacity change from 0 to 512
[  183.340093][T10933] loop2: detected capacity change from 0 to 2048
[  183.352083][T10933] EXT4-fs: Ignoring removed bh option
[  183.415554][T10939] loop4: detected capacity change from 0 to 128
[  183.451236][T10842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  183.469360][T10842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  183.479382][T10939] netlink: 'syz.4.2726': attribute type 10 has an invalid length.
[  183.541932][T10842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  183.560634][T10842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  183.568117][T10951] loop0: detected capacity change from 0 to 128
[  183.616472][T10951] bio_check_eod: 23 callbacks suppressed
[  183.616487][T10951] syz.0.2731: attempt to access beyond end of device
[  183.616487][T10951] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  183.635812][T10951] buffer_io_error: 22 callbacks suppressed
[  183.635863][T10951] Buffer I/O error on dev loop0, logical block 2065, async page read
[  183.660730][T10842] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.694616][T10842] 8021q: adding VLAN 0 to HW filter on device team0
[  183.703041][   T29] kauditd_printk_skb: 221 callbacks suppressed
[  183.703058][   T29] audit: type=1400 audit(1748638068.592:8805): avc:  denied  { name_bind } for  pid=10959 comm="syz.4.2734" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  183.712856][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.732081][   T29] audit: type=1400 audit(1748638068.592:8806): avc:  denied  { node_bind } for  pid=10959 comm="syz.4.2734" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  183.738896][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.774923][T10951] syz.0.2731: attempt to access beyond end of device
[  183.774923][T10951] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  183.788261][T10951] Buffer I/O error on dev loop0, logical block 2066, async page read
[  183.796724][T10951] syz.0.2731: attempt to access beyond end of device
[  183.796724][T10951] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128
[  183.810070][T10951] Buffer I/O error on dev loop0, logical block 2067, async page read
[  183.818472][T10951] syz.0.2731: attempt to access beyond end of device
[  183.818472][T10951] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128
[  183.832388][T10951] Buffer I/O error on dev loop0, logical block 2068, async page read
[  183.848909][T10962] Cannot find set identified by id 0 to match
[  183.857639][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'.
[  183.866860][   T29] audit: type=1400 audit(1748638068.753:8807): avc:  denied  { kernel } for  pid=10961 comm="syz.4.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[  183.886441][   T29] audit: type=1400 audit(1748638068.753:8808): avc:  denied  { create } for  pid=10961 comm="syz.4.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  183.921420][T10951] syz.0.2731: attempt to access beyond end of device
[  183.921420][T10951] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128
[  183.926568][   T29] audit: type=1400 audit(1748638068.833:8809): avc:  denied  { unmount } for  pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  183.934721][T10951] Buffer I/O error on dev loop0, logical block 2069, async page read
[  183.963361][T10951] syz.0.2731: attempt to access beyond end of device
[  183.963361][T10951] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128
[  183.965465][ T3961] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  183.977095][T10951] Buffer I/O error on dev loop0, logical block 2070, async page read
[  183.993186][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.006702][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.008575][T10951] syz.0.2731: attempt to access beyond end of device
[  184.008575][T10951] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128
[  184.016361][ T3961] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  184.027564][T10951] Buffer I/O error on dev loop0, logical block 2071, async page read
[  184.040180][T10951] syz.0.2731: attempt to access beyond end of device
[  184.040180][T10951] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128
[  184.048742][ T3961] EXT4-fs (loop2): This should not happen!! Data will be lost
[  184.048742][ T3961] 
[  184.061920][T10951] Buffer I/O error on dev loop0, logical block 2072, async page read
[  184.076470][T10951] syz.0.2731: attempt to access beyond end of device
[  184.076470][T10951] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128
[  184.079949][ T3961] EXT4-fs (loop2): Total free blocks count 0
[  184.093365][T10951] Buffer I/O error on dev loop0, logical block 2065, async page read
[  184.099294][ T3961] EXT4-fs (loop2): Free/Dirty block details
[  184.113673][ T3961] EXT4-fs (loop2): free_blocks=2415919104
[  184.119424][ T3961] EXT4-fs (loop2): dirty_blocks=8224
[  184.124907][ T3961] EXT4-fs (loop2): Block reservation details
[  184.130920][ T3961] EXT4-fs (loop2): i_reserved_data_blocks=514
[  184.142857][   T29] audit: type=1400 audit(1748638069.043:8810): avc:  denied  { module_request } for  pid=10842 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  184.167351][T10951] syz.0.2731: attempt to access beyond end of device
[  184.167351][T10951] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128
[  184.180813][T10951] Buffer I/O error on dev loop0, logical block 2066, async page read
[  184.189726][   T29] audit: type=1400 audit(1748638069.093:8811): avc:  denied  { sys_module } for  pid=10842 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  184.219396][ T3961] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  184.232052][ T3961] EXT4-fs (loop2): This should not happen!! Data will be lost
[  184.232052][ T3961] 
[  184.260415][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.330540][   T29] audit: type=1400 audit(1748638069.233:8812): avc:  denied  { unmount } for  pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  184.379996][   T29] audit: type=1400 audit(1748638069.284:8813): avc:  denied  { create } for  pid=10973 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.399768][   T29] audit: type=1400 audit(1748638069.284:8814): avc:  denied  { bind } for  pid=10973 comm="syz.0.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  184.455944][T10842] veth0_vlan: entered promiscuous mode
[  184.466976][T10842] veth1_vlan: entered promiscuous mode
[  184.486185][T10842] veth0_macvtap: entered promiscuous mode
[  184.498359][T10842] veth1_macvtap: entered promiscuous mode
[  184.506196][T10981] loop5: detected capacity change from 0 to 128
[  184.514036][T10842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.525016][T10981] netlink: 'syz.5.2740': attribute type 10 has an invalid length.
[  184.533025][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2739'.
[  184.543776][T10842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.563252][T10842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.572223][T10842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.580944][T10842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.589789][T10842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.670264][T10995] loop0: detected capacity change from 0 to 512
[  184.686049][T10999] Cannot find set identified by id 0 to match
[  184.702028][T10995] loop0: detected capacity change from 0 to 2048
[  184.708908][T10995] EXT4-fs: Ignoring removed bh option
[  184.822672][T11010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11010 comm=syz.1.2690
[  184.999527][T11025] loop5: detected capacity change from 0 to 128
[  185.094380][T11025] netlink: 'syz.5.2754': attribute type 10 has an invalid length.
[  185.279172][T11035] Cannot find set identified by id 0 to match
[  185.356661][T11039] loop4: detected capacity change from 0 to 1024
[  185.370922][T11039] EXT4-fs: Ignoring removed bh option
[  185.376475][T11039] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.511985][ T3961] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  185.592293][ T3961] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  185.604602][ T3961] EXT4-fs (loop0): This should not happen!! Data will be lost
[  185.604602][ T3961] 
[  185.614284][ T3961] EXT4-fs (loop0): Total free blocks count 0
[  185.620464][ T3961] EXT4-fs (loop0): Free/Dirty block details
[  185.626447][ T3961] EXT4-fs (loop0): free_blocks=2415919104
[  185.632286][ T3961] EXT4-fs (loop0): dirty_blocks=8224
[  185.637596][ T3961] EXT4-fs (loop0): Block reservation details
[  185.643619][ T3961] EXT4-fs (loop0): i_reserved_data_blocks=514
[  185.659235][ T3961] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  185.672803][ T3961] EXT4-fs (loop0): This should not happen!! Data will be lost
[  185.672803][ T3961] 
[  185.956673][T11054] loop2: detected capacity change from 0 to 128
[  185.971398][T11054] netlink: 'syz.2.2766': attribute type 10 has an invalid length.
[  186.088547][T11064] loop2: detected capacity change from 0 to 512
[  186.108607][T11067] set match dimension is over the limit!
[  186.113237][T11064] loop2: detected capacity change from 0 to 2048
[  186.116289][T11067] __nla_validate_parse: 3 callbacks suppressed
[  186.116315][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'.
[  186.121218][T11064] EXT4-fs: Ignoring removed bh option
[  186.274635][T11083] loop0: detected capacity change from 0 to 1024
[  186.282170][T11083] EXT4-fs: Ignoring removed bh option
[  186.287649][T11083] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.372286][T11083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11083 comm=syz.0.2774
[  186.586479][T11091] loop5: detected capacity change from 0 to 128
[  186.685919][T11091] netlink: 'syz.5.2781': attribute type 10 has an invalid length.
[  186.789995][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2787'.
[  186.802843][T11106] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2785'.
[  186.813216][T11101] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2785'.
[  186.873877][T11111] Cannot find set identified by id 0 to match
[  186.882093][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'.
[  186.943861][ T3888] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  186.963312][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  186.975687][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  186.975687][ T3888] 
[  186.985412][ T3888] EXT4-fs (loop2): Total free blocks count 0
[  186.991466][ T3888] EXT4-fs (loop2): Free/Dirty block details
[  186.997453][ T3888] EXT4-fs (loop2): free_blocks=2415919104
[  187.003420][ T3888] EXT4-fs (loop2): dirty_blocks=8224
[  187.008747][ T3888] EXT4-fs (loop2): Block reservation details
[  187.014781][ T3888] EXT4-fs (loop2): i_reserved_data_blocks=514
[  187.038153][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  187.050778][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  187.050778][ T3888] 
[  187.087864][T11122] loop4: detected capacity change from 0 to 128
[  187.115946][T11122] netlink: 'syz.4.2794': attribute type 10 has an invalid length.
[  187.189175][T11132] set match dimension is over the limit!
[  187.195928][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'.
[  187.253263][T11136] loop4: detected capacity change from 0 to 512
[  187.288289][T11136] loop4: detected capacity change from 0 to 2048
[  187.295155][T11136] EXT4-fs: Ignoring removed bh option
[  187.474645][T11161] loop0: detected capacity change from 0 to 128
[  187.487250][T11163] loop2: detected capacity change from 0 to 1024
[  187.494224][T11163] EXT4-fs: Ignoring removed bh option
[  187.499733][T11163] EXT4-fs: Ignoring removed nomblk_io_submit option
[  187.512280][T11161] netlink: 'syz.0.2809': attribute type 10 has an invalid length.
[  187.534173][T11163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11163 comm=syz.2.2806
[  187.732566][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2822'.
[  187.822181][T11178] Cannot find set identified by id 0 to match
[  187.830243][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2814'.
[  188.083572][ T3888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  188.106260][ T3888] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  188.118726][ T3888] EXT4-fs (loop4): This should not happen!! Data will be lost
[  188.118726][ T3888] 
[  188.128562][ T3888] EXT4-fs (loop4): Total free blocks count 0
[  188.134746][ T3888] EXT4-fs (loop4): Free/Dirty block details
[  188.141112][ T3888] EXT4-fs (loop4): free_blocks=2415919104
[  188.146866][ T3888] EXT4-fs (loop4): dirty_blocks=8224
[  188.152226][ T3888] EXT4-fs (loop4): Block reservation details
[  188.158236][ T3888] EXT4-fs (loop4): i_reserved_data_blocks=514
[  188.185846][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  188.198657][   T37] EXT4-fs (loop4): This should not happen!! Data will be lost
[  188.198657][   T37] 
[  188.246989][T11194] loop2: detected capacity change from 0 to 128
[  188.274166][T11194] netlink: 'syz.2.2823': attribute type 10 has an invalid length.
[  188.321847][T11200] xt_connbytes: Forcing CT accounting to be enabled
[  188.331602][T11200] Cannot find set identified by id 0 to match
[  188.339444][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'.
[  188.394028][T11208] loop2: detected capacity change from 0 to 512
[  188.423103][T11208] loop2: detected capacity change from 0 to 2048
[  188.439577][T11208] EXT4-fs: Ignoring removed bh option
[  188.533904][T11226] loop4: detected capacity change from 0 to 1024
[  188.551807][T11226] EXT4-fs: Ignoring removed bh option
[  188.557327][T11226] EXT4-fs: Ignoring removed nomblk_io_submit option
[  188.574537][T11226] EXT4-fs mount: 56 callbacks suppressed
[  188.574553][T11226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.599339][T11226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11226 comm=syz.4.2834
[  188.764280][   T29] kauditd_printk_skb: 152 callbacks suppressed
[  188.764305][   T29] audit: type=1326 audit(1748638073.669:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  188.765689][T11236] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  188.770671][   T29] audit: type=1326 audit(1748638073.669:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  188.794800][T11233] netlink: 'syz.1.2838': attribute type 10 has an invalid length.
[  188.801912][   T29] audit: type=1326 audit(1748638073.669:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  188.904649][T11233] batman_adv: batadv0: Adding interface: team0
[  188.906751][   T29] audit: type=1326 audit(1748638073.709:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  188.911359][T11233] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.934724][   T29] audit: type=1326 audit(1748638073.709:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  188.960106][T11233] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  188.993587][   T29] audit: type=1326 audit(1748638073.709:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  189.018286][   T29] audit: type=1326 audit(1748638073.929:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  189.042006][   T29] audit: type=1326 audit(1748638073.929:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.1.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2e1f9e969 code=0x7ffc0000
[  189.071955][T11219] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  189.113576][T11236] 8021q: adding VLAN 0 to HW filter on device bond2
[  189.126541][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2837'.
[  189.143502][T11241] bond2 (unregistering): Released all slaves
[  189.190964][   T29] audit: type=1400 audit(1748638074.099:8975): avc:  denied  { create } for  pid=11235 comm="syz.0.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  189.231051][   T29] audit: type=1400 audit(1748638074.119:8976): avc:  denied  { write } for  pid=11235 comm="syz.0.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  189.265762][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  189.278449][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  189.278449][ T3888] 
[  189.288402][ T3888] EXT4-fs (loop2): Total free blocks count 0
[  189.294484][ T3888] EXT4-fs (loop2): Free/Dirty block details
[  189.300662][ T3888] EXT4-fs (loop2): free_blocks=2415919104
[  189.306655][ T3888] EXT4-fs (loop2): dirty_blocks=8224
[  189.312269][ T3888] EXT4-fs (loop2): Block reservation details
[  189.318301][ T3888] EXT4-fs (loop2): i_reserved_data_blocks=514
[  189.338934][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.369253][T11251] Cannot find set identified by id 0 to match
[  189.405294][ T3888] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  189.418187][ T3888] EXT4-fs (loop2): This should not happen!! Data will be lost
[  189.418187][ T3888] 
[  189.454163][T11260] loop5: detected capacity change from 0 to 128
[  189.476976][T11260] netlink: 'syz.5.2850': attribute type 10 has an invalid length.
[  189.646256][T11277] loop4: detected capacity change from 0 to 1024
[  189.653069][T11277] EXT4-fs: Ignoring removed bh option
[  189.658732][T11277] EXT4-fs: Ignoring removed nomblk_io_submit option
[  189.683133][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.889800][T11296] Cannot find set identified by id 0 to match
[  189.980050][T11302] loop5: detected capacity change from 0 to 128
[  190.323312][T11318] set match dimension is over the limit!
[  190.378373][T11322] loop0: detected capacity change from 0 to 128
[  190.400954][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.555716][T11342] loop0: detected capacity change from 0 to 512
[  190.588242][T11342] loop0: detected capacity change from 0 to 2048
[  190.599177][T11347] Cannot find set identified by id 0 to match
[  190.602028][T11342] EXT4-fs: Ignoring removed bh option
[  190.629149][T11342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.726269][T11362] loop4: detected capacity change from 0 to 1024
[  190.737828][T11362] EXT4-fs: Ignoring removed bh option
[  190.743311][T11362] EXT4-fs: Ignoring removed nomblk_io_submit option
[  190.775500][T11362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.161217][T11385] Cannot find set identified by id 0 to match
[  191.169550][T11385] __nla_validate_parse: 10 callbacks suppressed
[  191.169565][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'.
[  191.277554][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'.
[  191.341041][T11392] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2902'.
[  191.351705][T11391] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2902'.
[  191.419567][   T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  191.438470][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  191.451003][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[  191.451003][   T12] 
[  191.460848][   T12] EXT4-fs (loop0): Total free blocks count 0
[  191.466956][   T12] EXT4-fs (loop0): Free/Dirty block details
[  191.472953][   T12] EXT4-fs (loop0): free_blocks=2415919104
[  191.478878][   T12] EXT4-fs (loop0): dirty_blocks=8224
[  191.484242][   T12] EXT4-fs (loop0): Block reservation details
[  191.489858][T11398] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2905'.
[  191.490371][   T12] EXT4-fs (loop0): i_reserved_data_blocks=514
[  191.511286][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  191.534552][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.574811][T11407] loop5: detected capacity change from 0 to 128
[  191.587768][T11410] Cannot find set identified by id 0 to match
[  191.600569][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'.
[  191.637790][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2913'.
[  191.774087][T11432] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2921'.
[  191.851369][T11442] loop0: detected capacity change from 0 to 128
[  191.871201][T11443] loop5: detected capacity change from 0 to 1024
[  191.881368][T11443] EXT4-fs: Ignoring removed bh option
[  191.886967][T11443] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.905571][T11443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.943103][T11443] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2919'.
[  193.183697][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.202942][T11465] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2933'.
[  193.218227][T11464] Cannot find set identified by id 0 to match
[  193.379300][T11480] loop4: detected capacity change from 0 to 512
[  193.420062][T11480] loop4: detected capacity change from 0 to 2048
[  193.434785][T11480] EXT4-fs: Ignoring removed bh option
[  193.475169][T11480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.263961][ T3961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  194.306848][ T3961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  194.319083][ T3961] EXT4-fs (loop4): This should not happen!! Data will be lost
[  194.319083][ T3961] 
[  194.328785][ T3961] EXT4-fs (loop4): Total free blocks count 0
[  194.334822][ T3961] EXT4-fs (loop4): Free/Dirty block details
[  194.340732][ T3961] EXT4-fs (loop4): free_blocks=2415919104
[  194.346487][ T3961] EXT4-fs (loop4): dirty_blocks=8224
[  194.351795][ T3961] EXT4-fs (loop4): Block reservation details
[  194.357914][ T3961] EXT4-fs (loop4): i_reserved_data_blocks=514
[  194.452338][T11509] Cannot find set identified by id 0 to match
[  194.480851][T11511] loop2: detected capacity change from 0 to 128
[  194.515096][   T29] kauditd_printk_skb: 131 callbacks suppressed
[  194.515114][   T29] audit: type=1326 audit(1748638079.434:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.545082][   T29] audit: type=1326 audit(1748638079.434:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.568613][   T29] audit: type=1326 audit(1748638079.434:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.669057][ T3961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  194.833241][   T29] audit: type=1326 audit(1748638079.514:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.856899][   T29] audit: type=1326 audit(1748638079.514:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.880575][   T29] audit: type=1326 audit(1748638079.514:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.904175][   T29] audit: type=1326 audit(1748638079.514:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.928157][   T29] audit: type=1326 audit(1748638079.514:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.951680][   T29] audit: type=1326 audit(1748638079.514:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  194.975285][   T29] audit: type=1326 audit(1748638079.514:9117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.2.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e7ee0e969 code=0x7ffc0000
[  195.303756][T11543] loop4: detected capacity change from 0 to 128
[  195.346834][T11545] Cannot find set identified by id 0 to match
[  195.485430][T11549] loop4: detected capacity change from 0 to 1024
[  195.493651][T11549] EXT4-fs: Ignoring removed bh option
[  195.499101][T11549] EXT4-fs: Ignoring removed nomblk_io_submit option
[  195.509268][T11549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.096920][T11567] loop2: detected capacity change from 0 to 1024
[  196.150546][T11567] EXT4-fs: inline encryption not supported
[  196.182077][T11573] __nla_validate_parse: 10 callbacks suppressed
[  196.182099][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2976'.
[  196.198771][T11567] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  196.214511][T11567] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.2971: lblock 2 mapped to illegal pblock 2 (length 1)
[  196.239470][T11567] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.2971: lblock 0 mapped to illegal pblock 48 (length 1)
[  196.254420][T11567] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2971: Failed to acquire dquot type 0
[  196.254922][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.266477][T11567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  196.276602][T11579] netlink: 'syz.5.2978': attribute type 27 has an invalid length.
[  196.285125][T11567] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2971: mark_inode_dirty error
[  196.303904][T11567] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  196.314394][T11567] EXT4-fs (loop2): 1 orphan inode deleted
[  196.320779][T11567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.333353][ T3425] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  196.355009][T11586] loop4: detected capacity change from 0 to 512
[  196.361706][ T3425] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0
[  196.386834][T11567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.391969][T11583] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.397355][T11567] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.2971: Invalid inode table block 1 in block_group 0
[  196.404419][T11583] 8021q: adding VLAN 0 to HW filter on device team0
[  196.431228][T11586] loop4: detected capacity change from 0 to 2048
[  196.437997][T11567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem
[  196.438433][T11583] batman_adv: batadv0: Interface activated: team0
[  196.456198][T11586] EXT4-fs: Ignoring removed bh option
[  196.462247][T11567] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.2971: mark_inode_dirty error
[  196.479215][T11583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.512850][T11586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.551584][T11567] bond_slave_1: entered promiscuous mode
[  196.580455][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'.
[  196.609162][T11567] bond0: (slave bond_slave_1): Releasing backup interface
[  196.617294][T11567] bond_slave_1 (unregistering): left promiscuous mode
[  196.964153][T11601] Cannot find set identified by id 0 to match
[  196.979237][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2982'.
[  197.075846][T11611] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2987'.
[  197.090927][T11610] loop5: detected capacity change from 0 to 128
[  197.232089][   T37] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  197.264160][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  197.276602][   T37] EXT4-fs (loop4): This should not happen!! Data will be lost
[  197.276602][   T37] 
[  197.286345][   T37] EXT4-fs (loop4): Total free blocks count 0
[  197.292409][   T37] EXT4-fs (loop4): Free/Dirty block details
[  197.298347][   T37] EXT4-fs (loop4): free_blocks=2415919104
[  197.304171][   T37] EXT4-fs (loop4): dirty_blocks=8224
[  197.310075][   T37] EXT4-fs (loop4): Block reservation details
[  197.316252][   T37] EXT4-fs (loop4): i_reserved_data_blocks=514
[  197.327757][T11625] loop2: detected capacity change from 0 to 1024
[  197.336654][T11625] EXT4-fs: Ignoring removed bh option
[  197.342242][T11625] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.349728][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2995'.
[  197.352669][T11625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.375539][   T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  197.395729][T11625] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2989'.
[  197.589692][T11638] Cannot find set identified by id 0 to match
[  197.658893][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'.
[  197.702289][T11645] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3001'.
[  198.028288][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.123872][T11675] loop5: detected capacity change from 0 to 128
[  198.131216][T11676] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3013'.
[  198.168334][T11680] Cannot find set identified by id 0 to match
[  198.176306][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3014'.
[  198.331432][T11698] loop0: detected capacity change from 0 to 1024
[  198.338202][T11698] EXT4-fs: Ignoring removed bh option
[  198.343671][T11698] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.353286][T11698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.383702][T11700] loop2: detected capacity change from 0 to 1024
[  198.391380][T11701] loop5: detected capacity change from 0 to 1024
[  198.398258][T11701] EXT4-fs: Ignoring removed bh option
[  198.403772][T11701] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.410700][T11700] EXT4-fs: Ignoring removed bh option
[  198.416153][T11700] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.426768][T11701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.441768][T11700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.120766][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.183543][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.312722][T11728] set match dimension is over the limit!
[  199.332088][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.362786][T11730] loop4: detected capacity change from 0 to 512
[  199.397054][T11730] loop4: detected capacity change from 0 to 2048
[  199.403922][T11730] EXT4-fs: Ignoring removed bh option
[  199.412112][T11743] loop5: detected capacity change from 0 to 128
[  199.456559][T11730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.544044][T11760] Cannot find set identified by id 0 to match
[  199.741668][T11774] loop5: detected capacity change from 0 to 128
[  199.771933][   T29] kauditd_printk_skb: 180 callbacks suppressed
[  199.771949][   T29] audit: type=1326 audit(1748638084.687:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.842172][   T29] audit: type=1326 audit(1748638084.717:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.865704][   T29] audit: type=1326 audit(1748638084.717:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.889240][   T29] audit: type=1326 audit(1748638084.717:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.912957][   T29] audit: type=1326 audit(1748638084.717:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.936732][   T29] audit: type=1326 audit(1748638084.717:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.960548][   T29] audit: type=1326 audit(1748638084.717:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  199.984112][   T29] audit: type=1326 audit(1748638084.717:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  200.007670][   T29] audit: type=1326 audit(1748638084.717:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  200.031434][   T29] audit: type=1326 audit(1748638084.717:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef1a8e969 code=0x7ffc0000
[  200.184940][T11781] openvswitch: netlink: Message has 6 unknown bytes.
[  200.217545][   T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  200.255041][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  200.267361][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  200.267361][   T12] 
[  200.277169][   T12] EXT4-fs (loop4): Total free blocks count 0
[  200.283425][   T12] EXT4-fs (loop4): Free/Dirty block details
[  200.289426][   T12] EXT4-fs (loop4): free_blocks=2415919104
[  200.295314][   T12] EXT4-fs (loop4): dirty_blocks=8224
[  200.300802][   T12] EXT4-fs (loop4): Block reservation details
[  200.306797][   T12] EXT4-fs (loop4): i_reserved_data_blocks=514
[  200.322085][T11788] set match dimension is over the limit!
[  200.352645][ T3961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  200.396045][T11799] loop0: detected capacity change from 0 to 128
[  200.443531][T11804] loop0: detected capacity change from 0 to 512
[  200.471444][T11804] loop0: detected capacity change from 0 to 2048
[  200.481412][T11804] EXT4-fs: Ignoring removed bh option
[  200.516066][T11804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.561730][T11819] Cannot find set identified by id 0 to match
[  200.717474][T11832] loop4: detected capacity change from 0 to 1024
[  200.724392][T11832] EXT4-fs: Ignoring removed bh option
[  200.729937][T11832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.741788][T11834] loop2: detected capacity change from 0 to 1024
[  200.749723][T11834] EXT4-fs: Ignoring removed bh option
[  200.755260][T11834] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.764285][T11832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.788333][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.313021][ T3425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  201.332975][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  201.345359][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  201.345359][ T3425] 
[  201.355061][ T3425] EXT4-fs (loop0): Total free blocks count 0
[  201.361174][ T3425] EXT4-fs (loop0): Free/Dirty block details
[  201.367083][ T3425] EXT4-fs (loop0): free_blocks=2415919104
[  201.372880][ T3425] EXT4-fs (loop0): dirty_blocks=8224
[  201.378310][ T3425] EXT4-fs (loop0): Block reservation details
[  201.384398][ T3425] EXT4-fs (loop0): i_reserved_data_blocks=514
[  201.431068][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  201.476348][T11849] netlink: 'syz.1.3078': attribute type 1 has an invalid length.
[  201.496594][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.545223][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.571742][T11854] Cannot find set identified by id 0 to match
[  201.581342][T11854] __nla_validate_parse: 17 callbacks suppressed
[  201.581363][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3081'.
[  201.608688][T11849] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.615766][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'.
[  201.643429][T11863] loop0: detected capacity change from 0 to 128
[  201.681677][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3082'.
[  201.715360][T11873] loop0: detected capacity change from 0 to 512
[  201.742430][T11873] loop0: detected capacity change from 0 to 2048
[  201.749473][T11873] EXT4-fs: Ignoring removed bh option
[  201.780080][T11873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.809520][T11887] loop5: detected capacity change from 0 to 128
[  201.820214][T11887] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ'
[  201.909464][ T3888] bridge_slave_1: left allmulticast mode
[  201.915327][ T3888] bridge_slave_1: left promiscuous mode
[  201.921218][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.949122][ T3888] bridge_slave_0: left allmulticast mode
[  201.954857][ T3888] bridge_slave_0: left promiscuous mode
[  201.960580][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.014735][ T3888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.025294][ T3888] bond0 (unregistering): Released all slaves
[  202.129417][T11899] loop5: detected capacity change from 0 to 1024
[  202.136311][T11899] EXT4-fs: Ignoring removed bh option
[  202.142040][T11899] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.165771][ T3888] hsr_slave_0: left promiscuous mode
[  202.174902][T11899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.193012][T11899] netlink: 276 bytes leftover after parsing attributes in process `syz.5.3090'.
[  202.202806][ T3888] hsr_slave_1: left promiscuous mode
[  202.209867][ T3888] batman_adv: batadv0: Removing interface: team0
[  202.216787][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.224609][ T3888] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.264139][ T3888] team0 (unregistering): Port device team_slave_1 removed
[  202.274410][ T3888] team0 (unregistering): Port device team_slave_0 removed
[  202.305188][ T3888] team0 (unregistering): Port device dummy0 removed
[  202.328348][T11855] chnl_net:caif_netlink_parms(): no params data found
[  202.384155][T11855] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.391313][T11855] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.398819][T11855] bridge_slave_0: entered allmulticast mode
[  202.405603][T11855] bridge_slave_0: entered promiscuous mode
[  202.413361][T11855] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.420572][T11855] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.428000][T11855] bridge_slave_1: entered allmulticast mode
[  202.434746][T11855] bridge_slave_1: entered promiscuous mode
[  202.458408][T11855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.469338][T11855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.497523][T11855] team0: Port device team_slave_0 added
[  202.508793][T11855] team0: Port device team_slave_1 added
[  202.546283][T11855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.553305][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.579435][T11855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.603964][T11487] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  202.619753][T11855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.626951][T11855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.653135][T11855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.670763][ T3425] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  202.678650][T11910] set match dimension is over the limit!
[  202.683160][ T3425] EXT4-fs (loop0): This should not happen!! Data will be lost
[  202.683160][ T3425] 
[  202.683177][ T3425] EXT4-fs (loop0): Total free blocks count 0
[  202.703429][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3092'.
[  202.704506][ T3425] EXT4-fs (loop0): Free/Dirty block details
[  202.719477][ T3425] EXT4-fs (loop0): free_blocks=2415919104
[  202.725274][ T3425] EXT4-fs (loop0): dirty_blocks=8224
[  202.730606][ T3425] EXT4-fs (loop0): Block reservation details
[  202.736763][ T3425] EXT4-fs (loop0): i_reserved_data_blocks=514
[  202.752056][ T3888] IPVS: stop unused estimator thread 0...
[  202.764462][ T3961] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  202.843800][T11855] hsr_slave_0: entered promiscuous mode
[  202.848108][ T5913] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.855278][T11855] hsr_slave_1: entered promiscuous mode
[  202.867197][T11855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.874791][T11855] Cannot create hsr debugfs directory
[  202.986457][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3101'.
[  203.019804][T11933] loop4: detected capacity change from 0 to 512
[  203.037971][T11933] loop4: detected capacity change from 0 to 2048
[  203.044650][T11933] EXT4-fs: Ignoring removed bh option
[  203.058363][T11933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.192735][T11948] loop0: detected capacity change from 0 to 1024
[  203.200469][T11855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  203.210992][T11855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  203.218985][T11948] EXT4-fs: Ignoring removed bh option
[  203.224407][T11948] EXT4-fs: Ignoring removed nomblk_io_submit option
[  203.235097][T11855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  203.245514][T11948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.260922][T11855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  203.273443][T11948] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3106'.
[  203.322234][T11855] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.339419][T11855] 8021q: adding VLAN 0 to HW filter on device team0
[  203.349315][ T3888] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.356633][ T3888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.379750][ T3961] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.386878][ T3961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.528187][T11855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.642746][T11855] veth0_vlan: entered promiscuous mode
[  203.652554][T11855] veth1_vlan: entered promiscuous mode
[  203.673806][T11855] veth0_macvtap: entered promiscuous mode
[  203.682409][T11855] veth1_macvtap: entered promiscuous mode
[  203.699010][T11855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.711864][T11855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.722912][T11855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.731959][T11855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.740835][T11855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.749682][T11855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.858512][   T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  203.883352][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  203.895718][   T12] EXT4-fs (loop4): This should not happen!! Data will be lost
[  203.895718][   T12] 
[  203.905828][   T12] EXT4-fs (loop4): Total free blocks count 0
[  203.911867][   T12] EXT4-fs (loop4): Free/Dirty block details
[  203.917813][   T12] EXT4-fs (loop4): free_blocks=2415919104
[  203.923633][   T12] EXT4-fs (loop4): dirty_blocks=8224
[  203.928952][   T12] EXT4-fs (loop4): Block reservation details
[  203.934987][   T12] EXT4-fs (loop4): i_reserved_data_blocks=514
[  203.945459][   T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  203.970709][T11970] loop2: detected capacity change from 0 to 128
[  204.054128][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.085676][T11982] loop2: detected capacity change from 0 to 512
[  204.113381][T11982] loop2: detected capacity change from 0 to 2048
[  204.122172][T11982] EXT4-fs: Ignoring removed bh option
[  204.144870][T11992] set match dimension is over the limit!
[  204.152191][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'.
[  204.152927][T11982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.196736][T11997] netlink: 'syz.1.3120': attribute type 1 has an invalid length.
[  204.212391][T12000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3121'.
[  204.216580][T11997] 8021q: adding VLAN 0 to HW filter on device bond2
[  204.232181][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'.
[  204.241343][T12001] loop0: detected capacity change from 0 to 1024
[  204.250181][T11997] bond2 (unregistering): Released all slaves
[  204.258611][T12001] EXT4-fs: Ignoring removed bh option
[  204.264097][T12001] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.281745][T12001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.503478][T12009] ==================================================================
[  204.511630][T12009] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  204.520884][T12009] 
[  204.523230][T12009] write to 0xffff888104984a50 of 4 bytes by task 12001 on cpu 0:
[  204.530984][T12009]  writeback_single_inode+0x14a/0x3e0
[  204.536407][T12009]  sync_inode_metadata+0x5b/0x90
[  204.541391][T12009]  generic_buffers_fsync_noflush+0xd9/0x120
[  204.547313][T12009]  ext4_sync_file+0x1ab/0x690
[  204.552019][T12009]  vfs_fsync_range+0x10d/0x130
[  204.556817][T12009]  ext4_buffered_write_iter+0x34f/0x3c0
[  204.562408][T12009]  ext4_file_write_iter+0x383/0xf00
[  204.567745][T12009]  iter_file_splice_write+0x5f2/0x970
[  204.573174][T12009]  direct_splice_actor+0x153/0x2a0
[  204.578334][T12009]  splice_direct_to_actor+0x30f/0x680
[  204.583764][T12009]  do_splice_direct+0xda/0x150
[  204.588572][T12009]  do_sendfile+0x380/0x650
[  204.593023][T12009]  __x64_sys_sendfile64+0x105/0x150
[  204.598249][T12009]  x64_sys_call+0xb39/0x2fb0
[  204.602980][T12009]  do_syscall_64+0xd2/0x200
[  204.607526][T12009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.613469][T12009] 
[  204.615850][T12009] read to 0xffff888104984a50 of 4 bytes by task 12009 on cpu 1:
[  204.623507][T12009]  generic_buffers_fsync_noflush+0x80/0x120
[  204.629446][T12009]  ext4_sync_file+0x1ab/0x690
[  204.634161][T12009]  vfs_fsync_range+0x10d/0x130
[  204.638958][T12009]  ext4_buffered_write_iter+0x34f/0x3c0
[  204.644543][T12009]  ext4_file_write_iter+0x383/0xf00
[  204.649793][T12009]  iter_file_splice_write+0x5f2/0x970
[  204.655306][T12009]  direct_splice_actor+0x153/0x2a0
[  204.660473][T12009]  splice_direct_to_actor+0x30f/0x680
[  204.665898][T12009]  do_splice_direct+0xda/0x150
[  204.670975][T12009]  do_sendfile+0x380/0x650
[  204.675505][T12009]  __x64_sys_sendfile64+0x105/0x150
[  204.680836][T12009]  x64_sys_call+0xb39/0x2fb0
[  204.685475][T12009]  do_syscall_64+0xd2/0x200
[  204.690020][T12009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.696217][T12009] 
[  204.698573][T12009] value changed: 0x00000038 -> 0x00000002
[  204.704316][T12009] 
[  204.706669][T12009] Reported by Kernel Concurrency Sanitizer on:
[  204.712994][T12009] CPU: 1 UID: 0 PID: 12009 Comm: syz.0.3116 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) 
[  204.725187][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  204.735374][T12009] ==================================================================
[  204.934054][   T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  204.949212][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  204.961713][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  204.961713][   T12] 
[  204.971471][   T12] EXT4-fs (loop2): Total free blocks count 0
[  204.977673][   T12] EXT4-fs (loop2): Free/Dirty block details
[  204.983764][   T12] EXT4-fs (loop2): free_blocks=2415919104
[  204.989564][   T12] EXT4-fs (loop2): dirty_blocks=8224
[  204.994897][   T12] EXT4-fs (loop2): Block reservation details
[  205.000998][   T12] EXT4-fs (loop2): i_reserved_data_blocks=514
[  205.011525][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28
[  205.025127][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.