last executing test programs:

970.08947ms ago: executing program 4 (id=2268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = epoll_create1(0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f00000003c0)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44840}, 0x40000)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x4070bd2c, 0x25dfdbf9, [@sadb_key={0x2, 0x9, 0x18, 0x0, "1cdc39"}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}]}, 0x60}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
fchownat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000280)={0x2000000, 0x100000000000})

931.142111ms ago: executing program 4 (id=2272):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
read$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0x8)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1)
close_range(r1, 0xffffffffffffffff, 0x1000000000000000)

910.561862ms ago: executing program 4 (id=2275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
getgroups(0x2, &(0x7f0000000440)=[0x0, 0xffffffffffffffff])

887.358072ms ago: executing program 4 (id=2277):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x8}]})

808.636333ms ago: executing program 4 (id=2283):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
rmdir(0x0)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000180))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x54}}, 0x0)

785.460814ms ago: executing program 4 (id=2284):
socket(0xa, 0x3, 0x87)
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=")
setresgid(0xee00, 0x0, 0x0)
setresgid(0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0))
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0)
readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)=""/4104, 0x1008}], 0x2)
timer_settime(0x0, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)

491.69169ms ago: executing program 3 (id=2302):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

475.79037ms ago: executing program 3 (id=2303):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r2, 0x0, 0x0, 0x12001100, 0x0, 0x0)

426.567651ms ago: executing program 3 (id=2305):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0)

426.114701ms ago: executing program 3 (id=2307):
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @loopback}, {0x4000, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0)

383.657692ms ago: executing program 3 (id=2311):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@bh}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==")
r0 = msgget$private(0x0, 0x480)
msgsnd(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x401, 0x0)
msgsnd(r0, &(0x7f0000000480)={0x2, "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"}, 0x400, 0x0)
msgsnd(r0, &(0x7f0000000a40)=ANY=[@ANYRES64=r0], 0x401, 0x0)
msgctl$IPC_RMID(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r2 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

319.145653ms ago: executing program 1 (id=2314):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

313.654433ms ago: executing program 1 (id=2315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

306.921293ms ago: executing program 2 (id=2316):
r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$describe(0x6, r0, 0x0, 0x0)

276.039094ms ago: executing program 2 (id=2317):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020008f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
writev(r2, &(0x7f00000003c0), 0x100000000000022d)

248.410915ms ago: executing program 2 (id=2320):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0)

247.881674ms ago: executing program 2 (id=2321):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@bh}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
r0 = msgget$private(0x0, 0x480)
msgsnd(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x401, 0x0)
msgsnd(r0, &(0x7f0000000480)={0x2, "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"}, 0x3f2, 0x0)
msgsnd(r0, &(0x7f0000000a40)=ANY=[@ANYRES64=r0], 0x401, 0x0)
msgctl$IPC_RMID(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r2 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

185.356896ms ago: executing program 3 (id=2323):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000900000000000000000000000000000000000000000000000000dc52ab4a9097352af4ed6de289e4d6fa66557ad9e6de040922a7ad8f5f1228b4192dd72a5a7d7d60a7103e718dbd6acddde61b56a1a6a48b3dd060fc6fa3b62c9d90909c152bc98cce85a87f90dbdafdf2b6c7e4bb5eccb7b8b6d3272754ad137daf2f9d7b78ef5f0adb23"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, r4, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@smackfsroot={'smackfsroot', 0x3d, 'orlov'}}, {@subj_role={'subj_role', 0x3d, '^'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
io_setup(0xd6, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="01", 0x2020}])
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
syz_io_uring_setup(0x80c, &(0x7f0000000440)={0x0, 0x6d83, 0x0, 0x40000000, 0x54}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000040))
syz_io_uring_submit(r9, 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0a0000000800395032303030938f"], 0x15)
write(r10, &(0x7f0000004200)='t', 0x1)
sendfile(r10, r8, 0x0, 0x3ffff)
sendfile(r10, r8, 0x0, 0x7ffff000)
r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r11, &(0x7f0000004200)='t', 0x1)
sendfile(r11, r6, 0x0, 0x7ffff000)

181.621596ms ago: executing program 1 (id=2324):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2b, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0xffffffff}}}}}, 0x28}}, 0x44)

172.977566ms ago: executing program 0 (id=2325):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

148.140247ms ago: executing program 0 (id=2326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
getgroups(0x2, &(0x7f0000000440)=[0x0, 0xffffffffffffffff])

140.414826ms ago: executing program 1 (id=2327):
r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$describe(0x6, r0, 0x0, 0x0)

123.436377ms ago: executing program 1 (id=2328):
io_setup(0x9, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000101}])
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0")

123.031887ms ago: executing program 0 (id=2329):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x12001100, 0x0, 0x0)

90.773727ms ago: executing program 0 (id=2330):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101300, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x5)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xaf}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f0000001380)='./file0\x00', 0x12c)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0)

90.147828ms ago: executing program 0 (id=2331):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020008f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
writev(r2, &(0x7f00000003c0), 0x100000000000022d)

55.566659ms ago: executing program 0 (id=2332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x3, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000103a7f461b296389d86daa12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0500"/28], 0x48)

55.015529ms ago: executing program 2 (id=2333):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r3, r2, 0x0, 0x7ffff088)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00')
unshare(0xa000200)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @remote}, &(0x7f00000002c0)=0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7, 0x80, 0x5, 0x7, {{0x1a, 0x4, 0x0, 0x3a, 0x68, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0xe0, 0x0, 0x3, [0xfffffffd, 0x6, 0x4, 0x1, 0x7, 0x2]}, @cipso={0x86, 0x1a, 0x1, [{0x6, 0x6, "fbe393b5"}, {0x6, 0xe, "436a4b91241324ab1f2e5b4d"}]}, @lsrr={0x83, 0x17, 0xf9, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x13, 0x0, 0x14, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x10, 0xfffffffa, 0x7f}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x3, 0x9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x88, 0x1, 0x5, 0x8001}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x300, r6, 0x12a06, 0x409}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)

11.629149ms ago: executing program 1 (id=2334):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@bh}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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")
r0 = msgget$private(0x0, 0x480)
msgsnd(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x401, 0x0)
msgsnd(r0, &(0x7f0000000480)={0x2, "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"}, 0x401, 0x0)
msgsnd(r0, 0x0, 0x401, 0x0)
msgctl$IPC_RMID(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r2 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r2, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

0s ago: executing program 2 (id=2335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

kernel console output (not intermixed with test programs):

t mount with journal_async_commit, fs mounted w/o journal
[  113.324011][ T7574] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  113.338086][ T7568] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.362178][ T7568] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1373: corrupted inode contents
[  113.375166][ T7568] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1373: mark_inode_dirty error
[  113.387023][ T7568] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1373: corrupted inode contents
[  113.439029][ T7588] sctp: [Deprecated]: syz.2.1380 (pid 7588) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.439029][ T7588] Use struct sctp_sack_info instead
[  113.456631][ T7588] FAULT_INJECTION: forcing a failure.
[  113.456631][ T7588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  113.469778][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.2.1380 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  113.469833][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  113.469848][ T7588] Call Trace:
[  113.469856][ T7588]  <TASK>
[  113.469865][ T7588]  __dump_stack+0x1d/0x30
[  113.469886][ T7588]  dump_stack_lvl+0xe8/0x140
[  113.469905][ T7588]  dump_stack+0x15/0x1b
[  113.469925][ T7588]  should_fail_ex+0x265/0x280
[  113.470044][ T7588]  should_fail+0xb/0x20
[  113.470064][ T7588]  should_fail_usercopy+0x1a/0x20
[  113.470093][ T7588]  _copy_to_user+0x20/0xa0
[  113.470149][ T7588]  simple_read_from_buffer+0xb5/0x130
[  113.470170][ T7588]  proc_fail_nth_read+0x10e/0x150
[  113.470195][ T7588]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  113.470223][ T7588]  vfs_read+0x1a5/0x770
[  113.470242][ T7588]  ? __rcu_read_unlock+0x4f/0x70
[  113.470314][ T7588]  ? __fget_files+0x184/0x1c0
[  113.470377][ T7588]  ksys_read+0xda/0x1a0
[  113.470398][ T7588]  __x64_sys_read+0x40/0x50
[  113.470426][ T7588]  x64_sys_call+0x27bc/0x2ff0
[  113.470450][ T7588]  do_syscall_64+0xd2/0x200
[  113.470605][ T7588]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  113.470652][ T7588]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  113.470729][ T7588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.470802][ T7588] RIP: 0033:0x7fed8aaed63c
[  113.470853][ T7588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  113.470869][ T7588] RSP: 002b:00007fed89557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  113.470887][ T7588] RAX: ffffffffffffffda RBX: 00007fed8ad35fa0 RCX: 00007fed8aaed63c
[  113.470899][ T7588] RDX: 000000000000000f RSI: 00007fed895570a0 RDI: 0000000000000006
[  113.470910][ T7588] RBP: 00007fed89557090 R08: 0000000000000000 R09: 0000000000000000
[  113.470921][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  113.470940][ T7588] R13: 00007fed8ad36038 R14: 00007fed8ad35fa0 R15: 00007ffeeedab528
[  113.470962][ T7588]  </TASK>
[  113.745963][ T7597] loop0: detected capacity change from 0 to 2048
[  113.898907][ T7626] loop3: detected capacity change from 0 to 512
[  113.923975][ T7625] loop0: detected capacity change from 0 to 2048
[  113.934166][ T7625] EXT4-fs: Ignoring removed bh option
[  113.939662][ T7625] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.981622][ T7625] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  113.987657][ T7636] loop3: detected capacity change from 0 to 2048
[  114.073197][ T7649] loop2: detected capacity change from 0 to 512
[  114.082501][ T7649] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1404: bad orphan inode 11862016
[  114.098267][ T7649] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.188472][ T7655] __vm_enough_memory: pid: 7655, comm: syz.2.1405, bytes: 4503599627366400 not enough memory for the allocation
[  114.347457][ T7636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  114.363459][ T7636] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  114.375981][ T7636] EXT4-fs (loop3): This should not happen!! Data will be lost
[  114.375981][ T7636] 
[  114.385690][ T7636] EXT4-fs (loop3): Total free blocks count 0
[  114.391856][ T7636] EXT4-fs (loop3): Free/Dirty block details
[  114.397911][ T7636] EXT4-fs (loop3): free_blocks=2415919104
[  114.403683][ T7636] EXT4-fs (loop3): dirty_blocks=8208
[  114.409060][ T7636] EXT4-fs (loop3): Block reservation details
[  114.415098][ T7636] EXT4-fs (loop3): i_reserved_data_blocks=513
[  114.458492][ T7677] loop2: detected capacity change from 0 to 1024
[  114.470128][ T2869] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  114.482881][ T2869] EXT4-fs (loop3): This should not happen!! Data will be lost
[  114.482881][ T2869] 
[  114.508323][ T7686] loop0: detected capacity change from 0 to 512
[  114.519007][ T7677] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1414: reserved inode found cleared - inode=18
[  114.542807][ T7686] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1418: bad orphan inode 11862016
[  114.554678][ T7686] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.622233][ T7701] loop0: detected capacity change from 0 to 512
[  114.642384][ T7702] loop2: detected capacity change from 0 to 1024
[  114.655075][ T7707] loop3: detected capacity change from 0 to 512
[  114.662819][ T7701] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.692381][ T7702] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1422: reserved inode found cleared - inode=18
[  114.729733][ T7701] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  114.770777][ T7719] loop3: detected capacity change from 0 to 512
[  114.807169][ T7719] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  114.831284][ T7718] loop0: detected capacity change from 0 to 2048
[  114.854599][ T7731] loop4: detected capacity change from 0 to 512
[  114.865125][ T7719] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1429: corrupted inode contents
[  114.877081][ T7731] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  114.904944][ T7719] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1429: mark_inode_dirty error
[  114.908202][ T7731] EXT4-fs (loop4): 1 truncate cleaned up
[  114.931525][ T7719] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1429: corrupted inode contents
[  115.048809][ T7747] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  115.162635][ T7755] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.172448][ T7755] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40257 - 0
[  115.182281][ T7755] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.233065][ T7756] lo speed is unknown, defaulting to 1000
[  115.506055][ T7761] __nla_validate_parse: 14 callbacks suppressed
[  115.506073][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'.
[  115.531717][ T7755] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.541535][ T7755] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40257 - 0
[  115.551392][ T7755] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.577135][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1445'.
[  115.612889][ T7755] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.622714][ T7755] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40257 - 0
[  115.632632][ T7755] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.652272][ T7718] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  115.667186][ T7718] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  115.679859][ T7718] EXT4-fs (loop0): This should not happen!! Data will be lost
[  115.679859][ T7718] 
[  115.689607][ T7718] EXT4-fs (loop0): Total free blocks count 0
[  115.695778][ T7718] EXT4-fs (loop0): Free/Dirty block details
[  115.701805][ T7718] EXT4-fs (loop0): free_blocks=2415919104
[  115.707543][ T7718] EXT4-fs (loop0): dirty_blocks=7168
[  115.712923][ T7718] EXT4-fs (loop0): Block reservation details
[  115.718919][ T7718] EXT4-fs (loop0): i_reserved_data_blocks=448
[  115.726610][ T7769] loop2: detected capacity change from 0 to 2048
[  115.734924][ T7755] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.744816][ T7755] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40257 - 0
[  115.754760][ T7755] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  115.798221][ T2869] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.806452][ T2869] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 40257 - 0
[  115.814758][ T2869] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  115.868138][   T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  115.875562][ T2869] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.880963][   T31] EXT4-fs (loop0): This should not happen!! Data will be lost
[  115.880963][   T31] 
[  115.889105][ T2869] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 40257 - 0
[  115.907143][ T2869] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  115.915498][ T2869] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.923802][ T2869] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 40257 - 0
[  115.932111][ T2869] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  115.942126][ T2869] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  115.950319][ T2869] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 40257 - 0
[  115.958637][ T2869] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  115.975817][ T7777] loop4: detected capacity change from 0 to 256
[  116.002496][ T7782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1450'.
[  116.011919][   T29] kauditd_printk_skb: 313 callbacks suppressed
[  116.011934][   T29] audit: type=1400 audit(1758460883.035:5565): avc:  denied  { write } for  pid=7780 comm="syz.2.1450" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  116.131152][   T29] audit: type=1326 audit(1758460883.155:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.154607][   T29] audit: type=1326 audit(1758460883.155:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.178048][   T29] audit: type=1326 audit(1758460883.155:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.179479][ T7788] loop3: detected capacity change from 0 to 512
[  116.201524][   T29] audit: type=1326 audit(1758460883.155:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.231243][   T29] audit: type=1326 audit(1758460883.155:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.255046][   T29] audit: type=1326 audit(1758460883.155:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.278568][   T29] audit: type=1326 audit(1758460883.155:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.302007][   T29] audit: type=1326 audit(1758460883.155:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.308124][ T7798] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.325403][   T29] audit: type=1326 audit(1758460883.155:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7791 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  116.361479][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'.
[  116.372765][ T7788] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.399661][ T7788] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1456: corrupted inode contents
[  116.412643][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'.
[  116.424119][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1463'.
[  116.432774][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'.
[  116.433251][ T7788] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1456: mark_inode_dirty error
[  116.453810][ T7788] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1456: corrupted inode contents
[  116.471800][ T7812] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  116.495585][ T7812] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  116.513430][ T7819] loop4: detected capacity change from 0 to 512
[  116.516646][ T7812] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  116.532056][ T7812] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  116.553325][ T7812] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  116.586024][ T7812] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  116.600536][ T7824] loop4: detected capacity change from 0 to 1024
[  116.621199][ T7824] EXT4-fs: Ignoring removed bh option
[  116.645224][ T7824] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1468'.
[  116.732564][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1475'.
[  116.834310][ T7847] loop2: detected capacity change from 0 to 512
[  117.032327][ T7866] FAULT_INJECTION: forcing a failure.
[  117.032327][ T7866] name failslab, interval 1, probability 0, space 0, times 0
[  117.045083][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.2.1486 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  117.045113][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  117.045127][ T7866] Call Trace:
[  117.045135][ T7866]  <TASK>
[  117.045143][ T7866]  __dump_stack+0x1d/0x30
[  117.045165][ T7866]  dump_stack_lvl+0xe8/0x140
[  117.045187][ T7866]  dump_stack+0x15/0x1b
[  117.045205][ T7866]  should_fail_ex+0x265/0x280
[  117.045302][ T7866]  ? allocate_file_region_entries+0xd2/0x310
[  117.045329][ T7866]  should_failslab+0x8c/0xb0
[  117.045355][ T7866]  __kmalloc_cache_noprof+0x4c/0x320
[  117.045386][ T7866]  ? __pfx_workingset_update_node+0x10/0x10
[  117.045459][ T7866]  allocate_file_region_entries+0xd2/0x310
[  117.045489][ T7866]  region_chg+0x232/0x2d0
[  117.045513][ T7866]  alloc_hugetlb_folio+0x312/0x1070
[  117.045571][ T7866]  hugetlb_fault+0xd71/0x1b50
[  117.045601][ T7866]  handle_mm_fault+0x1861/0x2c20
[  117.045630][ T7866]  ? mt_find+0x200/0x320
[  117.045658][ T7866]  ? try_grab_folio+0x75/0x170
[  117.045756][ T7866]  ? down_read+0x77/0xe0
[  117.045787][ T7866]  __get_user_pages+0x102e/0x1fa0
[  117.045901][ T7866]  __mm_populate+0x243/0x3a0
[  117.045927][ T7866]  do_mlock+0x47f/0x520
[  117.045963][ T7866]  ? fput+0x8f/0xc0
[  117.046003][ T7866]  ? ksys_write+0x192/0x1a0
[  117.046030][ T7866]  __x64_sys_mlock+0x36/0x50
[  117.046117][ T7866]  x64_sys_call+0x18f8/0x2ff0
[  117.046140][ T7866]  do_syscall_64+0xd2/0x200
[  117.046217][ T7866]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  117.046243][ T7866]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  117.046273][ T7866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.046348][ T7866] RIP: 0033:0x7fed8aaeec29
[  117.046367][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.046386][ T7866] RSP: 002b:00007fed89557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  117.046409][ T7866] RAX: ffffffffffffffda RBX: 00007fed8ad35fa0 RCX: 00007fed8aaeec29
[  117.046423][ T7866] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000
[  117.046438][ T7866] RBP: 00007fed89557090 R08: 0000000000000000 R09: 0000000000000000
[  117.046451][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.046474][ T7866] R13: 00007fed8ad36038 R14: 00007fed8ad35fa0 R15: 00007ffeeedab528
[  117.046494][ T7866]  </TASK>
[  117.359995][ T7860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7860 comm=syz.4.1483
[  117.389470][ T7874] loop2: detected capacity change from 0 to 2048
[  117.549875][ T7886] loop3: detected capacity change from 0 to 512
[  117.586254][ T7890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1496'.
[  117.626511][ T7892] loop0: detected capacity change from 0 to 512
[  117.660064][ T7896] lo speed is unknown, defaulting to 1000
[  117.703547][ T7904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.710799][ T7904] IPv6: NLM_F_CREATE should be set when creating new route
[  117.764166][ T7904] loop0: detected capacity change from 0 to 512
[  117.792207][ T7904] EXT4-fs (loop0): orphan cleanup on readonly fs
[  117.795344][ T7909] loop4: detected capacity change from 0 to 2048
[  117.801180][ T7904] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #11: block 1728053262: comm syz.0.1501: lblock 0 mapped to illegal pblock 1728053262 (length 1)
[  117.805498][ T7909] EXT4-fs: Ignoring removed bh option
[  117.826106][ T7909] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.834405][ T7904] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  117.848459][ T7904] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1501: corrupted inode contents
[  117.860798][ T7904] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.1501: mark_inode_dirty error
[  117.873260][ T7904] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.1501: corrupted inode contents
[  117.885299][ T7904] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.1501: mark_inode_dirty error
[  117.889623][ T7874] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, 
[  117.897304][ T7909] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  117.897246][ T7874] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  117.923774][ T7904] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.1501: mark inode dirty (error -117)
[  117.941133][ T7874] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  117.953784][ T7874] EXT4-fs (loop2): This should not happen!! Data will be lost
[  117.953784][ T7874] 
[  117.956945][ T7904] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117)
[  117.963455][ T7874] EXT4-fs (loop2): Total free blocks count 0
[  117.975960][ T7904] EXT4-fs (loop0): 1 orphan inode deleted
[  117.978461][ T7874] EXT4-fs (loop2): Free/Dirty block details
[  117.990106][ T7874] EXT4-fs (loop2): free_blocks=2415919104
[  117.995901][ T7874] EXT4-fs (loop2): dirty_blocks=8208
[  118.001235][ T7874] EXT4-fs (loop2): Block reservation details
[  118.007230][ T7874] EXT4-fs (loop2): i_reserved_data_blocks=513
[  118.110483][  T350] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  118.123279][  T350] EXT4-fs (loop2): This should not happen!! Data will be lost
[  118.123279][  T350] 
[  118.629667][ T7953] loop3: detected capacity change from 0 to 512
[  118.645083][ T7954] loop2: detected capacity change from 0 to 1024
[  118.674566][ T7953] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.714976][ T7950] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1519: reserved inode found cleared - inode=18
[  118.756044][ T7964] loop4: detected capacity change from 0 to 2048
[  118.762913][ T7964] EXT4-fs: Ignoring removed bh option
[  118.768388][ T7964] EXT4-fs: Ignoring removed nomblk_io_submit option
[  118.774319][ T7953] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  118.803620][ T7964] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  118.852013][ T7971] loop3: detected capacity change from 0 to 512
[  118.880121][ T7971] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  118.904023][ T7971] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1524: corrupted inode contents
[  118.920575][ T7971] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1524: mark_inode_dirty error
[  118.949389][ T7971] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1524: corrupted inode contents
[  118.968971][ T7971] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  118.981650][ T7971] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  118.996220][ T7971] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  119.007858][ T7971] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  119.019839][ T7971] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  119.020710][ T7990] program syz.0.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.061108][ T7971] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  119.123906][ T7999] loop0: detected capacity change from 0 to 1024
[  119.154735][ T7999] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.1534: reserved inode found cleared - inode=18
[  119.189795][ T8009] loop3: detected capacity change from 0 to 2048
[  119.253142][ T8017] netlink: 'syz.3.1540': attribute type 4 has an invalid length.
[  119.265870][ T8017] .`: renamed from bond0 (while UP)
[  119.323929][ T8017] loop3: detected capacity change from 0 to 8192
[  119.361604][ T8017]  loop3: p1 p2 < > p3 p4 < p5 >
[  119.366623][ T8017] loop3: partition table partially beyond EOD, truncated
[  119.374016][ T8017] loop3: p1 size 100663296 extends beyond EOD, truncated
[  119.382560][ T8017] loop3: p2 start 591104 is beyond EOD, truncated
[  119.389009][ T8017] loop3: p3 start 33572980 is beyond EOD, truncated
[  119.396432][ T8017] loop3: p5 size 100663296 extends beyond EOD, truncated
[  119.455325][ T8033] loop3: detected capacity change from 0 to 512
[  119.467373][ T8035] FAULT_INJECTION: forcing a failure.
[  119.467373][ T8035] name failslab, interval 1, probability 0, space 0, times 0
[  119.480212][ T8035] CPU: 1 UID: 0 PID: 8035 Comm: syz.1.1548 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  119.480277][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  119.480333][ T8035] Call Trace:
[  119.480338][ T8035]  <TASK>
[  119.480344][ T8035]  __dump_stack+0x1d/0x30
[  119.480364][ T8035]  dump_stack_lvl+0xe8/0x140
[  119.480381][ T8035]  dump_stack+0x15/0x1b
[  119.480395][ T8035]  should_fail_ex+0x265/0x280
[  119.480421][ T8035]  should_failslab+0x8c/0xb0
[  119.480443][ T8035]  __kmalloc_noprof+0xa5/0x3e0
[  119.480531][ T8035]  ? security_prepare_creds+0x52/0x120
[  119.480551][ T8035]  security_prepare_creds+0x52/0x120
[  119.480569][ T8035]  prepare_creds+0x34a/0x4c0
[  119.480590][ T8035]  __sys_setgid+0x6a/0x1d0
[  119.480718][ T8035]  __x64_sys_setgid+0x1e/0x30
[  119.480744][ T8035]  x64_sys_call+0x2dec/0x2ff0
[  119.480763][ T8035]  do_syscall_64+0xd2/0x200
[  119.480790][ T8035]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  119.480823][ T8035]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  119.480848][ T8035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.480867][ T8035] RIP: 0033:0x7fc2c4aaec29
[  119.480882][ T8035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.480900][ T8035] RSP: 002b:00007fc2c3517038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a
[  119.480918][ T8035] RAX: ffffffffffffffda RBX: 00007fc2c4cf5fa0 RCX: 00007fc2c4aaec29
[  119.480946][ T8035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  119.480960][ T8035] RBP: 00007fc2c3517090 R08: 0000000000000000 R09: 0000000000000000
[  119.481011][ T8035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.481022][ T8035] R13: 00007fc2c4cf6038 R14: 00007fc2c4cf5fa0 R15: 00007ffdfdb61df8
[  119.481039][ T8035]  </TASK>
[  119.666178][ T8033] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.695133][ T8030] veth0: entered promiscuous mode
[  119.713799][ T8040] IPVS: Unknown mcast interface: bond_s
[  119.725973][ T8033] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  119.812606][ T8056] loop3: detected capacity change from 0 to 2048
[  119.819267][ T8056] EXT4-fs: Ignoring removed bh option
[  119.824785][ T8056] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.846455][ T8056] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  119.911410][ T8066] unsupported nla_type 52263
[  119.994347][ T8076] loop0: detected capacity change from 0 to 2043
[  120.023215][ T8076] Alternate GPT is invalid, using primary GPT.
[  120.029489][ T8076]  loop0: p1 p2 p3
[  120.126486][ T8087] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  120.195211][ T8094] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  120.337308][ T8106] loop3: detected capacity change from 0 to 2048
[  120.344348][ T8106] EXT4-fs: Ignoring removed bh option
[  120.349888][ T8106] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.361596][ T8106] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  120.495433][ T8120] loop0: detected capacity change from 0 to 512
[  120.513044][ T8120] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.524648][ T8120] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1582: corrupted inode contents
[  120.537824][ T8120] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1582: mark_inode_dirty error
[  120.552708][ T8120] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1582: corrupted inode contents
[  120.590081][ T8120] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  120.632107][ T8138] loop2: detected capacity change from 0 to 512
[  120.641375][ T8140] FAULT_INJECTION: forcing a failure.
[  120.641375][ T8140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.654552][ T8140] CPU: 0 UID: 0 PID: 8140 Comm: syz.1.1590 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  120.654645][ T8140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  120.654759][ T8140] Call Trace:
[  120.654767][ T8140]  <TASK>
[  120.654776][ T8140]  __dump_stack+0x1d/0x30
[  120.654803][ T8140]  dump_stack_lvl+0xe8/0x140
[  120.654897][ T8140]  dump_stack+0x15/0x1b
[  120.654937][ T8140]  should_fail_ex+0x265/0x280
[  120.654967][ T8140]  should_fail+0xb/0x20
[  120.655002][ T8140]  should_fail_usercopy+0x1a/0x20
[  120.655029][ T8140]  _copy_from_iter+0x254/0xe80
[  120.655106][ T8140]  ? should_fail_ex+0xdb/0x280
[  120.655145][ T8140]  ? should_failslab+0x8c/0xb0
[  120.655171][ T8140]  ? __kmalloc_noprof+0x1dd/0x3e0
[  120.655201][ T8140]  ? bcm_rx_setup+0x3cd/0xe10
[  120.655235][ T8140]  bcm_rx_setup+0x516/0xe10
[  120.655347][ T8140]  bcm_sendmsg+0x1b2/0x480
[  120.655393][ T8140]  ? __pfx_bcm_sendmsg+0x10/0x10
[  120.655425][ T8140]  __sock_sendmsg+0x142/0x180
[  120.655456][ T8140]  ____sys_sendmsg+0x31e/0x4e0
[  120.655540][ T8140]  ___sys_sendmsg+0x17b/0x1d0
[  120.655584][ T8140]  __x64_sys_sendmsg+0xd4/0x160
[  120.655675][ T8140]  x64_sys_call+0x191e/0x2ff0
[  120.655701][ T8140]  do_syscall_64+0xd2/0x200
[  120.655805][ T8140]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  120.655834][ T8140]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  120.655869][ T8140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.655895][ T8140] RIP: 0033:0x7fc2c4aaec29
[  120.655912][ T8140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.655933][ T8140] RSP: 002b:00007fc2c3517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.655958][ T8140] RAX: ffffffffffffffda RBX: 00007fc2c4cf5fa0 RCX: 00007fc2c4aaec29
[  120.655973][ T8140] RDX: 0000000024000895 RSI: 0000200000000640 RDI: 0000000000000004
[  120.655989][ T8140] RBP: 00007fc2c3517090 R08: 0000000000000000 R09: 0000000000000000
[  120.656004][ T8140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.656065][ T8140] R13: 00007fc2c4cf6038 R14: 00007fc2c4cf5fa0 R15: 00007ffdfdb61df8
[  120.656084][ T8140]  </TASK>
[  120.659811][ T8120] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  120.803266][ T8138] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1589: bad orphan inode 11862016
[  120.825213][ T8120] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  120.831797][ T8138] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.838700][ T8120] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  120.870359][ T8141] loop3: detected capacity change from 0 to 512
[  120.874532][ T8120] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  120.945210][ T8120] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  120.957594][ T8141] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  120.966161][ T8141] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  120.982259][ T8141] EXT4-fs (loop3): 1 truncate cleaned up
[  121.021637][ T8151] __nla_validate_parse: 16 callbacks suppressed
[  121.021655][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'.
[  121.086360][ T8161] loop2: detected capacity change from 0 to 2048
[  121.096216][ T8161] EXT4-fs: Ignoring removed bh option
[  121.101787][ T8161] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.120101][ T8161] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  121.170453][ T8176] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  121.221002][   T29] kauditd_printk_skb: 393 callbacks suppressed
[  121.221019][   T29] audit: type=1326 audit(1758460888.235:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  121.250700][   T29] audit: type=1326 audit(1758460888.235:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  121.274128][   T29] audit: type=1326 audit(1758460888.235:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  121.276362][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'.
[  121.297685][   T29] audit: type=1326 audit(1758460888.235:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  121.307763][ T8180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1603'.
[  121.329965][   T29] audit: type=1326 audit(1758460888.235:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.3.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  121.415753][ T8191] loop3: detected capacity change from 0 to 512
[  121.436439][ T8194] loop4: detected capacity change from 0 to 256
[  121.442642][ T8191] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1609: bad orphan inode 11862016
[  121.455283][ T8191] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.631924][   T29] audit: type=1400 audit(1758460888.635:5973): avc:  denied  { listen } for  pid=8202 comm="syz.2.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  121.651429][   T29] audit: type=1400 audit(1758460888.635:5974): avc:  denied  { ioctl } for  pid=8202 comm="syz.2.1613" path="socket:[23720]" dev="sockfs" ino=23720 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  121.734413][ T8208] loop4: detected capacity change from 0 to 2048
[  121.893355][   T29] audit: type=1326 audit(1758460888.935:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  121.916923][   T29] audit: type=1326 audit(1758460888.935:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  121.960712][   T29] audit: type=1326 audit(1758460888.975:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.2.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  122.017525][ T8225] loop2: detected capacity change from 0 to 2048
[  122.025061][ T8225] EXT4-fs: Ignoring removed bh option
[  122.030500][ T8225] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.053543][ T8225] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  122.093221][ T8236] loop4: detected capacity change from 0 to 512
[  122.103832][ T8236] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.119005][ T8236] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  122.166575][ T8244] loop4: detected capacity change from 0 to 512
[  122.190142][ T8244] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.216898][ T8244] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1628: corrupted inode contents
[  122.230262][ T8244] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1628: mark_inode_dirty error
[  122.244065][ T8244] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1628: corrupted inode contents
[  122.299580][ T8254] loop0: detected capacity change from 0 to 2048
[  122.337162][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'.
[  122.377332][ T8268] loop2: detected capacity change from 0 to 512
[  122.385420][ T8264] loop4: detected capacity change from 0 to 1024
[  122.395447][ T8268] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1637: bad orphan inode 11862016
[  122.409997][ T8268] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.445341][ T8264] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.1633: reserved inode found cleared - inode=18
[  122.457643][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'.
[  122.709022][ T8291] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.770054][ T8291] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.792422][ T8292] lo speed is unknown, defaulting to 1000
[  122.988634][ T8291] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.122964][ T8297] loop0: detected capacity change from 0 to 2048
[  123.132351][ T8291] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.145752][ T8290] loop2: detected capacity change from 0 to 512
[  123.187569][   T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.203009][ T8290] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  123.233020][   T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.240011][ T8290] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  123.249839][ T8290] EXT4-fs (loop2): 1 truncate cleaned up
[  123.250370][  T350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.266818][ T8306] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  123.300021][  T350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.387366][ T8310] loop0: detected capacity change from 0 to 512
[  123.415508][ T8310] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.450677][ T8310] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1651: corrupted inode contents
[  123.454421][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'.
[  123.471644][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'.
[  123.482020][ T8310] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1651: mark_inode_dirty error
[  123.528027][ T8310] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1651: corrupted inode contents
[  123.575735][ T8340] loop0: detected capacity change from 0 to 512
[  123.587841][ T8340] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  123.601569][ T8340] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  123.615973][ T8343] loop4: detected capacity change from 0 to 512
[  123.621210][ T8340] EXT4-fs (loop0): 1 truncate cleaned up
[  123.636527][ T8346] 9pnet_fd: Insufficient options for proto=fd
[  123.683243][ T8343] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.710673][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1666: corrupted inode contents
[  123.748078][ T8343] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1666: mark_inode_dirty error
[  123.764789][ T8343] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1666: corrupted inode contents
[  123.777856][ T8354] loop3: detected capacity change from 0 to 2048
[  123.942163][ T8357] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.966280][ T8358] lo speed is unknown, defaulting to 1000
[  124.153163][ T8357] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.193532][ T8357] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.232859][ T8357] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.337236][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.346959][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.363190][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.376747][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.495084][ T8376] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  124.541087][ T8379] loop4: detected capacity change from 0 to 512
[  124.576389][ T8379] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.602567][ T8379] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  124.610999][ T8389] 9pnet_fd: Insufficient options for proto=fd
[  124.617717][ T8389] FAULT_INJECTION: forcing a failure.
[  124.617717][ T8389] name failslab, interval 1, probability 0, space 0, times 0
[  124.620418][ T8354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  124.630466][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: syz.1.1683 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  124.630493][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  124.630505][ T8389] Call Trace:
[  124.630511][ T8389]  <TASK>
[  124.630518][ T8389]  __dump_stack+0x1d/0x30
[  124.630540][ T8389]  dump_stack_lvl+0xe8/0x140
[  124.630588][ T8389]  dump_stack+0x15/0x1b
[  124.630604][ T8389]  should_fail_ex+0x265/0x280
[  124.630678][ T8389]  should_failslab+0x8c/0xb0
[  124.630742][ T8389]  kmem_cache_alloc_noprof+0x50/0x310
[  124.630782][ T8389]  ? __rds_conn_create+0x3e7/0x1040
[  124.630806][ T8389]  ? mntput_no_expire+0x6f/0x460
[  124.630841][ T8389]  __rds_conn_create+0x3e7/0x1040
[  124.630869][ T8389]  rds_conn_create_outgoing+0x43/0x60
[  124.630904][ T8389]  rds_sendmsg+0xbd2/0x14a0
[  124.630969][ T8389]  ? __pfx_rds_sendmsg+0x10/0x10
[  124.631046][ T8389]  __sock_sendmsg+0x142/0x180
[  124.631077][ T8389]  __sys_sendto+0x268/0x330
[  124.631107][ T8389]  __x64_sys_sendto+0x76/0x90
[  124.631130][ T8389]  x64_sys_call+0x2d05/0x2ff0
[  124.631172][ T8389]  do_syscall_64+0xd2/0x200
[  124.631253][ T8389]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  124.631279][ T8389]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  124.631308][ T8389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.631330][ T8389] RIP: 0033:0x7fc2c4aaec29
[  124.631346][ T8389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.631371][ T8389] RSP: 002b:00007fc2c3517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  124.631391][ T8389] RAX: ffffffffffffffda RBX: 00007fc2c4cf5fa0 RCX: 00007fc2c4aaec29
[  124.631404][ T8389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[  124.631416][ T8389] RBP: 00007fc2c3517090 R08: 0000200000000200 R09: 0000000000000010
[  124.631428][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.631441][ T8389] R13: 00007fc2c4cf6038 R14: 00007fc2c4cf5fa0 R15: 00007ffdfdb61df8
[  124.631489][ T8389]  </TASK>
[  124.676808][ T8393] loop2: detected capacity change from 0 to 512
[  124.680680][ T8354] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  124.699815][ T8393] EXT4-fs: Ignoring removed nomblk_io_submit option
[  124.704554][ T8354] EXT4-fs (loop3): This should not happen!! Data will be lost
[  124.704554][ T8354] 
[  124.722745][ T8393] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.724402][ T8354] EXT4-fs (loop3): Total free blocks count 0
[  124.896634][ T8354] EXT4-fs (loop3): Free/Dirty block details
[  124.902644][ T8354] EXT4-fs (loop3): free_blocks=2415919104
[  124.908355][ T8354] EXT4-fs (loop3): dirty_blocks=6736
[  124.913641][ T8354] EXT4-fs (loop3): Block reservation details
[  124.919615][ T8354] EXT4-fs (loop3): i_reserved_data_blocks=421
[  124.947308][ T8393] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1685: Failed to acquire dquot type 1
[  124.961926][ T8391] loop0: detected capacity change from 0 to 256
[  124.986048][ T8398] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.082663][ T8402] lo speed is unknown, defaulting to 1000
[  125.194518][ T2869] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  125.207331][ T2869] EXT4-fs (loop3): This should not happen!! Data will be lost
[  125.207331][ T2869] 
[  125.314093][ T8409] netlink: 'syz.2.1690': attribute type 28 has an invalid length.
[  125.321989][ T8409] netlink: 'syz.2.1690': attribute type 3 has an invalid length.
[  125.329723][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1690'.
[  125.343873][ T8411] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  125.394567][ T8415] loop0: detected capacity change from 0 to 512
[  125.414240][ T8398] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.459563][ T8415] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1693: bad orphan inode 11862016
[  125.476326][ T8423] loop3: detected capacity change from 0 to 256
[  125.483774][ T8398] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.517385][ T8415] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.529486][ T8429] netlink: 'syz.4.1697': attribute type 10 has an invalid length.
[  125.545946][ T8429] team0: Device hsr_slave_0 failed to register rx_handler
[  125.563222][ T8398] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.581828][ T8431] loop2: detected capacity change from 0 to 512
[  125.612971][ T8431] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.632470][ T8431] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1698: corrupted inode contents
[  125.643628][ T8447] loop3: detected capacity change from 0 to 2048
[  125.651494][ T8447] EXT4-fs: Ignoring removed bh option
[  125.657059][ T8447] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.664949][ T8431] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1698: mark_inode_dirty error
[  125.689924][ T8431] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1698: corrupted inode contents
[  125.701934][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  125.702800][ T8451] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  125.719870][ T8447] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  125.724548][ T8451] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  125.747168][ T8451] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  125.762428][ T8451] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  125.780590][ T8451] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  125.793018][ T8451] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  125.822650][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1711'.
[  125.857741][ T8467] loop0: detected capacity change from 0 to 512
[  125.888039][ T8467] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.899223][ T8467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1712: corrupted inode contents
[  125.912096][ T8467] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1712: mark_inode_dirty error
[  125.925088][ T8467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1712: corrupted inode contents
[  125.929144][ T8482] loop2: detected capacity change from 0 to 2048
[  125.941588][ T8467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  125.955224][ T8467] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  125.967069][ T8467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  125.984592][ T8487] netlink: 'syz.4.1720': attribute type 28 has an invalid length.
[  125.992501][ T8467] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  125.992488][ T8487] netlink: 'syz.4.1720': attribute type 3 has an invalid length.
[  125.995030][ T8467] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  126.022716][ T8467] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  126.069122][ T8495] __nla_validate_parse: 2 callbacks suppressed
[  126.069139][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1723'.
[  126.099392][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1723'.
[  126.219560][ T8513] loop0: detected capacity change from 0 to 512
[  126.255460][ T8513] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.273297][ T8513] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1730: corrupted inode contents
[  126.311125][ T8513] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1730: mark_inode_dirty error
[  126.325788][ T8482] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  126.340837][ T8482] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  126.341496][ T8513] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1730: corrupted inode contents
[  126.353337][ T8482] EXT4-fs (loop2): This should not happen!! Data will be lost
[  126.353337][ T8482] 
[  126.374714][ T8482] EXT4-fs (loop2): Total free blocks count 0
[  126.380704][ T8482] EXT4-fs (loop2): Free/Dirty block details
[  126.386658][ T8482] EXT4-fs (loop2): free_blocks=2415919104
[  126.392433][ T8482] EXT4-fs (loop2): dirty_blocks=8208
[  126.397740][ T8482] EXT4-fs (loop2): Block reservation details
[  126.403797][ T8482] EXT4-fs (loop2): i_reserved_data_blocks=513
[  126.456682][   T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  126.469473][   T51] EXT4-fs (loop2): This should not happen!! Data will be lost
[  126.469473][   T51] 
[  126.523417][ T8532] loop4: detected capacity change from 0 to 256
[  126.581273][ T8511] loop3: detected capacity change from 0 to 512
[  126.589134][ T8511] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  126.597330][ T8511] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  126.597637][ T8536] loop2: detected capacity change from 0 to 1024
[  126.612413][ T8511] EXT4-fs (loop3): 1 truncate cleaned up
[  126.635186][ T8536] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.1735: reserved inode found cleared - inode=18
[  126.699147][   T29] kauditd_printk_skb: 172 callbacks suppressed
[  126.699166][   T29] audit: type=1326 audit(1758460893.735:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.730527][ T8549] loop0: detected capacity change from 0 to 2048
[  126.739508][   T29] audit: type=1326 audit(1758460893.735:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.763086][   T29] audit: type=1326 audit(1758460893.735:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.786576][   T29] audit: type=1326 audit(1758460893.735:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.810035][   T29] audit: type=1326 audit(1758460893.735:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.833474][   T29] audit: type=1326 audit(1758460893.735:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.842976][ T8557] loop2: detected capacity change from 0 to 2048
[  126.856995][   T29] audit: type=1326 audit(1758460893.735:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.857025][   T29] audit: type=1326 audit(1758460893.735:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.857058][   T29] audit: type=1326 audit(1758460893.735:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  126.857080][   T29] audit: type=1326 audit(1758460893.735:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8553 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  127.000496][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1750'.
[  127.100649][ T8578] netlink: 'syz.0.1752': attribute type 30 has an invalid length.
[  127.126993][ T8586] loop3: detected capacity change from 0 to 256
[  127.175894][ T8587] loop0: detected capacity change from 0 to 2048
[  127.220439][ T8557] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  127.236542][ T8557] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  127.249030][ T8557] EXT4-fs (loop2): This should not happen!! Data will be lost
[  127.249030][ T8557] 
[  127.256814][ T8587]  loop0: p2 p3 p7
[  127.258741][ T8557] EXT4-fs (loop2): Total free blocks count 0
[  127.268439][ T8557] EXT4-fs (loop2): Free/Dirty block details
[  127.274450][ T8557] EXT4-fs (loop2): free_blocks=2415919104
[  127.280291][ T8557] EXT4-fs (loop2): dirty_blocks=8208
[  127.285625][ T8557] EXT4-fs (loop2): Block reservation details
[  127.291633][ T8557] EXT4-fs (loop2): i_reserved_data_blocks=513
[  127.341195][   T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  127.353973][   T51] EXT4-fs (loop2): This should not happen!! Data will be lost
[  127.353973][   T51] 
[  127.425618][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1757'.
[  127.474168][ T8596] loop3: detected capacity change from 0 to 2048
[  127.474961][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'.
[  127.491013][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'.
[  127.526907][ T8604] loop2: detected capacity change from 0 to 512
[  127.540193][ T8606] loop0: detected capacity change from 0 to 1024
[  127.572121][ T8604] netlink: 'syz.2.1763': attribute type 3 has an invalid length.
[  127.587545][ T8606] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  127.664562][ T8615] loop2: detected capacity change from 0 to 2048
[  127.675950][ T8618] SELinux:  Context � is not valid (left unmapped).
[  127.690316][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'.
[  127.702185][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1768'.
[  127.739493][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'.
[  127.787242][ T8616] loop4: detected capacity change from 0 to 512
[  127.795472][ T8616] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  127.804634][ T8616] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  127.825435][ T8616] EXT4-fs (loop4): 1 truncate cleaned up
[  127.851450][ T8616] EXT4-fs mount: 125 callbacks suppressed
[  127.851496][ T8616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.948888][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.982114][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1775'.
[  127.989940][ T8615] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  128.009032][ T8615] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  128.021648][ T8615] EXT4-fs (loop2): This should not happen!! Data will be lost
[  128.021648][ T8615] 
[  128.031380][ T8615] EXT4-fs (loop2): Total free blocks count 0
[  128.037374][ T8615] EXT4-fs (loop2): Free/Dirty block details
[  128.043325][ T8615] EXT4-fs (loop2): free_blocks=2415919104
[  128.049084][ T8615] EXT4-fs (loop2): dirty_blocks=8208
[  128.054544][ T8615] EXT4-fs (loop2): Block reservation details
[  128.060633][ T8615] EXT4-fs (loop2): i_reserved_data_blocks=513
[  128.116886][ T8654] loop3: detected capacity change from 0 to 512
[  128.129963][   T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  128.133525][ T8654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.142753][   T51] EXT4-fs (loop2): This should not happen!! Data will be lost
[  128.142753][   T51] 
[  128.156041][ T8654] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  128.196342][ T8654] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1782: corrupted inode contents
[  128.208346][ T8654] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1782: mark_inode_dirty error
[  128.222247][ T8654] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1782: corrupted inode contents
[  128.237288][ T8654] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  128.249618][ T8654] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  128.264477][ T8654] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  128.276262][ T8654] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  128.291500][ T8654] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  128.304501][ T8666] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  128.311223][ T8654] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  128.352044][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.410416][ T8682] loop3: detected capacity change from 0 to 2048
[  128.423327][ T8682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  128.534703][   T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.568002][ T8698] loop2: detected capacity change from 0 to 2048
[  128.574830][ T8698] EXT4-fs: Ignoring removed bh option
[  128.575966][   T41] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.580333][ T8698] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.609567][   T41] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.617932][ T8698] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  128.628167][   T41] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.774886][ T8682] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  128.794199][ T8682] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  128.807562][ T8682] EXT4-fs (loop3): This should not happen!! Data will be lost
[  128.807562][ T8682] 
[  128.817310][ T8682] EXT4-fs (loop3): Total free blocks count 0
[  128.823419][ T8682] EXT4-fs (loop3): Free/Dirty block details
[  128.829327][ T8682] EXT4-fs (loop3): free_blocks=2415919104
[  128.835126][ T8682] EXT4-fs (loop3): dirty_blocks=8208
[  128.840550][ T8682] EXT4-fs (loop3): Block reservation details
[  128.846561][ T8682] EXT4-fs (loop3): i_reserved_data_blocks=513
[  128.907223][ T8726] loop0: detected capacity change from 0 to 1024
[  128.942480][ T8726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.956438][  T350] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  129.003404][ T8726] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.1812: reserved inode found cleared - inode=18
[  129.102001][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.127448][ T8764] FAULT_INJECTION: forcing a failure.
[  129.127448][ T8764] name failslab, interval 1, probability 0, space 0, times 0
[  129.140244][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.0.1825 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  129.140317][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  129.140330][ T8764] Call Trace:
[  129.140337][ T8764]  <TASK>
[  129.140344][ T8764]  __dump_stack+0x1d/0x30
[  129.140458][ T8764]  dump_stack_lvl+0xe8/0x140
[  129.140479][ T8764]  dump_stack+0x15/0x1b
[  129.140497][ T8764]  should_fail_ex+0x265/0x280
[  129.140523][ T8764]  ? sctp_add_bind_addr+0x71/0x1e0
[  129.140595][ T8764]  should_failslab+0x8c/0xb0
[  129.140698][ T8764]  __kmalloc_cache_noprof+0x4c/0x320
[  129.140732][ T8764]  sctp_add_bind_addr+0x71/0x1e0
[  129.140782][ T8764]  sctp_copy_local_addr_list+0x199/0x220
[  129.140836][ T8764]  sctp_copy_one_addr+0x7f/0x280
[  129.140871][ T8764]  sctp_bind_addr_copy+0x79/0x290
[  129.140899][ T8764]  sctp_assoc_set_bind_addr_from_ep+0xce/0xe0
[  129.140937][ T8764]  sctp_connect_new_asoc+0x1c3/0x3a0
[  129.141015][ T8764]  sctp_sendmsg+0xf10/0x18d0
[  129.141040][ T8764]  ? selinux_socket_sendmsg+0x91/0x1b0
[  129.141074][ T8764]  ? __pfx_sctp_sendmsg+0x10/0x10
[  129.141171][ T8764]  inet_sendmsg+0xc5/0xd0
[  129.141232][ T8764]  __sock_sendmsg+0x102/0x180
[  129.141268][ T8764]  ____sys_sendmsg+0x31e/0x4e0
[  129.141367][ T8764]  ___sys_sendmsg+0x17b/0x1d0
[  129.141407][ T8764]  __x64_sys_sendmsg+0xd4/0x160
[  129.141440][ T8764]  x64_sys_call+0x191e/0x2ff0
[  129.141526][ T8764]  do_syscall_64+0xd2/0x200
[  129.141661][ T8764]  ? arch_exit_to_user_mode_prepare+0x27/0x80
[  129.141684][ T8764]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  129.141710][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.141802][ T8764] RIP: 0033:0x7f6ff940ec29
[  129.141818][ T8764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.141838][ T8764] RSP: 002b:00007f6ff7e6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  129.141871][ T8764] RAX: ffffffffffffffda RBX: 00007f6ff9655fa0 RCX: 00007f6ff940ec29
[  129.141886][ T8764] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000008
[  129.141910][ T8764] RBP: 00007f6ff7e6f090 R08: 0000000000000000 R09: 0000000000000000
[  129.141924][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  129.141938][ T8764] R13: 00007f6ff9656038 R14: 00007f6ff9655fa0 R15: 00007fff59794aa8
[  129.141956][ T8764]  </TASK>
[  129.152348][ T8766] loop4: detected capacity change from 0 to 2048
[  129.289542][ T8779] loop0: detected capacity change from 0 to 512
[  129.394406][ T8766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  129.416683][ T8779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.430461][ T8779] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.527368][ T8779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1832: corrupted inode contents
[  129.565265][ T8779] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1832: mark_inode_dirty error
[  129.599699][ T8779] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1832: corrupted inode contents
[  129.614867][ T8217] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  129.656900][ T8801] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  129.698814][ T8766] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  129.711574][ T8766] EXT4-fs (loop4): This should not happen!! Data will be lost
[  129.711574][ T8766] 
[  129.711795][ T8801] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  129.721460][ T8766] EXT4-fs (loop4): Total free blocks count 0
[  129.738027][ T8766] EXT4-fs (loop4): Free/Dirty block details
[  129.744038][ T8766] EXT4-fs (loop4): free_blocks=2415919104
[  129.749793][ T8766] EXT4-fs (loop4): dirty_blocks=8208
[  129.755124][ T8766] EXT4-fs (loop4): Block reservation details
[  129.761167][ T8766] EXT4-fs (loop4): i_reserved_data_blocks=513
[  129.768714][ T8801] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  129.791407][ T8801] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  129.810446][ T8819] loop2: detected capacity change from 0 to 2048
[  129.825060][ T8801] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  129.837703][ T8819] EXT4-fs: Ignoring removed bh option
[  129.843197][ T8819] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.855098][ T3844] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  129.868111][ T8801] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  129.909760][ T8819] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  129.956220][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.086483][ T8846] loop9: detected capacity change from 0 to 7
[  130.097617][ T8846] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.108441][ T8846] Buffer I/O error on dev loop9, logical block 0, async page read
[  130.116404][ T8846]  loop9: unable to read partition table
[  130.124561][ T8846] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  130.124561][ T8846] 
) failed (rc=-5)
[  130.215414][ T8855] loop3: detected capacity change from 0 to 2048
[  130.223122][ T8855] EXT4-fs: Ignoring removed bh option
[  130.228564][ T8855] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.241231][ T8855] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  130.291035][ T8859] loop4: detected capacity change from 0 to 2048
[  130.319098][ T8859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  130.649571][ T8875] loop3: detected capacity change from 0 to 512
[  130.674952][ T8875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.702094][ T8875] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.730537][ T8875] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1863: corrupted inode contents
[  130.752966][ T8859] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  130.769088][ T8875] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.1863: mark_inode_dirty error
[  130.780655][ T8859] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  130.793178][ T8859] EXT4-fs (loop4): This should not happen!! Data will be lost
[  130.793178][ T8859] 
[  130.802845][ T8859] EXT4-fs (loop4): Total free blocks count 0
[  130.808869][ T8859] EXT4-fs (loop4): Free/Dirty block details
[  130.814918][ T8859] EXT4-fs (loop4): free_blocks=2415919104
[  130.820714][ T8859] EXT4-fs (loop4): dirty_blocks=8208
[  130.826049][ T8859] EXT4-fs (loop4): Block reservation details
[  130.828815][ T8875] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.1863: corrupted inode contents
[  130.832128][ T8859] EXT4-fs (loop4): i_reserved_data_blocks=513
[  130.861979][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  130.876876][ T8878] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  130.890583][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  130.951221][ T3844] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  130.971266][ T8878] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  130.984455][ T8878] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  131.092025][ T8878] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  131.202114][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.215630][ T8884] loop4: detected capacity change from 0 to 2048
[  131.232915][ T8884] EXT4-fs: Ignoring removed bh option
[  131.238328][ T8884] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.289986][ T8888] loop3: detected capacity change from 0 to 2048
[  131.300420][ T8888] EXT4-fs: Ignoring removed bh option
[  131.305944][ T8888] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.312798][ T8884] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  131.341365][ T8888] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  131.356708][ T8893] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  131.368167][ T8896] /dev/sg0: Can't lookup blockdev
[  131.385706][ T8898] loop0: detected capacity change from 0 to 512
[  131.403697][ T8898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.417034][ T8898] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.436178][ T8898] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  131.458258][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.589946][ T8930] __nla_validate_parse: 15 callbacks suppressed
[  131.589964][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1884'.
[  131.665416][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1886'.
[  131.678729][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1886'.
[  131.715380][   T29] kauditd_printk_skb: 191 callbacks suppressed
[  131.715418][   T29] audit: type=1326 audit(1758460898.755:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  131.723597][ T8937] loop0: detected capacity change from 0 to 512
[  131.782288][   T29] audit: type=1326 audit(1758460898.785:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  131.783339][ T8941] loop3: detected capacity change from 0 to 2048
[  131.805789][   T29] audit: type=1326 audit(1758460898.785:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  131.835700][   T29] audit: type=1326 audit(1758460898.785:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  131.836114][ T8941] EXT4-fs: Ignoring removed bh option
[  131.859150][   T29] audit: type=1326 audit(1758460898.785:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.3.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  131.888114][ T8941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.897103][ T8937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.909723][ T8937] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  131.924060][ T8937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1887: corrupted inode contents
[  131.937082][ T8937] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.1887: mark_inode_dirty error
[  131.940009][ T8941] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  131.948950][ T8937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.1887: corrupted inode contents
[  131.974740][ T8937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  131.987029][ T8937] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  131.998128][ T8937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  132.010111][ T8937] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  132.022132][ T8937] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  132.033786][ T8937] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  132.081447][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.083517][   T29] audit: type=1326 audit(1758460899.125:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  132.114890][   T29] audit: type=1326 audit(1758460899.145:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  132.138314][   T29] audit: type=1326 audit(1758460899.145:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  132.161724][   T29] audit: type=1326 audit(1758460899.145:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  132.185243][   T29] audit: type=1326 audit(1758460899.145:6354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8963 comm="syz.2.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed8aaeec29 code=0x7ffc0000
[  132.240645][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'.
[  132.277563][ T8977] loop2: detected capacity change from 0 to 512
[  132.351763][ T8977] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  132.359895][ T8977] EXT4-fs (loop2): orphan cleanup on readonly fs
[  132.367823][ T8977] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1895: corrupted inode contents
[  132.388940][ T8977] EXT4-fs (loop2): Remounting filesystem read-only
[  132.396714][ T8977] EXT4-fs (loop2): 1 truncate cleaned up
[  132.402777][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  132.413531][   T31] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  132.424512][   T31] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  132.436278][ T8977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  132.461444][ T8997] loop4: detected capacity change from 0 to 512
[  132.470418][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1902'.
[  132.496755][ T9000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1904'.
[  132.515343][ T8997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.544066][ T8997] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.627367][ T8997] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1905: corrupted inode contents
[  132.693838][ T9007] loop3: detected capacity change from 0 to 2048
[  132.720233][ T9007] EXT4-fs: Ignoring removed bh option
[  132.725765][ T9007] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.736020][ T8997] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1905: mark_inode_dirty error
[  132.769217][ T8997] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1905: corrupted inode contents
[  132.812082][ T9007] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  132.878187][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.930883][ T9024] loop0: detected capacity change from 0 to 2048
[  132.942778][ T9024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  133.075288][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1916'.
[  133.183304][ T9024] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  133.203905][ T9024] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  133.216496][ T9024] EXT4-fs (loop0): This should not happen!! Data will be lost
[  133.216496][ T9024] 
[  133.226189][ T9024] EXT4-fs (loop0): Total free blocks count 0
[  133.232492][ T9024] EXT4-fs (loop0): Free/Dirty block details
[  133.238429][ T9024] EXT4-fs (loop0): free_blocks=2415919104
[  133.244285][ T9024] EXT4-fs (loop0): dirty_blocks=8208
[  133.249598][ T9024] EXT4-fs (loop0): Block reservation details
[  133.255725][ T9024] EXT4-fs (loop0): i_reserved_data_blocks=513
[  133.277079][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.320833][   T41] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  133.467742][ T9064] loop0: detected capacity change from 0 to 512
[  133.502203][ T9066] SELinux: failed to load policy
[  133.521564][ T9066] lo speed is unknown, defaulting to 1000
[  133.559171][ T9064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  133.602409][ T9064] EXT4-fs (loop0): 1 truncate cleaned up
[  133.609617][ T9064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.737657][ T9074] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.866524][ T9081] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.889013][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1936'.
[  133.930453][ T9082] lo speed is unknown, defaulting to 1000
[  134.066375][ T9081] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.102123][ T9080] loop2: detected capacity change from 0 to 2048
[  134.113704][ T9081] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.193869][ T9081] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.278456][  T350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.293474][  T350] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.326491][ T9080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  134.357043][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.381099][  T350] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.389375][  T350] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.539041][ T9111] loop3: detected capacity change from 0 to 256
[  134.549952][ T9111] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  134.615351][ T9109] loop0: detected capacity change from 0 to 8192
[  134.627543][ T9109] cgroup: Invalid name
[  134.650092][ T9080] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  134.650169][ T9080] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  134.650203][ T9080] EXT4-fs (loop2): This should not happen!! Data will be lost
[  134.650203][ T9080] 
[  134.687142][ T9080] EXT4-fs (loop2): Total free blocks count 0
[  134.693194][ T9080] EXT4-fs (loop2): Free/Dirty block details
[  134.699190][ T9080] EXT4-fs (loop2): free_blocks=2415919104
[  134.705832][ T9080] EXT4-fs (loop2): dirty_blocks=8208
[  134.705849][ T9080] EXT4-fs (loop2): Block reservation details
[  134.705861][ T9080] EXT4-fs (loop2): i_reserved_data_blocks=513
[  134.746605][  T350] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  134.914082][ T9123] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  135.080476][ T9137] loop2: detected capacity change from 0 to 2048
[  135.087452][ T9137] EXT4-fs: Ignoring removed bh option
[  135.092913][ T9137] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.102381][ T9137] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  135.155253][ T9144] loop3: detected capacity change from 0 to 2048
[  135.173699][ T9144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  135.481758][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1968'.
[  135.544064][ T9171] loop4: detected capacity change from 0 to 1024
[  135.555662][ T9173] loop0: detected capacity change from 0 to 2048
[  135.562972][ T9173] EXT4-fs: Ignoring removed bh option
[  135.568450][ T9173] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.581818][ T9173] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  135.593344][ T9171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.626895][ T9171] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.1972: reserved inode found cleared - inode=18
[  135.639756][ T9144] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  135.655372][ T9144] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  135.667873][ T9144] EXT4-fs (loop3): This should not happen!! Data will be lost
[  135.667873][ T9144] 
[  135.677536][ T9144] EXT4-fs (loop3): Total free blocks count 0
[  135.683536][ T9144] EXT4-fs (loop3): Free/Dirty block details
[  135.689485][ T9144] EXT4-fs (loop3): free_blocks=2415919104
[  135.695281][ T9144] EXT4-fs (loop3): dirty_blocks=8208
[  135.700568][ T9144] EXT4-fs (loop3): Block reservation details
[  135.706552][ T9144] EXT4-fs (loop3): i_reserved_data_blocks=513
[  135.713202][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.754629][   T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  135.915148][ T9216] loop3: detected capacity change from 0 to 2048
[  135.915453][ T9216] EXT4-fs: Ignoring removed bh option
[  135.927098][ T9216] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.962094][ T9216] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  136.007999][ T9225] lo speed is unknown, defaulting to 1000
[  136.027609][ T9219] loop4: detected capacity change from 0 to 1024
[  136.028239][ T9219] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  136.045002][ T9219] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  136.045286][ T9228] loop0: detected capacity change from 0 to 2048
[  136.046524][ T9219] JBD2: no valid journal superblock found
[  136.046537][ T9219] EXT4-fs (loop4): Could not load journal inode
[  136.057233][ T9219] SELinux: security_context_str_to_sid (�-�Xܘ7.H\��%�u@
) failed with errno=-22
[  136.087156][ T9228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  136.122700][   T31] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  136.122803][   T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 644 with error 28
[  136.122860][   T31] EXT4-fs (loop0): This should not happen!! Data will be lost
[  136.122860][   T31] 
[  136.122874][   T31] EXT4-fs (loop0): Total free blocks count 0
[  136.122887][   T31] EXT4-fs (loop0): Free/Dirty block details
[  136.122899][   T31] EXT4-fs (loop0): free_blocks=2415919104
[  136.122913][   T31] EXT4-fs (loop0): dirty_blocks=672
[  136.122926][   T31] EXT4-fs (loop0): Block reservation details
[  136.122937][   T31] EXT4-fs (loop0): i_reserved_data_blocks=42
[  136.291617][ T9235] loop2: detected capacity change from 0 to 2048
[  136.291927][ T9235] EXT4-fs: Ignoring removed bh option
[  136.291980][ T9235] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.338162][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1989'.
[  136.375047][ T9228] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 644 with max blocks 2048 with error 28
[  136.452760][ T9235] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  136.526982][ T9253] loop3: detected capacity change from 0 to 1024
[  136.537025][ T9253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.694834][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2000'.
[  136.793359][ T9271] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  137.008823][ T9274] loop2: detected capacity change from 0 to 2048
[  137.048347][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2003'.
[  137.109713][ T9268] loop0: detected capacity change from 0 to 8192
[  137.118711][ T9274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  137.136989][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2003'.
[  137.166538][ T9268] cgroup: Invalid name
[  137.170681][   T29] kauditd_printk_skb: 258 callbacks suppressed
[  137.170733][   T29] audit: type=1400 audit(1758460904.205:6607): avc:  denied  { watch watch_reads } for  pid=9279 comm="syz.4.2004" path="/386" dev="tmpfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  137.428037][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.522338][ T9301] loop3: detected capacity change from 0 to 512
[  137.534522][ T9301] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  137.559445][ T9301] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  137.574622][ T9301] EXT4-fs (loop3): 1 truncate cleaned up
[  137.588020][ T9301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.623995][ T9274] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  137.642070][ T9305] loop4: detected capacity change from 0 to 512
[  137.653612][ T9274] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  137.666198][ T9274] EXT4-fs (loop2): This should not happen!! Data will be lost
[  137.666198][ T9274] 
[  137.667650][ T9308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2014'.
[  137.675874][ T9274] EXT4-fs (loop2): Total free blocks count 0
[  137.690809][ T9274] EXT4-fs (loop2): Free/Dirty block details
[  137.696744][ T9274] EXT4-fs (loop2): free_blocks=2415919104
[  137.702528][ T9274] EXT4-fs (loop2): dirty_blocks=8208
[  137.707829][ T9274] EXT4-fs (loop2): Block reservation details
[  137.713908][ T9274] EXT4-fs (loop2): i_reserved_data_blocks=513
[  137.721927][   T29] audit: type=1400 audit(1758460904.765:6608): avc:  denied  { map_create } for  pid=9300 comm="syz.3.2011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  137.743812][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  137.778193][   T29] audit: type=1400 audit(1758460904.785:6609): avc:  denied  { read write } for  pid=3307 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  137.778267][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  137.802429][   T29] audit: type=1400 audit(1758460904.785:6610): avc:  denied  { open } for  pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  137.802463][   T29] audit: type=1400 audit(1758460904.785:6611): avc:  denied  { ioctl } for  pid=3307 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  137.802571][   T29] audit: type=1400 audit(1758460904.785:6612): avc:  denied  { perfmon } for  pid=9314 comm="syz.0.2016" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  137.802632][   T29] audit: type=1400 audit(1758460904.785:6613): avc:  denied  { map_read map_write } for  pid=9314 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  137.813253][ T9305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.835666][   T29] audit: type=1400 audit(1758460904.785:6614): avc:  denied  { prog_load } for  pid=9314 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  137.933435][   T29] audit: type=1400 audit(1758460904.785:6615): avc:  denied  { bpf } for  pid=9314 comm="syz.0.2016" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  137.953963][   T29] audit: type=1400 audit(1758460904.785:6616): avc:  denied  { mounton } for  pid=9314 comm="syz.0.2016" path="/388/file0" dev="tmpfs" ino=2126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  137.977113][ T9305] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.984778][   T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  138.001976][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  138.011486][ T9305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2012: corrupted inode contents
[  138.024132][ T9305] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2012: mark_inode_dirty error
[  138.024368][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'.
[  138.057646][ T9305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2012: corrupted inode contents
[  138.078486][ T9305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  138.114317][ T9305] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  138.128801][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.157349][ T9305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  138.170504][ T9305] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  138.188127][ T9305] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  138.204347][ T9337] loop2: detected capacity change from 0 to 1024
[  138.220296][ T9305] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  138.235421][ T9337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.244572][ T9339] loop3: detected capacity change from 0 to 8192
[  138.252327][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'.
[  138.260744][ T9339] cgroup: Invalid name
[  138.264189][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'.
[  138.300759][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.395145][ T9351] loop4: detected capacity change from 0 to 512
[  138.415097][ T9351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.445610][ T9351] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.495355][ T9351] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2026: corrupted inode contents
[  138.592318][ T9351] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2026: mark_inode_dirty error
[  138.605137][ T9351] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2026: corrupted inode contents
[  138.712706][ T9351] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2026: corrupted inode contents
[  138.828509][ T9351] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2026: mark_inode_dirty error
[  138.865263][ T9351] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2026: corrupted inode contents
[  138.884257][ T9351] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2026: mark_inode_dirty error
[  138.901882][ T9351] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2026: corrupted inode contents
[  138.902479][ T9365] loop0: detected capacity change from 0 to 512
[  138.920954][ T9365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.933482][ T9351] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2026: mark_inode_dirty error
[  138.945991][ T9365] EXT4-fs (loop0): 1 truncate cleaned up
[  138.953276][ T9365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.086735][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.101685][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.215343][ T9376] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.253543][ T9380] lo speed is unknown, defaulting to 1000
[  139.464642][ T9376] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.522708][ T9376] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.546781][ T9373] lo speed is unknown, defaulting to 1000
[  139.571744][ T9390] loop4: detected capacity change from 0 to 2048
[  139.578437][ T9390] EXT4-fs: Ignoring removed bh option
[  139.583970][ T9390] EXT4-fs: Ignoring removed nomblk_io_submit option
[  139.592348][ T9376] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.612221][ T9390] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  139.630150][ T9386] IPv6: Can't replace route, no match found
[  139.644409][ T9386] loop2: detected capacity change from 0 to 128
[  139.652983][  T350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.664183][  T350] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.714594][  T350] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.783977][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.794650][  T350] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.990559][ T9408] lo speed is unknown, defaulting to 1000
[  140.371932][ T9421] loop2: detected capacity change from 0 to 128
[  140.405548][ T9423] loop0: detected capacity change from 0 to 512
[  140.427938][ T9423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  140.492803][ T9423] EXT4-fs (loop0): 1 truncate cleaned up
[  140.498984][ T9423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.856891][ T9446] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.901227][ T9447] lo speed is unknown, defaulting to 1000
[  141.203229][ T9446] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.274162][ T9443] loop4: detected capacity change from 0 to 2048
[  141.302362][ T9443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  141.364491][ T9446] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.412499][ T9446] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.557306][ T9459] lo speed is unknown, defaulting to 1000
[  141.600103][ T9443] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  141.641595][ T9443] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  141.654235][ T9443] EXT4-fs (loop4): This should not happen!! Data will be lost
[  141.654235][ T9443] 
[  141.663937][ T9443] EXT4-fs (loop4): Total free blocks count 0
[  141.669944][ T9443] EXT4-fs (loop4): Free/Dirty block details
[  141.675862][ T9443] EXT4-fs (loop4): free_blocks=2415919104
[  141.681609][ T9443] EXT4-fs (loop4): dirty_blocks=5808
[  141.686902][ T9443] EXT4-fs (loop4): Block reservation details
[  141.693039][ T9443] EXT4-fs (loop4): i_reserved_data_blocks=363
[  141.728030][ T9467] loop3: detected capacity change from 0 to 1024
[  141.765529][   T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  141.765682][ T9467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.790969][ T9457] loop2: detected capacity change from 0 to 1024
[  141.882139][ T9467] EXT4-fs error (device loop3): __ext4_new_inode:1073: comm syz.3.2067: reserved inode found cleared - inode=18
[  141.939055][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.950647][ T9457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.982943][ T9457] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.2062: reserved inode found cleared - inode=18
[  142.084867][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.181099][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  142.181118][   T29] audit: type=1400 audit(1758460909.215:6745): avc:  denied  { read } for  pid=9507 comm="syz.4.2080" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  142.208639][   T29] audit: type=1400 audit(1758460909.215:6746): avc:  denied  { open } for  pid=9507 comm="syz.4.2080" path="net:[4026532491]" dev="nsfs" ino=4026532491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  142.301116][   T29] audit: type=1326 audit(1758460909.335:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.324579][   T29] audit: type=1326 audit(1758460909.335:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.347988][   T29] audit: type=1326 audit(1758460909.335:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.371434][   T29] audit: type=1326 audit(1758460909.335:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.394880][   T29] audit: type=1326 audit(1758460909.335:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.418435][   T29] audit: type=1326 audit(1758460909.335:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.441913][   T29] audit: type=1326 audit(1758460909.335:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.465376][   T29] audit: type=1326 audit(1758460909.335:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca7183ec29 code=0x7ffc0000
[  142.522337][ T9526] veth0: entered promiscuous mode
[  142.549536][ T9524] __nla_validate_parse: 5 callbacks suppressed
[  142.549551][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2088'.
[  142.718371][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2098'.
[  142.727914][ T9548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2098'.
[  142.752941][ T9554] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  142.807250][ T9562] /dev/sg0: Can't lookup blockdev
[  142.902127][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'.
[  142.911644][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'.
[  142.949136][ T9581] loop4: detected capacity change from 0 to 512
[  142.962674][ T9581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.975368][ T9581] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  142.986824][ T9581] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2114: corrupted inode contents
[  142.998817][ T9581] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2114: mark_inode_dirty error
[  143.010532][ T9581] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2114: corrupted inode contents
[  143.030267][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.057241][ T9585] loop4: detected capacity change from 0 to 512
[  143.072663][ T9585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.085534][ T9585] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  143.098262][ T9585] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2115: corrupted inode contents
[  143.111552][ T9585] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.2115: mark_inode_dirty error
[  143.123835][ T9585] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.2115: corrupted inode contents
[  143.137746][ T9585] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  143.149429][ T9585] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  143.160366][ T9585] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  143.172051][ T9585] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  143.183140][ T9585] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  143.194807][ T9585] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  143.216977][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.245024][ T9593] /dev/sg0: Can't lookup blockdev
[  143.311384][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2124'.
[  143.320383][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2124'.
[  143.320774][ T9604] loop2: detected capacity change from 0 to 2048
[  143.336937][ T9604] EXT4-fs: Ignoring removed bh option
[  143.342383][ T9604] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.352103][ T9604] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  143.361406][ T9608] loop4: detected capacity change from 0 to 512
[  143.373666][ T9608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.386238][ T9608] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.401043][ T9608] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  143.420256][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.457387][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[  143.468070][ T9620] loop4: detected capacity change from 0 to 2048
[  143.468149][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[  143.474971][ T9620] EXT4-fs: Ignoring removed bh option
[  143.484336][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[  143.488787][ T9620] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.521778][ T9620] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  143.542338][ T9626] loop2: detected capacity change from 0 to 512
[  143.552087][ T9626] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  143.560237][ T9626] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  143.569054][ T9626] EXT4-fs (loop2): 1 truncate cleaned up
[  143.613911][   T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.630686][   T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.642686][   T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.651216][   T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.682974][ T9642] loop0: detected capacity change from 0 to 1024
[  143.689718][ T9641] /dev/sg0: Can't lookup blockdev
[  143.867112][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.874578][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.885164][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.892329][ T9660] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.899628][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.906785][ T9660] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.920065][ T9660] team0: Port device bridge0 added
[  144.372427][ T9660] 9pnet: Could not find request transport: 0xffffffffffffffff
[  144.405797][ T9673] loop4: detected capacity change from 0 to 128
[  144.415620][ T9675] loop2: detected capacity change from 0 to 512
[  144.425012][ T9675] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  144.445480][ T9675] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  144.469674][ T9678] /dev/sg0: Can't lookup blockdev
[  144.479695][ T9680] netlink: 'syz.4.2149': attribute type 10 has an invalid length.
[  144.489673][ T9650] loop3: detected capacity change from 0 to 512
[  144.490855][ T9680] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  144.507636][ T9680] team0: Failed to send options change via netlink (err -105)
[  144.515167][ T9680] team0: Port device dummy0 added
[  144.556970][ T9650] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  144.563910][ T9675] EXT4-fs (loop2): 1 truncate cleaned up
[  144.565074][ T9650] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  144.580624][ T9650] EXT4-fs (loop3): 1 truncate cleaned up
[  144.732082][ T9716] loop3: detected capacity change from 0 to 1024
[  145.121833][ T9750] lo speed is unknown, defaulting to 1000
[  146.068379][ T9771] loop4: detected capacity change from 0 to 2048
[  146.081986][ T9775] loop3: detected capacity change from 0 to 512
[  146.099355][ T9771] EXT4-fs: Ignoring removed bh option
[  146.105015][ T9771] EXT4-fs: Ignoring removed nomblk_io_submit option
[  146.115627][ T9781] loop2: detected capacity change from 0 to 512
[  146.142773][ T9775] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.154765][ T9771] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  146.167089][ T9781] ext4 filesystem being mounted at /425/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  146.191310][ T9775] netlink: 'syz.3.2191': attribute type 10 has an invalid length.
[  146.213084][ T9781] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2195: corrupted inode contents
[  146.235986][ T9781] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2195: mark_inode_dirty error
[  146.248175][ T9781] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2195: corrupted inode contents
[  146.271767][ T9793] netlink: 'syz.1.2197': attribute type 10 has an invalid length.
[  146.283699][ T9793] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  146.306740][ T9769] loop0: detected capacity change from 0 to 512
[  146.320011][ T9798] loop3: detected capacity change from 0 to 512
[  146.327541][ T9769] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  146.335717][ T9769] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  146.342958][ T9798] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.368373][ T9769] EXT4-fs (loop0): 1 truncate cleaned up
[  146.378290][ T9798] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  146.380831][ T9808] loop2: detected capacity change from 0 to 1024
[  146.521112][ T9825] loop3: detected capacity change from 0 to 512
[  146.527973][ T9825] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  146.540190][ T9825] EXT4-fs (loop3): 1 truncate cleaned up
[  146.542232][ T9827] loop0: detected capacity change from 0 to 512
[  146.719437][ T9832] syz.2.2202 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  146.865841][ T9838] lo speed is unknown, defaulting to 1000
[  147.519430][ T9827] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.532851][   T29] kauditd_printk_skb: 210 callbacks suppressed
[  147.532868][   T29] audit: type=1326 audit(1758460913.855:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.543949][ T9827] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2210: corrupted inode contents
[  147.668705][ T9841] __nla_validate_parse: 17 callbacks suppressed
[  147.668724][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'.
[  147.686804][   T29] audit: type=1326 audit(1758460914.725:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.710381][   T29] audit: type=1326 audit(1758460914.725:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.733822][   T29] audit: type=1326 audit(1758460914.725:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.757230][   T29] audit: type=1326 audit(1758460914.725:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.780745][   T29] audit: type=1326 audit(1758460914.725:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.804158][   T29] audit: type=1326 audit(1758460914.725:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.805881][ T9827] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.2210: mark_inode_dirty error
[  147.827612][   T29] audit: type=1326 audit(1758460914.725:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.840118][ T9827] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2210: corrupted inode contents
[  147.862349][   T29] audit: type=1326 audit(1758460914.725:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.897474][   T29] audit: type=1326 audit(1758460914.725:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9834 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff609edec29 code=0x7ffc0000
[  147.930976][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'.
[  147.976274][ T9845] loop3: detected capacity change from 0 to 2048
[  147.983392][ T9845] EXT4-fs: Ignoring removed bh option
[  147.988843][ T9845] EXT4-fs: Ignoring removed nomblk_io_submit option
[  148.013935][ T9856] atomic_op ffff8881024d2528 conn xmit_atomic 0000000000000000
[  148.024797][ T9845] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  148.042145][ T9849] loop2: detected capacity change from 0 to 512
[  148.052011][ T9856] hub 9-0:1.0: USB hub found
[  148.056713][ T9856] hub 9-0:1.0: 8 ports detected
[  148.064333][ T9849] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.086373][ T9849] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  148.148064][ T9872] loop0: detected capacity change from 0 to 1024
[  148.174030][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2228'.
[  148.183383][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2228'.
[  148.273660][ T9889] loop4: detected capacity change from 0 to 512
[  148.291640][ T9889] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  148.299886][ T9889] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  148.309541][ T9895] loop3: detected capacity change from 0 to 2048
[  148.314422][ T9889] EXT4-fs (loop4): 1 truncate cleaned up
[  148.327432][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  148.338400][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  148.348253][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  148.357582][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2232'.
[  148.433480][ T9898] loop2: detected capacity change from 0 to 512
[  148.522751][ T9898] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.562418][ T9892] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  148.836767][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.844020][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.852880][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.860054][ T9906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.867578][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.874822][ T9906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.885410][ T9906] team0: Port device bridge0 added
[  148.895490][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'.
[  148.904599][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2239'.
[  148.962089][ T9927] loop2: detected capacity change from 0 to 512
[  148.965089][ T9928] loop4: detected capacity change from 0 to 512
[  148.998174][ T9927] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  149.007194][ T9927] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  149.015812][ T9927] EXT4-fs (loop2): 1 truncate cleaned up
[  149.025207][ T9928] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.041223][ T9928] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  149.093803][ T9946] loop4: detected capacity change from 0 to 512
[  149.111072][ T9946] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  149.113875][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.126286][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.145776][ T9949] loop0: detected capacity change from 0 to 4096
[  149.147297][ T9946] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  149.162290][ T9949] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  149.173564][ T9946] EXT4-fs (loop4): 1 truncate cleaned up
[  149.260034][ T9972] loop2: detected capacity change from 0 to 512
[  149.276529][ T9972] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.295292][ T9978] loop4: detected capacity change from 0 to 512
[  149.303338][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2262: corrupted inode contents
[  149.317711][ T9972] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.2262: mark_inode_dirty error
[  149.330898][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.2262: corrupted inode contents
[  149.339506][ T9978] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.351276][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  149.358029][ T9978] SELinux: security_context_str_to_sid (s) failed with errno=-22
[  149.365217][ T9972] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  149.383076][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  149.395621][ T9972] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error
[  149.406871][ T9972] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents
[  149.418380][ T9972] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error
[  149.487005][ T9995] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  149.561533][T10007] loop2: detected capacity change from 0 to 2048
[  149.568187][T10007] EXT4-fs: Ignoring removed bh option
[  149.573850][T10007] EXT4-fs: Ignoring removed nomblk_io_submit option
[  149.591220][T10007] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  149.629531][T10022] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  149.653705][T10024] loop4: detected capacity change from 0 to 128
[  149.724378][T10037] netlink: 'syz.4.2284': attribute type 10 has an invalid length.
[  149.734651][T10037] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  149.805956][T10047] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  149.906351][T10059] loop2: detected capacity change from 0 to 164
[  149.915209][T10059] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  150.039302][T10077] loop2: detected capacity change from 0 to 164
[  150.060811][T10077] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  150.066262][T10085] loop3: detected capacity change from 0 to 2048
[  150.084635][T10085] EXT4-fs: Ignoring removed bh option
[  150.090072][T10085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.104283][T10085] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  150.185187][T10104] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.192485][T10104] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.200058][T10109] loop2: detected capacity change from 0 to 2048
[  150.207212][T10109] EXT4-fs: Ignoring removed bh option
[  150.212729][T10109] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.222082][T10109] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  150.276243][T10116] loop3: detected capacity change from 0 to 1024
[  150.284112][T10116] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  150.318474][T10116] loop3: detected capacity change from 0 to 1024
[  150.326260][T10116] EXT4-fs: Ignoring removed orlov option
[  150.407326][T10138] team0: Port device bridge0 removed
[  150.483969][T10116] ==================================================================
[  150.492090][T10116] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode
[  150.501314][T10116] 
[  150.503654][T10116] write to 0xffff888119ca68b8 of 4 bytes by task 10141 on cpu 1:
[  150.511391][T10116]  writeback_single_inode+0x14a/0x3e0
[  150.516805][T10116]  sync_inode_metadata+0x5b/0x90
[  150.521771][T10116]  generic_buffers_fsync_noflush+0xd9/0x120
[  150.527714][T10116]  ext4_sync_file+0x1ab/0x690
[  150.532384][T10116]  vfs_fsync_range+0x10a/0x130
[  150.537150][T10116]  ext4_buffered_write_iter+0x34f/0x3c0
[  150.542732][T10116]  ext4_file_write_iter+0x383/0xf00
[  150.548013][T10116]  iter_file_splice_write+0x666/0xa60
[  150.553393][T10116]  direct_splice_actor+0x156/0x2a0
[  150.558502][T10116]  splice_direct_to_actor+0x312/0x680
[  150.563861][T10116]  do_splice_direct+0xda/0x150
[  150.568617][T10116]  do_sendfile+0x380/0x650
[  150.573068][T10116]  __x64_sys_sendfile64+0x105/0x150
[  150.578265][T10116]  x64_sys_call+0x2bb0/0x2ff0
[  150.582932][T10116]  do_syscall_64+0xd2/0x200
[  150.587441][T10116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.593327][T10116] 
[  150.595659][T10116] read to 0xffff888119ca68b8 of 4 bytes by task 10116 on cpu 0:
[  150.603279][T10116]  generic_buffers_fsync_noflush+0x80/0x120
[  150.609164][T10116]  ext4_sync_file+0x1ab/0x690
[  150.613828][T10116]  vfs_fsync_range+0x10a/0x130
[  150.618583][T10116]  ext4_buffered_write_iter+0x34f/0x3c0
[  150.624134][T10116]  ext4_file_write_iter+0x383/0xf00
[  150.629337][T10116]  iter_file_splice_write+0x666/0xa60
[  150.634699][T10116]  direct_splice_actor+0x156/0x2a0
[  150.639808][T10116]  splice_direct_to_actor+0x312/0x680
[  150.645168][T10116]  do_splice_direct+0xda/0x150
[  150.649921][T10116]  do_sendfile+0x380/0x650
[  150.654329][T10116]  __x64_sys_sendfile64+0x105/0x150
[  150.659521][T10116]  x64_sys_call+0x2bb0/0x2ff0
[  150.664191][T10116]  do_syscall_64+0xd2/0x200
[  150.668698][T10116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.674603][T10116] 
[  150.676913][T10116] value changed: 0x00000038 -> 0x00000002
[  150.682615][T10116] 
[  150.684925][T10116] Reported by Kernel Concurrency Sanitizer on:
[  150.691063][T10116] CPU: 0 UID: 0 PID: 10116 Comm: syz.3.2323 Not tainted syzkaller #0 PREEMPT(voluntary) 
[  150.700857][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  150.710899][T10116] ==================================================================