last executing test programs:

3.7687161s ago: executing program 3 (id=3832):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x74, 0x0, 0x0, 0x10, &(0x7f0000000700), 0x0, 0x0, 0x57, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000900)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0)
pipe2$9p(&(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@noxattr}]}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18)
r9 = socket$tipc(0x1e, 0x5, 0x0)
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10)
sendmsg$tipc(r9, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)

3.477516714s ago: executing program 3 (id=3834):
syz_io_uring_setup(0x7ab6, &(0x7f0000000380)={0x0, 0xe703, 0x1008, 0x3, 0x278}, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18)
syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
creat(&(0x7f0000000380)='./file0\x00', 0x89)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x0)

3.314841817s ago: executing program 3 (id=3836):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x405}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kmem_cache_free\x00', r3}, 0x18)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)

3.273518758s ago: executing program 0 (id=3837):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
lsm_get_self_attr(0x65, &(0x7f00000007c0)={0x0, 0x0, 0x67, 0x47, ""/71}, &(0x7f0000000140)=0x67, 0x0)

3.081630811s ago: executing program 0 (id=3841):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x170}}, 0x24008000)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)

3.039413721s ago: executing program 4 (id=3844):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061146c000000000007af0c0000c18e000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f00000004c0)=""/209}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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")
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0)
unlink(0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = getpgid(0x0)
sched_rr_get_interval(r1, 0x0)

2.958505672s ago: executing program 0 (id=3845):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

2.794628135s ago: executing program 4 (id=3847):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r1 = dup(r0)
write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
creat(&(0x7f0000000380)='./file0\x00', 0xfffe)

2.690669837s ago: executing program 4 (id=3849):
r0 = getpgrp(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x9, 0x8, 0x80000001, 0x0, 0x3, 0x9, 0xfffffffffffffecb}}, {0x6, 0x2, [0x6]}}]}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xf, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r5}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000000))
ptrace$cont(0x9, r6, 0x33e, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13)
r8 = timerfd_create(0x0, 0x0)
timerfd_settime(r8, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20)
symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00')
r9 = syz_pidfd_open(r0, 0x0)
pidfd_getfd(r9, r9, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

2.625386738s ago: executing program 4 (id=3852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
personality(0x410000e)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'wg1\x00', 0x400})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080))
write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0xfdef)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'geneve1\x00', 0x600})
r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0xa000200)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1020, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)="e0c2bd3fc52e6e342bc37c2b8fb93136aeae22dc0fcfa4b99967922b812f5765565248ebf948b1ebc29a55a31f86169b2263c6a928d1bf5df26eeb2d39ca13e49a14544f347020916cde6fb8cd09b41ad9da36cba1e110e28f4603e34454f52e604ee3c1fe11f0d399af657a92822e92a971f9aca8c9ff3eece327ed4db03a69bafa62d489365eb26a8434c1c8d79174cbf5a78448f13da9adcd9446562fc1e25a7325a0d9", 0xa5}, {&(0x7f00000003c0)="b8974fdbaa4b4a110e19dac21fa68b1b4d93f3b5d59c456646eddb2d63a560a38d225c9dad7422c31e8d5bea6943943f21021fb0719f1d3c04ff15050b529997e06bfa447cb09c1e559b9354bdb07415b8f19030c6b72a89b0ea124f3c0e2089dffcc764734f73dab43c41d5e57ecae22177c51a1ae4b174ab84759d1da65f3c6391e2290a0e872109c43954d42b4f06637f60f353358086fcac01e45dfc92d80d0b438fc5", 0xa5}, {&(0x7f0000000480)="b029a7a28a1e656f3e0e58134d354596eadf1b4266a160c9bb145d26e5179cad953a8961139d74677f143dec59ae1af65bb5ca79d25f5905cd3fe7d3d000c9", 0x3f}, {&(0x7f0000000580)="75b9d25ea8af513cb9d40885b9db732d40cc54484295da80ccc8845b7eea5314ef41247cf3ba7267e3b6d77775168d861fd0cb2d683ec61430dce2bbea60f20fd944d849cdaeec6941e95ab7ed3f66c6bb8b79d8db8d1686491831d2177be32f4e83947e0d58d77440e4a912f1509fca16d4bb42c8428d396a51167c00bc93992365dd90735815f8eb82d771e5a4d59682c072ff35c5e3652bfa6b7da08be2d93e8eba942a70aa9551e89e6315e296be549a26a8", 0xb4}], 0x4, 0x0, 0x0, 0xc1}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x90, 0x40011}}], 0x2, 0x41)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0)
unshare(0x20060400)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000017000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
syz_pidfd_open(r5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

2.534647369s ago: executing program 1 (id=3855):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$eJzs2k9rXFUYB+D3TqpJU9MZ8R8tiAddqJtLM2sXDdKCOKBoR6iCdGpvdcglE2aGwIjYrPRruBaX7gTp0k02fgIX7rLJMgvxyiTTNNYpNgYzoX2ezbxwz++ee84c7ryL2X4riyzGhlHLsqhdjs3YzaIRtbhnM958/fovL394/eN3V1qtKx+kdHXl2nIzpXT+lZ8/+eqHV+8Oz3304/mf5mOr8en2TvP3rRe3Lmz/ee2L7iB1793kZq837Nwsi3SrO1jNU3q/LDqDInXXBkV/mDrp4Prtsre+PpqPiKXF9X4xGKTO2iitFqM07KVhf5Q6n3e6aynP87S0GBxH+/vdqlqIiBtRVdXZ7+Lc3Vj6LeqRPZuy5y5nL9zIXtrMLuxUVX3Wj8r/YreqYqd6yvf/hDr0Ul+IKL/daG+09z/3r6/cTuOfhyIuRT3+iPExmdirz05uk1JKjfimvDPJ39loz03y0Y0yiliOejT+ka+u1ibplNLf8/OxeDjfjHo8PyX/TutKc2p+Id547VA+j3r8+ln0ooxbMc7ez3+9nNLb77UeyF/cGwcA8LjJ04Gp/VueP+z6fv6gv5reH+71V5em9mdn4uKZ2a6diMHoy9VOWRb9RyyePsrgYxXjw3FSc/3nYi6OMHjxWHM9dDequdOyGzMuqhOYK2oRjzQ4Fk7Ltvxr8czkXfDASnkC3D8Gs34SAAAAAAAAAAAAjuIk/mA46zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn218BAAD//6Y9vzY=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x170}}, 0x24008000)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)

2.46754261s ago: executing program 1 (id=3857):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x23, 0x0, 0x0, @local, @mcast2, 0x7, 0x7, 0x202, 0x8}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x23, 0x0, 0x0, @local, @mcast2, 0x7, 0x7, 0x202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="02b1b67f829e8263785f2614b874dc04e984f0d2", @ANYRES64, @ANYRESDEC=r3], 0x48)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0)
r6 = socket(0x1, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r7, 0x0)
getgroups(0x1, &(0x7f00000014c0)=[0xffffffffffffffff]) (async)
getgroups(0x1, &(0x7f00000014c0)=[<r8=>0xffffffffffffffff])
keyctl$chown(0x4, r5, r7, r8)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={0x0, 0xe0, 0x80, 0x44c9c779}, &(0x7f0000000540)=0x10) (async)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000500)={<r9=>0x0, 0xe0, 0x80, 0x44c9c779}, &(0x7f0000000540)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000bc0)={<r10=>0x0, @in={{0x2, 0x4e24, @remote}}, [0x0, 0x9, 0x8, 0x7fffffff, 0x0, 0x9, 0x7, 0x0, 0x15b4, 0x7c, 0x4, 0x4, 0x9, 0x7, 0xe]}, &(0x7f0000000700)=0x100)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3002000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3002000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r13=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000013c0)={r13, @in6={{0xa, 0x4e22, 0x1e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, [0x10, 0x40, 0x6, 0x8000000000000000, 0x2, 0xb6, 0x6, 0x6, 0xc0000000000, 0xd, 0x1, 0x3, 0xfc5, 0x1000001, 0x100000005]}, &(0x7f0000000500)=0x100)
sendmmsg$inet_sctp(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=@in={0x2, 0x4f24, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="1d29d1c4fded514992a8bf9fabe6f0cb92e4cdd346a57b7be6f2bed75f6a141a93b083cdc0df343bf642c010c6e5b4474845e32ec51e7ea0a97ea8bcf9af39b9d9d526885da5eed8ad1cd666234653992373a01c42fabd5c831f42c0121002eb788d3bcfd067eedeb1c316a0c03092b0c69fce8c810e569f6c1360", 0x7b}], 0x1, &(0x7f0000000640)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xb6a}}, @sndinfo={0x20, 0x84, 0x2, {0xa000, 0x200, 0x4, 0xa, r9}}, @init={0x18, 0x84, 0x0, {0x5, 0xb615, 0x6, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x7f, 0x8, 0x80000000, 0x499f6035}}], 0xc0, 0x4000000}, {&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000007c0)="43d62810d6ca5a973b36ba02f219172de5e869ec12299deef0dc12d48a611ca6d39801ee5a08b8e994034dd3175411a2c4c822d491c085532de095f757834573b85994dc948f3850069dae519f15853cc23958", 0x53}, {&(0x7f00000009c0)="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", 0xfa}, {&(0x7f0000000ac0)="629c73c47347485dbe1784c9cd85071c8762e37933a1bf1351961e14036849a80dca527e0a4a46ecfaa127ce799e9c27461e1d170ec60418dc311e05670da91e2ad7abeb1a2e3c98e83ed61058110b38d5b18f6c2deccd98e5e15949e74d7fe36ca678a282fe65a7f8bbc061bd1a623cf9c4b9db32586dfa8dd9b538cc9ec812bc1d2cd2434d6a43e85ca4fd56215b58d98e063a58d5b31b6eb84759c7b748e41f96adf14592cc42b30b65df8063a0acc763bbf40a7f6c574c8750524ebd8954a020a26e8ec5e91dcbfe678989eb46cdcd658e9c088ecb7c8b6acc5486", 0xdd}, {&(0x7f0000000840)="80ceda8eec2b8321077696cd3fff0b5ae697c5e7e3307b3482082503bf543047059a7001b5869a717f81ec16db373078b32cf70a00a9014b50d82eb2afb5eef32eb0ffd1690fb3939eb2b2c4e79b69380215823c130d981a034fb3ca9242c171b907a37044ef5cfc6f5f7791bdc1a185b2b910fcf1b7dd8d37fec313d3916aa7fdcf4486ae98", 0x86}], 0x4, &(0x7f0000000cc0)=[@authinfo={0x18, 0x84, 0x6, {0xc}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x1, 0x6, 0x3, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x3319, 0x8205, 0xf, 0x8, 0xfffffff9, 0x4, 0x1, r10}}, @init={0x18, 0x84, 0x0, {0x902c, 0x55, 0x8, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0xc3e, 0x201, 0x7f, 0x4, r13}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}], 0xf8, 0x4008000}, {&(0x7f0000000dc0)=@in6={0xa, 0x4e22, 0x2, @mcast2, 0x500}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000e00)="5f6d4a40b8c7eaea26300a2ecef6dc35e9df3ca5494c0e4fe443e1a37ff5bdd48e1ca14af3b172219ada3e780f782997c651c0efd027cd8c7b3d86fb50333a7dfab439aba48058ee74c347e13556d5e7af1727adc3d2850cd7a9a07448eb84a5f7148ef67c8ea4c06fb521a8b6f4434549e3aa82e4a4368e163e5ba02bce136d2281c89b5f0f8df0c8525ce68603e7dc4b6ca4e9ef774fe502fe4f0ccae2c6ba9b93e1418ee46607b8eb6f113ca202710bbcd642bd52181b0867301c057934e8c6d6fda4385240d021dd81f7f17aeab0f0ca88ae7da8e91e3e24edfa6b174208a1135aeed6bbab6ce6f18f0bb0c7ce4bfe3fb97c7d1c4b", 0xf7}, {&(0x7f0000000f00)="e71d02347ea9ffe90a943d264e0257cd422326a04d49", 0x16}, {&(0x7f0000000f40)="7f685a39a8d8772fa0af7ea3601486474a01f0b053346c8773b3412bdf039e357dbfa25447e6e71fea70cc8b8156e3861fcd99842d76d0f65e599676841c8ed25072e88cd04947b3d8835985d2c3605df4867d0f8b8a220c424966c44ae34084cf2a5da80b7a8e90700049", 0x6b}, {&(0x7f0000000fc0)="b38a6a6b31f04644f0b39fb0723f9a7d1a3f29aa5bc47fbe897996815d219e2ea16148b455da0e61413334637fedd7197fe2dc6d24c824cc3ebd5d7828d8dc3e354d61278ea6c0d75141b4fbd5febe4040897a692ce4fad3e408d897", 0x5c}, {&(0x7f0000001040)="fc5dd2cab89b4b3d02a94fbcb0f3d8847ef192ef0da454b0138d880e9925526a518caa7f6dfef6e1b3aaa7c853b23c7b3211ebb81f110162a363e2b530040bda1e6509534eaeed96bd6c48c4af9cbb47b3ce0b5d0b103c2efe5d26935847f5ce9db244598be0496a7afd5087ddbfb1174bf1e2b9740810a76efed9b2dcfc8dd5f167ce8a185dd2b201537581cf608f6fb1ff", 0x92}, {&(0x7f0000001100)="94ccf4cf6bc58c37063a5366848b77819c7e42e6b9069fe829e11cea1da25b9138bd6c83caeb03d2eaf0394eb7c5e3a9024a3842066aaeec5644d1b6554e241b39", 0x41}, {&(0x7f0000001180)="02b67b1fe725e4eba8765f6a12e538daede67452bb6d22bfe8b831065d1cbdfe33f26c820f43204008dce88af61cad4c2fca8fdc7e714bffa047c24208804e3c51b6199e76ae73175f3321d373ac0c9b829ec4b09b965d2627cf68d2861afe48e4c6ad41879a035130b5230a60e12340245ad4301bb5fca5a71386fb38cd2cbaaa66b3dbf1a55c5a0ebce218b77d23208e69d65a2792f40d562ec276d61e4980621a52bc5c68b10156861fe0c20b6875b12100532946a575", 0xb8}], 0x7, &(0x7f00000012c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x20}], 0x3, 0xfe5ba32516faf192)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140))
syz_open_dev$usbfs(0x0, 0x1ff, 0x402) (async)
syz_open_dev$usbfs(0x0, 0x1ff, 0x402)

2.321099692s ago: executing program 2 (id=3861):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

2.320695632s ago: executing program 2 (id=3862):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x9}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93b, 0x0, 0x0, 0x0, 0x518eaa54, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4dc, 0x0, 0x0, 0x0, 0xf2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x72, 0xfffffff6, 0xff, 0x0, 0x550, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) (fail_nth: 2)

2.096862436s ago: executing program 0 (id=3863):
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240)=0x2, 0x4)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
unshare(0x8040600)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
epoll_create1(0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000"], 0x10c}}, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9})

2.086029166s ago: executing program 2 (id=3864):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.054114307s ago: executing program 2 (id=3865):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4, 0x0, 0x3, 0x6, 0x0, 0x20, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.435896557s ago: executing program 1 (id=3866):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
unshare(0x2040600)
r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240))
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, &(0x7f0000000200), &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r1, 0x0, 0xe)
fchdir(r5)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10)
unshare(0x2000000)
mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0)

1.411169597s ago: executing program 3 (id=3867):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000030000000600010073797a3100000000f4000000180a0101000000000000000000000002940003805400038014000100687372300000000000000000000000001400010069705f7674693000000000000000000014000100627269646765300000000000100000001400010067656e6576653000000000000000000008000240000000042c0003801400010076657468315f766972745f77696669001400010076657468315f746f5f7465616d00000008000240000007ff08000740000000030900020073797a32000000003800038008000240ffffa64c080001400000000008000240800000000400038008000240000000070800014000000000080002400000000134000000140a030000000000000000000300000008000340000000000900030073797a31000000000900020073797a3000000000140000001100010000000000000000000000000a"], 0x170}}, 0x24008000)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)

1.378482878s ago: executing program 0 (id=3868):
mount$nfs4(&(0x7f0000000200)='\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x801420, &(0x7f0000000f80)=ANY=[@ANYBLOB='ext4\x00,vlan\x00,cpu.stat\x00,,/dev/net/tun\x00,uid<', @ANYRESDEC=0x0, @ANYBLOB="201500000000", @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=+{,seclabel,fsmagic=0xfffffffffffffffb,\x00'])
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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")

1.355070598s ago: executing program 4 (id=3869):
syz_io_uring_setup(0x7ab6, &(0x7f0000000380)={0x0, 0xe703, 0x1008, 0x3, 0x278}, 0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
syz_clone3(0x0, 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
creat(&(0x7f0000000380)='./file0\x00', 0x89)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x20044041}, 0x0)

1.353004758s ago: executing program 1 (id=3870):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
creat(&(0x7f0000000380)='./file0\x00', 0xfffe)

1.323527419s ago: executing program 3 (id=3871):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061146c000000000007af0c0000c18e000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd1, &(0x7f00000004c0)=""/209}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@noauto_da_alloc}, {@quota}, {@stripe}, {@jqfmt_vfsold}]}, 0xfd, 0x4ff, &(0x7f0000000ac0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0)
unlink(0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = getpgid(0x0)
sched_rr_get_interval(r0, 0x0)

1.271213509s ago: executing program 4 (id=3872):
dup(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008800)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000040000000e0000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/28], 0x50)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

1.268842679s ago: executing program 1 (id=3873):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x6)

1.21468107s ago: executing program 0 (id=3874):
dup(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x100)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20008800)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000080))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2040400)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000040000000e0000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/28], 0x50)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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")

1.160118941s ago: executing program 2 (id=3875):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
lsm_get_self_attr(0x65, &(0x7f00000007c0)={0x0, 0x0, 0x67, 0x47, ""/71}, &(0x7f0000000140)=0x67, 0x0)

39.965189ms ago: executing program 2 (id=3876):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[], &(0x7f0000000040)=""/186, 0x3f, 0xba, 0x1}, 0x28)
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bf000000000000006a11b8000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
close(r2)
fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0xa2a00)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r6, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

39.605859ms ago: executing program 1 (id=3877):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18e4ffffffffff100000", @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16=r1, @ANYRESHEX=r0], 0x0, 0x8000000, 0x0, 0x0, 0x40f00}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='f2fs_update_extent_tree_range\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000800), 0x0}, 0x20)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
r6 = syz_clone(0x6200, &(0x7f0000000500)="629be414ca395ef185b3e81a89c033ef6cb805b16b4690501a54e6d401293007b9d33af751419d52b965a49a40a2ae98352f9dca47990be709ee150786d39b3da0f6dbd06cade44a94d5da94904b1c0749ecca89ca140c5c267e9822e707ea0dc66272945640b05297be0a84604caf0703fd3b5803e531542c8c6d303e18f8373b722afbefaf1380208e5753e4fe6f77009406b2ec46341d95c12d7796fe9259618b31c2d9a5f9639af3a49539e7b23a0af684dd8af328cbdb39cc86b4358ebf", 0xc0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="34b80000", @ANYRES16=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20018000}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='tegra_dma_tx_status\x00', r7, 0x0, 0x8000000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)="03", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x20008814)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, r6, 0xb, 0xffffffffffffffff, 0x2)

0s ago: executing program 3 (id=3878):
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240)=0x2, 0x4)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
unshare(0x8040600)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
epoll_create1(0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000"], 0x10c}}, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9})

kernel console output (not intermixed with test programs):

e.
[  227.989316][T24959] loop4: detected capacity change from 0 to 512
[  228.006166][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.028394][T24959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  228.037778][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.057266][T24959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.087809][T24959] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  228.211026][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.229681][T24982] loop0: detected capacity change from 0 to 512
[  228.281605][T24982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  228.319807][T24982] System zones: 1-12
[  228.327923][T24982] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3391: error while reading EA inode 32 err=-116
[  228.353905][T24982] EXT4-fs (loop0): Remounting filesystem read-only
[  228.360764][T24982] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  228.399495][T24982] EXT4-fs (loop0): 1 orphan inode deleted
[  228.412429][T24982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.425947][   T29] kauditd_printk_skb: 994 callbacks suppressed
[  228.425966][   T29] audit: type=1326 audit(1753580581.598:45634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  228.456273][   T29] audit: type=1326 audit(1753580581.598:45635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  228.485317][T25005] tmpfs: Bad value for 'mpol'
[  228.520973][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.568280][   T29] audit: type=1326 audit(1753580581.598:45636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  228.592069][   T29] audit: type=1326 audit(1753580581.598:45637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  228.615806][   T29] audit: type=1326 audit(1753580581.598:45638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  228.639596][   T29] audit: type=1326 audit(1753580581.630:45639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3f7a08c7 code=0x7ffc0000
[  228.663301][   T29] audit: type=1326 audit(1753580581.630:45640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdd3f7a083c code=0x7ffc0000
[  228.686928][   T29] audit: type=1326 audit(1753580581.630:45641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3f7a0774 code=0x7ffc0000
[  228.710625][   T29] audit: type=1326 audit(1753580581.630:45642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3f7a0774 code=0x7ffc0000
[  228.734255][   T29] audit: type=1326 audit(1753580581.630:45643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25003 comm="syz.4.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd3f79d60a code=0x7ffc0000
[  228.765504][T25025] loop0: detected capacity change from 0 to 512
[  228.776167][T25025] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  228.884480][T25025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.925224][T25025] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.048981][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.128213][T25050] 9pnet_fd: Insufficient options for proto=fd
[  229.158095][T25050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3402'.
[  229.178204][T25001] kexec: Could not allocate control_code_buffer
[  229.251084][T25058] loop3: detected capacity change from 0 to 512
[  229.260038][T25058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  229.268269][T25058] System zones: 1-12
[  229.276213][T25058] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3404: error while reading EA inode 32 err=-116
[  229.299191][T25058] EXT4-fs (loop3): Remounting filesystem read-only
[  229.305807][T25058] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  229.336706][T25058] EXT4-fs (loop3): 1 orphan inode deleted
[  229.349049][T25058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.396785][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.407114][T25069] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.427616][T25069] netlink: '+}[@': attribute type 2 has an invalid length.
[  229.535472][T25078] loop3: detected capacity change from 0 to 512
[  229.569652][T25069] bridge0: entered promiscuous mode
[  229.585232][T25078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  229.593406][T25069] macsec1: entered promiscuous mode
[  229.600068][T25078] System zones: 1-12
[  229.607277][T25069] bridge0: port 4(macsec1) entered blocking state
[  229.613834][T25069] bridge0: port 4(macsec1) entered disabled state
[  229.630585][T25078] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3408: error while reading EA inode 32 err=-116
[  229.654266][T25069] macsec1: entered allmulticast mode
[  229.659636][T25069] bridge0: entered allmulticast mode
[  229.665789][T25078] EXT4-fs (loop3): Remounting filesystem read-only
[  229.672598][T25078] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  229.683127][T25069] macsec1: left allmulticast mode
[  229.688282][T25069] bridge0: left allmulticast mode
[  229.706923][T25069] bridge0: left promiscuous mode
[  229.712052][T25078] EXT4-fs (loop3): 1 orphan inode deleted
[  229.730365][T25078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.810033][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.866375][T25102] 9pnet_fd: Insufficient options for proto=fd
[  229.883821][T25102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3412'.
[  229.892706][T25104] netlink: 'syz.3.3411': attribute type 4 has an invalid length.
[  229.990915][T25108] hub 6-0:1.0: USB hub found
[  230.007535][T25108] hub 6-0:1.0: 8 ports detected
[  230.155049][T25124] 9pnet_fd: Insufficient options for proto=fd
[  230.178371][T25124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'.
[  230.206571][T25128] loop0: detected capacity change from 0 to 512
[  230.246170][T25128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  230.296381][T25128] System zones: 1-12
[  230.302436][T25134] loop3: detected capacity change from 0 to 1024
[  230.329499][T25128] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3417: error while reading EA inode 32 err=-116
[  230.355341][T25134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.402781][T25128] EXT4-fs (loop0): Remounting filesystem read-only
[  230.409545][T25128] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  230.475288][T25134] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3418'.
[  230.484513][T25134] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3418'.
[  230.530749][T25128] EXT4-fs (loop0): 1 orphan inode deleted
[  230.545045][T25146] Cannot find add_set index 0 as target
[  230.558870][T25128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.643761][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.671812][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.681920][T25151] netlink: 'syz.1.3422': attribute type 11 has an invalid length.
[  231.419631][T25212] xt_CT: You must specify a L4 protocol and not use inversions on it
[  231.489658][T25212] netlink: '+}[@': attribute type 2 has an invalid length.
[  231.639720][T25215] bridge0: entered promiscuous mode
[  231.647129][T25215] macsec1: entered promiscuous mode
[  231.656936][T25215] bridge0: port 3(macsec1) entered blocking state
[  231.663562][T25215] bridge0: port 3(macsec1) entered disabled state
[  231.687536][T25215] macsec1: entered allmulticast mode
[  231.693030][T25215] bridge0: entered allmulticast mode
[  231.728310][T25215] macsec1: left allmulticast mode
[  231.733474][T25215] bridge0: left allmulticast mode
[  231.763554][T25219] loop3: detected capacity change from 0 to 1024
[  231.771587][T25215] bridge0: left promiscuous mode
[  231.799106][T25219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.827422][T25219] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3434'.
[  231.836784][T25219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3434'.
[  231.940417][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.955242][T25237] loop2: detected capacity change from 0 to 128
[  232.070642][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'.
[  232.086648][T25237] netlink: 'syz.2.3436': attribute type 3 has an invalid length.
[  232.098173][T25244] netlink: 'syz.3.3438': attribute type 4 has an invalid length.
[  232.925911][T25291] FAULT_INJECTION: forcing a failure.
[  232.925911][T25291] name failslab, interval 1, probability 0, space 0, times 0
[  232.938714][T25291] CPU: 1 UID: 0 PID: 25291 Comm: syz.0.3441 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  232.938751][T25291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  232.938768][T25291] Call Trace:
[  232.938777][T25291]  <TASK>
[  232.938787][T25291]  __dump_stack+0x1d/0x30
[  232.938815][T25291]  dump_stack_lvl+0xe8/0x140
[  232.938841][T25291]  dump_stack+0x15/0x1b
[  232.938857][T25291]  should_fail_ex+0x265/0x280
[  232.938957][T25291]  should_failslab+0x8c/0xb0
[  232.938983][T25291]  kmem_cache_alloc_node_noprof+0x57/0x320
[  232.939010][T25291]  ? dup_task_struct+0x70/0x6a0
[  232.939036][T25291]  dup_task_struct+0x70/0x6a0
[  232.939111][T25291]  ? _parse_integer+0x27/0x40
[  232.939145][T25291]  copy_process+0x399/0x1f90
[  232.939177][T25291]  ? kstrtouint+0x76/0xc0
[  232.939288][T25291]  ? kstrtouint_from_user+0x9f/0xf0
[  232.939327][T25291]  ? __rcu_read_unlock+0x4f/0x70
[  232.939366][T25291]  kernel_clone+0x16c/0x5b0
[  232.939393][T25291]  ? vfs_write+0x75e/0x8e0
[  232.939464][T25291]  __x64_sys_clone+0xe6/0x120
[  232.939505][T25291]  x64_sys_call+0x2c59/0x2fb0
[  232.939533][T25291]  do_syscall_64+0xd2/0x200
[  232.939559][T25291]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  232.939646][T25291]  ? clear_bhb_loop+0x40/0x90
[  232.939672][T25291]  ? clear_bhb_loop+0x40/0x90
[  232.939705][T25291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.939732][T25291] RIP: 0033:0x7f335b9ae9a9
[  232.939753][T25291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.939773][T25291] RSP: 002b:00007f3359fd4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  232.939798][T25291] RAX: ffffffffffffffda RBX: 00007f335bbd6160 RCX: 00007f335b9ae9a9
[  232.939814][T25291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000
[  232.939830][T25291] RBP: 00007f3359fd5090 R08: 0000000000000000 R09: 0000000000000000
[  232.939845][T25291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  232.939900][T25291] R13: 0000000000000000 R14: 00007f335bbd6160 R15: 00007ffd91ef8e08
[  232.939950][T25291]  </TASK>
[  233.154008][T25289] loop4: detected capacity change from 0 to 512
[  233.220241][T25289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  233.236445][   T29] kauditd_printk_skb: 837 callbacks suppressed
[  233.236463][   T29] audit: type=1400 audit(1753580586.648:46481): avc:  denied  { create } for  pid=25295 comm="syz.1.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  233.249549][T25289] System zones: 1-12
[  233.271733][   T29] audit: type=1326 audit(1753580586.690:46482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.295486][   T29] audit: type=1326 audit(1753580586.690:46483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.319187][   T29] audit: type=1326 audit(1753580586.690:46484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.342756][   T29] audit: type=1326 audit(1753580586.690:46485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.367009][   T29] audit: type=1326 audit(1753580586.690:46486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.390750][   T29] audit: type=1326 audit(1753580586.690:46487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.414425][   T29] audit: type=1326 audit(1753580586.690:46488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.438111][   T29] audit: type=1326 audit(1753580586.690:46489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.444876][T25289] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.3443: error while reading EA inode 32 err=-116
[  233.461719][   T29] audit: type=1326 audit(1753580586.690:46490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25295 comm="syz.1.3444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  233.511018][T25289] EXT4-fs (loop4): Remounting filesystem read-only
[  233.517695][T25289] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  233.534550][T25289] EXT4-fs (loop4): 1 orphan inode deleted
[  233.540897][T25289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.574630][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.597983][T25307] loop2: detected capacity change from 0 to 512
[  233.624149][T25312] loop0: detected capacity change from 0 to 512
[  233.632915][T25307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  233.663408][T25312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  233.667071][T25307] System zones: 1-12
[  233.679946][T25312] System zones: 1-12
[  233.690095][T25312] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3448: error while reading EA inode 32 err=-116
[  233.709773][T25307] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3446: error while reading EA inode 32 err=-116
[  233.731979][T25312] EXT4-fs (loop0): Remounting filesystem read-only
[  233.738698][T25312] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  233.755292][T25307] EXT4-fs (loop2): Remounting filesystem read-only
[  233.761951][T25307] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  233.773549][T25312] EXT4-fs (loop0): 1 orphan inode deleted
[  233.782123][T25312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.795712][T25307] EXT4-fs (loop2): 1 orphan inode deleted
[  233.802101][T25307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.837217][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.882382][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.896816][T25328] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.911758][T25328] netlink: '+}[@': attribute type 2 has an invalid length.
[  233.933081][T25333] loop2: detected capacity change from 0 to 128
[  233.964814][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3450'.
[  233.982023][T25333] netlink: 'syz.2.3450': attribute type 3 has an invalid length.
[  234.024458][T25328] bridge0: entered promiscuous mode
[  234.034379][T25328] macsec1: entered promiscuous mode
[  234.041312][T25328] bridge0: port 3(macsec1) entered blocking state
[  234.047893][T25328] bridge0: port 3(macsec1) entered disabled state
[  234.056225][T25328] macsec1: entered allmulticast mode
[  234.061572][T25328] bridge0: entered allmulticast mode
[  234.072272][T25328] macsec1: left allmulticast mode
[  234.077490][T25328] bridge0: left allmulticast mode
[  234.085439][T25328] bridge0: left promiscuous mode
[  234.091428][T25347] loop1: detected capacity change from 0 to 512
[  234.121988][T25347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  234.156308][T25347] System zones: 1-12
[  234.188117][T25347] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3452: error while reading EA inode 32 err=-116
[  234.243416][T25347] EXT4-fs (loop1): Remounting filesystem read-only
[  234.250084][T25347] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  234.276858][T25347] EXT4-fs (loop1): 1 orphan inode deleted
[  234.308208][T25347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.321678][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x4
[  234.329424][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x2
[  234.357959][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.365749][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.373513][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.381275][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.389001][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.396806][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.404587][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.412297][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.420019][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.427836][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.435520][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.443205][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.450952][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.458742][ T3537] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0
[  234.496476][T19984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.516850][ T3537] hid-generic 0000:3000000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  234.846906][T25393] tmpfs: Bad value for 'mpol'
[  234.945461][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x4
[  234.953395][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x2
[  234.961253][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  234.968984][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  234.976819][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  234.984594][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  234.992340][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.000088][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.007856][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.015594][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.023327][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.031044][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.038761][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.046567][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.054254][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.062065][ T3537] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0
[  235.083576][ T3537] hid-generic 0000:3000000:0000.0033: hidraw1: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  235.105020][T25425] loop3: detected capacity change from 0 to 512
[  235.197495][T25427] xt_CT: You must specify a L4 protocol and not use inversions on it
[  235.214488][T25427] netlink: '+}[@': attribute type 2 has an invalid length.
[  235.286306][T25425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  235.297281][T25446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.322977][T25425] System zones: 1-12
[  235.328320][T25436] fido_id[25436]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  235.353985][T25446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.375988][T25425] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3465: error while reading EA inode 32 err=-116
[  235.412769][T25451] tmpfs: Bad value for 'mpol'
[  235.427950][T25425] EXT4-fs (loop3): Remounting filesystem read-only
[  235.432487][T25427] bridge0: entered promiscuous mode
[  235.434515][T25425] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  235.451747][T25427] macsec1: entered promiscuous mode
[  235.462107][T25425] EXT4-fs (loop3): 1 orphan inode deleted
[  235.462794][T25427] bridge0: port 4(macsec1) entered blocking state
[  235.472293][T25425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.474392][T25427] bridge0: port 4(macsec1) entered disabled state
[  235.511917][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.517936][T25427] macsec1: entered allmulticast mode
[  235.526452][T25427] bridge0: entered allmulticast mode
[  235.532399][T25427] macsec1: left allmulticast mode
[  235.537475][T25427] bridge0: left allmulticast mode
[  235.543239][T25466] xt_CT: You must specify a L4 protocol and not use inversions on it
[  235.551766][T25427] bridge0: left promiscuous mode
[  235.589865][T25485] 9pnet_fd: Insufficient options for proto=fd
[  235.590640][T25484] loop3: detected capacity change from 0 to 512
[  235.604996][T25484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  235.615670][T25485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3471'.
[  235.628670][T25484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.642022][T25466] netlink: '+}[@': attribute type 2 has an invalid length.
[  235.689428][T25484] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.711381][T25497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3474'.
[  235.768417][T25495] bridge0: entered promiscuous mode
[  235.774826][T25495] macsec1: entered promiscuous mode
[  235.788168][T25495] bridge0: port 3(macsec1) entered blocking state
[  235.794696][T25495] bridge0: port 3(macsec1) entered disabled state
[  235.808439][T25495] macsec1: entered allmulticast mode
[  235.813831][T25495] bridge0: entered allmulticast mode
[  235.821114][T25495] macsec1: left allmulticast mode
[  235.826252][T25495] bridge0: left allmulticast mode
[  235.831956][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.841403][T25495] bridge0: left promiscuous mode
[  235.860256][T25514] loop0: detected capacity change from 0 to 512
[  235.884291][T25514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  235.893066][T25514] System zones: 1-12
[  235.898064][T25514] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3476: error while reading EA inode 32 err=-116
[  235.910530][T25525] netlink: 'syz.4.3475': attribute type 4 has an invalid length.
[  235.950421][T25514] EXT4-fs (loop0): Remounting filesystem read-only
[  235.957012][T25514] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  235.971681][T25514] EXT4-fs (loop0): 1 orphan inode deleted
[  235.978030][T25514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.057173][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.158393][T25542] loop3: detected capacity change from 0 to 512
[  236.165648][T25542] EXT4-fs: Ignoring removed nobh option
[  236.193043][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3477: corrupted inode contents
[  236.205954][T25542] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3477: mark_inode_dirty error
[  236.219931][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3477: corrupted inode contents
[  236.232646][T25542] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3477: mark_inode_dirty error
[  236.246754][T25542] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3477: Failed to acquire dquot type 0
[  236.260680][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3477: corrupted inode contents
[  236.273574][T25542] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3477: mark_inode_dirty error
[  236.286599][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3477: corrupted inode contents
[  236.299441][T25542] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3477: mark_inode_dirty error
[  236.315925][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3477: corrupted inode contents
[  236.328840][T25542] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  236.339018][T25542] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3477: corrupted inode contents
[  236.353832][T25542] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3477: mark_inode_dirty error
[  236.366673][T25542] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  236.378423][T25542] EXT4-fs (loop3): 1 truncate cleaned up
[  236.385037][T25542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.397887][T25542] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.738654][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.815983][T25570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3484'.
[  236.901412][T25574] tmpfs: Bad value for 'mpol'
[  237.023671][T25598] loop3: detected capacity change from 0 to 1024
[  237.063818][T25598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.196987][T25610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.218069][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.236449][T25610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.539990][T25636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3496'.
[  237.624401][T25642] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.645987][T25642] netlink: '+}[@': attribute type 2 has an invalid length.
[  237.784194][T25642] bridge0: entered promiscuous mode
[  237.802517][T25642] macsec0: entered promiscuous mode
[  237.821203][T25642] bridge0: port 3(macsec0) entered blocking state
[  237.827818][T25642] bridge0: port 3(macsec0) entered disabled state
[  237.867445][T25642] macsec0: entered allmulticast mode
[  237.872883][T25642] bridge0: entered allmulticast mode
[  237.893132][T25642] macsec0: left allmulticast mode
[  237.898313][T25642] bridge0: left allmulticast mode
[  237.912292][T25642] bridge0: left promiscuous mode
[  237.923124][T25661] netlink: 'syz.1.3501': attribute type 4 has an invalid length.
[  238.030780][T25665] hub 6-0:1.0: USB hub found
[  238.045530][T25665] hub 6-0:1.0: 8 ports detected
[  238.107089][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x4
[  238.114970][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x2
[  238.237835][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.245674][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.253404][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.261128][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.268868][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.276678][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.284434][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.292205][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.299979][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.307708][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.315444][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.323184][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.330895][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.338634][ T3401] hid-generic 0000:3000000:0000.0034: unknown main item tag 0x0
[  238.369811][ T3401] hid-generic 0000:3000000:0000.0034: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  238.552028][T25694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3507'.
[  238.586272][   T29] kauditd_printk_skb: 996 callbacks suppressed
[  238.586290][   T29] audit: type=1326 audit(1753580592.264:47485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.627454][   T29] audit: type=1326 audit(1753580592.306:47486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.651193][   T29] audit: type=1326 audit(1753580592.306:47487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.675045][   T29] audit: type=1326 audit(1753580592.306:47488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.698952][   T29] audit: type=1326 audit(1753580592.306:47489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.722825][   T29] audit: type=1326 audit(1753580592.306:47490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.746654][   T29] audit: type=1326 audit(1753580592.306:47491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.770288][   T29] audit: type=1326 audit(1753580592.306:47492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.793922][   T29] audit: type=1326 audit(1753580592.306:47493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.817773][   T29] audit: type=1326 audit(1753580592.306:47494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25691 comm="syz.2.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  238.917056][T25707] tmpfs: Bad value for 'mpol'
[  239.028318][T25734] netlink: 'syz.0.3513': attribute type 4 has an invalid length.
[  239.043620][T25737] xt_CT: You must specify a L4 protocol and not use inversions on it
[  239.060407][T25737] netlink: '+}[@': attribute type 2 has an invalid length.
[  239.148194][T25737] bridge0: entered promiscuous mode
[  239.155943][T25737] macsec0: entered promiscuous mode
[  239.162472][T25737] bridge0: port 3(macsec0) entered blocking state
[  239.169083][T25737] bridge0: port 3(macsec0) entered disabled state
[  239.177182][T25737] macsec0: entered allmulticast mode
[  239.182600][T25737] bridge0: entered allmulticast mode
[  239.200451][T25737] macsec0: left allmulticast mode
[  239.205643][T25737] bridge0: left allmulticast mode
[  239.219893][T25737] bridge0: left promiscuous mode
[  239.594220][T25808] xt_CT: You must specify a L4 protocol and not use inversions on it
[  239.625278][T25808] netlink: '+}[@': attribute type 2 has an invalid length.
[  239.710080][T25825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.743013][T25825] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.771293][T25808] bridge0: entered promiscuous mode
[  239.789145][T25808] macsec0: entered promiscuous mode
[  239.811256][T25808] bridge0: port 3(macsec0) entered blocking state
[  239.818038][T25808] bridge0: port 3(macsec0) entered disabled state
[  239.840900][T25808] macsec0: entered allmulticast mode
[  239.846428][T25808] bridge0: entered allmulticast mode
[  239.853545][T25808] macsec0: left allmulticast mode
[  239.858774][T25808] bridge0: left allmulticast mode
[  239.865543][T25808] bridge0: left promiscuous mode
[  239.865698][T25835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3533'.
[  239.957803][T25844] loop4: detected capacity change from 0 to 128
[  239.981969][T25844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'.
[  240.006858][T25844] netlink: 'syz.4.3535': attribute type 3 has an invalid length.
[  240.041342][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3536'.
[  240.068457][T25853] netlink: 'syz.3.3536': attribute type 3 has an invalid length.
[  240.250226][T25877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.299707][T25885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.309573][T25885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.325268][T25877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.366268][T25885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.376137][T25885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.422187][T25877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.458258][T25885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.468145][T25885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.510789][T25877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.543353][T25885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.553287][T25885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.573382][T25915] loop2: detected capacity change from 0 to 512
[  240.592074][T25915] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  240.605176][T25877] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.630386][T25915] System zones: 1-12
[  240.649847][T25915] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3548: error while reading EA inode 32 err=-116
[  240.667663][T25877] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.689449][T25915] EXT4-fs (loop2): Remounting filesystem read-only
[  240.696211][T25915] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  240.710214][T25877] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.730267][T25877] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.740671][T25915] EXT4-fs (loop2): 1 orphan inode deleted
[  240.751139][T25885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  240.759342][T25885] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  240.769704][T25915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.804291][T25885] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  240.804717][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.812553][T25885] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  240.850792][T25885] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  240.859106][T25885] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  240.903562][T25947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3549'.
[  240.905634][T25885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  240.920836][T25885] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  240.922813][T25947] netlink: 'syz.2.3549': attribute type 3 has an invalid length.
[  241.024847][T25964] loop2: detected capacity change from 0 to 512
[  241.054667][T25969] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3555'.
[  241.077852][T25964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  241.085994][T25964] System zones: 1-12
[  241.090304][T25969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.107598][T25964] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3554: error while reading EA inode 32 err=-116
[  241.129288][T25964] EXT4-fs (loop2): Remounting filesystem read-only
[  241.135967][T25964] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  241.149404][T25964] EXT4-fs (loop2): 1 orphan inode deleted
[  241.151417][T25969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.155969][T25964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.197675][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.199081][T25969] bond0 (unregistering): Released all slaves
[  241.271429][T26007] loop1: detected capacity change from 0 to 512
[  241.297003][T26007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  241.324462][T26007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.357716][T26007] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  241.382279][T26036] loop0: detected capacity change from 0 to 512
[  241.415366][T26036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  241.438235][T19984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.458734][T26036] System zones: 1-12
[  241.464288][T26036] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3560: error while reading EA inode 32 err=-116
[  241.477326][T26036] EXT4-fs (loop0): Remounting filesystem read-only
[  241.483917][T26036] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  241.487053][T26041] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.495313][T26036] EXT4-fs (loop0): 1 orphan inode deleted
[  241.527372][T26036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.574535][T26046] hub 6-0:1.0: USB hub found
[  241.580329][T26046] hub 6-0:1.0: 8 ports detected
[  241.597637][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.614806][T26041] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.658582][T26062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'.
[  241.682568][T26062] netlink: 'syz.0.3564': attribute type 3 has an invalid length.
[  241.692929][T26041] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.809791][T26041] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.942540][T26075] loop0: detected capacity change from 0 to 128
[  242.021405][T26041] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.063444][T26041] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.082505][T26041] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.101731][T26041] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.692511][T26110] loop4: detected capacity change from 0 to 512
[  242.727710][T26110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  242.844601][T26110] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  243.000722][T26132] hub 6-0:1.0: USB hub found
[  243.014561][T26132] hub 6-0:1.0: 8 ports detected
[  243.354122][   T29] kauditd_printk_skb: 1546 callbacks suppressed
[  243.354150][   T29] audit: type=1326 audit(1753580597.272:49041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0a4345967 code=0x7ffc0000
[  243.465759][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x4
[  243.473513][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x2
[  243.685864][   T29] audit: type=1326 audit(1753580597.303:49042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.4.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd3f795967 code=0x7ffc0000
[  243.709693][   T29] audit: type=1326 audit(1753580597.303:49043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.4.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd3f73ab89 code=0x7ffc0000
[  243.733368][   T29] audit: type=1326 audit(1753580597.303:49044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26140 comm="syz.4.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  243.756949][   T29] audit: type=1326 audit(1753580597.303:49045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0a42eab89 code=0x7ffc0000
[  243.780595][   T29] audit: type=1326 audit(1753580597.303:49046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0a4345967 code=0x7ffc0000
[  243.804236][   T29] audit: type=1326 audit(1753580597.303:49047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0a42eab89 code=0x7ffc0000
[  243.827838][   T29] audit: type=1326 audit(1753580597.303:49048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  243.851758][   T29] audit: type=1326 audit(1753580597.314:49049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb0a4345967 code=0x7ffc0000
[  243.875453][   T29] audit: type=1326 audit(1753580597.314:49050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26106 comm="syz.1.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb0a42eab89 code=0x7ffc0000
[  244.608084][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.616152][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.623904][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.631620][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.639348][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.647062][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.654811][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.662594][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.670388][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.678134][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.685845][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.693593][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.701345][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.709166][T22013] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x0
[  244.717590][T22013] hid-generic 0000:3000000:0000.0035: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  244.769150][T26185] loop2: detected capacity change from 0 to 512
[  244.775801][T26185] EXT4-fs: Ignoring removed nobh option
[  244.804888][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3582: corrupted inode contents
[  244.817671][T26185] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3582: mark_inode_dirty error
[  244.827321][T26182] fido_id[26182]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  244.834600][T26192] loop4: detected capacity change from 0 to 512
[  244.851725][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3582: corrupted inode contents
[  244.864192][T26185] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3582: mark_inode_dirty error
[  244.877336][T26185] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3582: Failed to acquire dquot type 0
[  244.891364][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3582: corrupted inode contents
[  244.914119][T26185] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3582: mark_inode_dirty error
[  244.926113][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3582: corrupted inode contents
[  244.936764][T26193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3586'.
[  244.949857][T26185] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3582: mark_inode_dirty error
[  244.963592][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3582: corrupted inode contents
[  244.975943][T26185] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  244.984967][T26185] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3582: corrupted inode contents
[  244.997152][T26185] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3582: mark_inode_dirty error
[  245.008537][T26185] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  245.017959][T26185] EXT4-fs (loop2): 1 truncate cleaned up
[  245.024318][T26185] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.041598][T26192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.098083][T26192] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  245.367996][T26230] SELinux: failed to load policy
[  245.377901][T26230] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3594'.
[  245.898531][T26260] hub 6-0:1.0: USB hub found
[  245.909895][T26260] hub 6-0:1.0: 8 ports detected
[  245.960924][T26267] loop1: detected capacity change from 0 to 512
[  245.978097][T26267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  246.037347][T26267] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  246.080990][T26283] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.320252][T26283] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.464184][T26246] loop4: detected capacity change from 0 to 512
[  246.490876][T26283] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.509406][T26246] EXT4-fs: Ignoring removed nobh option
[  246.534987][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3595: corrupted inode contents
[  246.567817][T26283] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.583810][T26246] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3595: mark_inode_dirty error
[  246.597108][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3595: corrupted inode contents
[  246.622485][T26246] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3595: mark_inode_dirty error
[  246.640925][T26246] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3595: Failed to acquire dquot type 0
[  246.646196][T26283] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.653625][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3595: corrupted inode contents
[  246.667249][T26283] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.673151][T26246] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3595: mark_inode_dirty error
[  246.687275][T26283] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.708440][T26283] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.717843][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3595: corrupted inode contents
[  246.744222][T26336] hub 6-0:1.0: USB hub found
[  246.762025][T26336] hub 6-0:1.0: 8 ports detected
[  246.769183][T26246] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3595: mark_inode_dirty error
[  246.803012][T26348] loop1: detected capacity change from 0 to 128
[  246.819010][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3595: corrupted inode contents
[  246.834648][T26246] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  246.843752][T26246] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3595: corrupted inode contents
[  246.858468][T26246] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3595: mark_inode_dirty error
[  246.870495][T26351] loop0: detected capacity change from 0 to 512
[  246.878707][T26246] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  246.890113][T26351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  246.900803][T26246] EXT4-fs (loop4): 1 truncate cleaned up
[  246.924338][T26246] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.925298][T26348] 9pnet_fd: Insufficient options for proto=fd
[  246.942075][T26351] System zones: 1-12
[  246.946530][T26351] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3611: error while reading EA inode 32 err=-116
[  247.000449][T26351] EXT4-fs (loop0): Remounting filesystem read-only
[  247.007026][T26351] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  247.013894][T26365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3615'.
[  247.029942][T26351] EXT4-fs (loop0): 1 orphan inode deleted
[  247.150509][T26377] loop0: detected capacity change from 0 to 512
[  247.170424][T26377] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  247.222167][T26377] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  247.234840][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x4
[  247.242764][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x2
[  247.296490][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.304246][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.311990][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.319696][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.327485][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.335241][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.342974][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.350904][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.358718][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.366398][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.374088][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.381760][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.389429][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.398384][ T1035] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0
[  247.457650][ T1035] hid-generic 0000:3000000:0000.0036: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  248.155422][   T29] kauditd_printk_skb: 514 callbacks suppressed
[  248.155468][   T29] audit: type=1326 audit(1753580602.311:49561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.238329][   T29] audit: type=1326 audit(1753580602.342:49562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.262176][   T29] audit: type=1326 audit(1753580602.342:49563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.285914][   T29] audit: type=1326 audit(1753580602.342:49564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.309675][   T29] audit: type=1326 audit(1753580602.353:49565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.333534][   T29] audit: type=1326 audit(1753580602.353:49566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.357258][   T29] audit: type=1326 audit(1753580602.353:49567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.380920][   T29] audit: type=1326 audit(1753580602.353:49568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.404565][   T29] audit: type=1326 audit(1753580602.353:49569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.428364][   T29] audit: type=1326 audit(1753580602.353:49570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26382 comm="syz.2.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99827ce9a9 code=0x7ffc0000
[  248.529669][T26419] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.548143][T26419] netlink: '+}[@': attribute type 2 has an invalid length.
[  248.648090][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3624'.
[  248.657811][T26422] FAULT_INJECTION: forcing a failure.
[  248.657811][T26422] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.671040][T26422] CPU: 1 UID: 0 PID: 26422 Comm: syz.4.3623 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  248.671191][T26422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  248.671208][T26422] Call Trace:
[  248.671217][T26422]  <TASK>
[  248.671227][T26422]  __dump_stack+0x1d/0x30
[  248.671250][T26422]  dump_stack_lvl+0xe8/0x140
[  248.671297][T26422]  dump_stack+0x15/0x1b
[  248.671316][T26422]  should_fail_ex+0x265/0x280
[  248.671355][T26422]  should_fail+0xb/0x20
[  248.671451][T26422]  should_fail_usercopy+0x1a/0x20
[  248.671519][T26422]  strncpy_from_user+0x25/0x230
[  248.671549][T26422]  ? __kmalloc_cache_noprof+0x189/0x320
[  248.671588][T26422]  getname_flags+0x230/0x3b0
[  248.671699][T26422]  vfs_fstatat+0x43/0x170
[  248.671727][T26422]  __se_sys_newfstatat+0x55/0x260
[  248.671770][T26422]  ? putname+0xda/0x100
[  248.671832][T26422]  ? ksys_write+0x15f/0x1a0
[  248.671866][T26422]  __x64_sys_newfstatat+0x55/0x70
[  248.671970][T26422]  x64_sys_call+0x2c22/0x2fb0
[  248.672005][T26422]  do_syscall_64+0xd2/0x200
[  248.672044][T26422]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  248.672078][T26422]  ? clear_bhb_loop+0x40/0x90
[  248.672106][T26422]  ? clear_bhb_loop+0x40/0x90
[  248.672134][T26422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.672198][T26422] RIP: 0033:0x7fdd3f79e9a9
[  248.672217][T26422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.672237][T26422] RSP: 002b:00007fdd3ddff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  248.672256][T26422] RAX: ffffffffffffffda RBX: 00007fdd3f9c5fa0 RCX: 00007fdd3f79e9a9
[  248.672268][T26422] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: ffffffffffffff9c
[  248.672326][T26422] RBP: 00007fdd3ddff090 R08: 0000000000000000 R09: 0000000000000000
[  248.672341][T26422] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  248.672358][T26422] R13: 0000000000000000 R14: 00007fdd3f9c5fa0 R15: 00007fffb69d4778
[  248.672383][T26422]  </TASK>
[  248.734630][T26467] bridge0: entered promiscuous mode
[  248.734688][T26467] macsec1: entered promiscuous mode
[  248.735702][T26467] bridge0: port 3(macsec1) entered blocking state
[  248.735737][T26467] bridge0: port 3(macsec1) entered disabled state
[  248.735913][T26467] macsec1: entered allmulticast mode
[  248.736031][T26467] bridge0: entered allmulticast mode
[  248.736559][T26467] macsec1: left allmulticast mode
[  248.736576][T26467] bridge0: left allmulticast mode
[  248.736938][T26467] bridge0: left promiscuous mode
[  248.806896][T26477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3628'.
[  248.889354][T26487] loop2: detected capacity change from 0 to 512
[  248.903150][T26487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  249.194940][T26487] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  249.275792][T26505] loop0: detected capacity change from 0 to 512
[  249.276553][T26505] EXT4-fs: Ignoring removed nobh option
[  249.290231][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3631: corrupted inode contents
[  249.290500][T26505] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3631: mark_inode_dirty error
[  249.291208][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3631: corrupted inode contents
[  249.291519][T26505] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3631: mark_inode_dirty error
[  249.292115][T26505] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3631: Failed to acquire dquot type 0
[  249.292995][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3631: corrupted inode contents
[  249.293387][T26505] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3631: mark_inode_dirty error
[  249.293656][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3631: corrupted inode contents
[  249.293870][T26505] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3631: mark_inode_dirty error
[  249.294042][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3631: corrupted inode contents
[  249.294248][T26505] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  249.294460][T26505] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3631: corrupted inode contents
[  249.294679][T26505] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3631: mark_inode_dirty error
[  249.294882][T26505] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  249.297486][T26505] EXT4-fs (loop0): 1 truncate cleaned up
[  249.298230][T26505] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.658745][T26520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.909964][T26520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.935165][T26529] loop1: detected capacity change from 0 to 1024
[  249.989477][T26529] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.010106][T26551] 9pnet_fd: Insufficient options for proto=fd
[  250.042443][T26520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.067137][T26551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3641'.
[  250.136428][T26567] hub 6-0:1.0: USB hub found
[  250.137992][T26520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.147920][T26567] hub 6-0:1.0: 8 ports detected
[  250.224063][T26575] loop3: detected capacity change from 0 to 512
[  250.253191][T26575] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13
[  250.273499][T26520] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.283224][T26575] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.3646: iget: bad i_size value: 12154757448730
[  250.290139][T26520] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.305682][T26558] loop1: detected capacity change from 0 to 736
[  250.309973][T26520] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.317175][T26575] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3646: couldn't read orphan inode 13 (err -117)
[  250.338023][T26520] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.362173][T26575] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  250.372444][T26575] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  250.399245][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'.
[  250.430357][T26602] FAULT_INJECTION: forcing a failure.
[  250.430357][T26602] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.443581][T26602] CPU: 1 UID: 0 PID: 26602 Comm: syz.2.3650 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  250.443616][T26602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  250.443628][T26602] Call Trace:
[  250.443635][T26602]  <TASK>
[  250.443645][T26602]  __dump_stack+0x1d/0x30
[  250.443753][T26602]  dump_stack_lvl+0xe8/0x140
[  250.443779][T26602]  dump_stack+0x15/0x1b
[  250.443802][T26602]  should_fail_ex+0x265/0x280
[  250.443865][T26602]  should_fail+0xb/0x20
[  250.443900][T26602]  should_fail_usercopy+0x1a/0x20
[  250.443966][T26602]  _copy_from_iter+0xcf/0xe40
[  250.444008][T26602]  ? __build_skb_around+0x1a0/0x200
[  250.444128][T26602]  ? __alloc_skb+0x223/0x320
[  250.444170][T26602]  netlink_sendmsg+0x471/0x6b0
[  250.444201][T26602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.444228][T26602]  __sock_sendmsg+0x142/0x180
[  250.444268][T26602]  ____sys_sendmsg+0x31e/0x4e0
[  250.444298][T26602]  ___sys_sendmsg+0x17b/0x1d0
[  250.444419][T26602]  __x64_sys_sendmsg+0xd4/0x160
[  250.444450][T26602]  x64_sys_call+0x2999/0x2fb0
[  250.444550][T26602]  do_syscall_64+0xd2/0x200
[  250.444575][T26602]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  250.444610][T26602]  ? clear_bhb_loop+0x40/0x90
[  250.444680][T26602]  ? clear_bhb_loop+0x40/0x90
[  250.444710][T26602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.444771][T26602] RIP: 0033:0x7f99827ce9a9
[  250.444791][T26602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.444890][T26602] RSP: 002b:00007f9980e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  250.444914][T26602] RAX: ffffffffffffffda RBX: 00007f99829f5fa0 RCX: 00007f99827ce9a9
[  250.444930][T26602] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003
[  250.444947][T26602] RBP: 00007f9980e2f090 R08: 0000000000000000 R09: 0000000000000000
[  250.444963][T26602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.444978][T26602] R13: 0000000000000000 R14: 00007f99829f5fa0 R15: 00007ffc6a46d868
[  250.444998][T26602]  </TASK>
[  250.681536][T26599] FAULT_INJECTION: forcing a failure.
[  250.681536][T26599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  250.694750][T26599] CPU: 0 UID: 0 PID: 26599 Comm: syz.0.3649 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  250.694819][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  250.694837][T26599] Call Trace:
[  250.694846][T26599]  <TASK>
[  250.694855][T26599]  __dump_stack+0x1d/0x30
[  250.694887][T26599]  dump_stack_lvl+0xe8/0x140
[  250.694912][T26599]  dump_stack+0x15/0x1b
[  250.694933][T26599]  should_fail_ex+0x265/0x280
[  250.694971][T26599]  should_fail+0xb/0x20
[  250.695032][T26599]  should_fail_usercopy+0x1a/0x20
[  250.695074][T26599]  strncpy_from_user+0x25/0x230
[  250.695128][T26599]  ? kmem_cache_alloc_noprof+0x186/0x310
[  250.695161][T26599]  ? getname_flags+0x80/0x3b0
[  250.695191][T26599]  getname_flags+0xae/0x3b0
[  250.695219][T26599]  __se_sys_statx+0x5e/0x1b0
[  250.695264][T26599]  ? vfs_write+0x75e/0x8e0
[  250.695301][T26599]  ? __rcu_read_unlock+0x4f/0x70
[  250.695329][T26599]  ? __fget_files+0x184/0x1c0
[  250.695354][T26599]  ? fput+0x8f/0xc0
[  250.695402][T26599]  ? ksys_write+0x192/0x1a0
[  250.695484][T26599]  __x64_sys_statx+0x67/0x80
[  250.695516][T26599]  x64_sys_call+0x27cb/0x2fb0
[  250.695565][T26599]  do_syscall_64+0xd2/0x200
[  250.695622][T26599]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  250.695649][T26599]  ? clear_bhb_loop+0x40/0x90
[  250.695720][T26599]  ? clear_bhb_loop+0x40/0x90
[  250.695742][T26599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.695764][T26599] RIP: 0033:0x7f335b9ae9a9
[  250.695780][T26599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.695871][T26599] RSP: 002b:00007f3359ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  250.695891][T26599] RAX: ffffffffffffffda RBX: 00007f335bbd6080 RCX: 00007f335b9ae9a9
[  250.695905][T26599] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffffff
[  250.695917][T26599] RBP: 00007f3359ff6090 R08: 0000000000000000 R09: 0000000000000000
[  250.695943][T26599] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  250.695955][T26599] R13: 0000000000000000 R14: 00007f335bbd6080 R15: 00007ffd91ef8e08
[  250.695995][T26599]  </TASK>
[  250.931610][T26558] rock: directory entry would overflow storage
[  250.939183][T26558] rock: sig=0x3b10, size=4, remaining=3
[  251.078859][T26624] loop2: detected capacity change from 0 to 512
[  251.098606][T26624] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  251.119795][T26624] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.120275][T26633] 9pnet_fd: Insufficient options for proto=fd
[  251.154881][T26633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3656'.
[  251.194739][T26639] hub 6-0:1.0: USB hub found
[  251.208440][T26639] hub 6-0:1.0: 8 ports detected
[  251.220411][T26644] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.237444][T26644] netlink: '+}[@': attribute type 2 has an invalid length.
[  251.265290][T26650] netlink: 'syz.2.3659': attribute type 4 has an invalid length.
[  251.274344][T26653] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  251.280907][T26653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  251.288732][T26653] vhci_hcd vhci_hcd.0: Device attached
[  251.360377][T26678] netlink: 'syz.1.3643': attribute type 27 has an invalid length.
[  251.371656][T26644] bridge0: entered promiscuous mode
[  251.380897][T26644] macsec1: entered promiscuous mode
[  251.392853][T26654] vhci_hcd: connection closed
[  251.393130][T10308] vhci_hcd: stop threads
[  251.394709][T26644] bridge0: port 3(macsec1) entered blocking state
[  251.397906][T10308] vhci_hcd: release socket
[  251.397927][T10308] vhci_hcd: disconnect device
[  251.402275][T26644] bridge0: port 3(macsec1) entered disabled state
[  251.428827][T26644] macsec1: entered allmulticast mode
[  251.434244][T26644] bridge0: entered allmulticast mode
[  251.440988][T26644] macsec1: left allmulticast mode
[  251.446058][T26644] bridge0: left allmulticast mode
[  251.451900][T26644] bridge0: left promiscuous mode
[  251.507121][T26678] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.514515][T26678] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.565185][T26678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.576130][T26678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.604223][T26678] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.612858][T26678] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.621754][T26678] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.630328][T26678] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.654763][T26690] syz_tun: entered allmulticast mode
[  251.790515][T26713] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3667'.
[  251.826705][T26718] 9pnet_fd: Insufficient options for proto=fd
[  251.840143][T26718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3669'.
[  251.909010][T26726] loop1: detected capacity change from 0 to 512
[  251.942871][T26726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  251.955943][T26726] System zones: 1-12
[  251.960782][T26726] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3671: error while reading EA inode 32 err=-116
[  251.975090][T26726] EXT4-fs (loop1): Remounting filesystem read-only
[  251.981768][T26726] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  251.995930][T26721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3670'.
[  252.005861][T26721] FAULT_INJECTION: forcing a failure.
[  252.005861][T26721] name failslab, interval 1, probability 0, space 0, times 0
[  252.018669][T26721] CPU: 0 UID: 0 PID: 26721 Comm: syz.3.3670 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  252.018704][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  252.018722][T26721] Call Trace:
[  252.018732][T26721]  <TASK>
[  252.018743][T26721]  __dump_stack+0x1d/0x30
[  252.018771][T26721]  dump_stack_lvl+0xe8/0x140
[  252.018865][T26721]  dump_stack+0x15/0x1b
[  252.018887][T26721]  should_fail_ex+0x265/0x280
[  252.018984][T26721]  should_failslab+0x8c/0xb0
[  252.019028][T26721]  kmem_cache_alloc_node_noprof+0x57/0x320
[  252.019055][T26721]  ? __alloc_skb+0x101/0x320
[  252.019090][T26721]  __alloc_skb+0x101/0x320
[  252.019121][T26721]  ? audit_log_start+0x365/0x6c0
[  252.019241][T26721]  audit_log_start+0x380/0x6c0
[  252.019285][T26721]  audit_seccomp+0x48/0x100
[  252.019352][T26721]  ? __seccomp_filter+0x68c/0x10d0
[  252.019383][T26721]  __seccomp_filter+0x69d/0x10d0
[  252.019486][T26721]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  252.019532][T26721]  ? vfs_write+0x75e/0x8e0
[  252.019562][T26721]  ? __rcu_read_unlock+0x4f/0x70
[  252.019642][T26721]  ? __fget_files+0x184/0x1c0
[  252.019669][T26721]  __secure_computing+0x82/0x150
[  252.019693][T26721]  syscall_trace_enter+0xcf/0x1e0
[  252.019724][T26721]  do_syscall_64+0xac/0x200
[  252.019749][T26721]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  252.019782][T26721]  ? clear_bhb_loop+0x40/0x90
[  252.019802][T26721]  ? clear_bhb_loop+0x40/0x90
[  252.019826][T26721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.019917][T26721] RIP: 0033:0x7fd3e1aee9a9
[  252.019937][T26721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.019991][T26721] RSP: 002b:00007fd3e014f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024
[  252.020015][T26721] RAX: ffffffffffffffda RBX: 00007fd3e1d15fa0 RCX: 00007fd3e1aee9a9
[  252.020028][T26721] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000001
[  252.020042][T26721] RBP: 00007fd3e014f090 R08: 0000000000000000 R09: 0000000000000000
[  252.020058][T26721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.020073][T26721] R13: 0000000000000000 R14: 00007fd3e1d15fa0 R15: 00007fff4fa11e98
[  252.020127][T26721]  </TASK>
[  252.029479][T26726] EXT4-fs (loop1): 1 orphan inode deleted
[  252.083179][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x4
[  252.092192][T26726] EXT4-fs mount: 24 callbacks suppressed
[  252.092314][T26726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.092538][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x2
[  252.290825][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.298607][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.306366][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.314115][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.322432][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.330212][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.337974][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.346361][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.354054][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.361749][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.369466][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.377807][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.385555][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.392237][T19984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.393263][ T3401] hid-generic 0000:3000000:0000.0037: unknown main item tag 0x0
[  252.418947][ T3401] hid-generic 0000:3000000:0000.0037: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  252.455346][T26755] loop1: detected capacity change from 0 to 128
[  252.488204][T26758] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.501745][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'.
[  252.513561][T26755] netlink: 'syz.1.3676': attribute type 3 has an invalid length.
[  252.556273][T26758] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.605053][T26781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'.
[  252.635419][T26758] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.737071][T26806] loop1: detected capacity change from 0 to 512
[  252.749205][T26758] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.773804][T26806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  252.791806][T26806] System zones: 1-12
[  252.810861][T26806] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3686: error while reading EA inode 32 err=-116
[  252.823712][T26806] EXT4-fs (loop1): Remounting filesystem read-only
[  252.831053][T26806] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  252.834762][T26818] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3688'.
[  252.843109][T26806] EXT4-fs (loop1): 1 orphan inode deleted
[  252.850752][T26818] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3688'.
[  252.856964][T26806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.865631][T26818] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3688'.
[  252.889813][T26758] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.930943][   T29] kauditd_printk_skb: 477 callbacks suppressed
[  252.930959][   T29] audit: type=1326 audit(1753580607.318:50044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd3f795967 code=0x7ffc0000
[  252.971282][T26758] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.983624][T19984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.986182][T26825] loop0: detected capacity change from 0 to 128
[  252.997714][T26758] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.007887][   T29] audit: type=1326 audit(1753580607.350:50045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd3f73ab89 code=0x7ffc0000
[  253.031584][   T29] audit: type=1326 audit(1753580607.350:50046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd3f795967 code=0x7ffc0000
[  253.055172][   T29] audit: type=1326 audit(1753580607.350:50047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd3f73ab89 code=0x7ffc0000
[  253.078765][   T29] audit: type=1326 audit(1753580607.350:50048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  253.102467][   T29] audit: type=1326 audit(1753580607.360:50049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd3f795967 code=0x7ffc0000
[  253.117090][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'.
[  253.126027][   T29] audit: type=1326 audit(1753580607.360:50050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd3f73ab89 code=0x7ffc0000
[  253.154451][T26825] netlink: 'syz.0.3689': attribute type 3 has an invalid length.
[  253.158509][   T29] audit: type=1326 audit(1753580607.360:50051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  253.180100][T26758] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.189655][   T29] audit: type=1326 audit(1753580607.371:50052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd3f795967 code=0x7ffc0000
[  253.189689][   T29] audit: type=1326 audit(1753580607.371:50053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26801 comm="syz.4.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd3f73ab89 code=0x7ffc0000
[  253.263970][T26837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3690'.
[  253.275073][T26837] batman_adv: batadv0: Removing interface: batadv_slave_0
[  253.304191][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x4
[  253.311992][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x2
[  253.313608][T26837] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.327564][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.335321][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.336953][T26844] 9pnet_fd: Insufficient options for proto=fd
[  253.342988][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.356891][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.364738][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.372499][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.380184][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.387883][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.395710][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.403463][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.411269][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.418979][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.426735][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.434444][   T36] hid-generic 0000:3000000:0000.0038: unknown main item tag 0x0
[  253.443865][   T36] hid-generic 0000:3000000:0000.0038: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  253.550032][T26855] hub 6-0:1.0: USB hub found
[  253.589320][T26855] hub 6-0:1.0: 8 ports detected
[  253.670368][T26866] loop0: detected capacity change from 0 to 2048
[  253.716628][ T3551] Alternate GPT is invalid, using primary GPT.
[  253.722986][ T3551]  loop0: p1 p2 p3
[  253.785398][T26866] Alternate GPT is invalid, using primary GPT.
[  253.792441][T26866]  loop0: p1 p2 p3
[  253.822163][ T2994] Alternate GPT is invalid, using primary GPT.
[  253.828625][ T2994]  loop0: p1 p2 p3
[  253.857981][T26907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.891764][T26907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.991014][T25434] udevd[25434]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  254.003819][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  254.016478][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  254.042659][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  254.046370][T25434] udevd[25434]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  254.056337][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  254.095524][T26935] loop0: detected capacity change from 0 to 128
[  254.122625][T25434] udevd[25434]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  254.123059][ T3551] udevd[3551]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  254.145947][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  254.171619][T26935] netlink: 'syz.0.3701': attribute type 3 has an invalid length.
[  254.223356][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x4
[  254.231252][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x2
[  254.239869][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.247602][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.255375][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.263259][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.271121][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.278901][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.286629][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.294386][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.302085][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.309787][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.317505][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.325370][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.333065][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.340792][   T36] hid-generic 0000:3000000:0000.0039: unknown main item tag 0x0
[  254.460818][   T36] hid-generic 0000:3000000:0000.0039: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  254.496429][T26950] fido_id[26950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  254.834256][T26969] loop0: detected capacity change from 0 to 512
[  254.841578][T26969] EXT4-fs: Ignoring removed nobh option
[  255.073275][T26977] tipc: Started in network mode
[  255.078897][T26977] tipc: Node identity ac14140f, cluster identity 4711
[  255.127267][T26977] tipc: New replicast peer: 255.255.255.255
[  255.133446][T26977] tipc: Enabled bearer <udp:syz2>, priority 10
[  255.172119][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3707: corrupted inode contents
[  255.186519][T26969] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3707: mark_inode_dirty error
[  255.200755][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3707: corrupted inode contents
[  255.214201][T26969] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3707: mark_inode_dirty error
[  255.227407][T26969] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3707: Failed to acquire dquot type 0
[  255.243827][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3707: corrupted inode contents
[  255.256827][T26969] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3707: mark_inode_dirty error
[  255.269514][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3707: corrupted inode contents
[  255.282706][T26969] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3707: mark_inode_dirty error
[  255.294838][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3707: corrupted inode contents
[  255.307750][T26969] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  255.316914][T26969] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3707: corrupted inode contents
[  255.329199][T26969] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3707: mark_inode_dirty error
[  255.341150][T26969] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  255.350991][T26969] EXT4-fs (loop0): 1 truncate cleaned up
[  255.357149][T26969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.370461][T26969] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.460677][T26995] netlink: 'syz.1.3710': attribute type 4 has an invalid length.
[  255.555176][T27000] loop4: detected capacity change from 0 to 512
[  255.574052][T27000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  255.591963][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.616455][T27000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.680034][T27000] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  255.704602][T27021] hub 6-0:1.0: USB hub found
[  255.715920][T27021] hub 6-0:1.0: 8 ports detected
[  255.724635][T27031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.736212][T27031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.784744][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.943717][T27051] netlink: 'syz.0.3721': attribute type 16 has an invalid length.
[  255.951822][T27051] netlink: 'syz.0.3721': attribute type 17 has an invalid length.
[  256.009734][T27053] loop4: detected capacity change from 0 to 512
[  256.037520][T27053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  256.063372][T27053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.085983][T27053] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.118130][T27061] loop0: detected capacity change from 0 to 512
[  256.136075][T27061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  256.166484][T27061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.180692][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.180726][T27066] xt_CT: You must specify a L4 protocol and not use inversions on it
[  256.199910][T27061] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  256.210284][ T3400] tipc: Node number set to 2886997007
[  256.231229][T27066] netlink: '+}[@': attribute type 2 has an invalid length.
[  256.298253][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.328149][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x4
[  256.336010][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x2
[  256.348256][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.356227][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.363948][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.365658][T27095] bridge0: entered promiscuous mode
[  256.371674][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.371698][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.371719][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.400189][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.403294][T27095] macsec0: entered promiscuous mode
[  256.407985][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.415788][T27095] bridge0: port 3(macsec0) entered blocking state
[  256.420811][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.420886][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.420913][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.421011][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.421040][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.421064][   T36] hid-generic 0000:3000000:0000.003A: unknown main item tag 0x0
[  256.475393][T27095] bridge0: port 3(macsec0) entered disabled state
[  256.494394][T27095] macsec0: entered allmulticast mode
[  256.499804][T27095] bridge0: entered allmulticast mode
[  256.505628][T27095] macsec0: left allmulticast mode
[  256.511382][T27095] bridge0: left allmulticast mode
[  256.523193][T27095] bridge0: left promiscuous mode
[  256.588548][   T36] hid-generic 0000:3000000:0000.003A: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  256.619192][T27111] fido_id[27111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  256.652218][T27116] hub 6-0:1.0: USB hub found
[  256.659537][T27120] loop2: detected capacity change from 0 to 512
[  256.661173][T27117] __nla_validate_parse: 8 callbacks suppressed
[  256.661193][T27117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'.
[  256.689643][T27116] hub 6-0:1.0: 8 ports detected
[  256.703008][T27120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  256.713170][T27120] System zones: 1-12
[  256.719407][T27120] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3730: error while reading EA inode 32 err=-116
[  256.770223][T27120] EXT4-fs (loop2): Remounting filesystem read-only
[  256.777526][T27120] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  256.795777][T27136] loop4: detected capacity change from 0 to 128
[  256.807863][T27120] EXT4-fs (loop2): 1 orphan inode deleted
[  256.834025][T27120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.853785][T27136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3734'.
[  256.865862][T27136] netlink: 'syz.4.3734': attribute type 3 has an invalid length.
[  256.867680][T27142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.917101][T27142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.923077][T27146] loop0: detected capacity change from 0 to 512
[  256.933189][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.967136][T27146] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  256.980257][T27146] System zones: 1-12
[  256.986035][T27146] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.3736: error while reading EA inode 32 err=-116
[  257.008854][T27146] EXT4-fs (loop0): Remounting filesystem read-only
[  257.015506][T27146] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  257.026177][T27146] EXT4-fs (loop0): 1 orphan inode deleted
[  257.033012][T27146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.053428][T27164] loop2: detected capacity change from 0 to 512
[  257.071655][T27164] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  257.081426][T27164] System zones: 1-12
[  257.086063][T27164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3739: error while reading EA inode 32 err=-116
[  257.086169][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.102115][T27164] EXT4-fs (loop2): Remounting filesystem read-only
[  257.114218][T27164] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  257.126360][T27164] EXT4-fs (loop2): 1 orphan inode deleted
[  257.148454][T27164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.181578][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.206301][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x4
[  257.214179][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x2
[  257.230427][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.238183][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.245932][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.253692][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.259020][T27186] netlink: 'syz.4.3743': attribute type 4 has an invalid length.
[  257.261416][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.276814][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.286021][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.293764][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.301474][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.309227][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.316978][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.324685][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.332422][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.340188][   T36] hid-generic 0000:3000000:0000.003B: unknown main item tag 0x0
[  257.382901][   T36] hid-generic 0000:3000000:0000.003B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  257.541580][T27196] loop4: detected capacity change from 0 to 1024
[  257.552994][T27196] ext4: Unknown parameter 'uid<00000000000000000000'
[  257.720651][   T29] kauditd_printk_skb: 1028 callbacks suppressed
[  257.720670][   T29] audit: type=1326 audit(1753580612.357:51077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27197 comm="syz.4.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdd3f79e9a9 code=0x7ffc0000
[  257.799916][   T29] audit: type=1326 audit(1753580612.378:51078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.823832][   T29] audit: type=1326 audit(1753580612.378:51079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.847599][   T29] audit: type=1326 audit(1753580612.399:51080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.871238][   T29] audit: type=1326 audit(1753580612.399:51081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.894997][   T29] audit: type=1326 audit(1753580612.399:51082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.918791][   T29] audit: type=1326 audit(1753580612.399:51083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.942414][   T29] audit: type=1326 audit(1753580612.399:51084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.966138][   T29] audit: type=1326 audit(1753580612.399:51085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.989770][   T29] audit: type=1326 audit(1753580612.399:51086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27198 comm="syz.1.3746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  257.993354][T27210] loop1: detected capacity change from 0 to 128
[  258.077817][T27210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'.
[  258.094584][T27210] netlink: 'syz.1.3748': attribute type 3 has an invalid length.
[  258.270092][T27267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.285099][T27267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.285723][T27243] loop1: detected capacity change from 0 to 512
[  258.303283][T27272] netlink: 'syz.4.3757': attribute type 4 has an invalid length.
[  258.319777][T27243] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  258.339555][T27243] EXT4-fs (loop1): mount failed
[  258.421633][T27291] loop1: detected capacity change from 0 to 512
[  258.429113][T27291] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.443104][T27291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.455786][T27291] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.479087][T19984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.539682][T27304] loop1: detected capacity change from 0 to 128
[  258.555380][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'.
[  258.565709][T27304] netlink: 'syz.1.3762': attribute type 3 has an invalid length.
[  258.594892][T27311] loop1: detected capacity change from 0 to 128
[  258.746258][T27339] 9pnet_fd: Insufficient options for proto=fd
[  258.816180][T27345] loop2: detected capacity change from 0 to 512
[  258.834234][T27345] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  258.871776][T27345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.884578][T27345] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.923484][T27357] loop1: detected capacity change from 0 to 128
[  258.958910][T27357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3773'.
[  258.968400][T27357] validate_nla: 1 callbacks suppressed
[  258.968417][T27357] netlink: 'syz.1.3773': attribute type 3 has an invalid length.
[  258.985872][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.029334][T27368] loop2: detected capacity change from 0 to 512
[  259.047206][T27368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  259.061537][T27368] System zones: 1-12
[  259.125060][T27378] loop3: detected capacity change from 0 to 512
[  259.132303][T27378] EXT4-fs: Ignoring removed nobh option
[  259.159720][T27368] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3774: error while reading EA inode 32 err=-116
[  259.183902][T27368] EXT4-fs (loop2): Remounting filesystem read-only
[  259.190513][T27368] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  259.250216][T27368] EXT4-fs (loop2): 1 orphan inode deleted
[  259.271367][T27368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.289617][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3772: corrupted inode contents
[  259.302635][T27378] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3772: mark_inode_dirty error
[  259.315939][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3772: corrupted inode contents
[  259.329003][T27378] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3772: mark_inode_dirty error
[  259.341310][T27378] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3772: Failed to acquire dquot type 0
[  259.354207][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3772: corrupted inode contents
[  259.367418][T27378] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3772: mark_inode_dirty error
[  259.379931][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3772: corrupted inode contents
[  259.393169][T27378] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3772: mark_inode_dirty error
[  259.406134][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3772: corrupted inode contents
[  259.419128][T27378] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  259.430005][T27378] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3772: corrupted inode contents
[  259.443671][T27378] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3772: mark_inode_dirty error
[  259.460531][T27378] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  259.470795][T27378] EXT4-fs (loop3): 1 truncate cleaned up
[  259.477101][T27378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.489793][T27378] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.508973][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.558193][T27402] 9pnet_fd: Insufficient options for proto=fd
[  259.576641][T27401] netlink: 'syz.2.3779': attribute type 4 has an invalid length.
[  259.681945][T27415] hub 6-0:1.0: USB hub found
[  259.686828][T27415] hub 6-0:1.0: 8 ports detected
[  259.748042][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.875314][T27457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3791'.
[  259.886813][T27457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.896760][T27457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.909255][T27457] bond0 (unregistering): Released all slaves
[  259.933089][T27488] 9pnet_fd: Insufficient options for proto=fd
[  259.993859][T27496] netlink: 'syz.2.3794': attribute type 4 has an invalid length.
[  260.055471][T27499] hub 6-0:1.0: USB hub found
[  260.061150][T27499] hub 6-0:1.0: 8 ports detected
[  260.188268][T27516] loop0: detected capacity change from 0 to 128
[  260.313610][T27528] loop2: detected capacity change from 0 to 512
[  260.320776][T27528] EXT4-fs: Ignoring removed nobh option
[  260.552984][T27530] loop0: detected capacity change from 0 to 128
[  260.635938][T27532] 9pnet_fd: Insufficient options for proto=fd
[  260.705447][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'.
[  260.717153][T27530] netlink: 'syz.0.3802': attribute type 3 has an invalid length.
[  260.736324][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3799: corrupted inode contents
[  260.756846][T27528] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3799: mark_inode_dirty error
[  260.768987][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3799: corrupted inode contents
[  260.781169][T27528] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3799: mark_inode_dirty error
[  260.793590][T27528] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3799: Failed to acquire dquot type 0
[  260.806233][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3799: corrupted inode contents
[  260.818817][T27528] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3799: mark_inode_dirty error
[  260.830765][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3799: corrupted inode contents
[  260.844360][T27528] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3799: mark_inode_dirty error
[  260.856451][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3799: corrupted inode contents
[  260.870181][T27528] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  260.879094][T27528] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3799: corrupted inode contents
[  260.891424][T27528] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3799: mark_inode_dirty error
[  260.904064][T27528] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  260.914461][T27528] EXT4-fs (loop2): 1 truncate cleaned up
[  260.920641][T27528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.933297][T27528] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.979060][T27571] hub 6-0:1.0: USB hub found
[  260.979531][T27574] xt_CT: You must specify a L4 protocol and not use inversions on it
[  260.983944][T27571] hub 6-0:1.0: 8 ports detected
[  261.006815][T27574] netlink: '+}[@': attribute type 2 has an invalid length.
[  261.025443][T27578] loop1: detected capacity change from 0 to 128
[  261.070968][T27574] bridge0: entered promiscuous mode
[  261.076299][T27574] macsec1: entered promiscuous mode
[  261.084408][T27574] bridge0: port 3(macsec1) entered blocking state
[  261.091141][T27574] bridge0: port 3(macsec1) entered disabled state
[  261.099087][T27574] macsec1: entered allmulticast mode
[  261.104399][T27574] bridge0: entered allmulticast mode
[  261.110319][T27574] macsec1: left allmulticast mode
[  261.115449][T27574] bridge0: left allmulticast mode
[  261.122003][T27574] bridge0: left promiscuous mode
[  261.162756][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.042160][T27614] loop2: detected capacity change from 0 to 128
[  262.058248][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'.
[  262.068164][T27614] netlink: 'syz.2.3818': attribute type 3 has an invalid length.
[  262.102162][T27621] binfmt_misc: register: failed to install interpreter file ./file0
[  262.142277][T27628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3819'.
[  262.161800][T27628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.171913][T27628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  262.182543][T27628] bond0 (unregistering): Released all slaves
[  262.191437][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'.
[  262.271936][T27680] hub 6-0:1.0: USB hub found
[  262.276650][T27680] hub 6-0:1.0: 8 ports detected
[  262.302690][T27688] loop0: detected capacity change from 0 to 128
[  262.434833][T27716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3826'.
[  262.493898][   T29] kauditd_printk_skb: 1468 callbacks suppressed
[  262.493916][   T29] audit: type=1326 audit(1753580617.365:52550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.526050][   T29] audit: type=1326 audit(1753580617.365:52551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.550414][   T29] audit: type=1326 audit(1753580617.365:52552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.553547][T27728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  262.574863][   T29] audit: type=1326 audit(1753580617.365:52553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.605939][   T29] audit: type=1326 audit(1753580617.365:52554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.630533][   T29] audit: type=1326 audit(1753580617.365:52555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.654958][   T29] audit: type=1326 audit(1753580617.365:52556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.662711][T27728] netlink: '+}[@': attribute type 2 has an invalid length.
[  262.678605][   T29] audit: type=1326 audit(1753580617.365:52557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.710120][   T29] audit: type=1326 audit(1753580617.365:52558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.733823][   T29] audit: type=1326 audit(1753580617.365:52559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a434e9a9 code=0x7ffc0000
[  262.742814][T27728] bridge0: entered promiscuous mode
[  262.764424][T27728] macsec0: entered promiscuous mode
[  262.771614][T27728] bridge0: port 3(macsec0) entered blocking state
[  262.778291][T27728] bridge0: port 3(macsec0) entered disabled state
[  262.785787][T27728] macsec0: entered allmulticast mode
[  262.791295][T27728] bridge0: entered allmulticast mode
[  262.799748][T27728] macsec0: left allmulticast mode
[  262.802194][T27735] loop4: detected capacity change from 0 to 128
[  262.804895][T27728] bridge0: left allmulticast mode
[  262.822969][T27735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3830'.
[  262.824441][T27728] bridge0: left promiscuous mode
[  262.832090][T27735] netlink: 'syz.4.3830': attribute type 3 has an invalid length.
[  263.033296][T27744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3831'.
[  263.077439][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x4
[  263.085901][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x2
[  263.103395][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.111832][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.119678][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.127458][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.135193][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.143718][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.151483][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.159232][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.167694][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.175456][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.183134][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.190840][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.199542][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.207508][ T1035] hid-generic 0000:3000000:0000.003C: unknown main item tag 0x0
[  263.321578][ T1035] hid-generic 0000:3000000:0000.003C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  263.355540][T27772] fido_id[27772]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  263.479831][T27787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3838'.
[  263.629580][T27807] xt_CT: You must specify a L4 protocol and not use inversions on it
[  263.641246][T27806] loop0: detected capacity change from 0 to 128
[  263.649392][T27807] netlink: '+}[@': attribute type 2 has an invalid length.
[  263.666930][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'.
[  263.681100][T27806] netlink: 'syz.0.3841': attribute type 3 has an invalid length.
[  263.689230][T27814] loop2: detected capacity change from 0 to 512
[  263.689821][T27813] loop4: detected capacity change from 0 to 512
[  263.716012][T27813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  263.729439][T27814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  263.746756][T27814] System zones: 1-12
[  263.765444][T27813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.778773][T27814] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.3843: error while reading EA inode 32 err=-116
[  263.793294][T27813] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  263.818709][T27814] EXT4-fs (loop2): Remounting filesystem read-only
[  263.825429][T27814] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  263.840621][T27807] macsec1: entered promiscuous mode
[  263.846201][T27807] bridge0: entered promiscuous mode
[  263.852730][T27814] EXT4-fs (loop2): 1 orphan inode deleted
[  263.859031][T27814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.871512][T27807] bridge0: port 3(macsec1) entered blocking state
[  263.878153][T27807] bridge0: port 3(macsec1) entered disabled state
[  263.891541][T27807] macsec1: entered allmulticast mode
[  263.897086][T27807] bridge0: entered allmulticast mode
[  263.898341][T22576] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.904728][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.921810][T27807] macsec1: left allmulticast mode
[  263.926929][T27807] bridge0: left allmulticast mode
[  263.933732][T27807] bridge0: left promiscuous mode
[  263.955368][T27845] 9pnet_fd: Insufficient options for proto=fd
[  263.996527][T27852] loop2: detected capacity change from 0 to 128
[  264.082871][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'.
[  264.105383][T27876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3851'.
[  264.175513][T27888] loop1: detected capacity change from 0 to 128
[  264.206571][T27888] netlink: 'syz.1.3855': attribute type 3 has an invalid length.
[  264.280295][T27915] 9pnet_fd: Insufficient options for proto=fd
[  264.361793][T27927] FAULT_INJECTION: forcing a failure.
[  264.361793][T27927] name failslab, interval 1, probability 0, space 0, times 0
[  264.375326][T27927] CPU: 0 UID: 0 PID: 27927 Comm: syz.2.3862 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  264.375362][T27927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  264.375379][T27927] Call Trace:
[  264.375385][T27927]  <TASK>
[  264.375392][T27927]  __dump_stack+0x1d/0x30
[  264.375412][T27927]  dump_stack_lvl+0xe8/0x140
[  264.375430][T27927]  dump_stack+0x15/0x1b
[  264.375518][T27927]  should_fail_ex+0x265/0x280
[  264.375557][T27927]  should_failslab+0x8c/0xb0
[  264.375577][T27927]  kmem_cache_alloc_node_noprof+0x57/0x320
[  264.375602][T27927]  ? __alloc_skb+0x101/0x320
[  264.375648][T27927]  __alloc_skb+0x101/0x320
[  264.375709][T27927]  netlink_alloc_large_skb+0xba/0xf0
[  264.375738][T27927]  netlink_sendmsg+0x3cf/0x6b0
[  264.375805][T27927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  264.375823][T27927]  __sock_sendmsg+0x142/0x180
[  264.375846][T27927]  ____sys_sendmsg+0x31e/0x4e0
[  264.375866][T27927]  ___sys_sendmsg+0x17b/0x1d0
[  264.375911][T27927]  __x64_sys_sendmsg+0xd4/0x160
[  264.375932][T27927]  x64_sys_call+0x2999/0x2fb0
[  264.375952][T27927]  do_syscall_64+0xd2/0x200
[  264.375969][T27927]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  264.376075][T27927]  ? clear_bhb_loop+0x40/0x90
[  264.376132][T27927]  ? clear_bhb_loop+0x40/0x90
[  264.376152][T27927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.376171][T27927] RIP: 0033:0x7f99827ce9a9
[  264.376221][T27927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.376238][T27927] RSP: 002b:00007f9980e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  264.376289][T27927] RAX: ffffffffffffffda RBX: 00007f99829f5fa0 RCX: 00007f99827ce9a9
[  264.376299][T27927] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000007
[  264.376310][T27927] RBP: 00007f9980e2f090 R08: 0000000000000000 R09: 0000000000000000
[  264.376321][T27927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.376332][T27927] R13: 0000000000000000 R14: 00007f99829f5fa0 R15: 00007ffc6a46d868
[  264.376350][T27927]  </TASK>
[  265.310931][T27957] loop3: detected capacity change from 0 to 128
[  265.334346][T27957] netlink: 'syz.3.3867': attribute type 3 has an invalid length.
[  265.357323][T27961] loop0: detected capacity change from 0 to 512
[  265.397817][T27961] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  265.410185][T27976] loop3: detected capacity change from 0 to 512
[  265.415055][T27961] EXT4-fs (loop0): mount failed
[  265.448837][T27976] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  265.652317][T27976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.530571][T28006] loop4: detected capacity change from 0 to 512
[  266.538070][T28006] EXT4-fs: Ignoring removed nobh option
[  266.556402][T28005] loop0: detected capacity change from 0 to 512
[  266.563885][T28005] EXT4-fs: Ignoring removed nobh option
[  266.619566][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3874: corrupted inode contents
[  266.620221][T27976] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.633041][T28005] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3874: mark_inode_dirty error
[  266.698351][T28017] loop2: detected capacity change from 0 to 128
[  266.701168][T19085] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.718332][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3874: corrupted inode contents
[  266.731388][T28005] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3874: mark_inode_dirty error
[  266.731403][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3872: corrupted inode contents
[  266.731538][T28005] ==================================================================
[  266.731583][T28005] BUG: KCSAN: data-race in data_push_tail / vsnprintf
[  266.731631][T28005] 
[  266.731641][T28005] write to 0xffffffff88e3f2e8 of 24 bytes by task 28006 on cpu 1:
[  266.731663][T28005]  vsnprintf+0x2ce/0x890
[  266.731696][T28005]  vscnprintf+0x41/0x90
[  266.731728][T28005]  printk_sprint+0x30/0x2d0
[  266.731754][T28005]  vprintk_store+0x599/0x860
[  266.731779][T28005]  vprintk_emit+0x178/0x650
[  266.731797][T28005]  vprintk_default+0x26/0x30
[  266.731816][T28005]  vprintk+0x1d/0x30
[  266.731843][T28005]  _printk+0x79/0xa0
[  266.731877][T28005]  __ext4_error_inode+0x2ca/0x3f0
[  266.731900][T28005]  ext4_mark_iloc_dirty+0x35e/0xda0
[  266.731926][T28005]  __ext4_mark_inode_dirty+0x2e2/0x3f0
[  266.731969][T28005]  ext4_dirty_inode+0x92/0xc0
[  266.731992][T28005]  __mark_inode_dirty+0x15c/0x760
[  266.732011][T28005]  ext4_mb_new_blocks+0x10b9/0x2050
[  266.732029][T28005]  ext4_ext_map_blocks+0xff5/0x38a0
[  266.732056][T28005]  ext4_map_blocks+0x61c/0xd70
[  266.732086][T28005]  ext4_getblk+0x114/0x510
[  266.732102][T28005]  ext4_bread+0x28/0x110
[  266.732118][T28005]  ext4_quota_write+0x167/0x360
[  266.732142][T28005]  get_free_dqblk+0x20b/0x340
[  266.732164][T28005]  do_insert_tree+0x19a/0x9b0
[  266.732186][T28005]  do_insert_tree+0x753/0x9b0
[  266.732207][T28005]  do_insert_tree+0x753/0x9b0
[  266.732229][T28005]  do_insert_tree+0x753/0x9b0
[  266.732250][T28005]  qtree_write_dquot+0x2cb/0x300
[  266.732289][T28005]  v2_write_dquot+0xda/0x140
[  266.732309][T28005]  dquot_acquire+0x1c3/0x2b0
[  266.732338][T28005]  ext4_acquire_dquot+0x15f/0x200
[  266.732364][T28005]  dqget+0x535/0x8d0
[  266.732392][T28005]  __dquot_initialize+0x27f/0x7c0
[  266.732431][T28005]  dquot_initialize+0x1a/0x30
[  266.732460][T28005]  ext4_process_orphan+0x32/0x1c0
[  266.732484][T28005]  ext4_orphan_cleanup+0x6a8/0xa00
[  266.732508][T28005]  ext4_fill_super+0x3171/0x34e0
[  266.732528][T28005]  get_tree_bdev_flags+0x291/0x300
[  266.732558][T28005]  get_tree_bdev+0x1f/0x30
[  266.732588][T28005]  ext4_get_tree+0x1c/0x30
[  266.732607][T28005]  vfs_get_tree+0x54/0x1d0
[  266.732636][T28005]  do_new_mount+0x207/0x680
[  266.732664][T28005]  path_mount+0x4a4/0xb20
[  266.732692][T28005]  __se_sys_mount+0x28f/0x2e0
[  266.732722][T28005]  __x64_sys_mount+0x67/0x80
[  266.732751][T28005]  x64_sys_call+0xd36/0x2fb0
[  266.732771][T28005]  do_syscall_64+0xd2/0x200
[  266.732789][T28005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.732809][T28005] 
[  266.732816][T28005] read to 0xffffffff88e3f2f8 of 8 bytes by task 28005 on cpu 0:
[  266.732832][T28005]  data_push_tail+0xfd/0x420
[  266.732861][T28005]  data_alloc+0xbf/0x2b0
[  266.732888][T28005]  prb_reserve+0x808/0xaf0
[  266.732915][T28005]  vprintk_store+0x56d/0x860
[  266.732932][T28005]  vprintk_emit+0x178/0x650
[  266.732957][T28005]  vprintk_default+0x26/0x30
[  266.732975][T28005]  vprintk+0x1d/0x30
[  266.732999][T28005]  _printk+0x79/0xa0
[  266.733026][T28005]  __ext4_error_inode+0x2ca/0x3f0
[  266.733047][T28005]  __ext4_mark_inode_dirty+0xbd/0x3f0
[  266.733077][T28005]  __ext4_ext_dirty+0xdb/0x1f0
[  266.733103][T28005]  ext4_ext_insert_extent+0x13db/0x29b0
[  266.733131][T28005]  ext4_ext_map_blocks+0x10b8/0x38a0
[  266.733158][T28005]  ext4_map_blocks+0x61c/0xd70
[  266.733189][T28005]  ext4_getblk+0x114/0x510
[  266.733205][T28005]  ext4_bread+0x28/0x110
[  266.733221][T28005]  ext4_quota_write+0x167/0x360
[  266.733245][T28005]  get_free_dqblk+0x20b/0x340
[  266.733267][T28005]  do_insert_tree+0x19a/0x9b0
[  266.733289][T28005]  do_insert_tree+0x753/0x9b0
[  266.733311][T28005]  do_insert_tree+0x753/0x9b0
[  266.733333][T28005]  do_insert_tree+0x753/0x9b0
[  266.733354][T28005]  qtree_write_dquot+0x2cb/0x300
[  266.733376][T28005]  v2_write_dquot+0xda/0x140
[  266.733396][T28005]  dquot_acquire+0x1c3/0x2b0
[  266.733431][T28005]  ext4_acquire_dquot+0x15f/0x200
[  266.733456][T28005]  dqget+0x535/0x8d0
[  266.733484][T28005]  __dquot_initialize+0x27f/0x7c0
[  266.733514][T28005]  dquot_initialize+0x1a/0x30
[  266.733544][T28005]  ext4_process_orphan+0x32/0x1c0
[  266.733568][T28005]  ext4_orphan_cleanup+0x6a8/0xa00
[  266.733591][T28005]  ext4_fill_super+0x3171/0x34e0
[  266.733611][T28005]  get_tree_bdev_flags+0x291/0x300
[  266.733640][T28005]  get_tree_bdev+0x1f/0x30
[  266.733668][T28005]  ext4_get_tree+0x1c/0x30
[  266.733686][T28005]  vfs_get_tree+0x54/0x1d0
[  266.733715][T28005]  do_new_mount+0x207/0x680
[  266.733748][T28005]  path_mount+0x4a4/0xb20
[  266.733775][T28005]  __se_sys_mount+0x28f/0x2e0
[  266.733804][T28005]  __x64_sys_mount+0x67/0x80
[  266.733833][T28005]  x64_sys_call+0xd36/0x2fb0
[  266.733853][T28005]  do_syscall_64+0xd2/0x200
[  266.733871][T28005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.733891][T28005] 
[  266.733896][T28005] value changed: 0x00000000fffffd8b -> 0x6f6c206563697665
[  266.733908][T28005] 
[  266.733913][T28005] Reported by Kernel Concurrency Sanitizer on:
[  266.733924][T28005] CPU: 0 UID: 0 PID: 28005 Comm: syz.0.3874 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(voluntary) 
[  266.733950][T28005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  266.733963][T28005] ==================================================================
[  266.793243][T28006] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3872: mark_inode_dirty error
[  266.798950][T28005] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3874: Failed to acquire dquot type 0
[  266.803522][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3872: corrupted inode contents
[  266.807316][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3874: corrupted inode contents
[  266.811899][T28006] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3872: mark_inode_dirty error
[  266.816732][T28005] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3874: mark_inode_dirty error
[  266.821225][T28006] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3872: Failed to acquire dquot type 0
[  266.824546][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3874: corrupted inode contents
[  266.830406][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3872: corrupted inode contents
[  266.835548][T28005] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3874: mark_inode_dirty error
[  266.842837][T28006] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3872: mark_inode_dirty error
[  266.846300][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3874: corrupted inode contents
[  266.850847][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3872: corrupted inode contents
[  266.858052][T28005] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  266.862040][T28006] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3872: mark_inode_dirty error
[  266.865149][T28005] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3874: corrupted inode contents
[  266.889607][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3872: corrupted inode contents
[  266.894261][T28005] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3874: mark_inode_dirty error
[  266.899917][T28006] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  266.904121][T28005] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  266.908330][T28006] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3872: corrupted inode contents
[  266.913801][T28005] EXT4-fs (loop0): 1 truncate cleaned up
[  266.917920][T28006] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3872: mark_inode_dirty error
[  266.921547][T28005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.927379][T28006] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  266.931869][T28005] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.940038][T28006] EXT4-fs (loop4): 1 truncate cleaned up
[  267.532360][T28038] __nla_validate_parse: 3 callbacks suppressed
[  267.532382][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'.
[  267.565204][T28006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.565329][T28006] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.680206][T21762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.005017][T20764] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.