last executing test programs:

2.16581458s ago: executing program 4 (id=697):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@fowner_eq}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
pipe(&(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000055c67c9b29e4339000"/33], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)

1.867374054s ago: executing program 2 (id=699):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@fowner_eq}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
pipe(&(0x7f0000000080))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000060000000c00000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000055c67c9b29e4339000"/33], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)

1.711021516s ago: executing program 3 (id=701):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="911023000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x14, &(0x7f0000000c00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_read_part_table(0x5c8, &(0x7f0000000600)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x47)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32, @ANYRES32], 0x254}}, 0x0)
close(r1)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0xffffffff)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400, 0x80000213, 0x0, r1}, &(0x7f0000000380)=<r5=>0x0, &(0x7f0000000400)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") (fail_nth: 7)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0)
recvmmsg(r3, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x2}}], 0x1, 0x0, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)

1.633137988s ago: executing program 4 (id=704):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1e}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18)
timer_settime(0x0, 0x1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000), 0x4)
setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

1.308342822s ago: executing program 2 (id=705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r3, 0x11, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1bb30400000000000000010000000c000600020000000200000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.308084622s ago: executing program 3 (id=706):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)

1.260981673s ago: executing program 3 (id=707):
syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x2, 0x2, 0x75}, &(0x7f0000000200), &(0x7f0000000100))
unshare(0x22020600)
r0 = getpgrp(0x0)
r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x80, 0xa, 0xa9, 0x7, 0x0, 0x100, 0x30, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x8, 0x10, 0x0, 0x8000000000000000, 0x800, 0x4, 0x0, 0x1, 0x0, 0x6691}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10400, 0x10000, 0x0, 0x1, 0x3, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, r1, 0x2)
socket$unix(0x1, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0})
syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000849078ac2414bbac1414bbf2dfbc81cfe0ca1b360883fff0380bc570be8713335242c633ddc07891ce553197c46b7c937181fe7451a4bc40a3a0b93df7fa58cf0f2e499d091c160b94d37e56d31594aabae03245085cf88dcfaf9ffbada33529c7096c0e1f89c3d0ffc1bbc0a3db52915689"], 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0})

1.257084683s ago: executing program 1 (id=708):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f0000019380)={'#! ', './file0'}, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)

1.202690533s ago: executing program 4 (id=709):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c61"], 0xfc}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r6, r3, 0x0, 0x7ffff000)

1.197625464s ago: executing program 1 (id=710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})

1.125772204s ago: executing program 0 (id=711):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r1=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000001, 0x8}, 0x4c58, 0x10000, 0x0, 0x1, 0x9, 0x8, 0x1b, 0x0, 0x0, 0x0, 0x8000000000000002}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000)

1.125436594s ago: executing program 3 (id=712):
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160)
r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_user(r5, &(0x7f0000000080)=ANY=[@ANYRES8=r5], 0x27)

1.078751625s ago: executing program 2 (id=713):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20000801)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.004439826s ago: executing program 0 (id=714):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20000801)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400))
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

988.846326ms ago: executing program 1 (id=715):
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x4a, 0x2}}, 0x1c}}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000007c0)="b628becaf37475845f98f671b20f0aec3b319832b810e3429f41e4035c2643527cea897f570b10b6ade1b99d2714160f8900409c8a7357969f5315957ff6444f5783a6eb0c8332f524c16a7e7569b710a11880ec540b0c05b660cf9c854a0c73b586318345361a0e427fdfba3e64d8b26f78a291e3b76901be0836bf5c27a455649d243507402b25e14c47c8c1e77b4d5e06e584a9be5762bbec677a4007bb5532f1b44f60daffde61cf22ee8b9455ece0e895bbd9d9e51c302279c5c79f99ada8a79983dd3e2d61cd233ee76c4da3561e07d09bbbbdeaf168b817b4b5f43513f1cf53cc2b50a8028e3ea491e6bb530917f5f2e0b406", &(0x7f0000000a00)=""/249}, 0x20)
writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="baecff", 0x3}], 0x2)

687.348251ms ago: executing program 0 (id=716):
clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0xfb, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x3})
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200))
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
tkill(r3, 0x23)
listen(r2, 0xc)
connect$x25(r2, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r4=>0x0, @loopback, @multicast2}, &(0x7f0000000400)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="180675e99d00040000000000ec000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3ff, 0xb0, &(0x7f0000000680)=""/176, 0x40f00, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x0, 0x4f75, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x0, 0x1, 0xc, 0x3}], 0x10, 0x6}, 0x94)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10)
pipe2$9p(&(0x7f0000001900)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
r9 = dup(r8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x400000000}, 0x18)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)

597.838512ms ago: executing program 1 (id=717):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000019380)={'#! ', './file0'}, 0x5)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000400)={[{@oldalloc}, {@nobh}, {@resgid}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0xfe, 0x483, &(0x7f0000000dc0)="$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")

564.820402ms ago: executing program 4 (id=718):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)

563.936732ms ago: executing program 2 (id=719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x400}, 0x18)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYBLOB="a97025416c65d6f057f4b41e5622000adcdf9f83d7bd", @ANYRESHEX=r5, @ANYBLOB="e9a7b8473c4c6f7e2e79eaee60616608aa91d3c60792c7a3b35efb98d0d0953916692226bdc0265e42601894fd0af109b6dfcf853815e3fd66f0326ef10a2bec1d8168b11c53dd888307a4e232ee27b213d1ac143ccb9f416efb316a2499535e800f13a4747454325ae1ecccc0c02f497a070fdf3d9a0f6c1099a69880be961ca385750dd87996b96d422ae36e3dcdc6e10d4c6ab41f7cf486648098abe918597e31bdc1d1f086d96f7e85984bec90b3d1864ca274ea1bfef7fa6f2e3dac8641eb7e76f55c6f2184fcc5511ea85aaabf3b4e65e55fe225e1d38030a09b2b4ea2f971eb2df51384799ac6f05244be20a53a6d9326dd9ee30d"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18)
lstat(0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000200), &(0x7f0000000540)=r0}, 0x20)
sync()

500.813583ms ago: executing program 0 (id=720):
syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0x4a, 0x2}}, 0x1c}}, 0x80)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0)
write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000007c0)="b628becaf37475845f98f671b20f0aec3b319832b810e3429f41e4035c2643527cea897f570b10b6ade1b99d2714160f8900409c8a7357969f5315957ff6444f5783a6eb0c8332f524c16a7e7569b710a11880ec540b0c05b660cf9c854a0c73b586318345361a0e427fdfba3e64d8b26f78a291e3b76901be0836bf5c27a455649d243507402b25e14c47c8c1e77b4d5e06e584a9be5762bbec677a4007bb5532f1b44f60daffde61cf22ee8b9455ece0e895bbd9d9e51c302279c5c79f99ada8a79983dd3e2d61cd233ee76c4da3561e07d09bbbbdeaf168b817b4b5f43513f1cf53cc2b50a8028e3ea491e6bb530917f5f2e0b406", &(0x7f0000000a00)=""/249}, 0x20)
writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000140)="baecff", 0x3}], 0x2)

495.754183ms ago: executing program 4 (id=721):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
r3 = getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2)
sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)

409.974665ms ago: executing program 1 (id=722):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x1800403, &(0x7f0000000980), 0x0, 0x5ad, &(0x7f0000000180)="$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")
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0)
r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000740)={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c)
write$selinux_validatetrans(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79)

373.628225ms ago: executing program 2 (id=723):
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@prjquota}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@noblock_validity}, {@noblock_validity}, {@debug_want_extra_isize}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@fowner_eq}, {@euid_lt}, {@measure}, {@euid_eq}]}, 0x1, 0x567, &(0x7f0000000b00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
utimes(&(0x7f0000001ac0)='./file1\x00', 0x0)

250.700776ms ago: executing program 1 (id=724):
epoll_create(0x3ff)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
io_uring_setup(0x3bc2, &(0x7f0000000340)={0x0, 0x560e, 0x221, 0x3, 0xd3})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = memfd_secret(0x80000)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
io_setup(0x2, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10)
futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x1, 0xa3020000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000080000070000007b8af8ff05000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000950000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
r9 = epoll_create1(0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRESOCT=r9, @ANYRES16=r9, @ANYBLOB, @ANYRES32, @ANYRES64=r9], 0x50)

207.697097ms ago: executing program 0 (id=725):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100766574"], 0xfc}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r4, &(0x7f0000004200), 0x0)
sendfile(r4, r3, 0x0, 0x3ffff)

206.776827ms ago: executing program 3 (id=726):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1bb30400000000000000010000000c000600020000000200000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

142.040318ms ago: executing program 2 (id=727):
unshare(0x26020480)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xa200, 0x0)
ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0xe, 0x3}, {0xe, 0x8}, {0x6, 0x2648cdc9}, {0x10, 0xd}, {0x10, 0xd}, {0x10, 0x6}, {0xd, 0x2}]}]}, {0x0, [0x61, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x5f, 0x0]}}, &(0x7f0000000640)=""/186, 0x66, 0xba, 0x1, 0x5}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800feffffffffffffff0000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000954cb6e18e3fd091b7cfc49abd5160c5d3b392c689cd3ba6b572"], &(0x7f0000000580)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x2000426, &(0x7f0000000700)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@acl}, {@user_xattr}, {@errors_remount}, {@nodioread_nolock}]}, 0x3, 0x43d, &(0x7f0000001500)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mq_unlink(&(0x7f0000000000)='eth0\x00')

114.043298ms ago: executing program 3 (id=728):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r3 = openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0)
write(r5, &(0x7f0000004200)='t', 0x1)
sendfile(r5, r4, 0x0, 0x3ffff)
sendfile(r5, r4, 0x0, 0x7ffff000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
sendfile(r6, r3, 0x0, 0x7ffff000)

1.11063ms ago: executing program 0 (id=729):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000000000000000950000000000010095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
r5 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r5, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/113, 0x71, <r6=>0x0, &(0x7f0000000340)=""/106, 0x6a}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xd, &(0x7f0000000440)=@raw=[@exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000500)='syzkaller\x00', 0x6, 0xe8, &(0x7f0000000540)=""/232, 0x40f00, 0x21, '\x00', 0x0, @sk_reuseport=0x4e, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x47}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000600)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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")
r8 = openat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x430702, 0x100, 0x2}, 0x18)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4010, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x2, 0x2, 0x6, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xa7, &(0x7f00000000c0)=""/167, 0x41100, 0x45, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0x7, 0xfffffff8}, 0x10, r6, r7, 0x7, &(0x7f0000000880)=[r8, r9], &(0x7f00000008c0)=[{0x1, 0x1, 0x7, 0x3}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xf, 0x8}, {0x4, 0x4, 0xd0, 0xc}, {0x3, 0x2, 0xa, 0x8}, {0x4, 0x2, 0xa, 0x7}, {0xffffffff, 0x1, 0xb, 0x8}], 0x10, 0xab5d}, 0x94)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="181300002800bc5fb82708000000000000008b04000008fcdbdf", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 4 (id=730):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100766574"], 0xfc}}, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0)
write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1)
sendfile(0xffffffffffffffff, r3, 0x0, 0x3ffff)

kernel console output (not intermixed with test programs):

00-000000000000 r/w without journal. Quota mode: writeback.
[   41.848649][ T4027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.859920][ T4042] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.898605][ T4050] netlink: 76 bytes leftover after parsing attributes in process `syz.2.227'.
[   41.919726][ T4027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.933607][   T29] audit: type=1326 audit(1751391787.862:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.3.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   42.017537][ T4055] geneve2: entered promiscuous mode
[   42.022855][ T4055] geneve2: entered allmulticast mode
[   42.028569][ T4053] loop1: detected capacity change from 0 to 1024
[   42.051100][ T4053] EXT4-fs: Ignoring removed orlov option
[   42.075985][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.083408][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.104623][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.105216][ T4060] bridge_slave_1: left allmulticast mode
[   42.123000][ T4060] bridge_slave_1: left promiscuous mode
[   42.128662][ T4060] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.141701][ T4060] bridge_slave_0: left allmulticast mode
[   42.147441][ T4060] bridge_slave_0: left promiscuous mode
[   42.153188][ T4060] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.191670][ T4057] loop4: detected capacity change from 0 to 8192
[   42.350416][ T4070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'.
[   42.367724][ T4066] lo speed is unknown, defaulting to 1000
[   42.414562][ T4072] loop4: detected capacity change from 0 to 1024
[   42.456766][ T4072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.562602][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.649447][ T4078] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.695322][ T4080] random: crng reseeded on system resumption
[   42.702700][ T4078] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.717440][ T4080] Restarting kernel threads ...
[   42.722759][ T4080] Done restarting kernel threads.
[   42.724032][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.742126][ T4083] geneve2: entered promiscuous mode
[   42.747412][ T4083] geneve2: entered allmulticast mode
[   42.775866][ T4078] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.797691][ T4086] loop1: detected capacity change from 0 to 512
[   42.856281][ T4078] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   42.875789][ T4090] loop4: detected capacity change from 0 to 1024
[   42.886407][ T4090] EXT4-fs: Ignoring removed orlov option
[   42.899072][ T4090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.912470][ T4090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.928744][ T4078] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.948245][ T4078] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.979363][ T4078] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   43.013680][ T4078] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   43.186718][ T4100] netlink: 76 bytes leftover after parsing attributes in process `syz.2.243'.
[   43.383137][ T4105] siw: device registration error -23
[   43.621872][ T4112] loop3: detected capacity change from 0 to 1024
[   43.658350][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.686636][ T4112] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.247: Allocating blocks 385-513 which overlap fs metadata
[   43.727312][ T4112] EXT4-fs (loop3): pa ffff888106ead1c0: logic 16, phys. 129, len 24
[   43.735499][ T4112] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   43.761162][ T4117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'.
[   43.818416][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.862861][ T4120] loop1: detected capacity change from 0 to 512
[   43.898165][ T4120] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   43.937698][ T4120] EXT4-fs (loop1): 1 truncate cleaned up
[   43.960304][ T4120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.993880][ T4126] loop3: detected capacity change from 0 to 1024
[   44.004996][ T4126] EXT4-fs: Ignoring removed orlov option
[   44.014300][ T4126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.098476][ T4129] loop4: detected capacity change from 0 to 512
[   44.139261][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.165040][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.226270][ T4138] loop2: detected capacity change from 0 to 1024
[   44.233379][ T4138] EXT4-fs: Ignoring removed orlov option
[   44.246941][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.272381][ T4140] geneve2: entered promiscuous mode
[   44.277642][ T4140] geneve2: entered allmulticast mode
[   44.337043][ T4144] geneve2: entered promiscuous mode
[   44.342407][ T4144] geneve2: entered allmulticast mode
[   44.450561][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.550203][ T4155] loop3: detected capacity change from 0 to 1024
[   44.602184][ T4159] loop4: detected capacity change from 0 to 512
[   44.617445][ T4155] EXT4-fs: Ignoring removed orlov option
[   44.629730][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.730162][ T4162] hub 8-0:1.0: USB hub found
[   44.735107][ T4162] hub 8-0:1.0: 8 ports detected
[   44.863450][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.885792][ T4166] loop1: detected capacity change from 0 to 512
[   44.946430][ T4168] loop2: detected capacity change from 0 to 1024
[   45.117392][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.132924][ T4168] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.264: Allocating blocks 385-513 which overlap fs metadata
[   45.190030][ T4168] EXT4-fs (loop2): pa ffff888106ead310: logic 16, phys. 129, len 24
[   45.198134][ T4168] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   45.229121][ T4166] EXT4-fs (loop1): 1 orphan inode deleted
[   45.235832][ T4170] siw: device registration error -23
[   45.249844][ T2246] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1
[   45.275209][ T4166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.301607][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.388629][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.391176][ T4177] random: crng reseeded on system resumption
[   45.398076][ T4166] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   45.447260][ T4179] loop2: detected capacity change from 0 to 128
[   45.448402][ T4177] Restarting kernel threads ...
[   45.476351][ T4177] Done restarting kernel threads.
[   45.499047][ T4181] loop3: detected capacity change from 0 to 1024
[   45.532717][ T4181] EXT4-fs: Ignoring removed orlov option
[   45.563590][ T4179] bio_check_eod: 83 callbacks suppressed
[   45.563607][ T4179] syz.2.266: attempt to access beyond end of device
[   45.563607][ T4179] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   45.583156][ T4179] syz.2.266: attempt to access beyond end of device
[   45.583156][ T4179] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   45.585095][ T4181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.609729][ T4179] syz.2.266: attempt to access beyond end of device
[   45.609729][ T4179] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   45.652050][ T4179] syz.2.266: attempt to access beyond end of device
[   45.652050][ T4179] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   45.685856][ T4179] syz.2.266: attempt to access beyond end of device
[   45.685856][ T4179] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   45.699384][ T4179] syz.2.266: attempt to access beyond end of device
[   45.699384][ T4179] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   45.712818][ T4179] syz.2.266: attempt to access beyond end of device
[   45.712818][ T4179] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   45.726343][ T4179] syz.2.266: attempt to access beyond end of device
[   45.726343][ T4179] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   45.739864][ T4179] syz.2.266: attempt to access beyond end of device
[   45.739864][ T4179] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   45.753748][ T4179] syz.2.266: attempt to access beyond end of device
[   45.753748][ T4179] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[   45.851670][ T4189] loop2: detected capacity change from 0 to 512
[   45.940895][ T4191] loop4: detected capacity change from 0 to 1024
[   45.948193][ T4191] EXT4-fs: Ignoring removed orlov option
[   45.971629][ T4191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.188436][ T4195] loop2: detected capacity change from 0 to 8192
[   46.197527][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.255623][ T4200] loop3: detected capacity change from 0 to 128
[   46.307249][ T4203] loop0: detected capacity change from 0 to 128
[   46.397524][ T4207] loop2: detected capacity change from 0 to 512
[   46.446923][ T4207] EXT4-fs (loop2): 1 orphan inode deleted
[   46.453320][ T4207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.467354][ T3449] __quota_error: 153 callbacks suppressed
[   46.467366][ T3449] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   46.482979][ T3449] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1
[   46.813659][ T4207] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.825220][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.858783][ T4211] loop4: detected capacity change from 0 to 1024
[   46.898826][ T4211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.950491][ T4211] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.275: Allocating blocks 385-513 which overlap fs metadata
[   47.025452][ T4211] EXT4-fs (loop4): pa ffff888106ead380: logic 16, phys. 129, len 24
[   47.033535][ T4211] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   47.178457][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.275387][ T4220] siw: device registration error -23
[   47.282691][   T29] audit: type=1326 audit(1751391793.212:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.306020][   T29] audit: type=1326 audit(1751391793.212:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.329347][   T29] audit: type=1326 audit(1751391793.212:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.352591][   T29] audit: type=1326 audit(1751391793.212:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.375934][   T29] audit: type=1326 audit(1751391793.212:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.377642][ T4218] loop0: detected capacity change from 0 to 1024
[   47.399152][   T29] audit: type=1326 audit(1751391793.212:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.399200][   T29] audit: type=1326 audit(1751391793.212:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.432413][ T4222] random: crng reseeded on system resumption
[   47.452145][   T29] audit: type=1326 audit(1751391793.212:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.481255][   T29] audit: type=1326 audit(1751391793.212:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4219 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   47.505162][ T4218] EXT4-fs: Ignoring removed orlov option
[   47.625107][ T4218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.009339][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.260329][ T4239] loop3: detected capacity change from 0 to 512
[   48.303369][ T4236] loop0: detected capacity change from 0 to 1024
[   48.362483][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.408912][ T4236] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.293: Allocating blocks 385-513 which overlap fs metadata
[   48.466198][ T4236] EXT4-fs (loop0): pa ffff888106e62540: logic 16, phys. 129, len 24
[   48.474367][ T4236] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   48.497721][ T4244] loop3: detected capacity change from 0 to 512
[   48.571862][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.600645][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.645258][ T4247] loop0: detected capacity change from 0 to 1024
[   48.653826][ T4247] EXT4-fs: Ignoring removed orlov option
[   48.682797][ T4251] loop3: detected capacity change from 0 to 128
[   48.696973][ T4247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.849537][ T4258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.924004][ T4258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.028441][ T4258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.097679][ T4258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.123887][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.133031][ T4262] loop4: detected capacity change from 0 to 1024
[   49.157998][ T4262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.182184][ T4258] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.193350][ T4262] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.290: Allocating blocks 385-513 which overlap fs metadata
[   49.194800][ T4258] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.222541][ T4262] EXT4-fs (loop4): pa ffff888106e62540: logic 16, phys. 129, len 24
[   49.230641][ T4262] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   49.234970][ T4258] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.270387][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.293018][ T4266] loop0: detected capacity change from 0 to 512
[   49.306667][ T4258] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.382357][ T4268] loop4: detected capacity change from 0 to 1024
[   49.393431][ T4268] EXT4-fs: Ignoring removed orlov option
[   49.479774][ T4271] loop1: detected capacity change from 0 to 1024
[   49.502575][ T4271] EXT4-fs: Ignoring removed orlov option
[   49.527928][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.541585][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   49.606206][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'.
[   49.627229][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.709796][ T4278] loop4: detected capacity change from 0 to 512
[   49.855307][ T4281] loop4: detected capacity change from 0 to 128
[   49.916476][ T4283] lo speed is unknown, defaulting to 1000
[   49.937561][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.022078][ T4288] loop1: detected capacity change from 0 to 1024
[   50.043046][ T4293] loop3: detected capacity change from 0 to 1024
[   50.051459][ T4293] EXT4-fs: Ignoring removed orlov option
[   50.057759][ T4288] EXT4-fs: Ignoring removed orlov option
[   50.067296][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.086976][ T4293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.142681][ T4297] loop0: detected capacity change from 0 to 1024
[   50.200701][ T4297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.238991][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.395271][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.564798][ T4281] bio_check_eod: 49540 callbacks suppressed
[   50.564812][ T4281] syz.4.297: attempt to access beyond end of device
[   50.564812][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.584109][ T4281] syz.4.297: attempt to access beyond end of device
[   50.584109][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.613361][ T4307] loop0: detected capacity change from 0 to 8192
[   50.624766][ T4281] syz.4.297: attempt to access beyond end of device
[   50.624766][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.644896][ T4309] random: crng reseeded on system resumption
[   50.654923][ T4309] Restarting kernel threads ...
[   50.665019][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.674199][ T4309] Done restarting kernel threads.
[   50.679401][ T4281] syz.4.297: attempt to access beyond end of device
[   50.679401][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.713666][ T4311] loop1: detected capacity change from 0 to 1024
[   50.720474][ T4311] EXT4-fs: Ignoring removed orlov option
[   50.726247][ T4281] syz.4.297: attempt to access beyond end of device
[   50.726247][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.739818][ T4281] syz.4.297: attempt to access beyond end of device
[   50.739818][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.759732][ T4315] loop0: detected capacity change from 0 to 128
[   50.767789][ T4281] syz.4.297: attempt to access beyond end of device
[   50.767789][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.781712][ T4281] syz.4.297: attempt to access beyond end of device
[   50.781712][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.800410][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.852587][ T4281] syz.4.297: attempt to access beyond end of device
[   50.852587][ T4281] loop4: rw=0, sector=145, nr_sectors = 8 limit=128
[   50.860933][ T4315] syz.0.306: attempt to access beyond end of device
[   50.860933][ T4315] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[   50.907894][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.988766][ T4323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'.
[   51.019046][ T4325] loop3: detected capacity change from 0 to 512
[   51.240208][ T4329] loop4: detected capacity change from 0 to 1024
[   51.386734][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.396624][ T4329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.418855][ T4336] loop1: detected capacity change from 0 to 1024
[   51.430883][ T4329] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.310: Allocating blocks 385-513 which overlap fs metadata
[   51.472850][ T4336] EXT4-fs: Ignoring removed orlov option
[   51.523945][ T4337] hub 8-0:1.0: USB hub found
[   51.528796][ T4337] hub 8-0:1.0: 8 ports detected
[   51.544392][ T4337] SELinux: syz.3.311 (4337) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   51.627428][ T4336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.670123][ T4338] EXT4-fs (loop4): pa ffff888106e62540: logic 16, phys. 129, len 24
[   51.678227][ T4338] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   51.814169][ T4343] loop2: detected capacity change from 0 to 1024
[   51.873488][ T4343] EXT4-fs: Ignoring removed orlov option
[   51.899606][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.906297][ T4343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.913676][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.956450][ T4348] loop0: detected capacity change from 0 to 128
[   51.995696][ T4350] loop1: detected capacity change from 0 to 1024
[   52.005625][ T4350] EXT4-fs: Ignoring removed orlov option
[   52.015136][ T4352] loop4: detected capacity change from 0 to 512
[   52.088101][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.126265][   T29] kauditd_printk_skb: 39 callbacks suppressed
[   52.126280][   T29] audit: type=1326 audit(1751391798.062:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.155755][   T29] audit: type=1326 audit(1751391798.062:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.199372][   T29] audit: type=1326 audit(1751391798.112:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.222796][   T29] audit: type=1326 audit(1751391798.112:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.246112][   T29] audit: type=1326 audit(1751391798.112:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.269391][   T29] audit: type=1326 audit(1751391798.112:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.292740][   T29] audit: type=1326 audit(1751391798.112:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.316036][   T29] audit: type=1326 audit(1751391798.112:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.339469][   T29] audit: type=1326 audit(1751391798.112:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.362866][   T29] audit: type=1326 audit(1751391798.112:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.4.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   52.476878][ T4366] loop3: detected capacity change from 0 to 1024
[   52.488173][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.522227][ T4366] EXT4-fs: Ignoring removed orlov option
[   52.560689][ T4368] loop4: detected capacity change from 0 to 1024
[   52.595140][ T4368] EXT4-fs: Ignoring removed orlov option
[   52.626080][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.645305][ T4371] loop2: detected capacity change from 0 to 1024
[   52.652704][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.668341][ T4371] EXT4-fs: Ignoring removed orlov option
[   52.682858][ T4368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.984788][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'.
[   53.084342][ T4385] hub 8-0:1.0: USB hub found
[   53.089256][ T4385] hub 8-0:1.0: 8 ports detected
[   53.102922][ T4385] SELinux: syz.1.320 (4385) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   53.449066][ T4387] loop4: detected capacity change from 0 to 512
[   53.452016][ T4389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'.
[   53.559462][ T4394] loop3: detected capacity change from 0 to 512
[   53.587177][ T4397] loop2: detected capacity change from 0 to 1024
[   53.594635][ T4397] EXT4-fs: Ignoring removed orlov option
[   53.622565][ T4399] loop0: detected capacity change from 0 to 512
[   53.735947][ T4405] loop1: detected capacity change from 0 to 512
[   53.774060][ T4407] loop4: detected capacity change from 0 to 512
[   53.797381][ T4407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   53.823390][ T4409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.945865][ T4399] EXT4-fs (loop0): 1 orphan inode deleted
[   53.952279][ T4399] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   53.969241][ T4407] EXT4-fs (loop4): 1 truncate cleaned up
[   53.975197][   T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   54.007965][ T4409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.047743][ T4418] loop4: detected capacity change from 0 to 128
[   54.071709][ T4409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.114441][ T4420] loop1: detected capacity change from 0 to 512
[   54.126955][ T4409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.205720][ T4409] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.239182][ T4409] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.311838][ T4409] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.364494][ T4409] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.482661][ T4427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'.
[   54.524162][ T4430] hub 8-0:1.0: USB hub found
[   54.529190][ T4430] hub 8-0:1.0: 8 ports detected
[   54.545649][ T4430] SELinux: syz.2.335 (4430) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   54.635960][ T4432] loop1: detected capacity change from 0 to 128
[   54.849445][ T4434] random: crng reseeded on system resumption
[   55.012447][ T4438] loop4: detected capacity change from 0 to 1024
[   55.091553][ T4438] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.339: Allocating blocks 385-513 which overlap fs metadata
[   55.181570][ T4438] EXT4-fs (loop4): pa ffff888106ead380: logic 16, phys. 129, len 24
[   55.189742][ T4438] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   55.328977][ T4451] loop2: detected capacity change from 0 to 1024
[   55.365445][ T4451] EXT4-fs: Ignoring removed orlov option
[   55.430622][ T4452] hub 8-0:1.0: USB hub found
[   55.435639][ T4452] hub 8-0:1.0: 8 ports detected
[   55.446825][ T4452] SELinux: syz.1.341 (4452) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   55.781978][ T4455] loop4: detected capacity change from 0 to 1024
[   55.794941][ T4455] EXT4-fs: Ignoring removed orlov option
[   55.804755][ T4457] loop3: detected capacity change from 0 to 512
[   55.820558][ T4457] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   55.846195][ T4457] EXT4-fs (loop3): 1 truncate cleaned up
[   55.954264][ T4462] siw: device registration error -23
[   56.243411][ T4469] loop3: detected capacity change from 0 to 512
[   56.333296][ T4470] hub 8-0:1.0: USB hub found
[   56.338228][ T4470] hub 8-0:1.0: 8 ports detected
[   56.354843][ T4470] SELinux: syz.1.347 (4470) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   56.714092][ T4474] loop4: detected capacity change from 0 to 512
[   56.730155][ T4474] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.763457][ T4474] EXT4-fs (loop4): 1 truncate cleaned up
[   56.833346][ T4479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'.
[   56.894545][ T4481] loop4: detected capacity change from 0 to 512
[   56.902363][ T4481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   56.921220][ T4481] EXT4-fs (loop4): 1 truncate cleaned up
[   57.036782][ T4486] geneve2: entered promiscuous mode
[   57.042043][ T4486] geneve2: entered allmulticast mode
[   57.113758][ T4490] loop0: detected capacity change from 0 to 1024
[   57.122161][ T4490] EXT4-fs: Ignoring removed orlov option
[   57.145863][ T4492] loop4: detected capacity change from 0 to 512
[   57.157801][ T4492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   57.192693][ T4495] loop2: detected capacity change from 0 to 512
[   57.218675][ T4495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   57.263370][ T4496] hub 8-0:1.0: USB hub found
[   57.268296][ T4496] hub 8-0:1.0: 8 ports detected
[   57.286229][ T4496] SELinux: syz.1.354 (4496) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   57.303975][ T4492] EXT4-fs (loop4): 1 truncate cleaned up
[   57.398025][ T4495] EXT4-fs (loop2): 1 truncate cleaned up
[   57.626217][ T4505] loop3: detected capacity change from 0 to 512
[   57.706504][   T29] kauditd_printk_skb: 128 callbacks suppressed
[   57.706520][   T29] audit: type=1326 audit(1751391803.642:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.736063][   T29] audit: type=1326 audit(1751391803.642:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.778037][   T29] audit: type=1326 audit(1751391803.642:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.781358][ T4509] loop4: detected capacity change from 0 to 1024
[   57.801313][   T29] audit: type=1326 audit(1751391803.642:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.811039][ T4509] EXT4-fs: Ignoring removed orlov option
[   57.830929][   T29] audit: type=1326 audit(1751391803.642:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.860014][   T29] audit: type=1326 audit(1751391803.672:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.883333][   T29] audit: type=1326 audit(1751391803.672:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.906693][   T29] audit: type=1326 audit(1751391803.672:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.929983][   T29] audit: type=1326 audit(1751391803.672:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   57.953274][   T29] audit: type=1326 audit(1751391803.672:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4504 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   58.047347][ T4514] loop1: detected capacity change from 0 to 1024
[   58.054024][ T4514] EXT4-fs: Ignoring removed orlov option
[   58.192189][ T4520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.363'.
[   58.230085][ T4520] loop0: detected capacity change from 0 to 1024
[   58.239615][ T4522] loop3: detected capacity change from 0 to 512
[   58.305970][ T4525] hub 8-0:1.0: USB hub found
[   58.311305][ T4525] hub 8-0:1.0: 8 ports detected
[   58.326021][ T4525] SELinux: syz.2.361 (4525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   58.381477][ T4520] EXT4-fs: Ignoring removed orlov option
[   58.491829][ T4527] loop4: detected capacity change from 0 to 512
[   58.681487][ T4527] EXT4-fs (loop4): 1 orphan inode deleted
[   58.695726][   T59] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1
[   58.708090][ T4527] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.787341][ T4535] geneve2: entered promiscuous mode
[   58.792610][ T4535] geneve2: entered allmulticast mode
[   58.898704][ T4535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'.
[   58.925520][ T4538] loop3: detected capacity change from 0 to 512
[   58.949570][ T4538] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   58.972638][ T4540] loop2: detected capacity change from 0 to 512
[   58.988947][ T4538] EXT4-fs (loop3): 1 truncate cleaned up
[   59.125319][ T4543] loop1: detected capacity change from 0 to 512
[   59.139859][ T4543] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   59.191169][ T4543] EXT4-fs (loop1): 1 truncate cleaned up
[   59.255034][ T4550] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.271847][ T4548] loop0: detected capacity change from 0 to 1024
[   59.296456][ T4548] EXT4-fs: Ignoring removed orlov option
[   59.331330][ T4555] loop3: detected capacity change from 0 to 1024
[   59.346526][ T4550] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.371606][ T4555] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.373: Allocating blocks 385-513 which overlap fs metadata
[   59.400788][ T4559] loop1: detected capacity change from 0 to 512
[   59.425515][ T4555] EXT4-fs (loop3): pa ffff888106e62540: logic 16, phys. 129, len 24
[   59.433672][ T4555] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   59.446445][ T4550] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.467914][ T4559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   59.482330][ T4559] EXT4-fs (loop1): 1 truncate cleaned up
[   59.516814][ T4550] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.576341][ T4550] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.658764][ T4550] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.670613][ T4550] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.702444][ T4550] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.738245][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.375'.
[   59.754023][ T4565] loop3: detected capacity change from 0 to 1024
[   59.775147][ T4565] EXT4-fs: Ignoring removed orlov option
[   59.893195][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.896821][ T4568] siw: device registration error -23
[   59.900508][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.931327][ T4570] lo speed is unknown, defaulting to 1000
[   59.994436][ T4573] netlink: 'syz.0.378': attribute type 1 has an invalid length.
[   60.002272][ T4573] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.378'.
[   60.104715][ T4577] geneve2: entered promiscuous mode
[   60.109986][ T4577] geneve2: entered allmulticast mode
[   60.133011][ T4579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'.
[   60.176168][ T4580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.379'.
[   60.206263][ T4582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'.
[   60.269031][ T4584] loop1: detected capacity change from 0 to 512
[   60.272439][ T4586] loop0: detected capacity change from 0 to 1024
[   60.295299][ T4586] EXT4-fs: Ignoring removed orlov option
[   60.376693][ T4591] random: crng reseeded on system resumption
[   60.406181][ T4591] Restarting kernel threads ...
[   60.413990][ T4594] loop3: detected capacity change from 0 to 512
[   60.439454][ T4591] Done restarting kernel threads.
[   60.460820][ T4594] EXT4-fs (loop3): 1 orphan inode deleted
[   60.474917][   T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1
[   60.482056][ T4594] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.502013][ T4598] bond_slave_1: mtu less than device minimum
[   60.606382][ T4601] team0 (unregistering): Port device team_slave_0 removed
[   60.653491][ T4601] team0 (unregistering): Port device team_slave_1 removed
[   60.690054][ T4605] loop2: detected capacity change from 0 to 512
[   60.697991][ T4603] bond_slave_1: mtu less than device minimum
[   60.816378][ T4608] loop1: detected capacity change from 0 to 128
[   60.894133][ T4611] bio_check_eod: 27690 callbacks suppressed
[   60.894220][ T4611] syz.1.389: attempt to access beyond end of device
[   60.894220][ T4611] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   60.923869][ T4611] syz.1.389: attempt to access beyond end of device
[   60.923869][ T4611] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   60.957624][ T4611] syz.1.389: attempt to access beyond end of device
[   60.957624][ T4611] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   60.989837][ T4611] syz.1.389: attempt to access beyond end of device
[   60.989837][ T4611] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   61.013456][ T4611] syz.1.389: attempt to access beyond end of device
[   61.013456][ T4611] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   61.063062][ T4611] syz.1.389: attempt to access beyond end of device
[   61.063062][ T4611] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   61.093694][ T4611] syz.1.389: attempt to access beyond end of device
[   61.093694][ T4611] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   61.122512][ T4611] syz.1.389: attempt to access beyond end of device
[   61.122512][ T4611] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   61.136500][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[   61.145958][ T4614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4614 comm=syz.2.390
[   61.172593][ T4611] syz.1.389: attempt to access beyond end of device
[   61.172593][ T4611] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   61.227913][ T4611] syz.1.389: attempt to access beyond end of device
[   61.227913][ T4611] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[   61.243804][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.251116][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.317939][ T4619] geneve2: entered promiscuous mode
[   61.323317][ T4619] geneve2: entered allmulticast mode
[   61.347678][ T4617] lo speed is unknown, defaulting to 1000
[   61.429732][ T4619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'.
[   61.479741][ T4625] loop1: detected capacity change from 0 to 1024
[   61.511327][ T4625] EXT4-fs: Ignoring removed orlov option
[   61.849132][ T4630] geneve2: entered promiscuous mode
[   61.854571][ T4630] geneve2: entered allmulticast mode
[   61.877564][ T4632] loop2: detected capacity change from 0 to 512
[   61.952857][ T4635] loop4: detected capacity change from 0 to 1024
[   61.971894][ T4635] EXT4-fs: Ignoring removed orlov option
[   61.986595][ T4638] loop1: detected capacity change from 0 to 1024
[   62.042563][ T4638] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.398: Allocating blocks 385-513 which overlap fs metadata
[   62.216355][ T4638] EXT4-fs (loop1): pa ffff888106ead5b0: logic 16, phys. 129, len 24
[   62.224512][ T4638] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   62.288997][ T4646] loop2: detected capacity change from 0 to 512
[   62.307221][ T4648] random: crng reseeded on system resumption
[   62.344307][ T4648] Restarting kernel threads ...
[   62.366790][ T4648] Done restarting kernel threads.
[   62.378743][ T4652] loop1: detected capacity change from 0 to 128
[   62.423269][ T4650] __nla_validate_parse: 1 callbacks suppressed
[   62.423353][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'.
[   62.476584][ T4659] process 'syz.2.404' launched './file0' with NULL argv: empty string added
[   62.491691][ T4659] loop2: detected capacity change from 0 to 512
[   62.565016][ T4659] EXT4-fs: Ignoring removed oldalloc option
[   62.571119][ T4659] EXT4-fs: Ignoring removed nobh option
[   62.584030][ T4659] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.404: iget: bad extended attribute block 1
[   62.806495][ T4665] netlink: 'syz.4.403': attribute type 13 has an invalid length.
[   62.819134][ T4665] gretap0: refused to change device tx_queue_len
[   62.838588][ T4665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.855793][ T4659] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.404: couldn't read orphan inode 15 (err -117)
[   62.982498][ T4667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'.
[   63.012518][ T4667] loop2: detected capacity change from 0 to 1024
[   63.028854][ T4667] EXT4-fs: Ignoring removed orlov option
[   63.275205][ T4671] loop0: detected capacity change from 0 to 1024
[   63.281977][ T4671] EXT4-fs: Ignoring removed orlov option
[   63.300703][   T29] kauditd_printk_skb: 127 callbacks suppressed
[   63.300717][   T29] audit: type=1326 audit(1751391809.232:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.332112][ T4673] siw: device registration error -23
[   63.434756][   T29] audit: type=1326 audit(1751391809.262:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.458228][   T29] audit: type=1326 audit(1751391809.262:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.481490][   T29] audit: type=1326 audit(1751391809.262:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.504732][   T29] audit: type=1326 audit(1751391809.262:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.528064][   T29] audit: type=1326 audit(1751391809.262:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.554392][   T29] audit: type=1400 audit(1751391809.412:797): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   63.574266][   T29] audit: type=1400 audit(1751391809.482:798): avc:  denied  { unmount } for  pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   63.594321][   T29] audit: type=1326 audit(1751391809.482:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.617620][   T29] audit: type=1326 audit(1751391809.482:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d39e929 code=0x7ffc0000
[   63.620789][ T4679] geneve2: entered promiscuous mode
[   63.646237][ T4679] geneve2: entered allmulticast mode
[   63.678844][ T4682] loop2: detected capacity change from 0 to 128
[   63.787118][ T4686] lo speed is unknown, defaulting to 1000
[   63.840872][ T4690] lo speed is unknown, defaulting to 1000
[   63.910903][ T4692] loop0: detected capacity change from 0 to 1024
[   64.037564][ T4696] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.073509][ T4696] xt_CT: You must specify a L4 protocol and not use inversions on it
[   64.159575][ T4703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.202981][ T4705] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.237393][ T4703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.268281][ T4705] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.307340][ T4703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.347717][ T4705] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.376986][ T4703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.416994][ T4705] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.467492][ T4703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.475401][ T4703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.489022][ T4703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.506071][ T4705] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.518894][ T4703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.538082][ T4705] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.541324][ T4705] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.587336][ T4705] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.608151][ T4709] loop1: detected capacity change from 0 to 128
[   64.677746][ T4711] loop2: detected capacity change from 0 to 512
[   64.694521][ T4711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   64.711691][ T4714] loop3: detected capacity change from 0 to 512
[   64.733684][ T4711] EXT4-fs (loop2): 1 truncate cleaned up
[   64.796234][ T4722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.421'.
[   64.805457][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'.
[   64.830570][ T4722] loop2: detected capacity change from 0 to 1024
[   64.845045][ T4722] EXT4-fs: Ignoring removed orlov option
[   64.894038][ T4724] loop0: detected capacity change from 0 to 512
[   64.919325][ T4729] loop4: detected capacity change from 0 to 512
[   64.928072][ T4727] dvmrp1: tun_chr_ioctl cmd 1074025692
[   64.961655][ T4729] EXT4-fs (loop4): too many log groups per flexible block group
[   64.969529][ T4729] EXT4-fs (loop4): failed to initialize mballoc (-12)
[   64.992007][ T4729] EXT4-fs (loop4): mount failed
[   65.161525][ T4742] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.190643][ T4744] SELinux:  Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped).
[   65.231640][ T4740] lo speed is unknown, defaulting to 1000
[   65.261207][ T4740] loop4: detected capacity change from 0 to 512
[   65.267939][ T4740] EXT4-fs: Ignoring removed bh option
[   65.273780][ T4740] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   65.285000][ T4742] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.296677][ T4740] EXT4-fs (loop4): 1 truncate cleaned up
[   65.346531][ T4742] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.375662][ T4748] loop2: detected capacity change from 0 to 1024
[   65.386642][ T4742] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.414553][ T4748] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.428: Allocating blocks 385-513 which overlap fs metadata
[   65.432389][ T4748] EXT4-fs (loop2): pa ffff888106ead620: logic 16, phys. 129, len 24
[   65.440443][ T4748] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   65.489811][ T4758] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003
[   65.515565][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[   65.536988][ T4762] loop2: detected capacity change from 0 to 512
[   65.746849][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'.
[   65.756307][ T4767] netlink: 'syz.2.435': attribute type 2 has an invalid length.
[   65.763989][ T4767] netlink: 'syz.2.435': attribute type 1 has an invalid length.
[   65.771729][ T4767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'.
[   65.783171][ T4767] netlink: 'syz.2.435': attribute type 10 has an invalid length.
[   65.794286][ T4767] team0: Port device dummy0 added
[   65.874515][ T4769] geneve2: entered promiscuous mode
[   65.879762][ T4769] geneve2: entered allmulticast mode
[   65.936611][ T4770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'.
[   65.997060][ T4775] bond0: entered promiscuous mode
[   66.002194][ T4775] bond_slave_0: entered promiscuous mode
[   66.008165][ T4775] bond_slave_1: entered promiscuous mode
[   66.017997][ T4775] batadv0: entered promiscuous mode
[   66.023881][ T4775] 8021q: adding VLAN 0 to HW filter on device hsr1
[   66.033603][ T4775] bond0: left promiscuous mode
[   66.038468][ T4775] bond_slave_0: left promiscuous mode
[   66.043932][ T4775] bond_slave_1: left promiscuous mode
[   66.043981][ T4776] loop2: detected capacity change from 0 to 1024
[   66.056455][ T4775] batadv0: left promiscuous mode
[   66.111113][ T4780] netlink: 36 bytes leftover after parsing attributes in process `syz.2.439'.
[   66.148241][ T4782] loop2: detected capacity change from 0 to 512
[   66.224642][ T4785] loop4: detected capacity change from 0 to 128
[   66.291200][ T4785] bio_check_eod: 43860 callbacks suppressed
[   66.291212][ T4785] syz.4.441: attempt to access beyond end of device
[   66.291212][ T4785] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128
[   66.311075][ T4785] syz.4.441: attempt to access beyond end of device
[   66.311075][ T4785] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128
[   66.324438][ T4785] syz.4.441: attempt to access beyond end of device
[   66.324438][ T4785] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128
[   66.338504][ T4785] syz.4.441: attempt to access beyond end of device
[   66.338504][ T4785] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128
[   66.353269][ T4785] syz.4.441: attempt to access beyond end of device
[   66.353269][ T4785] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128
[   66.375317][ T4785] syz.4.441: attempt to access beyond end of device
[   66.375317][ T4785] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128
[   66.389042][ T4785] syz.4.441: attempt to access beyond end of device
[   66.389042][ T4785] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128
[   66.403836][ T4785] syz.4.441: attempt to access beyond end of device
[   66.403836][ T4785] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128
[   66.421104][ T4785] syz.4.441: attempt to access beyond end of device
[   66.421104][ T4785] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128
[   66.442799][ T4785] syz.4.441: attempt to access beyond end of device
[   66.442799][ T4785] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128
[   66.460563][ T4792] geneve2: entered promiscuous mode
[   66.465852][ T4792] geneve2: entered allmulticast mode
[   66.494921][ T4796] FAULT_INJECTION: forcing a failure.
[   66.494921][ T4796] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   66.508129][ T4796] CPU: 1 UID: 0 PID: 4796 Comm: syz.4.445 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   66.508158][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   66.508212][ T4796] Call Trace:
[   66.508219][ T4796]  <TASK>
[   66.508227][ T4796]  __dump_stack+0x1d/0x30
[   66.508251][ T4796]  dump_stack_lvl+0xe8/0x140
[   66.508269][ T4796]  dump_stack+0x15/0x1b
[   66.508284][ T4796]  should_fail_ex+0x265/0x280
[   66.508348][ T4796]  should_fail+0xb/0x20
[   66.508380][ T4796]  should_fail_usercopy+0x1a/0x20
[   66.508570][ T4796]  _copy_from_user+0x1c/0xb0
[   66.508651][ T4796]  __copy_msghdr+0x244/0x300
[   66.508682][ T4796]  ___sys_sendmsg+0x109/0x1d0
[   66.508726][ T4796]  __sys_sendmmsg+0x178/0x300
[   66.508760][ T4796]  __x64_sys_sendmmsg+0x57/0x70
[   66.508827][ T4796]  x64_sys_call+0x2f2f/0x2fb0
[   66.508851][ T4796]  do_syscall_64+0xd2/0x200
[   66.508922][ T4796]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   66.509015][ T4796]  ? clear_bhb_loop+0x40/0x90
[   66.509038][ T4796]  ? clear_bhb_loop+0x40/0x90
[   66.509074][ T4796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.509188][ T4796] RIP: 0033:0x7f64122ce929
[   66.509207][ T4796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.509222][ T4796] RSP: 002b:00007f6410937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   66.509238][ T4796] RAX: ffffffffffffffda RBX: 00007f64124f5fa0 RCX: 00007f64122ce929
[   66.509368][ T4796] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006
[   66.509379][ T4796] RBP: 00007f6410937090 R08: 0000000000000000 R09: 0000000000000000
[   66.509389][ T4796] R10: 0000000034000811 R11: 0000000000000246 R12: 0000000000000001
[   66.509402][ T4796] R13: 0000000000000000 R14: 00007f64124f5fa0 R15: 00007ffef23aa788
[   66.509480][ T4796]  </TASK>
[   66.713390][ T4799] geneve2: entered promiscuous mode
[   66.718674][ T4799] geneve2: entered allmulticast mode
[   66.738948][ T4801] loop2: detected capacity change from 0 to 1024
[   66.745746][ T4801] EXT4-fs: Ignoring removed orlov option
[   66.786269][ T4805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'.
[   66.826527][ T4809] loop4: detected capacity change from 0 to 512
[   67.010986][ T4815] loop4: detected capacity change from 0 to 1024
[   67.029390][ T4815] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.451: Allocating blocks 385-513 which overlap fs metadata
[   67.047379][ T4815] EXT4-fs (loop4): pa ffff888106e62700: logic 16, phys. 129, len 24
[   67.055568][ T4815] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   67.176084][ T4823] loop4: detected capacity change from 0 to 512
[   67.285373][ T4830] netlink: 'syz.0.457': attribute type 2 has an invalid length.
[   67.425490][ T4837] loop4: detected capacity change from 0 to 1024
[   67.433500][ T4837] EXT4-fs: inline encryption not supported
[   67.442260][ T4837] EXT4-fs: Ignoring removed bh option
[   67.476957][ T4833] loop0: detected capacity change from 0 to 4096
[   67.765831][ T4845] lo speed is unknown, defaulting to 1000
[   67.826843][ T4849] lo speed is unknown, defaulting to 1000
[   67.837154][ T4850] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   67.837154][ T4850] The task syz.0.460 (4850) triggered the difference, watch for misbehavior.
[   67.861457][ T4850] __nla_validate_parse: 4 callbacks suppressed
[   67.861480][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'.
[   67.876518][ T4850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'.
[   67.888524][ T4850] wireguard0: entered promiscuous mode
[   67.894075][ T4850] wireguard0: entered allmulticast mode
[   68.294230][ T4858] hub 8-0:1.0: USB hub found
[   68.300615][ T4858] hub 8-0:1.0: 8 ports detected
[   68.317665][ T4858] SELinux: syz.2.464 (4858) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   68.613402][ T4862] FAULT_INJECTION: forcing a failure.
[   68.613402][ T4862] name failslab, interval 1, probability 0, space 0, times 0
[   68.628089][ T4862] CPU: 0 UID: 0 PID: 4862 Comm: syz.0.466 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   68.628133][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   68.628171][ T4862] Call Trace:
[   68.628183][ T4862]  <TASK>
[   68.628192][ T4862]  __dump_stack+0x1d/0x30
[   68.628218][ T4862]  dump_stack_lvl+0xe8/0x140
[   68.628243][ T4862]  dump_stack+0x15/0x1b
[   68.628265][ T4862]  should_fail_ex+0x265/0x280
[   68.628307][ T4862]  ? snd_timer_instance_new+0x31/0x160
[   68.628413][ T4862]  should_failslab+0x8c/0xb0
[   68.628443][ T4862]  __kmalloc_cache_noprof+0x4c/0x320
[   68.628496][ T4862]  snd_timer_instance_new+0x31/0x160
[   68.628534][ T4862]  snd_seq_timer_open+0x12f/0x330
[   68.628575][ T4862]  ? snd_timer_instance_free+0x5f/0x70
[   68.628658][ T4862]  ? kfree+0xd9/0x320
[   68.628688][ T4862]  ? snd_timer_instance_free+0x5f/0x70
[   68.628775][ T4862]  snd_seq_queue_timer_open+0x85/0xe0
[   68.628819][ T4862]  snd_seq_ioctl_set_queue_timer+0x14b/0x170
[   68.628850][ T4862]  snd_seq_ioctl+0x17a/0x2e0
[   68.628886][ T4862]  ? __pfx_snd_seq_ioctl+0x10/0x10
[   68.628914][ T4862]  __se_sys_ioctl+0xce/0x140
[   68.629004][ T4862]  __x64_sys_ioctl+0x43/0x50
[   68.629039][ T4862]  x64_sys_call+0x19a8/0x2fb0
[   68.629066][ T4862]  do_syscall_64+0xd2/0x200
[   68.629139][ T4862]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   68.629172][ T4862]  ? clear_bhb_loop+0x40/0x90
[   68.629198][ T4862]  ? clear_bhb_loop+0x40/0x90
[   68.629225][ T4862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.629317][ T4862] RIP: 0033:0x7fca49aae929
[   68.629336][ T4862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.629359][ T4862] RSP: 002b:00007fca48117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.629413][ T4862] RAX: ffffffffffffffda RBX: 00007fca49cd5fa0 RCX: 00007fca49aae929
[   68.629428][ T4862] RDX: 0000200000000400 RSI: 0000000040605346 RDI: 0000000000000003
[   68.629443][ T4862] RBP: 00007fca48117090 R08: 0000000000000000 R09: 0000000000000000
[   68.629459][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   68.629550][ T4862] R13: 0000000000000000 R14: 00007fca49cd5fa0 R15: 00007ffe622c1028
[   68.629573][ T4862]  </TASK>
[   68.634906][ T4864] loop4: detected capacity change from 0 to 1024
[   68.747707][ T4867] loop0: detected capacity change from 0 to 1024
[   68.779275][ T4864] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.467: Allocating blocks 385-513 which overlap fs metadata
[   68.783862][ T4867] EXT4-fs: Ignoring removed orlov option
[   68.849264][ T4863] EXT4-fs (loop4): pa ffff888106ead690: logic 16, phys. 129, len 24
[   68.899418][ T4863] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[   68.920131][ T4742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.931418][ T4742] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.948353][ T4742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.959567][ T4742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.016764][ T4872] loop2: detected capacity change from 0 to 1024
[   69.023730][ T4872] EXT4-fs: Ignoring removed orlov option
[   69.073940][ T4876] geneve2: entered promiscuous mode
[   69.079786][ T4876] geneve2: entered allmulticast mode
[   69.079869][ T4881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.473'.
[   69.094170][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'.
[   69.114480][ T4885] loop3: detected capacity change from 0 to 512
[   69.123008][ T4885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   69.137043][ T4885] EXT4-fs (loop3): 1 truncate cleaned up
[   69.183643][ T4881] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   69.199414][ T4881] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   69.227005][ T4889] loop0: detected capacity change from 0 to 512
[   69.289131][ T4899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.479'.
[   69.310117][ T4901] loop3: detected capacity change from 0 to 512
[   69.314794][   T29] kauditd_printk_skb: 252 callbacks suppressed
[   69.314812][   T29] audit: type=1326 audit(1751391815.243:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.324525][ T4901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   69.345981][   T29] audit: type=1326 audit(1751391815.243:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.379215][   T29] audit: type=1326 audit(1751391815.243:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.402556][   T29] audit: type=1326 audit(1751391815.243:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.425976][   T29] audit: type=1326 audit(1751391815.243:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.449284][   T29] audit: type=1326 audit(1751391815.243:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.472595][   T29] audit: type=1326 audit(1751391815.243:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.495985][   T29] audit: type=1326 audit(1751391815.243:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.519498][   T29] audit: type=1326 audit(1751391815.243:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.527057][ T4901] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   69.542841][   T29] audit: type=1326 audit(1751391815.243:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4887 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   69.590098][ T4901] EXT4-fs (loop3): 1 truncate cleaned up
[   69.671555][ T4912] siw: device registration error -23
[   69.706883][ T4914] loop2: detected capacity change from 0 to 512
[   69.714484][ T4914] EXT4-fs: Ignoring removed oldalloc option
[   69.720456][ T4914] EXT4-fs: Ignoring removed nobh option
[   69.737651][ T4916] loop1: detected capacity change from 0 to 1024
[   69.761207][ T4916] loop1: detected capacity change from 0 to 512
[   69.807102][ T4914] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.483: iget: bad extended attribute block 1
[   69.820886][ T4914] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.483: couldn't read orphan inode 15 (err -117)
[   69.856730][ T4918] geneve2: entered promiscuous mode
[   69.861978][ T4918] geneve2: entered allmulticast mode
[   69.911571][ T4920] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   69.948421][ T4925] loop2: detected capacity change from 0 to 512
[   69.974255][ T4925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.987532][ T4928] ip6gre1: entered allmulticast mode
[   69.993250][ T4929] loop3: detected capacity change from 0 to 512
[   70.036191][ T4925] EXT4-fs (loop2): 1 truncate cleaned up
[   70.047427][ T4933] loop1: detected capacity change from 0 to 1024
[   70.054215][ T4933] EXT4-fs: Ignoring removed orlov option
[   70.096199][ T4938] loop2: detected capacity change from 0 to 512
[   70.156998][ T4940] IPv6: NLM_F_CREATE should be specified when creating new route
[   70.175944][ T4945] FAULT_INJECTION: forcing a failure.
[   70.175944][ T4945] name failslab, interval 1, probability 0, space 0, times 0
[   70.188731][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.3.495 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   70.188839][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   70.188853][ T4945] Call Trace:
[   70.188860][ T4945]  <TASK>
[   70.188869][ T4945]  __dump_stack+0x1d/0x30
[   70.188894][ T4945]  dump_stack_lvl+0xe8/0x140
[   70.188924][ T4945]  dump_stack+0x15/0x1b
[   70.188943][ T4945]  should_fail_ex+0x265/0x280
[   70.189090][ T4945]  should_failslab+0x8c/0xb0
[   70.189120][ T4945]  kmem_cache_alloc_node_noprof+0x57/0x320
[   70.189155][ T4945]  ? __alloc_skb+0x101/0x320
[   70.189194][ T4945]  __alloc_skb+0x101/0x320
[   70.189270][ T4945]  netlink_alloc_large_skb+0xba/0xf0
[   70.189314][ T4945]  netlink_sendmsg+0x3cf/0x6b0
[   70.189377][ T4945]  ? __pfx_netlink_sendmsg+0x10/0x10
[   70.189464][ T4945]  __sock_sendmsg+0x145/0x180
[   70.189490][ T4945]  ____sys_sendmsg+0x31e/0x4e0
[   70.189550][ T4945]  ___sys_sendmsg+0x17b/0x1d0
[   70.189615][ T4945]  __x64_sys_sendmsg+0xd4/0x160
[   70.189691][ T4945]  x64_sys_call+0x2999/0x2fb0
[   70.189717][ T4945]  do_syscall_64+0xd2/0x200
[   70.189735][ T4945]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   70.189761][ T4945]  ? clear_bhb_loop+0x40/0x90
[   70.189939][ T4945]  ? clear_bhb_loop+0x40/0x90
[   70.189970][ T4945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.189997][ T4945] RIP: 0033:0x7fc0e33be929
[   70.190017][ T4945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.190040][ T4945] RSP: 002b:00007fc0e1a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   70.190130][ T4945] RAX: ffffffffffffffda RBX: 00007fc0e35e5fa0 RCX: 00007fc0e33be929
[   70.190190][ T4945] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[   70.190205][ T4945] RBP: 00007fc0e1a27090 R08: 0000000000000000 R09: 0000000000000000
[   70.190216][ T4945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   70.190228][ T4945] R13: 0000000000000000 R14: 00007fc0e35e5fa0 R15: 00007ffd2b288608
[   70.190252][ T4945]  </TASK>
[   70.402605][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'.
[   70.454295][ T4949] netlink: 404 bytes leftover after parsing attributes in process `syz.1.496'.
[   70.469557][ T4951] loop3: detected capacity change from 0 to 128
[   70.530334][ T4954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.498'.
[   70.543529][ T4957] geneve2: entered promiscuous mode
[   70.549247][ T4957] geneve2: entered allmulticast mode
[   70.552573][ T4940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=4940 comm=syz.4.494
[   70.592160][ T4959] loop2: detected capacity change from 0 to 1024
[   70.606592][ T4959] EXT4-fs: Ignoring removed orlov option
[   70.615957][ T4961] lo speed is unknown, defaulting to 1000
[   70.951588][ T4969] loop2: detected capacity change from 0 to 512
[   70.990793][ T4969] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   71.010085][ T4969] EXT4-fs (loop2): 1 truncate cleaned up
[   71.065824][ T4973] loop4: detected capacity change from 0 to 1024
[   71.362437][ T4989] SELinux: syz.0.506 (4989) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   71.421501][ T4951] bio_check_eod: 12918 callbacks suppressed
[   71.421520][ T4951] syz.3.497: attempt to access beyond end of device
[   71.421520][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   71.454395][ T4988] lo speed is unknown, defaulting to 1000
[   72.100485][ T4951] syz.3.497: attempt to access beyond end of device
[   72.100485][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.114543][ T4984] netlink: 'syz.2.507': attribute type 6 has an invalid length.
[   72.204439][ T4996] loop4: detected capacity change from 0 to 512
[   72.213334][ T4951] syz.3.497: attempt to access beyond end of device
[   72.213334][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.240687][ T4998] loop1: detected capacity change from 0 to 1024
[   72.260773][ T4998] EXT4-fs: Ignoring removed orlov option
[   72.277769][ T4951] syz.3.497: attempt to access beyond end of device
[   72.277769][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.291447][ T4951] syz.3.497: attempt to access beyond end of device
[   72.291447][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.304572][ T4951] syz.3.497: attempt to access beyond end of device
[   72.304572][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.317742][ T4951] syz.3.497: attempt to access beyond end of device
[   72.317742][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.332585][ T4951] syz.3.497: attempt to access beyond end of device
[   72.332585][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.345891][ T4951] syz.3.497: attempt to access beyond end of device
[   72.345891][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.359536][ T4951] syz.3.497: attempt to access beyond end of device
[   72.359536][ T4951] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   72.376134][ T4998] EXT4-fs mount: 106 callbacks suppressed
[   72.376147][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.430846][ T5006] loop2: detected capacity change from 0 to 512
[   72.470969][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.482748][ T5006] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   72.516027][ T5006] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #11: comm syz.2.512: corrupted in-inode xattr: invalid ea_ino
[   72.530608][ T5006] EXT4-fs (loop2): Remounting filesystem read-only
[   72.532852][ T5012] geneve2: entered promiscuous mode
[   72.538009][ T5006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.542536][ T5012] geneve2: entered allmulticast mode
[   72.597806][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.618178][ T5022] loop3: detected capacity change from 0 to 512
[   72.625703][ T5017] loop4: detected capacity change from 0 to 2048
[   72.633715][ T5022] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   72.662429][ T5022] EXT4-fs (loop3): 1 truncate cleaned up
[   72.669927][ T5022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.699546][ T5020] 9pnet_fd: Insufficient options for proto=fd
[   72.709434][ T5025] lo speed is unknown, defaulting to 1000
[   72.734935][ T5020] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   72.788245][ T5033] loop1: detected capacity change from 0 to 1024
[   72.801445][ T5033] EXT4-fs: Ignoring removed orlov option
[   72.813008][ T5036] geneve2: entered promiscuous mode
[   72.818305][ T5036] geneve2: entered allmulticast mode
[   72.827610][ T5033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.841526][ T5037] loop4: detected capacity change from 0 to 1024
[   72.857729][ T5037] loop4: detected capacity change from 0 to 512
[   72.888101][ T5040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.522'.
[   72.919895][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.951072][ T5042] loop4: detected capacity change from 0 to 1024
[   72.957900][ T5042] EXT4-fs: Ignoring removed orlov option
[   72.997712][ T5046] loop2: detected capacity change from 0 to 512
[   73.052169][ T5042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.098641][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.163018][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.195073][ T5064] netlink: 'syz.2.531': attribute type 39 has an invalid length.
[   73.211083][ T5066] loop4: detected capacity change from 0 to 512
[   73.216720][ T5066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   73.230988][ T5066] EXT4-fs (loop4): 1 truncate cleaned up
[   73.235003][ T5066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.289710][ T5070] geneve2: entered promiscuous mode
[   73.295022][ T5070] geneve2: entered allmulticast mode
[   73.341763][ T5072] lo speed is unknown, defaulting to 1000
[   73.414648][ T5076] geneve2: entered promiscuous mode
[   73.419957][ T5076] geneve2: entered allmulticast mode
[   73.433868][ T5064] loop2: detected capacity change from 0 to 2048
[   73.456087][ T5078] loop3: detected capacity change from 0 to 1024
[   73.460451][ T5066] netlink: 'syz.4.530': attribute type 13 has an invalid length.
[   73.482332][ T5078] loop3: detected capacity change from 0 to 512
[   73.500375][ T5064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.513106][ T5081] IPv6: NLM_F_CREATE should be specified when creating new route
[   73.523672][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'.
[   73.532889][ T5066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.564012][ T5085] random: crng reseeded on system resumption
[   73.574783][ T5085] Restarting kernel threads ...
[   73.580391][ T5085] Done restarting kernel threads.
[   73.602994][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.638075][ T5087] loop1: detected capacity change from 0 to 1024
[   73.650711][ T5087] EXT4-fs: Ignoring removed orlov option
[   73.667816][ T5090] loop0: detected capacity change from 0 to 1024
[   73.675071][ T5090] EXT4-fs: Ignoring removed orlov option
[   73.690495][ T5087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.706090][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.714927][ T5090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.755340][ T5098] SELinux:  Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped).
[   73.769932][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.867332][ T5104] FAULT_INJECTION: forcing a failure.
[   73.867332][ T5104] name failslab, interval 1, probability 0, space 0, times 0
[   73.880105][ T5104] CPU: 1 UID: 0 PID: 5104 Comm: syz.2.544 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   73.880128][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   73.880138][ T5104] Call Trace:
[   73.880143][ T5104]  <TASK>
[   73.880149][ T5104]  __dump_stack+0x1d/0x30
[   73.880172][ T5104]  dump_stack_lvl+0xe8/0x140
[   73.880294][ T5104]  dump_stack+0x15/0x1b
[   73.880313][ T5104]  should_fail_ex+0x265/0x280
[   73.880343][ T5104]  should_failslab+0x8c/0xb0
[   73.880366][ T5104]  __kmalloc_noprof+0xa5/0x3e0
[   73.880468][ T5104]  ? bpf_test_init+0xa9/0x160
[   73.880566][ T5104]  bpf_test_init+0xa9/0x160
[   73.880631][ T5104]  bpf_prog_test_run_skb+0x144/0xbd0
[   73.880658][ T5104]  ? __rcu_read_unlock+0x4f/0x70
[   73.880700][ T5104]  ? __fget_files+0x184/0x1c0
[   73.880720][ T5104]  ? __rcu_read_unlock+0x4f/0x70
[   73.880748][ T5104]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   73.880818][ T5104]  bpf_prog_test_run+0x22a/0x390
[   73.880840][ T5104]  __sys_bpf+0x3dc/0x790
[   73.880873][ T5104]  __x64_sys_bpf+0x41/0x50
[   73.880930][ T5104]  x64_sys_call+0x2478/0x2fb0
[   73.880956][ T5104]  do_syscall_64+0xd2/0x200
[   73.880995][ T5104]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[   73.881027][ T5104]  ? clear_bhb_loop+0x40/0x90
[   73.881065][ T5104]  ? clear_bhb_loop+0x40/0x90
[   73.881172][ T5104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.881196][ T5104] RIP: 0033:0x7fc396f2e929
[   73.881213][ T5104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.881232][ T5104] RSP: 002b:00007fc395597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   73.881252][ T5104] RAX: ffffffffffffffda RBX: 00007fc397155fa0 RCX: 00007fc396f2e929
[   73.881265][ T5104] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 000000000000000a
[   73.881294][ T5104] RBP: 00007fc395597090 R08: 0000000000000000 R09: 0000000000000000
[   73.881304][ T5104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   73.881317][ T5104] R13: 0000000000000000 R14: 00007fc397155fa0 R15: 00007ffd06b63468
[   73.881336][ T5104]  </TASK>
[   74.127782][ T5109] geneve2: entered promiscuous mode
[   74.133134][ T5109] geneve2: entered allmulticast mode
[   74.232060][ T5110] hub 8-0:1.0: USB hub found
[   74.237300][ T5110] hub 8-0:1.0: 8 ports detected
[   74.251312][ T5110] SELinux: syz.0.543 (5110) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   74.348840][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.479307][ T5116] loop3: detected capacity change from 0 to 512
[   74.488894][ T5113] 9pnet_fd: Insufficient options for proto=fd
[   74.516949][ T5113] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   74.571769][ T5116] EXT4-fs: Ignoring removed oldalloc option
[   74.577894][ T5116] EXT4-fs: Ignoring removed nobh option
[   74.613614][   T29] kauditd_printk_skb: 182 callbacks suppressed
[   74.613631][   T29] audit: type=1400 audit(1751391820.536:1245): avc:  denied  { remove_name } for  pid=3303 comm="syz-executor" name="binderfs" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0"
[   74.647708][ T5116] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.548: iget: bad extended attribute block 1
[   74.670168][ T5122] geneve2: entered promiscuous mode
[   74.675585][ T5122] geneve2: entered allmulticast mode
[   74.683208][ T5120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'.
[   74.694055][ T5116] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.548: couldn't read orphan inode 15 (err -117)
[   74.709357][ T5116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.715613][   T29] audit: type=1400 audit(1751391820.536:1246): avc:  denied  { rmdir } for  pid=3303 comm="syz-executor" name="95" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0"
[   74.749752][ T5116] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.763457][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'.
[   74.778206][ T5128] netlink: 64 bytes leftover after parsing attributes in process `syz.0.551'.
[   74.779371][   T29] audit: type=1326 audit(1751391820.706:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.799816][ T5130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'.
[   74.810552][   T29] audit: type=1326 audit(1751391820.706:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.842774][   T29] audit: type=1326 audit(1751391820.706:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.866175][   T29] audit: type=1326 audit(1751391820.706:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.889670][   T29] audit: type=1326 audit(1751391820.706:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.906751][ T5133] Cannot find add_set index 0 as target
[   74.913043][   T29] audit: type=1326 audit(1751391820.706:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.941905][   T29] audit: type=1326 audit(1751391820.706:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   74.965266][   T29] audit: type=1326 audit(1751391820.706:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5127 comm="syz.0.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca49aae929 code=0x7ffc0000
[   75.078128][ T5140] loop2: detected capacity change from 0 to 512
[   75.098196][ T5146] loop1: detected capacity change from 0 to 512
[   75.103349][ T5147] loop3: detected capacity change from 0 to 1024
[   75.109438][ T5147] EXT4-fs: Ignoring removed orlov option
[   75.133718][ T5147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.259931][ T5155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[   75.259954][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[   75.348584][ T5155] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   75.447246][ T5163] loop1: detected capacity change from 0 to 512
[   75.463765][ T5165] loop2: detected capacity change from 0 to 512
[   75.470813][ T5165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   75.489617][ T5165] EXT4-fs (loop2): 1 truncate cleaned up
[   75.505139][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.637356][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.680480][ T5163] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   75.680495][ T5163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   75.680521][ T5163] System zones: 0-1, 15-15, 18-18, 34-34
[   75.680667][ T5163] EXT4-fs (loop1): orphan cleanup on readonly fs
[   75.680787][ T5163] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   75.680815][ T5163] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   75.683297][ T5163] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.561: bad orphan inode 16
[   75.683749][ T5163] ext4_test_bit(bit=15, block=18) = 1
[   75.683764][ T5163] is_bad_inode(inode)=0
[   75.683771][ T5163] NEXT_ORPHAN(inode)=0
[   75.683848][ T5163] max_ino=32
[   75.683855][ T5163] i_nlink=2
[   75.684228][ T5163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   75.794167][ T5175] hub 8-0:1.0: USB hub found
[   75.794314][ T5175] hub 8-0:1.0: 8 ports detected
[   75.805310][ T5175] SELinux: syz.4.564 (5175) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   75.851612][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.886635][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.113303][ T5184] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.127430][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[   76.183753][ T5186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=5186 comm=syz.2.568
[   76.190094][ T5187] loop1: detected capacity change from 0 to 512
[   76.229569][ T5189] geneve2: entered promiscuous mode
[   76.277566][ T5189] geneve2: entered allmulticast mode
[   76.355404][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'.
[   76.430848][ T5205] loop0: detected capacity change from 0 to 512
[   76.437606][ T5205] EXT4-fs: Ignoring removed oldalloc option
[   76.443587][ T5205] EXT4-fs: Ignoring removed nobh option
[   76.463674][ T5201] loop2: detected capacity change from 0 to 1024
[   76.472014][ T5201] EXT4-fs: Ignoring removed orlov option
[   76.480073][ T5205] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.575: iget: bad extended attribute block 1
[   76.496360][ T5205] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.575: couldn't read orphan inode 15 (err -117)
[   76.527007][ T5205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.544035][ T5218] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   76.548331][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.559217][ T5205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.580746][ T5213] loop3: detected capacity change from 0 to 512
[   76.591992][ T5213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.602063][ T5213] EXT4-fs (loop3): orphan cleanup on readonly fs
[   76.618623][ T5213] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.577: Failed to acquire dquot type 1
[   76.652155][ T5213] EXT4-fs (loop3): 1 truncate cleaned up
[   76.658812][ T5213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.705787][ T5213] lo speed is unknown, defaulting to 1000
[   76.756992][ T5224] lo speed is unknown, defaulting to 1000
[   76.869689][ T5231] FAULT_INJECTION: forcing a failure.
[   76.869689][ T5231] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   76.882886][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz.0.584 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   76.882934][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   76.882946][ T5231] Call Trace:
[   76.882951][ T5231]  <TASK>
[   76.882957][ T5231]  __dump_stack+0x1d/0x30
[   76.882994][ T5231]  dump_stack_lvl+0xe8/0x140
[   76.883013][ T5231]  dump_stack+0x15/0x1b
[   76.883032][ T5231]  should_fail_ex+0x265/0x280
[   76.883132][ T5231]  should_fail+0xb/0x20
[   76.883157][ T5231]  should_fail_usercopy+0x1a/0x20
[   76.883257][ T5231]  _copy_from_user+0x1c/0xb0
[   76.883305][ T5231]  __copy_msghdr+0x244/0x300
[   76.883366][ T5231]  ___sys_sendmsg+0x109/0x1d0
[   76.883415][ T5231]  __x64_sys_sendmsg+0xd4/0x160
[   76.883529][ T5231]  x64_sys_call+0x2999/0x2fb0
[   76.883551][ T5231]  do_syscall_64+0xd2/0x200
[   76.883568][ T5231]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   76.883600][ T5231]  ? clear_bhb_loop+0x40/0x90
[   76.883661][ T5231]  ? clear_bhb_loop+0x40/0x90
[   76.883689][ T5231]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.883715][ T5231] RIP: 0033:0x7fca49aae929
[   76.883734][ T5231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   76.883758][ T5231] RSP: 002b:00007fca48117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   76.883780][ T5231] RAX: ffffffffffffffda RBX: 00007fca49cd5fa0 RCX: 00007fca49aae929
[   76.883795][ T5231] RDX: 0000000024040008 RSI: 00002000000000c0 RDI: 0000000000000003
[   76.883841][ T5231] RBP: 00007fca48117090 R08: 0000000000000000 R09: 0000000000000000
[   76.883852][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   76.883865][ T5231] R13: 0000000000000000 R14: 00007fca49cd5fa0 R15: 00007ffe622c1028
[   76.883892][ T5231]  </TASK>
[   77.177142][ T5246] geneve2: entered promiscuous mode
[   77.182486][ T5246] geneve2: entered allmulticast mode
[   77.201603][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.230003][ T5248] lo speed is unknown, defaulting to 1000
[   77.242993][ T5250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=5250 comm=syz.4.593
[   77.270261][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.302628][ T5256] loop0: detected capacity change from 0 to 512
[   77.320538][ T5252] lo speed is unknown, defaulting to 1000
[   77.433175][ T5270] loop3: detected capacity change from 0 to 128
[   77.516113][ T5273] bio_check_eod: 801 callbacks suppressed
[   77.516132][ T5273] syz.3.601: attempt to access beyond end of device
[   77.516132][ T5273] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128
[   77.537659][ T5273] syz.3.601: attempt to access beyond end of device
[   77.537659][ T5273] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128
[   77.551225][ T5273] syz.3.601: attempt to access beyond end of device
[   77.551225][ T5273] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128
[   77.565937][ T5273] syz.3.601: attempt to access beyond end of device
[   77.565937][ T5273] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128
[   77.593583][ T5276] loop2: detected capacity change from 0 to 512
[   77.600951][ T5273] syz.3.601: attempt to access beyond end of device
[   77.600951][ T5273] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128
[   77.616405][ T5276] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   77.616470][ T5273] syz.3.601: attempt to access beyond end of device
[   77.616470][ T5273] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128
[   77.642025][ T5276] EXT4-fs (loop2): 1 truncate cleaned up
[   77.644014][ T5273] syz.3.601: attempt to access beyond end of device
[   77.644014][ T5273] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128
[   77.660718][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.670076][ T5273] syz.3.601: attempt to access beyond end of device
[   77.670076][ T5273] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128
[   77.697435][ T5273] syz.3.601: attempt to access beyond end of device
[   77.697435][ T5273] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128
[   77.759983][ T5279] hub 8-0:1.0: USB hub found
[   77.764711][ T5279] hub 8-0:1.0: 8 ports detected
[   77.773344][ T5279] SELinux: syz.4.597 (5279) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   77.805955][ T5273] syz.3.601: attempt to access beyond end of device
[   77.805955][ T5273] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128
[   77.825727][ T5281] loop1: detected capacity change from 0 to 512
[   77.855872][ T5281] EXT4-fs: Ignoring removed oldalloc option
[   77.861838][ T5281] EXT4-fs: Ignoring removed nobh option
[   77.943316][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.957349][ T5284] loop3: detected capacity change from 0 to 512
[   77.965748][ T5281] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.604: iget: bad extended attribute block 1
[   77.979138][ T5284] EXT4-fs: Ignoring removed oldalloc option
[   77.985123][ T5284] EXT4-fs: Ignoring removed nobh option
[   78.011232][ T5281] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.604: couldn't read orphan inode 15 (err -117)
[   78.045967][ T5284] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.605: iget: bad extended attribute block 1
[   78.069286][ T5284] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.605: couldn't read orphan inode 15 (err -117)
[   78.081313][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.094194][ T5281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.108864][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.122858][ T5290] geneve2: entered promiscuous mode
[   78.128182][ T5290] geneve2: entered allmulticast mode
[   78.135374][ T5284] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.148231][ T5292] random: crng reseeded on system resumption
[   78.158521][ T5292] Restarting kernel threads ...
[   78.163608][ T5292] Done restarting kernel threads.
[   78.209246][ T5296] loop2: detected capacity change from 0 to 512
[   78.245915][ T5300] 9pnet_fd: Insufficient options for proto=fd
[   78.305799][ T5310] siw: device registration error -23
[   78.325991][ T5314] loop0: detected capacity change from 0 to 128
[   78.405082][ T5317] loop2: detected capacity change from 0 to 1024
[   78.411866][ T5317] EXT4-fs: Ignoring removed orlov option
[   78.426777][ T5317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.685796][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.985809][ T5324] hub 8-0:1.0: USB hub found
[   78.990563][ T5324] hub 8-0:1.0: 8 ports detected
[   79.004626][ T5324] SELinux: syz.2.617 (5324) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   79.307678][ T5330] geneve2: entered promiscuous mode
[   79.312955][ T5330] geneve2: entered allmulticast mode
[   79.382655][ T5334] lo speed is unknown, defaulting to 1000
[   79.388852][ T5333] loop3: detected capacity change from 0 to 512
[   79.486281][ T5345] loop0: detected capacity change from 0 to 512
[   79.596944][ T5347] syzkaller1: entered promiscuous mode
[   79.602537][ T5347] syzkaller1: entered allmulticast mode
[   79.625051][ T5351] loop2: detected capacity change from 0 to 512
[   79.627715][   T29] kauditd_printk_skb: 236 callbacks suppressed
[   79.627732][   T29] audit: type=1400 audit(1751391825.556:1488): avc:  denied  { append } for  pid=5346 comm="syz.1.627" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   79.633710][ T5351] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.672661][ T5351] EXT4-fs (loop2): 1 truncate cleaned up
[   79.682339][ T5351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.757824][ T5354] hub 8-0:1.0: USB hub found
[   79.764521][ T5354] hub 8-0:1.0: 8 ports detected
[   79.795392][ T5354] SELinux: syz.4.624 (5354) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   79.839024][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.878144][ T5356] random: crng reseeded on system resumption
[   79.888086][ T5356] Restarting kernel threads ...
[   79.893402][ T5356] Done restarting kernel threads.
[   79.927325][ T5360] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'
[   79.971400][ T5363] loop1: detected capacity change from 0 to 512
[   79.977866][   T29] audit: type=1400 audit(1751391825.846:1489): avc:  denied  { read } for  pid=5357 comm="syz.2.630" path="socket:[11436]" dev="sockfs" ino=11436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   80.012585][ T5363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.040531][ T5363] EXT4-fs (loop1): 1 truncate cleaned up
[   80.046960][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.073354][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.086017][ T5368] __nla_validate_parse: 2 callbacks suppressed
[   80.086029][ T5368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'.
[   80.101913][   T29] audit: type=1400 audit(1751391826.026:1490): avc:  denied  { ioctl } for  pid=5357 comm="syz.2.630" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   80.227089][ T5373] loop2: detected capacity change from 0 to 128
[   80.267828][ T5375] geneve2: entered promiscuous mode
[   80.273115][ T5375] geneve2: entered allmulticast mode
[   80.387962][ T5385] geneve2: entered promiscuous mode
[   80.393296][ T5385] geneve2: entered allmulticast mode
[   80.411107][ T5383] loop4: detected capacity change from 0 to 1024
[   80.441589][ T5383] loop4: detected capacity change from 0 to 512
[   80.531919][ T5390] loop4: detected capacity change from 0 to 512
[   80.561599][   T29] audit: type=1326 audit(1751391826.486:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   80.683898][ T5395] lo speed is unknown, defaulting to 1000
[   81.015880][   T29] audit: type=1326 audit(1751391826.486:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.039267][   T29] audit: type=1326 audit(1751391826.486:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.062709][   T29] audit: type=1326 audit(1751391826.486:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.086223][   T29] audit: type=1326 audit(1751391826.486:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.109642][   T29] audit: type=1326 audit(1751391826.486:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.133018][   T29] audit: type=1326 audit(1751391826.536:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.3.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0e33be929 code=0x7ffc0000
[   81.200754][ T5410] loop0: detected capacity change from 0 to 1024
[   81.226300][ T5410] loop0: detected capacity change from 0 to 512
[   81.243330][ T5412] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.331423][ T5422] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.343148][ T5419] geneve2: entered promiscuous mode
[   81.348504][ T5419] geneve2: entered allmulticast mode
[   81.357323][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'.
[   81.372112][ T5424] loop2: detected capacity change from 0 to 1024
[   81.378978][ T5424] EXT4-fs: Ignoring removed orlov option
[   81.388476][ T5424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.408333][ T5433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=5433 comm=syz.3.652
[   81.426054][ T5431] 9pnet_fd: Insufficient options for proto=fd
[   81.486078][ T5439] loop4: detected capacity change from 0 to 512
[   81.525443][ T5442] loop3: detected capacity change from 0 to 128
[   81.690350][ T5449] loop4: detected capacity change from 0 to 512
[   81.692297][ T5449] EXT4-fs: Ignoring removed oldalloc option
[   81.692318][ T5449] EXT4-fs: Ignoring removed nobh option
[   81.837543][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.986121][ T5449] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.658: iget: bad extended attribute block 1
[   81.986331][ T5449] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.658: couldn't read orphan inode 15 (err -117)
[   81.986877][ T5449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.302031][ T5449] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.353121][ T5457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.661'.
[   82.372953][ T5452] loop1: detected capacity change from 0 to 8192
[   82.386049][ T5455] FAULT_INJECTION: forcing a failure.
[   82.386049][ T5455] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   82.399271][ T5455] CPU: 0 UID: 0 PID: 5455 Comm: syz.2.659 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   82.399295][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   82.399306][ T5455] Call Trace:
[   82.399312][ T5455]  <TASK>
[   82.399319][ T5455]  __dump_stack+0x1d/0x30
[   82.399343][ T5455]  dump_stack_lvl+0xe8/0x140
[   82.399372][ T5455]  dump_stack+0x15/0x1b
[   82.399397][ T5455]  should_fail_ex+0x265/0x280
[   82.399432][ T5455]  should_fail+0xb/0x20
[   82.399456][ T5455]  should_fail_usercopy+0x1a/0x20
[   82.399488][ T5455]  _copy_to_user+0x20/0xa0
[   82.399513][ T5455]  simple_read_from_buffer+0xb5/0x130
[   82.399618][ T5455]  proc_fail_nth_read+0x100/0x140
[   82.399734][ T5455]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   82.399770][ T5455]  vfs_read+0x1a0/0x6f0
[   82.399803][ T5455]  ? __rcu_read_unlock+0x4f/0x70
[   82.399824][ T5455]  ? __fget_files+0x184/0x1c0
[   82.399856][ T5455]  ? path_put+0x2f/0x40
[   82.399905][ T5455]  ksys_read+0xda/0x1a0
[   82.399939][ T5455]  __x64_sys_read+0x40/0x50
[   82.399996][ T5455]  x64_sys_call+0x2d77/0x2fb0
[   82.400101][ T5455]  do_syscall_64+0xd2/0x200
[   82.400119][ T5455]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   82.400148][ T5455]  ? clear_bhb_loop+0x40/0x90
[   82.400173][ T5455]  ? clear_bhb_loop+0x40/0x90
[   82.400197][ T5455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.400269][ T5455] RIP: 0033:0x7fc396f2d33c
[   82.400301][ T5455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   82.400320][ T5455] RSP: 002b:00007fc395597030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   82.400340][ T5455] RAX: ffffffffffffffda RBX: 00007fc397155fa0 RCX: 00007fc396f2d33c
[   82.400416][ T5455] RDX: 000000000000000f RSI: 00007fc3955970a0 RDI: 0000000000000005
[   82.400430][ T5455] RBP: 00007fc395597090 R08: 0000000000000000 R09: 0000000000000000
[   82.400443][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.400456][ T5455] R13: 0000000000000000 R14: 00007fc397155fa0 R15: 00007ffd06b63468
[   82.400476][ T5455]  </TASK>
[   82.641520][ T5091]  loop1: p2 p3 p4
[   82.645735][ T5091] loop1: p2 start 2936012800 is beyond EOD, truncated
[   82.652532][ T5091] loop1: p3 start 1912602624 is beyond EOD, truncated
[   82.659478][ T5091] loop1: p4 size 656640 extends beyond EOD, truncated
[   82.663839][ T5442] bio_check_eod: 42425 callbacks suppressed
[   82.663985][ T5442] syz.3.657: attempt to access beyond end of device
[   82.663985][ T5442] loop3: rw=0, sector=145, nr_sectors = 8 limit=128
[   82.695758][ T5471] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.809501][ T5463] loop0: detected capacity change from 0 to 2048
[   82.848613][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.870934][ T5463] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.663: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   82.977587][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.994364][ T5481] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.068039][ T5484] loop3: detected capacity change from 0 to 1024
[   83.096863][ T5481] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.127675][ T5484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.168471][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.180791][ T5481] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.236415][ T5481] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.305786][ T5452]  loop1: p2 p3 p4
[   83.311210][ T5452] loop1: p2 start 2936012800 is beyond EOD, truncated
[   83.318171][ T5452] loop1: p3 start 1912602624 is beyond EOD, truncated
[   83.321243][ T5488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'.
[   83.324969][ T5452] loop1: p4 size 656640 extends beyond EOD, truncated
[   83.351152][ T5481] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.389359][ T5492] loop0: detected capacity change from 0 to 512
[   83.390248][ T5491] loop3: detected capacity change from 0 to 1024
[   83.408027][ T5481] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.433306][ T5491] EXT4-fs: Ignoring removed orlov option
[   83.447062][ T5481] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.464358][ T5481] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.475866][ T5091] udevd[5091]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   83.477946][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.492092][ T5091] udevd[5091]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   83.583384][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.688992][ T5508] loop0: detected capacity change from 0 to 1024
[   83.701369][ T5508] EXT4-fs: Ignoring removed orlov option
[   83.728566][ T5508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.729005][ T5510] loop2: detected capacity change from 0 to 128
[   83.785845][ T5513] geneve2: entered promiscuous mode
[   83.791122][ T5513] geneve2: entered allmulticast mode
[   83.854810][ T5516] loop1: detected capacity change from 0 to 512
[   83.862834][ T5518] syz.2.677: attempt to access beyond end of device
[   83.862834][ T5518] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[   83.878638][ T5518] syz.2.677: attempt to access beyond end of device
[   83.878638][ T5518] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   83.892781][ T5518] syz.2.677: attempt to access beyond end of device
[   83.892781][ T5518] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   83.908179][ T5518] syz.2.677: attempt to access beyond end of device
[   83.908179][ T5518] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   83.922793][ T5518] syz.2.677: attempt to access beyond end of device
[   83.922793][ T5518] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   83.942853][ T5518] syz.2.677: attempt to access beyond end of device
[   83.942853][ T5518] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   83.957455][ T5518] syz.2.677: attempt to access beyond end of device
[   83.957455][ T5518] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   83.972863][ T5518] syz.2.677: attempt to access beyond end of device
[   83.972863][ T5518] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   83.987436][ T5518] syz.2.677: attempt to access beyond end of device
[   83.987436][ T5518] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   84.036143][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'.
[   84.112944][ T5527] siw: device registration error -23
[   84.123815][ T5523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=5523 comm=syz.3.680
[   84.164959][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.184234][ T5534] loop3: detected capacity change from 0 to 1024
[   84.201359][ T5532] loop1: detected capacity change from 0 to 1024
[   84.213933][ T5537] loop0: detected capacity change from 0 to 512
[   84.222258][ T5532] EXT4-fs: Ignoring removed orlov option
[   84.231247][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'.
[   84.240426][ T5534] loop3: detected capacity change from 0 to 512
[   84.240854][ T5538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.686'.
[   84.263433][ T5537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   84.274931][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.296064][ T5537] EXT4-fs (loop0): 1 truncate cleaned up
[   84.305760][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.356928][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.414233][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[   84.423911][ T5544] loop3: detected capacity change from 0 to 512
[   84.468172][ T5546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22830 sclass=netlink_route_socket pid=5546 comm=syz.2.690
[   84.492097][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.552948][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[   84.563129][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'.
[   84.579441][ T5559] loop2: detected capacity change from 0 to 1024
[   84.588124][ T5559] EXT4-fs: Ignoring removed orlov option
[   84.598494][ T5559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.628631][ T5563] lo speed is unknown, defaulting to 1000
[   84.736233][ T5569] hub 8-0:1.0: USB hub found
[   84.741012][ T5569] hub 8-0:1.0: 8 ports detected
[   84.750351][ T5569] SELinux: syz.1.691 (5569) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   85.023980][   T29] kauditd_printk_skb: 212 callbacks suppressed
[   85.024066][   T29] audit: type=1326 audit(1751391830.947:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.059180][   T29] audit: type=1326 audit(1751391830.987:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.082648][   T29] audit: type=1326 audit(1751391830.987:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.106053][   T29] audit: type=1326 audit(1751391830.987:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.107856][ T5574] loop4: detected capacity change from 0 to 512
[   85.129375][   T29] audit: type=1326 audit(1751391830.987:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.129455][   T29] audit: type=1326 audit(1751391830.987:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f64122ce929 code=0x7ffc0000
[   85.138506][ T5574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   85.159102][   T29] audit: type=1326 audit(1751391830.987:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64122ce963 code=0x7ffc0000
[   85.220090][ T5577] loop0: detected capacity change from 0 to 1024
[   85.240890][   T29] audit: type=1326 audit(1751391831.017:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f64122cd3df code=0x7ffc0000
[   85.251736][ T5574] EXT4-fs (loop4): 1 truncate cleaned up
[   85.264093][   T29] audit: type=1326 audit(1751391831.017:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f64122ce9b7 code=0x7ffc0000
[   85.272341][ T5577] EXT4-fs: Ignoring removed orlov option
[   85.293018][   T29] audit: type=1326 audit(1751391831.037:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5573 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f64122cd290 code=0x7ffc0000
[   85.322454][ T5574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.338630][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.349059][ T5577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.411663][ T5583] loop2: detected capacity change from 0 to 512
[   85.445853][ T5583] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   85.456851][ T5585] loop3: detected capacity change from 0 to 2048
[   85.482373][ T5583] EXT4-fs (loop2): 1 truncate cleaned up
[   85.513997][ T5585] __nla_validate_parse: 6 callbacks suppressed
[   85.514012][ T5585] netlink: 300 bytes leftover after parsing attributes in process `syz.3.701'.
[   85.547995][ T5595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'.
[   85.579439][ T5585] FAULT_INJECTION: forcing a failure.
[   85.579439][ T5585] name failslab, interval 1, probability 0, space 0, times 0
[   85.592181][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: syz.3.701 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   85.592212][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   85.592223][ T5585] Call Trace:
[   85.592228][ T5585]  <TASK>
[   85.592234][ T5585]  __dump_stack+0x1d/0x30
[   85.592274][ T5585]  dump_stack_lvl+0xe8/0x140
[   85.592292][ T5585]  dump_stack+0x15/0x1b
[   85.592389][ T5585]  should_fail_ex+0x265/0x280
[   85.592418][ T5585]  should_failslab+0x8c/0xb0
[   85.592440][ T5585]  kmem_cache_alloc_noprof+0x50/0x310
[   85.592466][ T5585]  ? security_file_alloc+0x32/0x100
[   85.592492][ T5585]  security_file_alloc+0x32/0x100
[   85.592515][ T5585]  init_file+0x5c/0x1d0
[   85.592564][ T5585]  alloc_empty_file+0x8b/0x200
[   85.592654][ T5585]  alloc_file_pseudo+0xc6/0x160
[   85.592687][ T5585]  __shmem_file_setup+0x1de/0x210
[   85.592785][ T5585]  shmem_file_setup+0x3b/0x50
[   85.592822][ T5585]  __se_sys_memfd_create+0x2c3/0x590
[   85.592886][ T5585]  __x64_sys_memfd_create+0x31/0x40
[   85.592923][ T5585]  x64_sys_call+0x122f/0x2fb0
[   85.593011][ T5585]  do_syscall_64+0xd2/0x200
[   85.593029][ T5585]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[   85.593053][ T5585]  ? clear_bhb_loop+0x40/0x90
[   85.593148][ T5585]  ? clear_bhb_loop+0x40/0x90
[   85.593174][ T5585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.593198][ T5585] RIP: 0033:0x7fc0e33be929
[   85.593211][ T5585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.593289][ T5585] RSP: 002b:00007fc0e1a26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[   85.593322][ T5585] RAX: ffffffffffffffda RBX: 000000000000050a RCX: 00007fc0e33be929
[   85.593337][ T5585] RDX: 00007fc0e1a26ef0 RSI: 0000000000000000 RDI: 00007fc0e34414cc
[   85.593351][ T5585] RBP: 0000200000000200 R08: 00007fc0e1a26bb7 R09: 00007fc0e1a26e40
[   85.593365][ T5585] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0
[   85.593377][ T5585] R13: 00007fc0e1a26ef0 R14: 00007fc0e1a26eb0 R15: 0000200000000080
[   85.593392][ T5585]  </TASK>
[   85.813455][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'.
[   85.887567][ T5604] bond_slave_1: entered promiscuous mode
[   85.914485][ T5602] bond_slave_1: left promiscuous mode
[   85.999402][ T5612] loop4: detected capacity change from 0 to 1024
[   86.009743][ T5612] EXT4-fs: Ignoring removed orlov option
[   86.157828][ T5621] lo speed is unknown, defaulting to 1000
[   86.177687][ T5627] loop1: detected capacity change from 0 to 512
[   86.182385][ T5625] lo speed is unknown, defaulting to 1000
[   86.193362][ T5627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   86.205264][ T5627] EXT4-fs (loop1): 1 truncate cleaned up
[   86.288225][ T5632] hub 8-0:1.0: USB hub found
[   86.292978][ T5632] hub 8-0:1.0: 8 ports detected
[   86.301399][ T5632] SELinux: syz.3.712 (5632) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.
[   86.568484][ T5637] loop1: detected capacity change from 0 to 512
[   86.580810][ T5637] EXT4-fs: Ignoring removed oldalloc option
[   86.586984][ T5637] EXT4-fs: Ignoring removed nobh option
[   86.597098][ T5640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.719'.
[   86.624250][ T5637] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.717: iget: bad extended attribute block 1
[   86.648959][ T5637] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.717: couldn't read orphan inode 15 (err -117)
[   86.670174][ T5646] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.680241][ T5647] loop0: detected capacity change from 0 to 512
[   86.688991][ T5647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   86.717957][ T5646] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.729073][ T5647] EXT4-fs (loop0): 1 truncate cleaned up
[   86.755827][ T5651] loop1: detected capacity change from 0 to 1024
[   86.768411][ T5651] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   86.779355][ T5651] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   86.807490][ T5646] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.814939][ T5651] JBD2: no valid journal superblock found
[   86.823174][ T5651] EXT4-fs (loop1): Could not load journal inode
[   86.830160][ T5653] loop2: detected capacity change from 0 to 1024
[   86.925145][ T5653] EXT4-fs: Invalid want_extra_isize 0
[   86.960794][ T5646] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.977570][ T5655] futex_wake_op: syz.1.724 tries to shift op by 32; fix this program
[   87.016586][ T5661] loop0: detected capacity change from 0 to 1024
[   87.023297][ T5662] loop2: detected capacity change from 0 to 512
[   87.031137][ T5661] EXT4-fs: Ignoring removed orlov option
[   87.046073][ T5646] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.058260][ T5646] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.070292][ T5646] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.082545][ T5646] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.104523][ T5666] loop3: detected capacity change from 0 to 1024
[   87.114613][ T5666] EXT4-fs: Ignoring removed orlov option
[   87.143286][ T5091] ==================================================================
[   87.151443][ T5091] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod
[   87.158406][ T5091] 
[   87.160740][ T5091] write to 0xffff8881037d5264 of 4 bytes by task 3294 on cpu 0:
[   87.168385][ T5091]  shmem_mknod+0x137/0x180
[   87.172810][ T5091]  shmem_create+0x34/0x50
[   87.177137][ T5091]  path_openat+0x1102/0x2170
[   87.181734][ T5091]  do_filp_open+0x109/0x230
[   87.186251][ T5091]  do_sys_openat2+0xa6/0x110
[   87.190860][ T5091]  __x64_sys_openat+0xf2/0x120
[   87.195633][ T5091]  x64_sys_call+0x1af/0x2fb0
[   87.200241][ T5091]  do_syscall_64+0xd2/0x200
[   87.204743][ T5091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.210659][ T5091] 
[   87.212991][ T5091] read to 0xffff8881037d5264 of 4 bytes by task 5091 on cpu 1:
[   87.220539][ T5091]  fill_mg_cmtime+0x5b/0x260
[   87.225135][ T5091]  generic_fillattr+0x24a/0x340
[   87.229992][ T5091]  shmem_getattr+0x181/0x200
[   87.234581][ T5091]  vfs_getattr_nosec+0x143/0x1e0
[   87.239523][ T5091]  vfs_statx+0x113/0x390
[   87.243765][ T5091]  vfs_fstatat+0x115/0x170
[   87.248181][ T5091]  __se_sys_newfstatat+0x55/0x260
[   87.253209][ T5091]  __x64_sys_newfstatat+0x55/0x70
[   87.258237][ T5091]  x64_sys_call+0x2c22/0x2fb0
[   87.262914][ T5091]  do_syscall_64+0xd2/0x200
[   87.267414][ T5091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.273306][ T5091] 
[   87.275632][ T5091] value changed: 0x04a492fe -> 0x04ea77b6
[   87.281353][ T5091] 
[   87.283672][ T5091] Reported by Kernel Concurrency Sanitizer on:
[   87.289832][ T5091] CPU: 1 UID: 0 PID: 5091 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) 
[   87.301813][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   87.311887][ T5091] ==================================================================
[   87.332428][ T5674] loop4: detected capacity change from 0 to 1024
[   87.340506][ T5674] EXT4-fs: Ignoring removed orlov option
[   87.376009][ T5671] loop0: detected capacity change from 0 to 512
[   87.382980][ T5671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   87.403086][ T5671] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.729: corrupted xattr entries
[   87.421576][ T5671] EXT4-fs (loop0): Remounting filesystem read-only
[   87.428233][ T5671] EXT4-fs (loop0): 1 truncate cleaned up