last executing test programs:

4m41.851054438s ago: executing program 4 (id=2222):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00')
read$char_usb(r1, &(0x7f0000000000)=""/178, 0xb2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r2}, 0x10)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000280), &(0x7f0000000840)=r6}, 0x20)
mkdir(&(0x7f0000000200)='./file0\x00', 0x40)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0xffffffffffffff8e, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="563d7fffe2134c1bb2a9eab065df6f2104961ddeea434c77769a23045775ce66a6b5e2ceba82c22d326f590b3d606a694aa111d4188be0e9e944b00184", @ANYRES16=r11, @ANYBLOB="8b3320000000000000001500000010001d800c00008008000d80"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332dbd70000000000015"], 0x24}}, 0x0)

4m41.761935549s ago: executing program 4 (id=2223):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_usbip_server_init(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

4m40.978408121s ago: executing program 4 (id=2232):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)

4m40.585113637s ago: executing program 4 (id=2234):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1ada41, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00')
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa8, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x8001)
r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x220c402, &(0x7f0000000b40)=ANY=[], 0x1, 0x6a5, &(0x7f00000013c0)="$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")
chmod(&(0x7f0000001180)='./file0\x00', 0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={<r6=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r6, 0x400}}, 0x48)

4m40.412601219s ago: executing program 4 (id=2238):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0)
write$eventfd(r2, &(0x7f0000000240), 0xffffff14)

4m40.134021724s ago: executing program 4 (id=2243):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r1, 0x1)
flock(r1, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xffffffff, 0x8000, 0x1, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2)
name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=@OVL_FILEID_V0={0x112, 0xfb, {0x0, 0xfb, 0x112, 0x6, 0x7f, "f1b1d8f85d6d44c9bd5a4c91c7bd777c", "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"}}, &(0x7f00000000c0), 0x400)

4m40.133906184s ago: executing program 32 (id=2243):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r0, 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r1, 0x1)
flock(r1, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xffffffff, 0x8000, 0x1, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2)
name_to_handle_at(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=@OVL_FILEID_V0={0x112, 0xfb, {0x0, 0xfb, 0x112, 0x6, 0x7f, "f1b1d8f85d6d44c9bd5a4c91c7bd777c", "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"}}, &(0x7f00000000c0), 0x400)

1m51.700512642s ago: executing program 0 (id=4990):
creat(&(0x7f00000001c0)='./file0\x00', 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20)

1m51.697266222s ago: executing program 0 (id=4991):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40015)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, 0x0, 0x0)

1m51.568573923s ago: executing program 0 (id=5000):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
nanosleep(&(0x7f0000000040), &(0x7f0000000180))

1m50.660927886s ago: executing program 0 (id=5018):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m50.660608876s ago: executing program 0 (id=5019):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r1, &(0x7f0000000340)="050300061400091c6202a0ffffffff006003000000007f14143488a87f4386dd62cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m50.289658611s ago: executing program 0 (id=5025):
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)

1m50.289286921s ago: executing program 33 (id=5025):
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0)

2.613891414s ago: executing program 2 (id=7108):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x5, 0x6}, {0x4, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
symlinkat(&(0x7f0000000580)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20000000000000a4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x88, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{}, {0x0, 0x2, [@TCA_ROUTE4_CLASSID={0x0, 0x1, {0xb, 0x1}}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x3, 0x8}}, @TCA_ROUTE4_TO={0x0, 0x2, 0xba}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x7, 0x4}}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0xffff, 0x4}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES16=r0], 0x50}}, 0x4000000)

2.592191624s ago: executing program 6 (id=7109):
syz_emit_ethernet(0x72, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1f, 0x0, [{0x0, 0x2}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @broadcast, @loopback]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0)

2.513532585s ago: executing program 6 (id=7111):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="48b0000000100003058d00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004000000"], 0x48}}, 0x0)

2.512743775s ago: executing program 5 (id=7112):
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r1, 0x0, 0x100000000)

2.464027436s ago: executing program 5 (id=7114):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027})
r0 = socket(0x10, 0x80003, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x20040000)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)

2.446128526s ago: executing program 5 (id=7115):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00')
read$char_usb(r1, &(0x7f0000000000)=""/178, 0xb2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r2}, 0x10)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
socket$nl_audit(0x10, 0x3, 0x9)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x4e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000280), &(0x7f0000000840)=r6}, 0x20)
mkdir(&(0x7f0000000200)='./file0\x00', 0x40)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x2101}]}}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0xffffffffffffff8e, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="563d7fffe2134c1bb2a9eab065df6f2104961ddeea434c77769a23045775ce66a6b5e2ceba82c22d326f590b3d606a694aa111d4188be0e9e944b00184", @ANYRES16=r10, @ANYBLOB="8b3320000000000000001500000010001d800c00008008000d80"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b332dbd70000000000015"], 0x24}}, 0x0)

2.404216477s ago: executing program 5 (id=7116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x20, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x5, 0x6}, {0x4, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
symlinkat(&(0x7f0000000580)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20000000000000a4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x88, 0x2c, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{}, {0x0, 0x2, [@TCA_ROUTE4_CLASSID={0x0, 0x1, {0xb, 0x1}}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x3, 0x8}}, @TCA_ROUTE4_TO={0x0, 0x2, 0xba}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0x7, 0x4}}, @TCA_ROUTE4_CLASSID={0x0, 0x1, {0xffff, 0x4}}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES16=r0], 0x50}}, 0x4000000)

2.097242791s ago: executing program 1 (id=7119):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5, 0x1, 0x2}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r8], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r7)
r9 = getegid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r5, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000900))
sendmsg$nl_generic(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0xf0, 0x42, 0x100, 0x70bd27, 0x25dfdbfb, {0x17}, [@generic="7cfec2e22a29682f10a3945ee1c096f5165816e479a7639f333397b4c3d1016bd89651c2bc3c6044b3cb7ad68bd39b0ffe622f921d70e9364f878858429f635b66092a0c4a61e8d66570d27154bdda4ce20138036c7de30559303d35f731d6f721ee6c", @typed={0x8, 0x4, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x28, 0x123, 0x0, 0x1, [@typed={0x4, 0xad}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x72, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xe3}]}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x132, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@broadcast}]}, 0xf0}, 0x1, 0x0, 0x0, 0x6}, 0x40040)

1.827755075s ago: executing program 1 (id=7122):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r6 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.731930616s ago: executing program 2 (id=7124):
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x3}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x4000000)

1.683962807s ago: executing program 2 (id=7125):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x903, 0x70bd2f, 0x27dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xfff2}, {0x0, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4880)

1.607723807s ago: executing program 3 (id=7127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

1.595815068s ago: executing program 2 (id=7128):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r0=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f00000004c0))

1.546719898s ago: executing program 5 (id=7129):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r6 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.497233629s ago: executing program 3 (id=7130):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100627269646765000034000280050016000200000008001d000900000008000100090000000c00020002000000000000000c001e000500000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44)

1.404311001s ago: executing program 6 (id=7131):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

1.319889972s ago: executing program 3 (id=7132):
creat(&(0x7f0000000480)='./file0\x00', 0x122)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
socket$inet(0x2, 0x1, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe(&(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000100))
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

1.281328832s ago: executing program 3 (id=7133):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r7 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r8 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r8, 0x0, r7, 0x0, 0x3df1, 0x0)
r9 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1.256974243s ago: executing program 6 (id=7134):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2801, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

1.113619684s ago: executing program 2 (id=7135):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r5, 0x1, 0x2}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r8], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r7)
r9 = getegid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r5, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000900))
sendmsg$nl_generic(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0xf0, 0x42, 0x100, 0x70bd27, 0x25dfdbfb, {0x17}, [@generic="7cfec2e22a29682f10a3945ee1c096f5165816e479a7639f333397b4c3d1016bd89651c2bc3c6044b3cb7ad68bd39b0ffe622f921d70e9364f878858429f635b66092a0c4a61e8d66570d27154bdda4ce20138036c7de30559303d35f731d6f721ee6c", @typed={0x8, 0x4, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x28, 0x123, 0x0, 0x1, [@typed={0x4, 0xad}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x72, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xe3}]}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x132, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@broadcast}]}, 0xf0}, 0x1, 0x0, 0x0, 0x6}, 0x40040)

603.159202ms ago: executing program 1 (id=7136):
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x3}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x4000000)

326.792046ms ago: executing program 1 (id=7137):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xff0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

226.059867ms ago: executing program 1 (id=7138):
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027})
r0 = socket(0x10, 0x80003, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4051}, 0x20040000)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd0000", 0x23)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)

224.433617ms ago: executing program 2 (id=7139):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000300))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r6 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r6, 0x0, r5, 0x0, 0x3df1, 0x0)
r7 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

210.356357ms ago: executing program 3 (id=7140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})

207.858567ms ago: executing program 1 (id=7141):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000001680)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r2=>0x0}, &(0x7f00000000c0)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r6, 0x1, 0x2}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x14}, {0x0}, {0x0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8)
r9 = getegid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r6, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000900))
sendmsg$nl_generic(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0xf0, 0x42, 0x100, 0x70bd27, 0x25dfdbfb, {0x17}, [@generic="7cfec2e22a29682f10a3945ee1c096f5165816e479a7639f333397b4c3d1016bd89651c2bc3c6044b3cb7ad68bd39b0ffe622f921d70e9364f878858429f635b66092a0c4a61e8d66570d27154bdda4ce20138036c7de30559303d35f731d6f721ee6c", @typed={0x8, 0x4, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x28, 0x123, 0x0, 0x1, [@typed={0x4, 0xad}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x72, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xe3}]}, @typed={0x8, 0xe2, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x132, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@broadcast}]}, 0xf0}, 0x1, 0x0, 0x0, 0x6}, 0x40040)

190.711577ms ago: executing program 6 (id=7142):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

189.110567ms ago: executing program 5 (id=7143):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="48b0000000100003058d00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c280000500030004000000"], 0x48}}, 0x0)

160.573728ms ago: executing program 6 (id=7144):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0)
unshare(0x2a020400)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x20)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x140003a1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20)
open(&(0x7f0000000180)='./file0/file0\x00', 0x40800, 0x40)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

0s ago: executing program 3 (id=7145):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000004200)='t', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7ffff000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  435.716063][T22692] ext4 filesystem being remounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  435.741187][T22677] vhci_hcd: connection reset by peer
[  435.748139][T13456] vhci_hcd: stop threads
[  435.752426][T13456] vhci_hcd: release socket
[  435.756948][T13456] vhci_hcd: disconnect device
[  435.790740][T22692] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6598: deleted inode referenced: 12
[  435.811546][T22692] siw: device registration error -23
[  435.822153][T22692] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6598: deleted inode referenced: 12
[  436.073439][T22717] netlink: 'syz.6.6607': attribute type 13 has an invalid length.
[  436.171558][T22717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.590778][T22768] loop5: detected capacity change from 0 to 1024
[  436.613471][T22768] EXT4-fs: Ignoring removed orlov option
[  436.672556][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  436.672615][   T29] audit: type=1326 audit(1748920673.282:15048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.702736][   T29] audit: type=1326 audit(1748920673.282:15049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.726403][   T29] audit: type=1326 audit(1748920673.282:15050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.750074][   T29] audit: type=1326 audit(1748920673.282:15051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.773737][   T29] audit: type=1326 audit(1748920673.282:15052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.797419][   T29] audit: type=1326 audit(1748920673.282:15053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.821114][   T29] audit: type=1326 audit(1748920673.282:15054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.850078][T22746] loop3: detected capacity change from 0 to 1024
[  436.858887][   T29] audit: type=1326 audit(1748920673.472:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.882685][   T29] audit: type=1326 audit(1748920673.472:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.886753][T22746] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  436.929155][   T29] audit: type=1326 audit(1748920673.542:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22735 comm="syz.3.6613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  436.963642][T22736] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.6613: lblock 8 mapped to illegal pblock 8 (length 1)
[  437.081258][T22736] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  437.093792][T22736] EXT4-fs (loop3): This should not happen!! Data will be lost
[  437.093792][T22736] 
[  437.144099][T22806] lo speed is unknown, defaulting to 1000
[  437.210512][T13470] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  437.274224][T13470] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 117
[  437.286623][T13470] EXT4-fs (loop3): This should not happen!! Data will be lost
[  437.286623][T13470] 
[  437.343276][T22835] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  437.375211][T22835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6626'.
[  437.442229][T22838] loop2: detected capacity change from 0 to 512
[  437.457788][T22838] EXT4-fs: Ignoring removed orlov option
[  437.476184][T22838] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  437.506377][T22844] netlink: 'syz.5.6629': attribute type 2 has an invalid length.
[  437.514410][T22842] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  437.521070][T22842] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  437.528806][T22842] vhci_hcd vhci_hcd.0: Device attached
[  437.536300][T22838] EXT4-fs (loop2): orphan cleanup on readonly fs
[  437.547341][T22838] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6627: bg 0: block 248: padding at end of block bitmap is not set
[  437.565019][T22842] loop6: detected capacity change from 0 to 512
[  437.573129][T22838] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6627: Failed to acquire dquot type 1
[  437.584934][T22842] EXT4-fs: Ignoring removed orlov option
[  437.592595][T22842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  437.601816][T22838] EXT4-fs (loop2): 1 truncate cleaned up
[  437.610820][T22842] EXT4-fs (loop6): orphan cleanup on readonly fs
[  437.612099][T22850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6632'.
[  437.627447][T22838] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  437.629213][T22842] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6630: bg 0: block 248: padding at end of block bitmap is not set
[  437.655547][T22842] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6630: Failed to acquire dquot type 1
[  437.667866][T22842] EXT4-fs (loop6): 1 truncate cleaned up
[  437.679749][T22838] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  437.692465][T22842] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  437.702053][T22838] ext4 filesystem being remounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  437.716119][T22842] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  437.738030][T22842] ext4 filesystem being remounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  437.749096][T22838] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.6627: deleted inode referenced: 12
[  437.749267][T22846] vhci_hcd: connection closed
[  437.769112][T22860] siw: device registration error -23
[  437.769197][T22838] siw: device registration error -23
[  437.785230][T21812] usb 13-1: new high-speed USB device number 4 using vhci_hcd
[  437.795239][T13491] vhci_hcd: stop threads
[  437.799520][T13491] vhci_hcd: release socket
[  437.804013][T13491] vhci_hcd: disconnect device
[  437.811855][T22838] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.6627: deleted inode referenced: 12
[  437.813860][T21812] usb 13-1: enqueue for inactive port 0
[  437.847647][T21812] usb 13-1: enqueue for inactive port 0
[  437.853395][T21812] usb 13-1: enqueue for inactive port 0
[  437.947852][T21812] vhci_hcd: vhci_device speed not set
[  437.972799][T22872] loop2: detected capacity change from 0 to 1024
[  437.988646][T22872] EXT4-fs: Ignoring removed orlov option
[  438.078696][T22878] loop5: detected capacity change from 0 to 512
[  438.119043][T22878] EXT4-fs: Ignoring removed orlov option
[  438.135274][T22878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  438.166931][T22878] EXT4-fs (loop5): orphan cleanup on readonly fs
[  438.192764][T22878] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6642: bg 0: block 248: padding at end of block bitmap is not set
[  438.250128][T22878] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6642: Failed to acquire dquot type 1
[  438.316800][T22878] EXT4-fs (loop5): 1 truncate cleaned up
[  438.341640][T22878] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  438.375924][T22878] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  438.391169][T22878] ext4 filesystem being remounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  438.435962][T22878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6642'.
[  438.454965][T22888] blktrace: Concurrent blktraces are not allowed on loop2
[  438.464197][T22878] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6642: deleted inode referenced: 12
[  438.486300][T22878] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6642: deleted inode referenced: 12
[  438.498115][ T3391] vhci_hcd: vhci_device speed not set
[  438.509781][T22857] loop1: detected capacity change from 0 to 1024
[  438.537093][T22857] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  438.560771][T22857] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.6634: lblock 8 mapped to illegal pblock 8 (length 1)
[  438.582058][T22895] lo speed is unknown, defaulting to 1000
[  438.588750][T22857] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  438.601160][T22857] EXT4-fs (loop1): This should not happen!! Data will be lost
[  438.601160][T22857] 
[  438.647307][T22857] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  438.670524][T22857] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  438.683059][T22857] EXT4-fs (loop1): This should not happen!! Data will be lost
[  438.683059][T22857] 
[  438.692833][T22857] EXT4-fs (loop1): Total free blocks count 0
[  438.698883][T22857] EXT4-fs (loop1): Free/Dirty block details
[  438.704796][T22857] EXT4-fs (loop1): free_blocks=4293918720
[  438.710576][T22857] EXT4-fs (loop1): dirty_blocks=480
[  438.715808][T22857] EXT4-fs (loop1): Block reservation details
[  438.721962][T22857] EXT4-fs (loop1): i_reserved_data_blocks=30
[  438.775928][T22907] netlink: 'syz.6.6652': attribute type 2 has an invalid length.
[  438.823633][T13455] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 7)
[  438.914419][T22913] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  438.921021][T22913] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  438.928728][T22913] vhci_hcd vhci_hcd.0: Device attached
[  438.974123][T22913] loop2: detected capacity change from 0 to 512
[  438.992390][T22913] EXT4-fs: Ignoring removed orlov option
[  439.013293][T22913] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  439.023026][T22921] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.035563][T22913] EXT4-fs (loop2): orphan cleanup on readonly fs
[  439.047135][T22913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6655: bg 0: block 248: padding at end of block bitmap is not set
[  439.083550][T22913] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6655: Failed to acquire dquot type 1
[  439.098528][T22925] blktrace: Concurrent blktraces are not allowed on loop2
[  439.107380][T22921] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.125739][T22913] EXT4-fs (loop2): 1 truncate cleaned up
[  439.165201][   T23] usb 5-1: new high-speed USB device number 15 using vhci_hcd
[  439.174033][T22921] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.184023][T22913] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  439.195822][T22913] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  439.204483][T22913] ext4 filesystem being remounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  439.242474][T22916] vhci_hcd: connection reset by peer
[  439.250217][T13470] vhci_hcd: stop threads
[  439.254490][T13470] vhci_hcd: release socket
[  439.258985][T13470] vhci_hcd: disconnect device
[  439.267370][T22921] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.343386][T22921] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.370039][T22921] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.392078][T22921] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.400610][T22911] loop5: detected capacity change from 0 to 1024
[  439.413230][T22921] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.424602][T22911] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.457392][T22911] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.6653: lblock 8 mapped to illegal pblock 8 (length 1)
[  439.502573][T22911] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  439.515016][T22911] EXT4-fs (loop5): This should not happen!! Data will be lost
[  439.515016][T22911] 
[  439.557343][T22911] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  439.602156][T22911] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  439.614763][T22911] EXT4-fs (loop5): This should not happen!! Data will be lost
[  439.614763][T22911] 
[  439.624505][T22911] EXT4-fs (loop5): Total free blocks count 0
[  439.630593][T22911] EXT4-fs (loop5): Free/Dirty block details
[  439.636536][T22911] EXT4-fs (loop5): free_blocks=4293918720
[  439.642253][T22911] EXT4-fs (loop5): dirty_blocks=480
[  439.647570][T22911] EXT4-fs (loop5): Block reservation details
[  439.653567][T22911] EXT4-fs (loop5): i_reserved_data_blocks=30
[  439.675062][T22949] loop3: detected capacity change from 0 to 512
[  439.690345][T22949] EXT4-fs: Ignoring removed i_version option
[  439.699842][T22949] EXT4-fs (loop3): orphan cleanup on readonly fs
[  439.703733][T22952] loop6: detected capacity change from 0 to 512
[  439.713258][T22952] EXT4-fs: Ignoring removed orlov option
[  439.719770][T22952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  439.728556][T22949] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6665: bg 0: block 131: padding at end of block bitmap is not set
[  439.739595][T22952] EXT4-fs (loop6): orphan cleanup on readonly fs
[  439.746408][T22949] EXT4-fs (loop3): Remounting filesystem read-only
[  439.749913][T13470] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  439.757382][T22949] EXT4-fs (loop3): 1 truncate cleaned up
[  439.781637][T22952] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6666: bg 0: block 248: padding at end of block bitmap is not set
[  439.796383][T22952] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6666: Failed to acquire dquot type 1
[  439.809966][T22952] EXT4-fs (loop6): 1 truncate cleaned up
[  439.851002][T22949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6665'.
[  439.870329][T22952] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  439.896017][T22952] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  439.904874][T22952] ext4 filesystem being remounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  439.920221][T22952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6666'.
[  439.930411][T22952] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6666: deleted inode referenced: 12
[  440.023695][T22975] loop3: detected capacity change from 0 to 512
[  440.052980][T22975] EXT4-fs: Ignoring removed i_version option
[  440.073887][T22983] loop1: detected capacity change from 0 to 512
[  440.091093][T22983] EXT4-fs: Ignoring removed orlov option
[  440.092152][T22975] EXT4-fs (loop3): orphan cleanup on readonly fs
[  440.107214][T22983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  440.121121][T22983] EXT4-fs (loop1): orphan cleanup on readonly fs
[  440.127663][T22992] syz_tun: entered allmulticast mode
[  440.129078][T22975] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6675: bg 0: block 131: padding at end of block bitmap is not set
[  440.149593][T22983] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6680: bg 0: block 248: padding at end of block bitmap is not set
[  440.156753][T22989] syz_tun: left allmulticast mode
[  440.166784][T22975] EXT4-fs (loop3): Remounting filesystem read-only
[  440.181988][T22983] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6680: Failed to acquire dquot type 1
[  440.185665][T22975] EXT4-fs (loop3): 1 truncate cleaned up
[  440.196030][T22983] EXT4-fs (loop1): 1 truncate cleaned up
[  440.225841][T22983] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  440.255739][T22983] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  440.274421][T22983] ext4 filesystem being remounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  440.301858][T22983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6680'.
[  440.322835][T22983] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6680: deleted inode referenced: 12
[  440.349342][T22983] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6680: deleted inode referenced: 12
[  440.408948][T22975] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6675'.
[  440.458422][T23014] loop2: detected capacity change from 0 to 1024
[  440.465267][T23014] EXT4-fs: Ignoring removed orlov option
[  440.506476][T22977] loop5: detected capacity change from 0 to 1024
[  440.542084][T22977] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  440.571728][T23029] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  440.578285][T23029] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  440.585909][T23029] vhci_hcd vhci_hcd.0: Device attached
[  440.608697][T23029] loop1: detected capacity change from 0 to 512
[  440.629154][T22977] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.6678: lblock 8 mapped to illegal pblock 8 (length 1)
[  440.644454][T23029] EXT4-fs: Ignoring removed orlov option
[  440.655167][T21816] vhci_hcd: vhci_device speed not set
[  440.667921][T23029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  440.699294][T22977] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  440.711664][T22977] EXT4-fs (loop5): This should not happen!! Data will be lost
[  440.711664][T22977] 
[  440.726189][T23029] EXT4-fs (loop1): orphan cleanup on readonly fs
[  440.743493][T23029] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6696: bg 0: block 248: padding at end of block bitmap is not set
[  440.762075][T22977] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  440.805417][T22977] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  440.817984][T22977] EXT4-fs (loop5): This should not happen!! Data will be lost
[  440.817984][T22977] 
[  440.827734][T22977] EXT4-fs (loop5): Total free blocks count 0
[  440.827791][T23029] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6696: Failed to acquire dquot type 1
[  440.833724][T22977] EXT4-fs (loop5): Free/Dirty block details
[  440.833745][T22977] EXT4-fs (loop5): free_blocks=4293918720
[  440.845160][   T10] usb 3-1: new high-speed USB device number 19 using vhci_hcd
[  440.851288][T22977] EXT4-fs (loop5): dirty_blocks=480
[  440.869539][T22977] EXT4-fs (loop5): Block reservation details
[  440.875683][T22977] EXT4-fs (loop5): i_reserved_data_blocks=30
[  440.909496][T23029] EXT4-fs (loop1): 1 truncate cleaned up
[  440.951780][T23044] loop3: detected capacity change from 0 to 512
[  440.967218][T23044] EXT4-fs: Ignoring removed orlov option
[  440.980803][T23044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  440.989641][T23029] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  440.999840][T13455] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 7)
[  441.019561][T23044] EXT4-fs (loop3): orphan cleanup on readonly fs
[  441.026799][T23044] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6701: bg 0: block 248: padding at end of block bitmap is not set
[  441.044668][T23029] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  441.068635][T23044] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6701: Failed to acquire dquot type 1
[  441.095848][T23029] ext4 filesystem being remounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  441.109902][T23031] vhci_hcd: connection reset by peer
[  441.116182][T13455] vhci_hcd: stop threads
[  441.120464][T13455] vhci_hcd: release socket
[  441.124900][T13455] vhci_hcd: disconnect device
[  441.132138][T23044] EXT4-fs (loop3): 1 truncate cleaned up
[  441.148092][T23044] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  441.155419][T23055] lo speed is unknown, defaulting to 1000
[  441.176580][T23032] loop6: detected capacity change from 0 to 1024
[  441.194376][T23044] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  441.212347][T23032] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.231221][T23044] ext4 filesystem being remounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  441.250306][T23044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6701'.
[  441.261142][T23032] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.6697: lblock 8 mapped to illegal pblock 8 (length 1)
[  441.275400][T23044] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6701: deleted inode referenced: 12
[  441.302595][T23032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  441.315033][T23032] EXT4-fs (loop6): This should not happen!! Data will be lost
[  441.315033][T23032] 
[  441.327739][T23044] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6701: deleted inode referenced: 12
[  441.337987][T23032] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  441.355686][T23032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  441.368181][T23032] EXT4-fs (loop6): This should not happen!! Data will be lost
[  441.368181][T23032] 
[  441.377922][T23032] EXT4-fs (loop6): Total free blocks count 0
[  441.381993][T23061] netlink: 'syz.5.6704': attribute type 4 has an invalid length.
[  441.383905][T23032] EXT4-fs (loop6): Free/Dirty block details
[  441.383924][T23032] EXT4-fs (loop6): free_blocks=4293918720
[  441.383941][T23032] EXT4-fs (loop6): dirty_blocks=480
[  441.383956][T23032] EXT4-fs (loop6): Block reservation details
[  441.383970][T23032] EXT4-fs (loop6): i_reserved_data_blocks=30
[  441.423949][T23062] netlink: 'syz.5.6704': attribute type 4 has an invalid length.
[  441.432265][T13470] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  441.512859][T23066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6706'.
[  441.563432][T23076] loop6: detected capacity change from 0 to 1024
[  441.578363][T23076] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.607480][   T12] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 8)
[  441.623496][   T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  441.635910][   T12] EXT4-fs (loop6): This should not happen!! Data will be lost
[  441.635910][   T12] 
[  441.703467][T23086] siw: device registration error -23
[  441.742040][T23074] syzkaller0: entered promiscuous mode
[  441.748946][T23074] syzkaller0: entered allmulticast mode
[  441.826479][T23092] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6715'.
[  442.064315][   T29] kauditd_printk_skb: 156 callbacks suppressed
[  442.064347][   T29] audit: type=1326 audit(1748920678.672:15198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.098498][T23107] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.108531][   T29] audit: type=1326 audit(1748920678.672:15199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.132380][   T29] audit: type=1326 audit(1748920678.722:15200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.156025][   T29] audit: type=1326 audit(1748920678.722:15201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.179625][   T29] audit: type=1326 audit(1748920678.722:15202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.183046][T23082] loop1: detected capacity change from 0 to 1024
[  442.203238][   T29] audit: type=1326 audit(1748920678.732:15203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.233259][   T29] audit: type=1326 audit(1748920678.732:15204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.256927][   T29] audit: type=1326 audit(1748920678.732:15205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.258671][T23082] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.280509][   T29] audit: type=1326 audit(1748920678.732:15206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.298604][T23125] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6727'.
[  442.317369][   T29] audit: type=1326 audit(1748920678.752:15207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.1.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  442.364593][T23082] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.6712: lblock 8 mapped to illegal pblock 8 (length 1)
[  442.379329][T23082] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  442.391804][T23082] EXT4-fs (loop1): This should not happen!! Data will be lost
[  442.391804][T23082] 
[  442.408125][T23107] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.418194][T23082] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  442.438906][T23131] loop6: detected capacity change from 0 to 512
[  442.450323][T23082] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  442.453058][T23131] EXT4-fs: Ignoring removed i_version option
[  442.463057][T23082] EXT4-fs (loop1): This should not happen!! Data will be lost
[  442.463057][T23082] 
[  442.478803][T23082] EXT4-fs (loop1): Total free blocks count 0
[  442.484882][T23082] EXT4-fs (loop1): Free/Dirty block details
[  442.490837][T23082] EXT4-fs (loop1): free_blocks=4293918720
[  442.496618][T23082] EXT4-fs (loop1): dirty_blocks=480
[  442.501955][T23082] EXT4-fs (loop1): Block reservation details
[  442.508015][T23082] EXT4-fs (loop1): i_reserved_data_blocks=30
[  442.521470][T23133] syz_tun: entered allmulticast mode
[  442.522516][T23131] EXT4-fs (loop6): orphan cleanup on readonly fs
[  442.528101][T23132] syz_tun: left allmulticast mode
[  442.533987][T23131] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6729: bg 0: block 131: padding at end of block bitmap is not set
[  442.554380][T23107] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.567815][T23131] EXT4-fs (loop6): Remounting filesystem read-only
[  442.578495][T23131] EXT4-fs (loop6): 1 truncate cleaned up
[  442.618018][T23107] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.629426][T13470] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  442.663103][T23131] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6729'.
[  442.722536][T23107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.747495][T23107] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.777727][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6740'.
[  442.781071][T23107] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.810520][T23107] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.014108][T23168] lo speed is unknown, defaulting to 1000
[  443.077934][T23175] netlink: 'syz.2.6745': attribute type 4 has an invalid length.
[  443.110732][T23176] netlink: 'syz.3.6744': attribute type 2 has an invalid length.
[  443.185669][T23178] netlink: 'syz.2.6745': attribute type 4 has an invalid length.
[  443.510911][T23174] loop5: detected capacity change from 0 to 512
[  443.520648][T23174] EXT4-fs: Ignoring removed i_version option
[  443.532579][T23174] EXT4-fs (loop5): orphan cleanup on readonly fs
[  443.543358][T23151] loop6: detected capacity change from 0 to 1024
[  443.550528][T23174] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6748: bg 0: block 131: padding at end of block bitmap is not set
[  443.567836][T23174] EXT4-fs (loop5): Remounting filesystem read-only
[  443.574662][T23174] EXT4-fs (loop5): 1 truncate cleaned up
[  443.586524][T23151] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.620580][T23151] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.6738: lblock 8 mapped to illegal pblock 8 (length 1)
[  443.635066][T23151] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  443.647558][T23151] EXT4-fs (loop6): This should not happen!! Data will be lost
[  443.647558][T23151] 
[  443.688986][T23151] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  443.739119][T23151] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  443.751653][T23151] EXT4-fs (loop6): This should not happen!! Data will be lost
[  443.751653][T23151] 
[  443.761385][T23151] EXT4-fs (loop6): Total free blocks count 0
[  443.767416][T23151] EXT4-fs (loop6): Free/Dirty block details
[  443.773352][T23151] EXT4-fs (loop6): free_blocks=4293918720
[  443.779163][T23151] EXT4-fs (loop6): dirty_blocks=480
[  443.784383][T23151] EXT4-fs (loop6): Block reservation details
[  443.790448][T23151] EXT4-fs (loop6): i_reserved_data_blocks=30
[  443.830296][T23189] loop3: detected capacity change from 0 to 1024
[  443.868216][T23189] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.914048][T13491] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 7)
[  443.934534][T23179] loop1: detected capacity change from 0 to 1024
[  443.948045][T13491] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 8)
[  443.963102][T13491] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  443.969053][T23179] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.975584][T13491] EXT4-fs (loop3): This should not happen!! Data will be lost
[  443.975584][T13491] 
[  444.014080][T23167] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.6746: lblock 8 mapped to illegal pblock 8 (length 1)
[  444.032156][T23204] loop5: detected capacity change from 0 to 512
[  444.056813][T23204] EXT4-fs: Ignoring removed orlov option
[  444.065414][T23167] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  444.077845][T23167] EXT4-fs (loop1): This should not happen!! Data will be lost
[  444.077845][T23167] 
[  444.094586][T23204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.112255][T23210] loop3: detected capacity change from 0 to 512
[  444.119122][T23204] EXT4-fs (loop5): orphan cleanup on readonly fs
[  444.127553][T23210] EXT4-fs: Ignoring removed orlov option
[  444.133999][T23204] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6754: bg 0: block 248: padding at end of block bitmap is not set
[  444.156284][T23210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.166010][T23204] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6754: Failed to acquire dquot type 1
[  444.166789][T23167] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  444.199744][T23210] EXT4-fs (loop3): orphan cleanup on readonly fs
[  444.208024][T23204] EXT4-fs (loop5): 1 truncate cleaned up
[  444.214307][T23210] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6753: bg 0: block 248: padding at end of block bitmap is not set
[  444.229280][T23204] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  444.243972][T23215] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.254135][T23167] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  444.266735][T23167] EXT4-fs (loop1): This should not happen!! Data will be lost
[  444.266735][T23167] 
[  444.269114][   T23] vhci_hcd: vhci_device speed not set
[  444.276384][T23167] EXT4-fs (loop1): Total free blocks count 0
[  444.287863][T23167] EXT4-fs (loop1): Free/Dirty block details
[  444.293836][T23167] EXT4-fs (loop1): free_blocks=4293918720
[  444.299634][T23167] EXT4-fs (loop1): dirty_blocks=480
[  444.304922][T23167] EXT4-fs (loop1): Block reservation details
[  444.310983][T23167] EXT4-fs (loop1): i_reserved_data_blocks=30
[  444.318692][T23210] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6753: Failed to acquire dquot type 1
[  444.318715][T23204] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  444.318749][T23204] ext4 filesystem being remounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.351532][T23210] EXT4-fs (loop3): 1 truncate cleaned up
[  444.355314][T23204] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6754: deleted inode referenced: 12
[  444.371349][T23204] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6754: deleted inode referenced: 12
[  444.384894][T23210] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  444.396359][T23215] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.408433][T13491] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 7)
[  444.443444][T23210] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  444.455311][T23210] ext4 filesystem being remounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.467585][T23215] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.487270][T23210] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6753: deleted inode referenced: 12
[  444.504357][T23210] siw: device registration error -23
[  444.528608][T23210] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6753: deleted inode referenced: 12
[  444.552007][T23230] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  444.567900][T23215] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.635947][T23237] loop1: detected capacity change from 0 to 1024
[  444.663314][T23237] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  444.713590][T23249] lo speed is unknown, defaulting to 1000
[  444.724478][T13491] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 8)
[  444.754237][T13491] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  444.766595][T13491] EXT4-fs (loop1): This should not happen!! Data will be lost
[  444.766595][T13491] 
[  444.803994][T23260] loop1: detected capacity change from 0 to 512
[  444.806229][T23249] netlink: 'syz.5.6769': attribute type 4 has an invalid length.
[  444.811567][T23260] EXT4-fs: Ignoring removed orlov option
[  444.828137][T23260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.838781][T23260] EXT4-fs (loop1): orphan cleanup on readonly fs
[  444.847561][T23260] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6771: bg 0: block 248: padding at end of block bitmap is not set
[  444.862926][T23260] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6771: Failed to acquire dquot type 1
[  444.879886][T23260] EXT4-fs (loop1): 1 truncate cleaned up
[  444.888158][T23249] netlink: 'syz.5.6769': attribute type 4 has an invalid length.
[  444.898444][T23260] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  444.932256][T23260] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  444.950219][T23260] ext4 filesystem being remounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.975039][T23260] __nla_validate_parse: 5 callbacks suppressed
[  444.975055][T23260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6771'.
[  444.995379][T23270] lo speed is unknown, defaulting to 1000
[  445.010390][T23260] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6771: deleted inode referenced: 12
[  445.037080][T23260] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6771: deleted inode referenced: 12
[  445.262750][T23281] loop3: detected capacity change from 0 to 1024
[  445.288494][T23281] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  445.324608][T23268] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.6776: lblock 8 mapped to illegal pblock 8 (length 1)
[  445.354815][T23303] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  445.376281][T23268] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  445.388679][T23268] EXT4-fs (loop3): This should not happen!! Data will be lost
[  445.388679][T23268] 
[  445.402261][T23303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6789'.
[  445.542319][T23268] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  445.557461][T23268] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  445.569972][T23268] EXT4-fs (loop3): This should not happen!! Data will be lost
[  445.569972][T23268] 
[  445.579669][T23268] EXT4-fs (loop3): Total free blocks count 0
[  445.585711][T23268] EXT4-fs (loop3): Free/Dirty block details
[  445.591717][T23268] EXT4-fs (loop3): free_blocks=4293918720
[  445.597465][T23268] EXT4-fs (loop3): dirty_blocks=480
[  445.602677][T23268] EXT4-fs (loop3): Block reservation details
[  445.608786][T23268] EXT4-fs (loop3): i_reserved_data_blocks=30
[  445.620089][T23311] syzkaller0: entered promiscuous mode
[  445.631689][T23311] syzkaller0: entered allmulticast mode
[  445.732023][T23327] lo speed is unknown, defaulting to 1000
[  445.739850][T13470] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  445.773200][T23330] netlink: 'syz.5.6799': attribute type 4 has an invalid length.
[  445.801612][T23330] netlink: 'syz.5.6799': attribute type 4 has an invalid length.
[  445.872255][T23340] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  445.883921][T23340] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6805'.
[  445.984616][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6810'.
[  445.994753][T23346] loop6: detected capacity change from 0 to 512
[  446.002277][T23354] loop3: detected capacity change from 0 to 1024
[  446.005433][T23346] EXT4-fs: Ignoring removed orlov option
[  446.014934][T23346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.024474][T23346] EXT4-fs (loop6): orphan cleanup on readonly fs
[  446.025123][   T10] vhci_hcd: vhci_device speed not set
[  446.031835][T23346] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6807: bg 0: block 248: padding at end of block bitmap is not set
[  446.041165][T23354] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  446.050963][T23346] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6807: Failed to acquire dquot type 1
[  446.074652][T23346] EXT4-fs (loop6): 1 truncate cleaned up
[  446.097072][   T12] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 8)
[  446.114035][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  446.126376][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  446.126376][   T12] 
[  446.229142][T23346] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  446.248098][T23346] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  446.256933][T23346] ext4 filesystem being remounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.269027][T23346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6807'.
[  446.278800][T23346] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6807: deleted inode referenced: 12
[  446.290938][T23346] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6807: deleted inode referenced: 12
[  446.321929][T23363] syzkaller0: entered promiscuous mode
[  446.327970][T23363] syzkaller0: entered allmulticast mode
[  446.404564][T23372] lo speed is unknown, defaulting to 1000
[  446.437537][T23376] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6817'.
[  446.450695][T23377] netlink: 'syz.5.6816': attribute type 4 has an invalid length.
[  446.469302][T23377] netlink: 'syz.5.6816': attribute type 4 has an invalid length.
[  446.584695][T23393] blktrace: Concurrent blktraces are not allowed on loop2
[  446.652489][T23400] loop6: detected capacity change from 0 to 512
[  446.661375][T23400] EXT4-fs: Ignoring removed orlov option
[  446.669652][T23400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  446.680967][T23400] EXT4-fs (loop6): orphan cleanup on readonly fs
[  446.689294][T23400] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6826: bg 0: block 248: padding at end of block bitmap is not set
[  446.705439][T23400] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6826: Failed to acquire dquot type 1
[  446.718970][T23400] EXT4-fs (loop6): 1 truncate cleaned up
[  446.727056][T23400] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  446.764066][T23400] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  446.772685][T23400] ext4 filesystem being remounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.786836][T23400] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6826'.
[  446.800741][T23391] syzkaller0: entered promiscuous mode
[  446.807273][T23391] syzkaller0: entered allmulticast mode
[  446.813857][T23400] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6826: deleted inode referenced: 12
[  446.832532][T23400] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6826: deleted inode referenced: 12
[  446.848328][T23408] loop1: detected capacity change from 0 to 512
[  446.856179][T23408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  446.870252][T23408] EXT4-fs (loop1): 1 truncate cleaned up
[  447.104192][T23418] lo speed is unknown, defaulting to 1000
[  447.148962][T23425] netlink: 'syz.3.6832': attribute type 4 has an invalid length.
[  447.303377][T23431] loop5: detected capacity change from 0 to 1024
[  447.353846][T23431] EXT4-fs: Ignoring removed orlov option
[  447.360907][T23215] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  447.377402][T23215] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.393714][T23215] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.497386][T23215] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.698672][T23443] loop3: detected capacity change from 0 to 512
[  447.709016][T23443] EXT4-fs: Ignoring removed orlov option
[  447.728718][T23443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  447.750520][T23443] EXT4-fs (loop3): orphan cleanup on readonly fs
[  447.765167][T23443] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6841: bg 0: block 248: padding at end of block bitmap is not set
[  447.825111][T23443] __quota_error: 149 callbacks suppressed
[  447.825132][T23443] Quota error (device loop3): write_blk: dquota write failed
[  447.838394][T23443] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  447.848402][T23443] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6841: Failed to acquire dquot type 1
[  447.874536][T23443] EXT4-fs (loop3): 1 truncate cleaned up
[  447.897549][T23443] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  447.925780][T23443] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  447.941374][T23443] ext4 filesystem being remounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  447.953651][T23452] loop1: detected capacity change from 0 to 1024
[  447.962169][T23443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6841'.
[  447.974141][T23443] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6841: deleted inode referenced: 12
[  447.993008][T23452] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.016720][T23443] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6841: deleted inode referenced: 12
[  448.054136][T13470] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 8)
[  448.082586][T13470] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  448.091987][T23469] lo speed is unknown, defaulting to 1000
[  448.094961][T13470] EXT4-fs (loop1): This should not happen!! Data will be lost
[  448.094961][T13470] 
[  448.137155][T23473] loop5: detected capacity change from 0 to 512
[  448.143882][T23473] EXT4-fs: Ignoring removed orlov option
[  448.150623][T23473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  448.161040][T23473] EXT4-fs (loop5): orphan cleanup on readonly fs
[  448.171464][T23473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6853: bg 0: block 248: padding at end of block bitmap is not set
[  448.186174][T23473] Quota error (device loop5): write_blk: dquota write failed
[  448.193586][T23473] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  448.203547][T23473] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6853: Failed to acquire dquot type 1
[  448.215618][T23473] EXT4-fs (loop5): 1 truncate cleaned up
[  448.220754][T23481] loop3: detected capacity change from 0 to 512
[  448.228434][T23481] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  448.228999][T23473] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  448.249286][T23481] EXT4-fs (loop3): 1 truncate cleaned up
[  448.256378][T23473] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  448.262584][T23485] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  448.273043][T23473] ext4 filesystem being remounted at /350/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  448.276763][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6856'.
[  448.319389][T23487] loop1: detected capacity change from 0 to 1024
[  448.326422][T23487] EXT4-fs: Ignoring removed orlov option
[  448.394070][T23473] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6853: deleted inode referenced: 12
[  448.434825][T23495] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  448.441420][T23495] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  448.449152][T23495] vhci_hcd vhci_hcd.0: Device attached
[  448.457802][T23500] siw: device registration error -23
[  448.465019][T23499] loop1: detected capacity change from 0 to 1024
[  448.497538][T23499] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  448.509171][T23501] loop2: detected capacity change from 0 to 512
[  448.515710][T23473] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6853: deleted inode referenced: 12
[  448.532132][T23501] EXT4-fs: Ignoring removed orlov option
[  448.539348][T23501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  448.549437][T23501] EXT4-fs (loop2): orphan cleanup on readonly fs
[  448.557245][T13459] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 8)
[  448.566699][T23501] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6860: bg 0: block 248: padding at end of block bitmap is not set
[  448.595463][T23506] loop6: detected capacity change from 0 to 1024
[  448.610282][T23501] Quota error (device loop2): write_blk: dquota write failed
[  448.617829][T23501] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  448.627839][T23501] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6860: Failed to acquire dquot type 1
[  448.639631][T13459] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  448.652057][T13459] EXT4-fs (loop1): This should not happen!! Data will be lost
[  448.652057][T13459] 
[  448.662823][T23506] EXT4-fs: Ignoring removed orlov option
[  448.671052][T23501] EXT4-fs (loop2): 1 truncate cleaned up
[  448.694124][T23495] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  448.715138][T21984] usb 5-1: new high-speed USB device number 16 using vhci_hcd
[  448.736096][T23495] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  448.765927][T23495] ext4 filesystem being remounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  448.801251][T23496] vhci_hcd: connection reset by peer
[  448.806967][T13491] vhci_hcd: stop threads
[  448.811316][T13491] vhci_hcd: release socket
[  448.815787][T13491] vhci_hcd: disconnect device
[  448.991991][T23523] lo speed is unknown, defaulting to 1000
[  449.278941][T23532] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  449.285557][T23532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  449.293246][T23532] vhci_hcd vhci_hcd.0: Device attached
[  449.303809][T23532] loop5: detected capacity change from 0 to 512
[  449.310548][T23532] EXT4-fs: Ignoring removed orlov option
[  449.316663][T23532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  449.326021][T23532] EXT4-fs (loop5): orphan cleanup on readonly fs
[  449.332863][T23532] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6871: bg 0: block 248: padding at end of block bitmap is not set
[  449.348129][T23532] Quota error (device loop5): write_blk: dquota write failed
[  449.355639][T23532] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  449.365606][T23532] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6871: Failed to acquire dquot type 1
[  449.377425][T23532] EXT4-fs (loop5): 1 truncate cleaned up
[  449.385238][   T29] audit: type=1326 audit(1748920685.912:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  449.408897][   T29] audit: type=1326 audit(1748920685.912:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23515 comm="syz.1.6866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2519e969 code=0x7ffc0000
[  449.457193][T23532] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  449.474435][T23519] loop1: detected capacity change from 0 to 1024
[  449.482581][T23532] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  449.491705][T23532] ext4 filesystem being remounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  449.504359][T23533] vhci_hcd: connection closed
[  449.504554][T13491] vhci_hcd: stop threads
[  449.513640][T13491] vhci_hcd: release socket
[  449.518136][T13491] vhci_hcd: disconnect device
[  449.575359][T23547] validate_nla: 2 callbacks suppressed
[  449.575379][T23547] netlink: 'syz.3.6870': attribute type 2 has an invalid length.
[  449.645298][T23549] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  449.651858][T23549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  449.659505][T23549] vhci_hcd vhci_hcd.0: Device attached
[  449.673831][T23552] loop6: detected capacity change from 0 to 512
[  449.697629][T23552] EXT4-fs: Ignoring removed orlov option
[  449.704111][T23552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  449.718884][T23552] EXT4-fs (loop6): orphan cleanup on readonly fs
[  449.726536][T23552] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6874: bg 0: block 248: padding at end of block bitmap is not set
[  449.742573][T23552] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6874: Failed to acquire dquot type 1
[  449.756625][T23552] EXT4-fs (loop6): 1 truncate cleaned up
[  449.905155][T21983] usb 13-1: new high-speed USB device number 5 using vhci_hcd
[  449.911033][   T10] vhci_hcd: vhci_device speed not set
[  449.914763][T23519] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.939573][T23517] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.6866: lblock 8 mapped to illegal pblock 8 (length 1)
[  449.955969][T23517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  449.968430][T23517] EXT4-fs (loop1): This should not happen!! Data will be lost
[  449.968430][T23517] 
[  449.979928][T23549] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  449.990394][T23517] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  449.991188][T23554] blktrace: Concurrent blktraces are not allowed on loop2
[  450.007797][T23517] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  450.015386][T23549] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  450.024862][T23517] EXT4-fs (loop1): This should not happen!! Data will be lost
[  450.024862][T23517] 
[  450.033385][T23549] ext4 filesystem being remounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  450.042860][T23517] EXT4-fs (loop1): Total free blocks count 0
[  450.042882][T23517] EXT4-fs (loop1): Free/Dirty block details
[  450.065462][T23517] EXT4-fs (loop1): free_blocks=4293918720
[  450.071294][T23517] EXT4-fs (loop1): dirty_blocks=480
[  450.076541][T23517] EXT4-fs (loop1): Block reservation details
[  450.082325][T23550] vhci_hcd: connection reset by peer
[  450.082516][T23517] EXT4-fs (loop1): i_reserved_data_blocks=30
[  450.091153][   T12] vhci_hcd: stop threads
[  450.098164][   T12] vhci_hcd: release socket
[  450.102660][   T12] vhci_hcd: disconnect device
[  450.220853][T13470] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  450.358050][T23571] lo speed is unknown, defaulting to 1000
[  450.552044][T23573] netlink: 'syz.3.6881': attribute type 4 has an invalid length.
[  450.567953][T23579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6884'.
[  450.584732][T23573] netlink: 'syz.3.6881': attribute type 4 has an invalid length.
[  450.872843][T23597] blktrace: Concurrent blktraces are not allowed on loop2
[  451.086712][T23603] loop5: detected capacity change from 0 to 1024
[  451.117293][T23603] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.187415][T13470] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 8)
[  451.229304][T13470] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  451.241654][T13470] EXT4-fs (loop5): This should not happen!! Data will be lost
[  451.241654][T13470] 
[  451.294055][T23611] loop3: detected capacity change from 0 to 1024
[  451.313242][T23604] loop6: detected capacity change from 0 to 1024
[  451.333240][T23611] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.376231][T23604] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  451.412026][T23623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6899'.
[  451.510262][T23631] loop5: detected capacity change from 0 to 512
[  451.517761][T23629] netlink: 'syz.3.6903': attribute type 13 has an invalid length.
[  451.537071][T23631] EXT4-fs: Ignoring removed orlov option
[  451.549949][T23599] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.6893: lblock 8 mapped to illegal pblock 8 (length 1)
[  451.550588][T23599] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  451.576615][T23599] EXT4-fs (loop6): This should not happen!! Data will be lost
[  451.576615][T23599] 
[  451.586552][T23629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  451.602302][T23631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  451.623033][T23599] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  451.645807][T23631] EXT4-fs (loop5): orphan cleanup on readonly fs
[  451.653098][T23631] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6902: bg 0: block 248: padding at end of block bitmap is not set
[  451.678455][T23636] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.690132][T23599] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  451.702816][T23599] EXT4-fs (loop6): This should not happen!! Data will be lost
[  451.702816][T23599] 
[  451.712871][T23599] EXT4-fs (loop6): Total free blocks count 0
[  451.719399][T23599] EXT4-fs (loop6): Free/Dirty block details
[  451.725397][T23599] EXT4-fs (loop6): free_blocks=4293918720
[  451.731165][T23599] EXT4-fs (loop6): dirty_blocks=480
[  451.736414][T23599] EXT4-fs (loop6): Block reservation details
[  451.742407][T23599] EXT4-fs (loop6): i_reserved_data_blocks=30
[  451.748840][T23631] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6902: Failed to acquire dquot type 1
[  451.778849][T23631] EXT4-fs (loop5): 1 truncate cleaned up
[  451.792577][T23631] EXT4-fs mount: 101 callbacks suppressed
[  451.792597][T23631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  451.827034][T23636] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.858390][T23636] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.879830][T23631] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  451.898339][T13470] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  451.931070][T23631] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  451.945513][T23647] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6908'.
[  451.967030][T23631] ext4 filesystem being remounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  451.985640][T23631] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6902: deleted inode referenced: 12
[  452.007808][T23631] siw: device registration error -23
[  452.024267][T23631] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6902: deleted inode referenced: 12
[  452.044738][T23652] loop1: detected capacity change from 0 to 1024
[  452.053959][T23652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.076466][T23652] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.089418][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.109118][T21519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.123155][T23656] siw: device registration error -23
[  452.154429][T23644] syzkaller0: entered promiscuous mode
[  452.162296][T23644] syzkaller0: entered allmulticast mode
[  452.183999][T23636] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.250388][T23666] siw: device registration error -23
[  452.277784][T23636] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  452.280018][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6919'.
[  452.302252][T23636] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  452.317223][T23636] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  452.365171][T23676] loop5: detected capacity change from 0 to 512
[  452.372324][T23636] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.378973][T23676] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  452.403019][T23680] lo speed is unknown, defaulting to 1000
[  452.411830][T23676] EXT4-fs (loop5): 1 truncate cleaned up
[  452.418042][T23676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.487574][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.508981][T23689] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  452.515528][T23689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  452.523230][T23689] vhci_hcd vhci_hcd.0: Device attached
[  452.544511][T23694] loop2: detected capacity change from 0 to 512
[  452.552786][T23694] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  452.586461][T23689] loop6: detected capacity change from 0 to 512
[  452.598571][T23702] loop1: detected capacity change from 0 to 512
[  452.607156][T23694] EXT4-fs (loop2): 1 truncate cleaned up
[  452.613901][T23689] EXT4-fs: Ignoring removed orlov option
[  452.620167][T23702] EXT4-fs: Ignoring removed orlov option
[  452.626176][T23707] loop5: detected capacity change from 0 to 1024
[  452.628790][T23694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.645149][T23707] EXT4-fs: Ignoring removed orlov option
[  452.650649][T23702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.658712][T23689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.670030][T23702] EXT4-fs (loop1): orphan cleanup on readonly fs
[  452.677184][T23689] EXT4-fs (loop6): orphan cleanup on readonly fs
[  452.677313][T23707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.684298][T23702] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6931: bg 0: block 248: padding at end of block bitmap is not set
[  452.711246][T23689] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6925: bg 0: block 248: padding at end of block bitmap is not set
[  452.727373][T23702] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.6931: Failed to acquire dquot type 1
[  452.739371][T23689] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6925: Failed to acquire dquot type 1
[  452.760124][T23702] EXT4-fs (loop1): 1 truncate cleaned up
[  452.771688][T23702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  452.788863][T23689] EXT4-fs (loop6): 1 truncate cleaned up
[  452.807613][T23689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  452.837397][T23702] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  452.868821][T23702] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  452.877669][T23689] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  452.895940][T23702] ext4 filesystem being remounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  452.916393][T23689] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  452.932219][T23689] ext4 filesystem being remounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  452.951875][T23702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6931'.
[  452.969806][T23702] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6931: deleted inode referenced: 12
[  452.977462][T23690] vhci_hcd: connection closed
[  452.998768][T23702] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.6931: deleted inode referenced: 12
[  453.015234][T13470] vhci_hcd: stop threads
[  453.019523][T13470] vhci_hcd: release socket
[  453.023972][T13470] vhci_hcd: disconnect device
[  453.089999][T21519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.253992][T23714] syzkaller0: entered promiscuous mode
[  453.261300][T23714] syzkaller0: entered allmulticast mode
[  453.371380][T23725] loop1: detected capacity change from 0 to 512
[  453.389845][T23725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  453.425632][T23725] EXT4-fs (loop1): 1 truncate cleaned up
[  453.437215][T23725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.513188][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.548312][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.573846][T23730] loop5: detected capacity change from 0 to 512
[  453.590251][T23728] lo speed is unknown, defaulting to 1000
[  453.596214][T23730] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  453.628624][T23730] EXT4-fs (loop5): 1 truncate cleaned up
[  453.636792][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.646117][T23730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  453.711666][T23738] loop2: detected capacity change from 0 to 512
[  453.743418][T23738] EXT4-fs: Ignoring removed orlov option
[  453.751418][T23738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  453.761885][T23738] EXT4-fs (loop2): orphan cleanup on readonly fs
[  453.792592][T23738] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6941: bg 0: block 248: padding at end of block bitmap is not set
[  453.834438][T23738] __quota_error: 88 callbacks suppressed
[  453.834458][T23738] Quota error (device loop2): write_blk: dquota write failed
[  453.848378][T23738] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  453.858336][T23738] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6941: Failed to acquire dquot type 1
[  453.869774][T21984] vhci_hcd: vhci_device speed not set
[  453.908388][T23746] loop3: detected capacity change from 0 to 512
[  453.935395][T23746] EXT4-fs: Ignoring removed i_version option
[  453.955644][T23746] EXT4-fs (loop3): orphan cleanup on readonly fs
[  453.962647][T23746] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6944: bg 0: block 131: padding at end of block bitmap is not set
[  453.986660][T23738] EXT4-fs (loop2): 1 truncate cleaned up
[  453.998195][T23738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  454.017598][T23746] EXT4-fs (loop3): Remounting filesystem read-only
[  454.026150][T23746] EXT4-fs (loop3): 1 truncate cleaned up
[  454.034633][T23746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  454.057573][T23738] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  454.085918][T23738] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  454.112018][T23738] ext4 filesystem being remounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  454.137482][T23738] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.6941: deleted inode referenced: 12
[  454.157920][T23738] siw: device registration error -23
[  454.164612][T23738] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.6941: deleted inode referenced: 12
[  454.182819][T23758] loop6: detected capacity change from 0 to 1024
[  454.190396][T23758] EXT4-fs: Ignoring removed orlov option
[  454.201299][T23746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6944'.
[  454.213438][T23758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.302484][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.324370][T20273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.470222][T23771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6953'.
[  454.564315][T21519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.578346][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.606815][T23773] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6955'.
[  454.665287][T23764] syzkaller0: entered promiscuous mode
[  454.671347][T23764] syzkaller0: entered allmulticast mode
[  454.772536][T23784] loop5: detected capacity change from 0 to 512
[  454.797182][T23784] EXT4-fs: Ignoring removed orlov option
[  454.809894][T23786] loop3: detected capacity change from 0 to 512
[  454.821293][T23784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  454.831093][T23786] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  454.854112][T23786] EXT4-fs (loop3): 1 truncate cleaned up
[  454.859307][T23784] EXT4-fs (loop5): orphan cleanup on readonly fs
[  454.861009][T23786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.879474][   T29] audit: type=1107 audit(1748920691.492:15429): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  454.893029][T23791] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6961'.
[  454.905031][T23784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6959: bg 0: block 248: padding at end of block bitmap is not set
[  454.928429][T23784] Quota error (device loop5): write_blk: dquota write failed
[  454.935976][T23784] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  454.945956][T23784] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6959: Failed to acquire dquot type 1
[  454.961778][T23784] EXT4-fs (loop5): 1 truncate cleaned up
[  454.970161][T23784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  454.985007][T23784] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  455.019574][T23784] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  455.020335][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.035215][T23784] ext4 filesystem being remounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  455.055133][T21983] vhci_hcd: vhci_device speed not set
[  455.061418][T23784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6959'.
[  455.063140][T23794] loop6: detected capacity change from 0 to 512
[  455.077587][T23794] EXT4-fs: Ignoring removed orlov option
[  455.084364][T23784] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6959: deleted inode referenced: 12
[  455.085819][T23794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  455.106510][T23794] EXT4-fs (loop6): orphan cleanup on readonly fs
[  455.113567][T23794] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6962: bg 0: block 248: padding at end of block bitmap is not set
[  455.115826][T23784] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6959: deleted inode referenced: 12
[  455.129357][T23794] Quota error (device loop6): write_blk: dquota write failed
[  455.146719][T23794] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  455.156651][T23794] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6962: Failed to acquire dquot type 1
[  455.171842][T23794] EXT4-fs (loop6): 1 truncate cleaned up
[  455.174854][T20273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.179416][T23794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  455.207438][T23794] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  455.219130][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.223774][T23797] loop3: detected capacity change from 0 to 512
[  455.234887][T23797] EXT4-fs: Ignoring removed orlov option
[  455.241571][T23797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  455.250372][T23794] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  455.256666][T23801] loop5: detected capacity change from 0 to 512
[  455.260309][T23794] ext4 filesystem being remounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  455.265998][T23797] EXT4-fs (loop3): orphan cleanup on readonly fs
[  455.277115][T23801] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  455.282785][T23797] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6963: bg 0: block 248: padding at end of block bitmap is not set
[  455.296711][T23794] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6962: deleted inode referenced: 12
[  455.307006][T23797] Quota error (device loop3): write_blk: dquota write failed
[  455.320224][T23801] EXT4-fs (loop5): 1 truncate cleaned up
[  455.324796][T23797] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  455.330919][T23801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.340482][T23797] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6963: Failed to acquire dquot type 1
[  455.343293][T23797] EXT4-fs (loop3): 1 truncate cleaned up
[  455.366715][T23794] siw: device registration error -23
[  455.375866][T23797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  455.390379][T23794] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.6962: deleted inode referenced: 12
[  455.429822][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.481218][T23806] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  455.510418][T23797] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  455.536831][T23797] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  455.563504][T23797] ext4 filesystem being remounted at /248/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  455.590038][T23797] __nla_validate_parse: 1 callbacks suppressed
[  455.590060][T23797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6963'.
[  455.608751][T23797] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6963: deleted inode referenced: 12
[  455.621164][T23797] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.6963: deleted inode referenced: 12
[  455.682738][T23815] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6969'.
[  455.718361][T23817] loop6: detected capacity change from 0 to 512
[  455.718530][T20273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.725213][T23817] EXT4-fs: Ignoring removed i_version option
[  455.749773][T23817] EXT4-fs (loop6): orphan cleanup on readonly fs
[  455.771595][T23817] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6970: bg 0: block 131: padding at end of block bitmap is not set
[  455.793661][T23820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.816029][T23817] EXT4-fs (loop6): Remounting filesystem read-only
[  455.835287][T23817] EXT4-fs (loop6): 1 truncate cleaned up
[  455.841636][T23817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  455.869930][T23820] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.949540][T23820] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.981721][T23826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6970'.
[  456.010088][T23820] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.045567][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.083898][T23835] siw: device registration error -23
[  456.111051][T23820] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.138284][T23820] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.149434][T23838] loop3: detected capacity change from 0 to 1024
[  456.171612][T23820] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.181542][T23838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.184200][T23820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.213546][T23838] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  456.224392][T23844] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6982'.
[  456.262475][   T12] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 8)
[  456.294350][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  456.306724][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  456.306724][   T12] 
[  456.326613][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.331651][T20273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.379640][T23852] loop6: detected capacity change from 0 to 512
[  456.392814][T23852] EXT4-fs: Ignoring removed i_version option
[  456.409613][T23852] EXT4-fs (loop6): orphan cleanup on readonly fs
[  456.446607][T23852] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6987: bg 0: block 131: padding at end of block bitmap is not set
[  456.489844][T23852] EXT4-fs (loop6): Remounting filesystem read-only
[  456.509687][T23852] EXT4-fs (loop6): 1 truncate cleaned up
[  456.516334][T23852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  456.544264][T23872] loop5: detected capacity change from 0 to 512
[  456.554363][T23866] lo speed is unknown, defaulting to 1000
[  456.567151][T23868] blktrace: Concurrent blktraces are not allowed on loop2
[  456.574946][T23872] EXT4-fs: Ignoring removed orlov option
[  456.592729][T23872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  456.607505][T23872] EXT4-fs (loop5): orphan cleanup on readonly fs
[  456.615325][T23852] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6987'.
[  456.624793][T23872] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6993: bg 0: block 248: padding at end of block bitmap is not set
[  456.640874][T23872] Quota error (device loop5): write_blk: dquota write failed
[  456.648325][T23872] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6993: Failed to acquire dquot type 1
[  456.679269][T23872] EXT4-fs (loop5): 1 truncate cleaned up
[  456.680437][T23878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6994'.
[  456.706073][T23872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  456.721571][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.751209][T23872] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  456.788823][T23882] loop3: detected capacity change from 0 to 512
[  456.805122][T23882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  456.816676][T23872] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  456.826625][T23882] EXT4-fs (loop3): 1 truncate cleaned up
[  456.832655][T23882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.853644][T23872] ext4 filesystem being remounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  456.876338][T23872] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6993: deleted inode referenced: 12
[  456.911247][T23872] siw: device registration error -23
[  456.935243][T23872] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.6993: deleted inode referenced: 12
[  456.989093][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.152899][T23901] loop5: detected capacity change from 0 to 512
[  457.165616][T23901] EXT4-fs: Ignoring removed i_version option
[  457.193631][T23901] EXT4-fs (loop5): orphan cleanup on readonly fs
[  457.224433][T23901] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7001: bg 0: block 131: padding at end of block bitmap is not set
[  457.268426][T23901] EXT4-fs (loop5): Remounting filesystem read-only
[  457.285284][T23901] EXT4-fs (loop5): 1 truncate cleaned up
[  457.295665][T23901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  457.318784][T23870] loop1: detected capacity change from 0 to 1024
[  457.347049][T23870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.372996][T23870] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.414519][T23870] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.6992: lblock 8 mapped to illegal pblock 8 (length 1)
[  457.436315][T23901] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7001'.
[  457.468588][T23870] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  457.480995][T23870] EXT4-fs (loop1): This should not happen!! Data will be lost
[  457.480995][T23870] 
[  457.549970][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.569207][T23870] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  457.600713][T23870] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  457.613350][T23870] EXT4-fs (loop1): This should not happen!! Data will be lost
[  457.613350][T23870] 
[  457.623053][T23870] EXT4-fs (loop1): Total free blocks count 0
[  457.629098][T23870] EXT4-fs (loop1): Free/Dirty block details
[  457.635042][T23870] EXT4-fs (loop1): free_blocks=4293918720
[  457.640853][T23870] EXT4-fs (loop1): dirty_blocks=480
[  457.646157][T23870] EXT4-fs (loop1): Block reservation details
[  457.702260][T23916] loop5: detected capacity change from 0 to 512
[  457.719520][T23916] EXT4-fs: Ignoring removed i_version option
[  457.731518][T13459] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 7)
[  457.748711][T23916] EXT4-fs (loop5): orphan cleanup on readonly fs
[  457.756403][T23916] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7005: bg 0: block 131: padding at end of block bitmap is not set
[  457.771302][T23882] syz.3.6996 (23882) used greatest stack depth: 6064 bytes left
[  457.773598][T23916] EXT4-fs (loop5): Remounting filesystem read-only
[  457.786497][T23916] EXT4-fs (loop5): 1 truncate cleaned up
[  457.799171][T23916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  457.801693][T20273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.824275][T23920] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7006'.
[  457.845571][T23908] loop6: detected capacity change from 0 to 1024
[  457.858257][T23908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  457.873338][T23908] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.892939][T23908] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.7003: lblock 8 mapped to illegal pblock 8 (length 1)
[  457.923424][T23908] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  457.935903][T23908] EXT4-fs (loop6): This should not happen!! Data will be lost
[  457.935903][T23908] 
[  457.956182][T23916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7005'.
[  457.988926][T23908] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  458.018033][T23908] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  458.018256][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.030544][T23908] EXT4-fs (loop6): This should not happen!! Data will be lost
[  458.030544][T23908] 
[  458.049419][T23908] EXT4-fs (loop6): Total free blocks count 0
[  458.055494][T23908] EXT4-fs (loop6): Free/Dirty block details
[  458.061442][T23908] EXT4-fs (loop6): free_blocks=4293918720
[  458.067224][T23908] EXT4-fs (loop6): dirty_blocks=480
[  458.072476][T23908] EXT4-fs (loop6): Block reservation details
[  458.117796][T23949] loop5: detected capacity change from 0 to 512
[  458.134863][T23949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  458.156237][T23949] EXT4-fs (loop5): 1 truncate cleaned up
[  458.178187][   T12] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[  458.195795][T23949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.295278][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7018'.
[  458.586238][T23968] loop6: detected capacity change from 0 to 512
[  458.608520][T23968] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  458.642609][T23968] EXT4-fs (loop6): 1 truncate cleaned up
[  458.661504][T23968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.722564][T23950] loop2: detected capacity change from 0 to 1024
[  458.730602][T23947] loop3: detected capacity change from 0 to 1024
[  458.754733][T23950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.757954][T23947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.766998][T23950] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.790306][T23947] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.832550][T23947] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.7016: lblock 8 mapped to illegal pblock 8 (length 1)
[  458.880225][T23947] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  458.892664][T23947] EXT4-fs (loop3): This should not happen!! Data will be lost
[  458.892664][T23947] 
[  458.943207][T23943] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.7014: lblock 8 mapped to illegal pblock 8 (length 1)
[  458.977024][T23947] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  458.992399][T23943] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  459.004945][T23943] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.004945][T23943] 
[  459.025712][T23947] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  459.038261][T23947] EXT4-fs (loop3): This should not happen!! Data will be lost
[  459.038261][T23947] 
[  459.047979][T23947] EXT4-fs (loop3): Total free blocks count 0
[  459.053987][T23947] EXT4-fs (loop3): Free/Dirty block details
[  459.059991][T23947] EXT4-fs (loop3): free_blocks=4293918720
[  459.065746][T23947] EXT4-fs (loop3): dirty_blocks=480
[  459.070955][T23947] EXT4-fs (loop3): Block reservation details
[  459.086686][T23943] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  459.103212][T23943] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  459.115753][T23943] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.115753][T23943] 
[  459.125444][T23943] EXT4-fs (loop2): Total free blocks count 0
[  459.131457][T23943] EXT4-fs (loop2): Free/Dirty block details
[  459.137399][T23943] EXT4-fs (loop2): free_blocks=4293918720
[  459.143150][T23943] EXT4-fs (loop2): dirty_blocks=480
[  459.148520][T23943] EXT4-fs (loop2): Block reservation details
[  459.168964][T18749] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.187439][T13492] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 7)
[  459.261321][T13492] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 7)
[  459.324412][T23989] loop2: detected capacity change from 0 to 1024
[  459.367957][T23989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.380543][T23989] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  459.426630][T23995] loop5: detected capacity change from 0 to 1024
[  459.474207][T13455] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 8)
[  459.492579][T23995] EXT4-fs: Ignoring removed orlov option
[  459.509782][T23995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.525458][T13455] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  459.537856][T13455] EXT4-fs (loop2): This should not happen!! Data will be lost
[  459.537856][T13455] 
[  459.580252][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.620296][T18061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.633067][T24000] lo speed is unknown, defaulting to 1000
[  459.834412][T24018] netlink: 'syz.2.7030': attribute type 4 has an invalid length.
[  459.869781][T24018] netlink: 'syz.2.7030': attribute type 4 has an invalid length.
[  459.888508][T24020] blktrace: Concurrent blktraces are not allowed on loop2
[  459.991287][T24023] lo speed is unknown, defaulting to 1000
[  460.141847][T24023] netlink: 'syz.6.7040': attribute type 4 has an invalid length.
[  460.158095][T24023] netlink: 'syz.6.7040': attribute type 4 has an invalid length.
[  460.299002][T24030] loop5: detected capacity change from 0 to 512
[  460.305778][T24030] EXT4-fs: Ignoring removed i_version option
[  460.313319][T24030] EXT4-fs (loop5): orphan cleanup on readonly fs
[  460.320483][T24030] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7042: bg 0: block 131: padding at end of block bitmap is not set
[  460.336345][T24030] EXT4-fs (loop5): Remounting filesystem read-only
[  460.343031][T24030] EXT4-fs (loop5): 1 truncate cleaned up
[  460.613241][T24048] loop2: detected capacity change from 0 to 1024
[  460.635351][T24048] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.691847][T13459] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 8)
[  460.719539][T13459] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  460.731898][T13459] EXT4-fs (loop2): This should not happen!! Data will be lost
[  460.731898][T13459] 
[  460.764754][T24055] loop5: detected capacity change from 0 to 512
[  460.771794][T24055] EXT4-fs: Ignoring removed orlov option
[  460.788851][T24055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  460.801800][T24059] loop3: detected capacity change from 0 to 512
[  460.808883][T24059] EXT4-fs: Ignoring removed i_version option
[  460.815927][T24055] EXT4-fs (loop5): orphan cleanup on readonly fs
[  460.823934][T24055] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7053: bg 0: block 248: padding at end of block bitmap is not set
[  460.838958][T24059] EXT4-fs (loop3): orphan cleanup on readonly fs
[  460.840269][T24055] __quota_error: 96 callbacks suppressed
[  460.840286][T24055] Quota error (device loop5): write_blk: dquota write failed
[  460.858477][T24055] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  460.868473][T24055] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7053: Failed to acquire dquot type 1
[  460.881313][T24059] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7054: bg 0: block 131: padding at end of block bitmap is not set
[  460.882521][T24055] EXT4-fs (loop5): 1 truncate cleaned up
[  460.896554][T24059] EXT4-fs (loop3): Remounting filesystem read-only
[  460.914604][T24059] EXT4-fs (loop3): 1 truncate cleaned up
[  460.943438][T24055] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  460.958473][T24064] blktrace: Concurrent blktraces are not allowed on loop2
[  460.986517][T24055] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  460.989616][T24059] __nla_validate_parse: 3 callbacks suppressed
[  460.989636][T24059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7054'.
[  460.995975][T24055] ext4 filesystem being remounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  461.044683][T24055] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.7053: deleted inode referenced: 12
[  461.085622][T24055] siw: device registration error -23
[  461.101895][T24055] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.7053: deleted inode referenced: 12
[  461.106848][T24073] lo speed is unknown, defaulting to 1000
[  461.130947][T24071] lo speed is unknown, defaulting to 1000
[  461.221862][T24079] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  461.228417][T24079] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  461.236091][T24079] vhci_hcd vhci_hcd.0: Device attached
[  461.286823][T24079] loop5: detected capacity change from 0 to 512
[  461.305039][T24079] EXT4-fs: Ignoring removed orlov option
[  461.317702][T24079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  461.332119][T24079] EXT4-fs (loop5): orphan cleanup on readonly fs
[  461.342631][T24079] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7060: bg 0: block 248: padding at end of block bitmap is not set
[  461.376670][T24075] netlink: 'syz.2.7059': attribute type 4 has an invalid length.
[  461.397626][T24079] Quota error (device loop5): write_blk: dquota write failed
[  461.405184][T24079] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  461.415123][T24079] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7060: Failed to acquire dquot type 1
[  461.436713][T24089] netlink: 'syz.2.7059': attribute type 4 has an invalid length.
[  461.462443][   T29] audit: type=1326 audit(1748920698.072:15525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.485208][   T36] usb 11-1: new high-speed USB device number 18 using vhci_hcd
[  461.486167][   T29] audit: type=1326 audit(1748920698.072:15526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.498995][T24079] EXT4-fs (loop5): 1 truncate cleaned up
[  461.520015][   T29] audit: type=1326 audit(1748920698.132:15527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.537504][T24093] bridge0: entered allmulticast mode
[  461.546410][   T29] audit: type=1326 audit(1748920698.132:15528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.575462][   T29] audit: type=1326 audit(1748920698.132:15529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.599054][   T29] audit: type=1326 audit(1748920698.132:15530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24063 comm="syz.6.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e3738e969 code=0x7ffc0000
[  461.627946][T24084] loop6: detected capacity change from 0 to 1024
[  461.659521][T24084] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  461.676485][T24065] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.7056: lblock 8 mapped to illegal pblock 8 (length 1)
[  461.710962][T24065] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  461.723421][T24065] EXT4-fs (loop6): This should not happen!! Data will be lost
[  461.723421][T24065] 
[  461.735115][T24079] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  461.746771][T24065] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  461.762120][T24065] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  461.774781][T24065] EXT4-fs (loop6): This should not happen!! Data will be lost
[  461.774781][T24065] 
[  461.784537][T24065] EXT4-fs (loop6): Total free blocks count 0
[  461.790601][T24065] EXT4-fs (loop6): Free/Dirty block details
[  461.796523][T24065] EXT4-fs (loop6): free_blocks=4293918720
[  461.802277][T24065] EXT4-fs (loop6): dirty_blocks=480
[  461.807533][T24065] EXT4-fs (loop6): Block reservation details
[  461.813622][T24065] EXT4-fs (loop6): i_reserved_data_blocks=30
[  461.824172][T24079] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  461.833363][T24079] ext4 filesystem being remounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  461.849571][T24104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7065'.
[  461.866197][T24082] vhci_hcd: connection reset by peer
[  461.881069][T13470] vhci_hcd: stop threads
[  461.885395][T13470] vhci_hcd: release socket
[  461.889823][T13470] vhci_hcd: disconnect device
[  461.921111][T13470] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 7)
[  461.991497][T24108] loop2: detected capacity change from 0 to 1024
[  461.994206][T24112] loop1: detected capacity change from 0 to 512
[  462.006331][T24112] EXT4-fs: Ignoring removed i_version option
[  462.014405][T24112] EXT4-fs (loop1): orphan cleanup on readonly fs
[  462.027322][T24108] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.031445][T24112] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7069: bg 0: block 131: padding at end of block bitmap is not set
[  462.089785][   T12] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 8)
[  462.114690][T24112] EXT4-fs (loop1): Remounting filesystem read-only
[  462.122146][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 117
[  462.134487][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  462.134487][   T12] 
[  462.145972][T24112] EXT4-fs (loop1): 1 truncate cleaned up
[  462.189929][T24121] blktrace: Concurrent blktraces are not allowed on loop2
[  462.215198][T24112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7069'.
[  462.364681][T24128] syzkaller0: entered promiscuous mode
[  462.370691][T24128] syzkaller0: entered allmulticast mode
[  462.507551][T24143] lo speed is unknown, defaulting to 1000
[  462.533133][T24149] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7080'.
[  462.616253][T24143] netlink: 'syz.5.7081': attribute type 4 has an invalid length.
[  462.634028][T24143] netlink: 'syz.5.7081': attribute type 4 has an invalid length.
[  462.788186][T24158] lo speed is unknown, defaulting to 1000
[  462.794929][T24132] loop1: detected capacity change from 0 to 1024
[  462.810295][T24132] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.848455][T24132] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.7077: lblock 8 mapped to illegal pblock 8 (length 1)
[  462.874413][T24132] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  462.886861][T24132] EXT4-fs (loop1): This should not happen!! Data will be lost
[  462.886861][T24132] 
[  462.906032][T24132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  462.921287][T24147] loop6: detected capacity change from 0 to 1024
[  462.922843][T24132] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  462.940255][T24132] EXT4-fs (loop1): This should not happen!! Data will be lost
[  462.940255][T24132] 
[  462.946934][T24147] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  462.949920][T24132] EXT4-fs (loop1): Total free blocks count 0
[  462.965865][T24147] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 8: comm syz.6.7083: lblock 8 mapped to illegal pblock 8 (length 1)
[  462.966426][T24132] EXT4-fs (loop1): Free/Dirty block details
[  462.966440][T24132] EXT4-fs (loop1): free_blocks=4293918720
[  462.966454][T24132] EXT4-fs (loop1): dirty_blocks=480
[  462.966467][T24132] EXT4-fs (loop1): Block reservation details
[  462.966482][T24132] EXT4-fs (loop1): i_reserved_data_blocks=30
[  462.991297][T24147] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  463.021889][T24147] EXT4-fs (loop6): This should not happen!! Data will be lost
[  463.021889][T24147] 
[  463.050630][T24147] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  463.065732][T24147] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  463.078358][T24147] EXT4-fs (loop6): This should not happen!! Data will be lost
[  463.078358][T24147] 
[  463.088145][T24147] EXT4-fs (loop6): Total free blocks count 0
[  463.094172][T24147] EXT4-fs (loop6): Free/Dirty block details
[  463.100117][T24147] EXT4-fs (loop6): free_blocks=4293918720
[  463.105953][T24147] EXT4-fs (loop6): dirty_blocks=480
[  463.111172][T24147] EXT4-fs (loop6): Block reservation details
[  463.117218][T24147] EXT4-fs (loop6): i_reserved_data_blocks=30
[  463.123643][   T12] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[  463.184316][   T12] EXT4-fs error (device loop6): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 7)
[  463.319382][T24195] loop1: detected capacity change from 0 to 1024
[  463.337565][T24195] EXT4-fs: Ignoring removed orlov option
[  463.532379][T24190] syzkaller0: entered promiscuous mode
[  463.538449][T24190] syzkaller0: entered allmulticast mode
[  463.819022][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7100'.
[  463.934608][T24213] loop2: detected capacity change from 0 to 1024
[  463.967262][T24213] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  464.001469][T24221] loop6: detected capacity change from 0 to 512
[  464.026262][T24221] EXT4-fs: Ignoring removed orlov option
[  464.032859][T24221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  464.058533][T24221] EXT4-fs (loop6): orphan cleanup on readonly fs
[  464.058623][T24203] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.7099: lblock 8 mapped to illegal pblock 8 (length 1)
[  464.071739][T24221] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7101: bg 0: block 248: padding at end of block bitmap is not set
[  464.107111][T24203] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  464.119507][T24203] EXT4-fs (loop2): This should not happen!! Data will be lost
[  464.119507][T24203] 
[  464.175120][T24203] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  464.205168][T24203] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  464.215870][T24221] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7101: Failed to acquire dquot type 1
[  464.217706][T24203] EXT4-fs (loop2): This should not happen!! Data will be lost
[  464.217706][T24203] 
[  464.238653][T24203] EXT4-fs (loop2): Total free blocks count 0
[  464.244655][T24203] EXT4-fs (loop2): Free/Dirty block details
[  464.250634][T24203] EXT4-fs (loop2): free_blocks=4293918720
[  464.256431][T24203] EXT4-fs (loop2): dirty_blocks=480
[  464.261645][T24203] EXT4-fs (loop2): Block reservation details
[  464.267704][T24203] EXT4-fs (loop2): i_reserved_data_blocks=30
[  464.284409][T24221] EXT4-fs (loop6): 1 truncate cleaned up
[  464.305953][T24224] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  464.325910][T24221] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  464.340213][T24224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7102'.
[  464.356992][T24221] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  464.366266][T24221] ext4 filesystem being remounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  464.377460][T13455] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 7)
[  464.383456][T24227] loop3: detected capacity change from 0 to 1024
[  464.403801][T24227] EXT4-fs: Ignoring removed orlov option
[  464.409810][T24221] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.7101: deleted inode referenced: 12
[  464.431897][T24221] siw: device registration error -23
[  464.474481][T24221] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz.6.7101: deleted inode referenced: 12
[  464.503127][T24236] siw: device registration error -23
[  464.545000][T24235] blktrace: Concurrent blktraces are not allowed on loop2
[  464.675197][T24246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7108'.
[  464.710581][T24251] loop6: detected capacity change from 0 to 1024
[  464.726915][T24251] EXT4-fs: Ignoring removed orlov option
[  464.767148][T24259] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  464.778393][T24259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7115'.
[  464.869550][T24264] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7116'.
[  465.124355][T24271] loop1: detected capacity change from 0 to 512
[  465.132226][T24271] EXT4-fs: Ignoring removed orlov option
[  465.139709][T24271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  465.151100][T24271] EXT4-fs (loop1): orphan cleanup on readonly fs
[  465.164217][T24271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7119: bg 0: block 248: padding at end of block bitmap is not set
[  465.178984][T24271] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7119: Failed to acquire dquot type 1
[  465.191079][T24271] EXT4-fs (loop1): 1 truncate cleaned up
[  465.202061][T24271] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  465.216004][T24271] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  465.234673][T24271] ext4 filesystem being remounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  465.266649][T24271] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7119: deleted inode referenced: 12
[  465.291703][T24271] siw: device registration error -23
[  465.319105][T24271] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7119: deleted inode referenced: 12
[  465.409668][T24281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7123'.
[  465.432545][T24281] blktrace: Concurrent blktraces are not allowed on loop2
[  465.737828][T24298] netlink: 'syz.3.7130': attribute type 2 has an invalid length.
[  465.992801][T24309] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.007749][T24279] loop1: detected capacity change from 0 to 1024
[  466.058607][T24279] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.071329][T24309] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.084227][T24316] loop2: detected capacity change from 0 to 512
[  466.101109][T24316] EXT4-fs: Ignoring removed orlov option
[  466.131277][T24279] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 8: comm syz.1.7122: lblock 8 mapped to illegal pblock 8 (length 1)
[  466.157120][T24316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  466.166472][   T29] kauditd_printk_skb: 128 callbacks suppressed
[  466.166491][   T29] audit: type=1326 audit(1748920702.782:15655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.5.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6136e969 code=0x7ffc0000
[  466.182247][T24316] EXT4-fs (loop2): orphan cleanup on readonly fs
[  466.206305][T24279] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  466.218673][T24279] EXT4-fs (loop1): This should not happen!! Data will be lost
[  466.218673][T24279] 
[  466.223869][   T29] audit: type=1326 audit(1748920702.782:15656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.5.7129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6136e969 code=0x7ffc0000
[  466.229558][T24309] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.285177][T24316] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7135: bg 0: block 248: padding at end of block bitmap is not set
[  466.307695][T24316] Quota error (device loop2): write_blk: dquota write failed
[  466.315206][T24316] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  466.325153][T24279] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  466.325230][T24279] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 200 with error 28
[  466.339955][T24316] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7135: Failed to acquire dquot type 1
[  466.352341][T24279] EXT4-fs (loop1): This should not happen!! Data will be lost
[  466.352341][T24279] 
[  466.373310][T24279] EXT4-fs (loop1): Total free blocks count 0
[  466.379422][T24279] EXT4-fs (loop1): Free/Dirty block details
[  466.385429][T24279] EXT4-fs (loop1): free_blocks=4293918720
[  466.391174][T24279] EXT4-fs (loop1): dirty_blocks=208
[  466.396466][T24279] EXT4-fs (loop1): Block reservation details
[  466.402520][T24279] EXT4-fs (loop1): i_reserved_data_blocks=13
[  466.410195][   T29] audit: type=1326 audit(1748920703.012:15657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.434112][   T29] audit: type=1326 audit(1748920703.012:15658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.457799][   T29] audit: type=1326 audit(1748920703.012:15659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.467648][T24324] loop3: detected capacity change from 0 to 1024
[  466.481505][   T29] audit: type=1326 audit(1748920703.012:15660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.511545][   T29] audit: type=1326 audit(1748920703.012:15661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.511891][T24296] loop5: detected capacity change from 0 to 1024
[  466.535190][   T29] audit: type=1326 audit(1748920703.012:15662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24306 comm="syz.3.7133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb597ae969 code=0x7ffc0000
[  466.538243][T24316] EXT4-fs (loop2): 1 truncate cleaned up
[  466.574167][T24324] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.587683][T24309] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  466.596766][T24296] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  466.605209][   T36] vhci_hcd: vhci_device speed not set
[  466.615223][T13455] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 7)
[  466.629524][T24296] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 8: comm syz.5.7129: lblock 8 mapped to illegal pblock 8 (length 1)
[  466.644403][T24316] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  466.652274][T24296] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  466.656143][T24307] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm syz.3.7133: lblock 8 mapped to illegal pblock 8 (length 1)
[  466.666100][T24296] EXT4-fs (loop5): This should not happen!! Data will be lost
[  466.666100][T24296] 
[  466.682708][T24307] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  466.702319][T24307] EXT4-fs (loop3): This should not happen!! Data will be lost
[  466.702319][T24307] 
[  466.706711][T24296] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  466.726112][T24307] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  466.727237][T24296] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  466.742150][T24316] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  466.754131][T24296] EXT4-fs (loop5): This should not happen!! Data will be lost
[  466.754131][T24296] 
[  466.772192][T24296] EXT4-fs (loop5): Total free blocks count 0
[  466.772219][T24316] ext4 filesystem being remounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  466.778200][T24296] EXT4-fs (loop5): Free/Dirty block details
[  466.794614][T24296] EXT4-fs (loop5): free_blocks=4293918720
[  466.800407][T24296] EXT4-fs (loop5): dirty_blocks=480
[  466.805654][T24296] EXT4-fs (loop5): Block reservation details
[  466.811724][T24296] EXT4-fs (loop5): i_reserved_data_blocks=30
[  466.821735][T24316] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.7135: deleted inode referenced: 12
[  466.846658][T24307] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  466.859202][T24307] EXT4-fs (loop3): This should not happen!! Data will be lost
[  466.859202][T24307] 
[  466.868941][T24307] EXT4-fs (loop3): Total free blocks count 0
[  466.874961][T24307] EXT4-fs (loop3): Free/Dirty block details
[  466.880948][T24307] EXT4-fs (loop3): free_blocks=4293918720
[  466.886727][T24307] EXT4-fs (loop3): dirty_blocks=480
[  466.887312][T24316] siw: device registration error -23
[  466.891996][T24307] EXT4-fs (loop3): Block reservation details
[  466.892014][T24307] EXT4-fs (loop3): i_reserved_data_blocks=30
[  466.898932][T24316] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.7135: deleted inode referenced: 12
[  466.921306][T24309] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.944208][T24309] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.964407][T24309] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.981978][T24309] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.997128][T13459] EXT4-fs error (device loop5): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 7)
[  467.011615][T13455] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 7)
[  467.034023][T24341] loop1: detected capacity change from 0 to 512
[  467.041481][T24341] EXT4-fs: Ignoring removed orlov option
[  467.059377][T24341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  467.069838][T24345] loop6: detected capacity change from 0 to 512
[  467.077035][T24341] EXT4-fs (loop1): orphan cleanup on readonly fs
[  467.093087][T24351] loop5: detected capacity change from 0 to 1024
[  467.100464][T24345] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  467.100880][T24341] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7141: bg 0: block 248: padding at end of block bitmap is not set
[  467.125602][T24351] EXT4-fs: Ignoring removed orlov option
[  467.135908][T24345] EXT4-fs (loop6): 1 truncate cleaned up
[  467.145450][T24341] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7141: Failed to acquire dquot type 1
[  467.193373][T24341] EXT4-fs (loop1): 1 truncate cleaned up
[  467.239151][T24357] loop3: detected capacity change from 0 to 1024
[  467.260311][T24341] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  467.275802][T24357] EXT4-fs: Ignoring removed orlov option
[  467.296162][T24341] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  467.335543][T24341] ext4 filesystem being remounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  467.371677][T24341] __nla_validate_parse: 1 callbacks suppressed
[  467.371697][T24341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7141'.
[  467.435323][T24364] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7141: deleted inode referenced: 12
[  467.486635][T24341] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.7141: deleted inode referenced: 12
[  467.511072][T24362] ==================================================================
[  467.519216][T24362] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode
[  467.527229][T24362] 
[  467.529555][T24362] write to 0xffff888106f26008 of 4 bytes by task 24357 on cpu 1:
[  467.537280][T24362]  writeback_single_inode+0x14a/0x3e0
[  467.542674][T24362]  sync_inode_metadata+0x5b/0x90
[  467.547633][T24362]  generic_buffers_fsync_noflush+0xd9/0x120
[  467.553544][T24362]  ext4_sync_file+0x1ab/0x690
[  467.558241][T24362]  vfs_fsync_range+0x10d/0x130
[  467.563048][T24362]  ext4_buffered_write_iter+0x34f/0x3c0
[  467.568615][T24362]  ext4_file_write_iter+0x383/0xf00
[  467.573831][T24362]  iter_file_splice_write+0x5f2/0x970
[  467.579234][T24362]  direct_splice_actor+0x153/0x2a0
[  467.584352][T24362]  splice_direct_to_actor+0x30f/0x680
[  467.589745][T24362]  do_splice_direct+0xda/0x150
[  467.594519][T24362]  do_sendfile+0x380/0x650
[  467.598953][T24362]  __x64_sys_sendfile64+0x105/0x150
[  467.604168][T24362]  x64_sys_call+0xb39/0x2fb0
[  467.608774][T24362]  do_syscall_64+0xd2/0x200
[  467.613301][T24362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.619214][T24362] 
[  467.621541][T24362] read to 0xffff888106f26008 of 4 bytes by task 24362 on cpu 0:
[  467.629175][T24362]  vfs_fsync_range+0x9b/0x130
[  467.633866][T24362]  ext4_buffered_write_iter+0x34f/0x3c0
[  467.639431][T24362]  ext4_file_write_iter+0x383/0xf00
[  467.644647][T24362]  iter_file_splice_write+0x5f2/0x970
[  467.650056][T24362]  direct_splice_actor+0x153/0x2a0
[  467.655200][T24362]  splice_direct_to_actor+0x30f/0x680
[  467.660597][T24362]  do_splice_direct+0xda/0x150
[  467.665371][T24362]  do_sendfile+0x380/0x650
[  467.669819][T24362]  __x64_sys_sendfile64+0x105/0x150
[  467.675034][T24362]  x64_sys_call+0xb39/0x2fb0
[  467.679641][T24362]  do_syscall_64+0xd2/0x200
[  467.684168][T24362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.690075][T24362] 
[  467.692403][T24362] value changed: 0x00000038 -> 0x00000002
[  467.698123][T24362] 
[  467.700451][T24362] Reported by Kernel Concurrency Sanitizer on:
[  467.706608][T24362] CPU: 0 UID: 0 PID: 24362 Comm: syz.3.7145 Not tainted 6.15.0-syzkaller-11121-gfe4281644c62 #0 PREEMPT(voluntary) 
[  467.718771][T24362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  467.728840][T24362] ==================================================================
[  467.917323][T24346] loop2: detected capacity change from 0 to 1024
[  467.977124][T24346] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  468.055816][T24346] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 8: comm syz.2.7139: lblock 8 mapped to illegal pblock 8 (length 1)
[  468.083116][T24346] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117
[  468.095587][T24346] EXT4-fs (loop2): This should not happen!! Data will be lost
[  468.095587][T24346] 
[  468.125867][T24346] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  468.140918][T24346] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 475 with error 28
[  468.153616][T24346] EXT4-fs (loop2): This should not happen!! Data will be lost
[  468.153616][T24346] 
[  468.163342][T24346] EXT4-fs (loop2): Total free blocks count 0
[  468.169418][T24346] EXT4-fs (loop2): Free/Dirty block details
[  468.175441][T24346] EXT4-fs (loop2): free_blocks=4293918720
[  468.181174][T24346] EXT4-fs (loop2): dirty_blocks=480
[  468.186436][T24346] EXT4-fs (loop2): Block reservation details
[  468.192511][T24346] EXT4-fs (loop2): i_reserved_data_blocks=30
[  468.233705][T13491] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 7)